What's Changed

• chore(deps): bump jose from 6.2.2 to 6.2.3 by @dependabot[bot] in #182
• chore(deps-dev): bump typescript-eslint from 8.58.2 to 8.59.2 by @dependabot[bot] in #181
• chore(deps-dev): bump @commitlint/cli from 20.5.0 to 21.0.0 by @dependabot[bot] in #180
• chore(deps-dev): bump globals from 17.5.0 to 17.6.0 by @dependabot[bot] in #178
• chore(deps-dev): bump eslint from 10.2.0 to 10.3.0 by @dependabot[bot] in #177
• chore(deps): bump yaml from 2.8.3 to 2.8.4 by @dependabot[bot] in #175
• chore(deps): bump @modelcontextprotocol/ext-apps from 1.5.0 to 1.7.1 by @dependabot[bot] in #174
• chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @dependabot[bot] in #94
• chore(deps): bump github/codeql-action from 4.35.1 to 4.35.3 by @dependabot[bot] in #176
• chore(deps-dev): bump @commitlint/config-conventional from 20.5.0 to 21.0.0 by @dependabot[bot] in #179
• feat(skills): rfc 0012 phase 1 prep — cron + scheduler state + hitl queue + env by @heznpc in #207
• feat: outputSchema Wave 6 — 7 system + 3 music read tools by @heznpc in #205
• chore: audit fault-injection tests + count-stats mcpApps surface by @heznpc in #213
• chore(deps): bump softprops/action-gh-release from 2.3.2 to 3.0.0 by @dependabot[bot] in #146
• chore(deps): bump actions/upload-pages-artifact from 4 to 5 by @dependabot[bot] in #91
• chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 by @dependabot[bot] in #208
• chore(deps-dev): bump @jest/globals from 30.3.0 to 30.4.1 by @dependabot[bot] in #210
• chore(deps-dev): bump @types/node from 25.6.0 to 25.6.2 by @dependabot[bot] in #212
• feat: outputSchema Wave 7 — 6 numbers reads + system is_app_running by @heznpc in #215
• docs(readme): reframe hero + Why section to runtime layer narrative by @heznpc in #216
• fix(audit): close 12 findings from the 2026-05-13 code audit by @heznpc in #222
• feat(intents): per-tool destructive confirmation dialog body (RFC 0007 A.3) by @heznpc in #232
• docs(AirMCP): heznpc-session sweep — 5-label README + gitignore Claude state by @heznpc in #234
• chore: P0/P1/P2 modernization sweep (2026-05-21) by @heznpc in #241
• fix(http-transport): drop error stack from FATAL log to satisfy CodeQL by @heznpc in #243
• refactor(logger,circuit-breaker): simplify per review by @heznpc in #246
• fix(http-transport): redact oauth issuer value from validation error by @heznpc in #247
• fix(http-transport): drop oauth issuer scheme from validation error message by @heznpc in #248
• fix(circuit-breaker): single-probe contract under concurrent HALF_OPEN entry by @heznpc in #249
• chore(deps): bump qs from 6.15.0 to 6.15.2 by @dependabot[bot] in #250
• chore(deps): bump the production-minor-patch group across 1 directory with 2 updates by @dependabot[bot] in #242
• chore(deps-dev): bump the development-minor-patch group across 1 directory with 7 updates by @dependabot[bot] in #245
• docs(readme): registry-traction honesty + opencode/Zed/Cline + MCP-servers ref by @heznpc in #251
• docs(readme): positioning sweep for WWDC 2026 + Google I/O 2026 by @heznpc in #252
• chore: audit flush perf + drop unimplementable cancellation promise by @heznpc in #253
• test(mcp-setup): integration tests for boot crossroads by @heznpc in #221
• docs(readme): remove "88% coverage" self-metric — align with own redaction policy by @heznpc in #254
• chore(deps): bump the actions-minor-patch group across 1 directory with 4 updates by @dependabot[bot] in #255
• docs(readme): anthropic containment alignment + claude code plugin path by @heznpc in #256
• docs(readme): containment 3-layer mapping + npm run mcp:validate by @heznpc in #257
• feat(plugin): claude code plugin package + CI mcp:validate gate by @heznpc in #258
