release: v0.14.3 (#1524)

* release: prepare v0.14.3

Bump workspace version from 0.14.2 to 0.14.3. Update all crate version
references in workspace dependencies, refresh insta snapshots for config
and TUI splash defaults, and finalize CHANGELOG.md release section.

* docs: refresh READMEs for v0.14.3

- zeph-acp: bump installation version from 0.14.1 to 0.14.3
- zeph-tools: update shell sandbox warning to reflect subshell substitution detection
- zeph-a2a: document protocolVersion field in AgentCardBuilder
- zeph-mcp: document SSRF bypass for statically configured servers

* docs: update for v0.14.3 release

- task-orchestration: document DagScheduler concurrency backoff,
  RunInline action for single-agent setups, /plan retry cleared
  assigned_agent, single-agent limitation note
- security: replace Known Limitations entry with Subshell Detection
  section (backtick/$()/process substitution now blocked)
- untrusted-content-isolation: add native tool-use path (Claude
  provider) to coverage table; note injection flag fix for persist_message
- graph-memory: document edge deduplication on re-extraction, /graph
  facts exact-match fix, community incremental fingerprinting and
  parallel summarization (community_summary_concurrency), graph config
  bootstrap note, add community_summary_concurrency to config example
- memory: add Cross-Session History Restore section (sanitize_tool_pairs)
- self-learning: add self-correction detection signal, feedback command
  section (approval outcome, positive feedback skips skill rewrite,
  approval/rejection excluded from Wilson score)
- observability: add Token Counting section (API-reported output_tokens)
- orchestrator: add Capability Delegation section (context_window,
  supports_vision, last_usage delegation fixes)
- acp: update manifest example to v0.14.3, add stdio log pollution
  troubleshooting entry
- a2a: document protocolVersion field in agent card
- changelog: add stub entries for v0.14.0 through v0.14.3
- installation: update pinned version example to v0.14.3

* docs: add tests count badge to README

* docs: add crates count badge to README

* fix(tui): redirect log output to stderr to prevent TUI rendering corruption

* docs(zeph.md): update agent instructions for v0.14.3

* chore: ignore zeph.log in project root

Author: bug-ops

.gitignore

@@ -12,3 +12,4 @@ data/
 **/.zeph/subagents/
 docs/book/
 *.log
+zeph.log

.zeph/zeph.md

@@ -6,6 +6,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.14.3] - 2026-03-10
+
 ### Fixed
 
 - DagScheduler: add 250ms backoff in `wait_event()` when all ready tasks are deferred due to concurrency limit, preventing CPU spin-loop (#1519)
@@ -1968,7 +1970,8 @@ let agent = Agent::new(provider, channel, &skills_prompt, executor);
 - Agent calls channel.send_typing() before each LLM request
 - Agent::run() uses tokio::select! to race channel messages against shutdown signal
 
-[Unreleased]: https://github.com/bug-ops/zeph/compare/v0.14.2...HEAD
+[Unreleased]: https://github.com/bug-ops/zeph/compare/v0.14.3...HEAD
+[0.14.3]: https://github.com/bug-ops/zeph/compare/v0.14.2...v0.14.3
 [0.14.2]: https://github.com/bug-ops/zeph/compare/v0.14.1...v0.14.2
 [0.14.1]: https://github.com/bug-ops/zeph/compare/v0.14.0...v0.14.1
 [0.14.0]: https://github.com/bug-ops/zeph/compare/v0.13.0...v0.14.0

CHANGELOG.md

@@ -5,7 +5,7 @@ resolver = "3"
 [workspace.package]
 edition = "2024"
 rust-version = "1.88"
-version = "0.14.2"
+version = "0.14.3"
 authors = ["bug-ops"]
 license = "MIT"
 repository = "https://github.com/bug-ops/zeph"
@@ -115,19 +115,19 @@ url = "2.5"
 uuid = "1.21"
 wiremock = "0.6.5"
 zeroize = { version = "1", features = ["derive", "serde"] }
-zeph-a2a = { path = "crates/zeph-a2a", version = "0.14.2" }
-zeph-acp = { path = "crates/zeph-acp", version = "0.14.2" }
-zeph-channels = { path = "crates/zeph-channels", version = "0.14.2" }
-zeph-core = { path = "crates/zeph-core", version = "0.14.2" }
-zeph-gateway = { path = "crates/zeph-gateway", version = "0.14.2" }
-zeph-index = { path = "crates/zeph-index", version = "0.14.2" }
-zeph-llm = { path = "crates/zeph-llm", version = "0.14.2" }
-zeph-mcp = { path = "crates/zeph-mcp", version = "0.14.2" }
-zeph-memory = { path = "crates/zeph-memory", version = "0.14.2" }
-zeph-scheduler = { path = "crates/zeph-scheduler", version = "0.14.2" }
-zeph-skills = { path = "crates/zeph-skills", version = "0.14.2" }
-zeph-tools = { path = "crates/zeph-tools", version = "0.14.2" }
-zeph-tui = { path = "crates/zeph-tui", version = "0.14.2" }
+zeph-a2a = { path = "crates/zeph-a2a", version = "0.14.3" }
+zeph-acp = { path = "crates/zeph-acp", version = "0.14.3" }
+zeph-channels = { path = "crates/zeph-channels", version = "0.14.3" }
+zeph-core = { path = "crates/zeph-core", version = "0.14.3" }
+zeph-gateway = { path = "crates/zeph-gateway", version = "0.14.3" }
+zeph-index = { path = "crates/zeph-index", version = "0.14.3" }
+zeph-llm = { path = "crates/zeph-llm", version = "0.14.3" }
+zeph-mcp = { path = "crates/zeph-mcp", version = "0.14.3" }
+zeph-memory = { path = "crates/zeph-memory", version = "0.14.3" }
+zeph-scheduler = { path = "crates/zeph-scheduler", version = "0.14.3" }
+zeph-skills = { path = "crates/zeph-skills", version = "0.14.3" }
+zeph-tools = { path = "crates/zeph-tools", version = "0.14.3" }
+zeph-tui = { path = "crates/zeph-tui", version = "0.14.3" }
 
