v0.12.3

What's Changed

• feat(subagent): sub-agent system v2 — config, discovery, skills, secret protocol (#974) by @bug-ops in #977
• feat(acp): epic #956 — full ACP capability coverage by @bug-ops in #975
• feat(acp): epic #978 — /compact, /model fuzzy, provider auto-discovery, /clear persistence by @bug-ops in #986
• feat(acp): epic #956 — full ACP capability coverage by @bug-ops in #984
• fix(acp): replace direct send with send_tool_output in skill streaming paths by @bug-ops in #987
• fix(acp): use tool id as permission cache key instead of command string by @bug-ops in #990
• fix(acp): emit newline separator between consecutive status updates by @bug-ops in #998
• fix(acp): populate ToolCall title and raw_input from tool params by @bug-ops in #999
• feat(llm): dynamic model discovery with per-provider API listing and 1-day cache (#991) by @bug-ops in #1000
• fix(acp): populate full model list from provider cache on startup by @bug-ops in #1001
• fix(acp): emit tool output content in ToolCallUpdate for all execution paths by @bug-ops in #1006
• feat(acp): expose context window usage and project rules to IDE by @bug-ops in #1005
• fix(acp): defer terminal release until after tool_call_update notification by @bug-ops in #1013
• feat(acp): session history — list and resume past conversations by @bug-ops in #1012
• feat(acp): subagent IDE visibility via parent_tool_use_id, terminal streaming, and ToolCallLocation by @bug-ops in #1014
• fix(acp): emit terminal_info/_output/_exit meta for IDE terminal display by @bug-ops in #1016
• docs(acp): IDE integration guide for subagent visibility by @bug-ops in #1015
• fix(agent): restore skill matching and context population on TUI queries by @bug-ops in #1017
• release: v0.12.3 by @bug-ops in #1018

Full Changelog: v0.12.2...v0.12.3

v0.12.2

What's Changed

• feat(acp): pin agent-client-protocol to 0.9.4 and advertise prompt capabilities by @bug-ops in #945
• feat(acp): implement set_session_mode with current_mode_update notification by @bug-ops in #946
• feat(tools): native tool integration for MCP and Ollama (#940) by @bug-ops in #947
• feat(acp): implement P0 protocol gaps G2, G3, G4, G8 by @bug-ops in #948
• feat(acp): implement unstable session features (list, fork, resume) by @bug-ops in #949
• feat(acp): tool call lifecycle — InProgress/Completed notifications and terminal timeout (#926) by @bug-ops in #950
• feat(acp): transport hardening — WebSocket lifecycle, bearer auth, discovery manifest (#936) by @bug-ops in #951
• feat(memory): expose memory_search and memory_save as native tools (#940 Phase 3) by @bug-ops in #953
• feat(acp): implement protocol completeness (#922) by @bug-ops in #952
• fix: sync workspace.dependencies versions to 0.12.1 by @bug-ops in #954
• fix(llm): remove request timeout from LLM HTTP client by @bug-ops in #955
• release: v0.12.2 by @bug-ops in #976

