v0.6.0

Thirty-seven commits since v0.5.4. Two of them change what a model or a plugin sees, so the minor moves.

Agents

• The wait is the turn's end. WaitAgent is gone. A parent that started a background agent waits by ending its turn; the reply wakes it. A join tool beside SpawnAgent was what the model reached for first, and every call held the person's turn on a wait it did not need. Plan M81.
• Say what an idle session is waiting on. Between turns, while agents the session started are still at work, the activity row reads ✻ Waiting for 2 background agents to finish, breathing at the pace a tool holds a turn. Before, the row left with the turn and the parent looked finished. Plan M82.
• SpawnAgent says things once. Its model-facing text is 16 % shorter; nothing it taught is dropped. The room protocol (read at the head of a turn, @name and @all wake you, post the result back) now comes from the rooms plugin itself, only to a session seated in a room, and is journalled so a compaction says it again.

Context

• Stable request prefixes. Project instructions and memory have stable knowledge baselines with explicit refresh boundaries; internal context stays in the journal with its provenance but out of ordinary UI; compaction reuses the parent request's prefix; OpenAI requests carry a session-derived prompt_cache_key and cache-write tokens are counted once. Shell guidance chooses foreground or background by dependency, not duration. Plan M80.
• Experience stays on by default. Set experience.enabled: false and the plugin registers nothing: no tools, no command, no prompt lines. schedule.wakes: false likewise unregisters the Wake tool instead of offering one that refuses.

Fixes

• A root session the client fell behind on no longer ends the whole tree stream in silence.
• The bash plugin ends every background job when it stops, on the same grace a kill gets.
• The ACP proxy exits when its bridge closes instead of hanging on an outstanding stdin read.
• Print offers only the permission answers the interaction actually carries; y on a prompt without an allow-once rung is a refusal, not an error from the kernel.

Inside

• The gateway daemon is its own crate, bingo-gateway; the binary keeps only composition.
• The plugin RPC wire holds at protocol 1 until a plugin outside this repository speaks it.
• The Windows cargo check job is blocking; tests there stay advisory until the shell dialect is decided.
• Nine ADRs say what is true now, with dated lines for what they said before.