 [workspace.lints.rust]
 unsafe_code = "deny"

Cargo.lock

@@ -8,7 +8,9 @@
   [![Crates.io](https://img.shields.io/crates/v/zeph)](https://crates.io/crates/zeph)
   [![docs](https://img.shields.io/badge/docs-book-blue)](https://bug-ops.github.io/zeph/)
   [![CI](https://img.shields.io/github/actions/workflow/status/bug-ops/zeph/ci.yml?branch=main&label=CI)](https://github.com/bug-ops/zeph/actions)
+  [![Tests](https://img.shields.io/badge/tests-4993-brightgreen)](https://github.com/bug-ops/zeph/actions)
   [![codecov](https://codecov.io/gh/bug-ops/zeph/graph/badge.svg?token=S5O0GR9U6G)](https://codecov.io/gh/bug-ops/zeph)
+  [![Crates](https://img.shields.io/badge/crates-14-orange)](https://github.com/bug-ops/zeph/tree/main/crates)
   [![MSRV](https://img.shields.io/badge/MSRV-1.88-blue)](https://www.rust-lang.org)
   [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 </div>

Cargo.toml

@@ -15,7 +15,7 @@ Implements the Agent-to-Agent (A2A) protocol over JSON-RPC 2.0, enabling Zeph to
 
 - **client** — `A2aClient` for sending tasks and messages to remote agents
 - **server** — `A2aServer` exposing an A2A-compliant endpoint with `ProcessorEvent` streaming via `mpsc::Sender` (requires `server` feature)
-- **card** — `AgentCardBuilder` for constructing agent capability cards
+- **card** — `AgentCardBuilder` for constructing agent capability cards; includes `protocolVersion` field set to `A2A_PROTOCOL_VERSION` constant (`"0.2.1"`) in the default card served at `/.well-known/agent.json`
 - **discovery** — `AgentRegistry` for agent lookup and registration
 - **jsonrpc** — JSON-RPC 2.0 request/response types
 - **types** — shared protocol types (Task, Message, Artifact, etc.)

README.md

@@ -15,10 +15,10 @@ Implements the [Agent Client Protocol](https://agentclientprotocol.org) server s
 
 ```toml
 [dependencies]
-zeph-acp = "0.14.1"
+zeph-acp = "0.14.3"
 
 # With HTTP+SSE transport
-zeph-acp = { version = "0.14.1", features = ["acp-http"] }
+zeph-acp = { version = "0.14.3", features = ["acp-http"] }
 ```
 
 > [!IMPORTANT]

crates/zeph-a2a/README.md

@@ -1,6 +1,5 @@
 ---
 source: crates/zeph-core/src/config/types.rs
-assertion_line: 2466
 expression: toml_str
 ---
 [agent]
@@ -268,7 +267,7 @@ show_source_labels = false
 [acp]
 enabled = false
 agent_name = "zeph"
-agent_version = "0.14.2"
+agent_version = "0.14.3"
 max_sessions = 4
 session_idle_timeout_secs = 1800
 available_models = []

crates/zeph-acp/README.md

@@ -14,7 +14,7 @@ Implements the Model Context Protocol client for Zeph, managing connections to m
 ## Key Modules
 
 - **client** — low-level MCP transport and session handling
-- **manager** — `McpManager`, `McpTransport`, `ServerEntry` for multi-server lifecycle; command allowlist validation (npx, uvx, node, python3, docker, mcpls, etc.), env var blocklist (LD_PRELOAD, DYLD_*, NODE_OPTIONS, etc.), and path separator rejection
+- **manager** — `McpManager`, `McpTransport`, `ServerEntry` for multi-server lifecycle; command allowlist validation (npx, uvx, node, python3, docker, mcpls, etc.), env var blocklist (LD_PRELOAD, DYLD_*, NODE_OPTIONS, etc.), and path separator rejection; statically configured servers (from `[[mcp.servers]]`) bypass SSRF validation to allow connections to `localhost` and private IPs — dynamically added servers retain full SSRF protection
 - **executor** — `McpToolExecutor` bridging MCP tools into the `ToolExecutor` trait
 - **registry** — `McpToolRegistry` for tool lookup and optional Qdrant-backed search
 - **tool** — `McpTool` wrapper with schema and metadata