Full Changelog: v0.12.1...v0.12.2

v0.12.1

What's Changed

• fix(acp): deduplicate tool definitions and flush after native tool loop by @bug-ops in #827
• fix(acp): flush on error and filter whitespace text blocks in Claude API by @bug-ops in #828
• improve(tools,skills): preserve hunk headers in git_diff, restructure github skill by @bug-ops in #829
• reduce release binary size by 58% by @bug-ops in #852
• security(vault): zeroize secret material on drop by @bug-ops in #898
• optimize build speed: sccache, CI profile, schemars feature gate by @bug-ops in #899
• refactor(core): extract ContextManager, ToolOrchestrator, LearningEngine from Agent by @bug-ops in #900
• refactor(deps): dependency hygiene for workspace by @bug-ops in #901
• security: input validation hardening (#854) by @bug-ops in #903
• security(a2a,gateway): warn when bearer auth is disabled by @bug-ops in #904
• ci: run build-tests in parallel with lint jobs by @bug-ops in #905
• refactor(type-safety): replace stringly-typed fields with enums, audit dead code by @bug-ops in #902
• refactor(binary): split main.rs and bootstrap.rs into focused modules by @bug-ops in #906
• security(tools): harden shell sandbox against process substitution and here-string bypass by @bug-ops in #907
• security(tools): SSRF redirect chain defense (#857) by @bug-ops in #908
• perf(zeph-llm): cache serialized ToolDefinitions in ClaudeProvider by @bug-ops in #910
• security(core,llm): enforce unsafe_code deny and deterministic vault serialization by @bug-ops in #909
• perf(memory): covering index on messages and load_history_filtered CTE refactor by @bug-ops in #911
• perf(core): hot-path CPU reduction in agent loop by @bug-ops in #912
• replace default model mistral:7b with qwen3:8b by @bug-ops in #915
• perf(core,memory): reduce heap allocations in message processing by @bug-ops in #913
• perf(core,memory,tui): eliminate blocking I/O in async hot paths by @bug-ops in #914
• release: v0.12.1 by @bug-ops in #916

Full Changelog: v0.12.0...v0.12.1

v0.12.0

What's Changed

• feat(docs): custom mdBook theme with Zeph brand colors by @bug-ops in #759
• fix(tui): hide tool_use-only messages in chat history by @bug-ops in #760
• chore(deps): bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 in the github-actions group by @dependabot[bot] in #761
• feat(acp): Agent Client Protocol integration — Phase 1 MVP by @bug-ops in #774
• feat(acp): IDE-proxied file system, terminal, permissions, MCP passthrough by @bug-ops in #775
• feat(acp): transport wiring, config, manifest, integration tests by @bug-ops in #776
• fix(acp): preserve session on cancel, filter tool_use markers by @bug-ops in #788
• feat(acp): wire AcpContext into agent loop, cancellation, spec compliance by @bug-ops in #814
• feat(tools): configurable tool response offload (#791) by @bug-ops in #815
• feat(memory): accurate token counting with tiktoken-rs by @bug-ops in #816
• feat(acp): multi-session support with LRU eviction and session persistence by @bug-ops in #817
• feat(memory): message dual-visibility metadata system (M28) by @bug-ops in #818
• feat(acp): permission persistence and MCP transport parity by @bug-ops in #819
• feat(core): resilient compaction with reactive retry and middle-out removal by @bug-ops in #821
• feat(acp): rich content support — images, resources, tool locations by @bug-ops in #822
• feat(core): tool-pair summarization with visibility integration by @bug-ops in #823
• feat(acp): model switching and extension management by @bug-ops in #824
• feat(acp): custom methods framework and session management API by @bug-ops in #825
• feat(acp): HTTP+SSE and WebSocket transport by @bug-ops in #826
• release: v0.12.0 by @bug-ops in #820

Full Changelog: v0.11.6...v0.12.0

v0.11.6

What's Changed

• feat(memory): embedded vector search, token estimation, context scrubbing by @bug-ops in #751
• feat(filter): add kept_lines diagnostics for filter quality assessment by @bug-ops in #752
• feat(memory): P1 memory improvements — MMR, temporal decay, chunked compaction, compact skills by @bug-ops in #753
• feat(tui): render markdown tables in chat panel by @bug-ops in #754
• feat(memory): P2 memory improvements — autosave, snapshot, response cache by @bug-ops in #755
• fix(memory): auto-create parent directories for sqlite_path by @bug-ops in #757
• release: v0.11.6 by @bug-ops in #758

Full Changelog: v0.11.5...v0.11.6

v0.11.5

What's Changed

• docs: add crates.io installation instructions by @bug-ops in #705
• ci: add automated crates.io publishing to release workflow by @bug-ops in #706
• fix: correct broken documentation links in README by @bug-ops in #707
• ci: add link checking with mdbook-linkcheck and lychee by @bug-ops in #708
• feat(zeph-tools): add declarative TOML-based output filter engine by @bug-ops in #734
• feat: add sub-agent orchestration with zero-trust permission model by @bug-ops in #735
• feat(zeph-tools): expand declarative filter coverage to 25 rules by @bug-ops in #736
• feat: sub-agent background execution, TUI panel, and CLI commands (M28-E/F/G) by @bug-ops in #737
• feat(tui): improve chat UX with cleaner visual design by @bug-ops in #738
• release: v0.11.5 by @bug-ops in #739

