v0.1.20

What's Changed

Bug Fixes

• fix(#47): Rogue detection now fully respects configured enabled_detections flags, scoring weights, risk_thresholds, and custom_patterns — previously these config fields were silently ignored and hardcoded defaults were used instead
• fix(#48): SSH debug logging no longer leaks plaintext passwords when using sshpass; stderr from successful SSH commands is now surfaced as a warning instead of being silently discarded
• fix(#48): SSH streaming (--watch mode) simplified from manual thread-based io::copy to Stdio::inherit() — fewer threads, no buffering overhead
• fix(#49): MCP JSON-RPC requests with "id": null are now correctly rejected with an error instead of being silently treated as notifications (causing clients to hang waiting for a response that never arrives)
• fix(#49): ToolContent and ResourceContents optional fields no longer serialize as "field": null, fixing compatibility with strict MCP clients

Internal / CI

• fix(clippy): Replace &[snapshot.clone()] with std::slice::from_ref(&snapshot) in coordinator
• fix(clippy): Gate Instant import behind #[cfg(unix)] in proc.rs to fix Windows unused-import warning
• fix(clippy): Add #[allow(dead_code)] to detect_rogue_activity_from_records (public API reserved for future cluster-wide rogue detection)