• chore: post-review fixes from the 2026-05-27 code-review pass by @heznpc in #259
• docs(readme,plugin): wwdc d-10 hook + adjacent comp row + plugin filter keywords by @heznpc in #260
• chore(deps): bump vite from 7.3.1 to 7.3.3 in /docs/site by @dependabot[bot] in #240
• chore(deps): bump defu from 6.1.4 to 6.1.7 in /docs/site by @dependabot[bot] in #239
• chore(deps): bump astro from 6.0.4 to 6.3.6 in /docs/site by @dependabot[bot] in #238
• chore(deps): bump devalue from 5.6.4 to 5.8.1 in /docs/site by @dependabot[bot] in #237
• chore(deps): bump postcss from 8.5.8 to 8.5.15 in /docs/site by @dependabot[bot] in #236
• chore(deps-dev): bump lint-staged from 16.4.0 to 17.0.5 by @dependabot[bot] in #231
• chore(deps): bump smol-toml from 1.6.0 to 1.6.1 in /docs/site by @dependabot[bot] in #261
• chore(deps): bump zod from 3.25.76 to 4.4.3 by @dependabot[bot] in #183
• docs(rfc): add 0011 §5 post-WWDC scenario matrix by @heznpc in #219
• docs: align podcasts + safari deprecation surfaces with brokenOn by @heznpc in #218
• feat: smoke-test pattern for numbers batches 2 + 3 by @heznpc in #217
• chore(deps): bump picomatch in /docs/site by @dependabot[bot] in #235
• chore: refresh strategic-doc baseline + caret pin by @heznpc in #220
• docs(readme): drop named-competitor comparisons — capability-first only by @heznpc in #263
• docs(readme): fix DPoP overclaim + broken CHANGELOG pointer by @heznpc in #264
• chore(deps): bump the production-minor-patch group with 2 updates by @dependabot[bot] in #265
• chore(deps-dev): bump the development-minor-patch group across 1 directory with 6 updates by @dependabot[bot] in #268
• chore(deps): bump hono from 4.12.18 to 4.12.23 by @dependabot[bot] in #269
• chore(deps-dev): bump @types/node from 25.9.1 to 25.9.2 in the development-minor-patch group by @dependabot[bot] in #271
• chore(deps): bump @modelcontextprotocol/ext-apps from 1.7.3 to 1.7.4 in the production-minor-patch group across 1 directory by @dependabot[bot] in #270
• docs: resolve RFC 0011 + post-WWDC-2026 README positioning (Q2) by @heznpc in #273
• docs: tagline "Better Siri, powered by open source" → "More than Siri" by @heznpc in #274
• docs: sharpen tagline ("Open by design") + RFC 0011 session-345 accuracy by @heznpc in #275
• docs: correct WWDC verdict — MCP is two-layer (Siri no, Xcode/dev yes) by @heznpc in #276
• docs: tagline "Open by design" → "Open to every agent" by @heznpc in #277
• chore: plugin submission readiness — manifest enrich + README hero by @heznpc in #278
• docs(rfc): add RFC 0012 — tool-surface scope review (post-WWDC) by @heznpc in #279
• docs(rfc): add RFC 0013 — stratified review process for a broad codebase by @heznpc in #280
• test: commit + fix the manifest↔doc drift guard (RFC 0013 floor-fix #1) by @heznpc in #281
• docs(rfc): fix RFC 0012 number collision — daemon owns 0012, scope-review → 0014 by @heznpc in #282
• feat(review): make stratified review executable — review-route.mjs + CI + /review by @heznpc in #283
• chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates by @dependabot[bot] in #272
• ci: forcing function on the SHIPPED tarball (RFC 0014 root-cause) by @heznpc in #284
• docs: honest capability surface — starter-default vs --full, optional Swift bridge by @heznpc in #285
• docs(airmcp): correct starter tool count to ~111 + ignore Codex config by @heznpc in #286
• ci(verify): pin config path + strip AIRMCP_* so the gate measures the starter default by @heznpc in #287
• ci: route all 3 boot gates through shared cleanBootEnv (STARTER default) by @heznpc in #288
• docs(airmcp): de-confirm Siri/Gemini claim to press-reported + pin WWDC26 codegen facts by @heznpc in #289
• ci: add MCP Registry publish workflow (OIDC) to sync io.github.heznpc/airmcp by @heznpc in #290