Full Changelog: v0.11.4...v0.11.5

v0.11.4

What's Changed

• feat: external skill management with install, remove, verify, and trust CLI by @bug-ops in #684
• feat: support arbitrary vault keys for skill API authentication by @bug-ops in #685
• feat(zeph-skills): align SKILL.md parser with agentskills.io spec by @bug-ops in #690
• feat(zeph-skills): validate skill file references and sanitize untrusted body content by @bug-ops in #691
• refactor(zeph-skills): rename requires-secrets to x-requires-secrets vendor extension by @bug-ops in #693
• refactor(zeph-skills): lazy resource loading per progressive disclosure spec by @bug-ops in #692
• feat(zeph-core): add spinner status indicators for long-running operations by @bug-ops in #701
• Add crates.io publishing metadata to all workspace crates by @bug-ops in #702
• release: v0.11.4 by @bug-ops in #703
• fix: move migrations into zeph-memory for crates.io publishing by @bug-ops in #704

Full Changelog: v0.11.3...v0.11.4

v0.11.3

What's Changed

• feat(tools): harden shell command detection against bypass vectors by @bug-ops in #668
• perf(core): optimize agent hot path across 9 subsystems by @bug-ops in #669
• feat(mcp): security hardening — command allowlist and env var validation by @bug-ops in #670
• refactor(llm): clean up provider layer — fix leak, deduplicate, optimize by @bug-ops in #671
• feat(security): mitigate SSRF and information leakage by @bug-ops in #672
• refactor(memory): extract generic EmbeddingRegistry by @bug-ops in #673
• refactor(http): consolidate HTTP client creation with default_client() by @bug-ops in #674
• refactor(core): decompose agent module into focused submodules by @bug-ops in #675
• refactor: replace anyhow with typed errors in library crates by @bug-ops in #676
• refactor: box Image variant and erase ToolExecutor generic from Agent by @bug-ops in #677
• feat: TUI remote connection to daemon via A2A protocol by @bug-ops in #679
• test: improve coverage for security-critical and core modules by @bug-ops in #680
• release: v0.11.3 by @bug-ops in #681

Full Changelog: v0.11.2...v0.11.3

v0.11.2

What's Changed

• docs: restructure documentation around user journey by @bug-ops in #609
• fix(memory): add wait(true) to Qdrant upsert and delete operations by @bug-ops in #611
• feat(build): expand full feature set and enable for release builds by @bug-ops in #610
• feat(config): per-sub-provider base_url/embedding_model in orchestrator by @bug-ops in #612
• fix(vault): use default vault dir for age key/path fallback by @bug-ops in #613
• fix(tui): prevent event reader thread termination on mouse events by @bug-ops in #614
• refactor(channels): replace rustyline with crossterm for CLI input by @bug-ops in #615
• feat(stt): add base_url and language support for local whisper servers by @bug-ops in #616
• release: v0.11.2 by @bug-ops in #617

Full Changelog: v0.11.1...v0.11.2

v0.11.1

What's Changed

• fix(cli): restore --vault, --vault-key, --vault-path flags after clap migration by @bug-ops in #589
• feat(tui): add command palette with read-only agent management commands by @bug-ops in #599
• feat(cli): add orchestrator provider to init wizard by @bug-ops in #601
• feat(vault): implement vault CLI subcommands and fix init wizard flow by @bug-ops in #602
• feat(tui): add @-triggered fuzzy file picker in input by @bug-ops in #603
• feat(tui): make markdown links clickable via OSC 8 hyperlinks by @bug-ops in #606
• feat(scheduler): add auto-update check via GitHub Releases API by @bug-ops in #605
• feat(cli): add persistent input history with rustyline by @bug-ops in #607
• release: v0.11.1 by @bug-ops in #608

Full Changelog: v0.11.0...v0.11.1