v0.139.0

What's Changed

• feat(plugins): sources.allow — absent means open, explicit [] means deny-all (#2743) by @mabry1985 in #2820
• feat(trajectory): read API + /trajectory chat command (#2806) by @mabry1985 in #2821
• refactor(artifact): decompose the 1,800-line init.py into nine modules (#2817 P1) by @mabry1985 in #2819
• refactor(artifact): the shell becomes real files — shell.html + shell.js (#2817 P2+P3) by @mabry1985 in #2822
• feat(evals): PTC graduation bench as a two-lane eval suite (#2807) by @mabry1985 in #2823
• fix(evals): ptc_bench report step — envelope unwrap + auth header (#2807) by @mabry1985 in #2824
• fix(cache): watcher distinguishes unreported cache usage from zero activity (#2772) by @mabry1985 in #2825
• feat(ptc): binding-path parity for bridged calls + GA — ADR 0103 Accepted (#2807) by @mabry1985 in #2826

Full Changelog: v0.138.0...v0.139.0