• fix(registry): server.json description <=100 chars (registry validation) by @heznpc in #291
• fix(registry): drop invalid http package from server.json (schema: stdio only) by @heznpc in #292
• ci: add registry-set-status workflow to deprecate old io.github.heznpc/iconnect by @heznpc in #293
• ci: add npm-deprecate utility workflow (reuse cd.yml's NPM_TOKEN) by @heznpc in #294
• fix(tools): whole-sentence compact descriptions + front-loaded behavior disclosure by @heznpc in #295
• fix(hitl): elicitation fallback for managed clients when the approval socket is unreachable by @heznpc in #296
• chore: remove stale Claude-generated narrative docs by @heznpc in #297
• chore(deps-dev): bump esbuild from 0.28.0 to 0.28.1 by @dependabot[bot] in #298
• chore(deps): bump dependabot/fetch-metadata from 2.3.0 to 3.1.0 by @dependabot[bot] in #266
• chore(deps): bump gitleaks/gitleaks-action from 2.3.9 to 3.0.0 by @dependabot[bot] in #267
• chore(deps-dev): bump the development-minor-patch group with 4 updates by @dependabot[bot] in #299
• chore(release): v2.12.1 - TDQS tool descriptions + headless HITL fallback by @heznpc in #300
• Workflow-first onboarding and macOS runtime hardening by @heznpc in #301
• chore(deps): bump js-yaml from 4.1.1 to 4.2.0 in /docs/site by @dependabot[bot] in #303
• chore(deps): bump astro from 6.3.6 to 6.4.7 in /docs/site by @dependabot[bot] in #304
• fix: 3-way-audit P1 gaps (apps fencing, safari macOS 26, HTTP crash, notarize, docs) by @heznpc in #305
• Harden follow-up governance edges by @heznpc in #302
• P2 3-way-audit follow-ups: audit truncation + numbers/Origin/OAuth + count reconcile by @heznpc in #306
• fix: speech_availability stops overclaiming authorization (TCC responsible-process) by @heznpc in #307
• fix: declare NSSpeechRecognitionUsageDescription in the app Info.plist by @heznpc in #308
• fix: declare Photos + Contacts usage descriptions (privacy sweep follow-up to #308) by @heznpc in #309
• fix: make CoreLocation requests time out cleanly by @heznpc in #310
• fix: close location cancellation and llms caveat gaps by @heznpc in #311
• docs: clarify App Schemas codegen gates by @heznpc in #312
• Route clients through app-owned runtime by @heznpc in #313
• chore(deps-dev): bump the development-minor-patch group with 2 updates by @dependabot[bot] in #314
• Require token for app-owned runtime by @heznpc in #318
• [codex] fence untrusted reads and gate cloud writes by @heznpc in #319
• fix: harden open URL egress gating by @heznpc in #320
• fix: gate Safari reading list egress by @heznpc in #321
• [codex] Harden Safari internal URL guard by @heznpc in #322
• fix(hitl): add sensitive approval tier by @heznpc in #323
• fix(app): pin app-owned npm runtime version by @heznpc in #324
• fix(app): verify app-owned runtime contract by @heznpc in #325
• feat(cli): repair clients for app-owned runtime by @heznpc in #326
• Gate sensitive local actions through HITL by @heznpc in #327
• Verify app runtime MCP roundtrip by @heznpc in #328
• Lock workflow menu catalog parity by @heznpc in #329
• fix: harden service completion gates by @heznpc in #330
• fix: harden AppIntent runtime and output decoding by @heznpc in #331
• fix(security): make verification honest again by @heznpc in #332
• test(security): close remaining verification-debt gaps by @heznpc in #333
• docs(experiments): add defended-vs-undefended Apple-native ASR ablation design (draft) by @heznpc in #334
• docs(readme): correct four defense-surface claims to match code by @heznpc in #335
• docs(experiments): ratify ablation design (boundary principles + §11 decisions) by @heznpc in #336
• docs(experiments): add harness safety preflight (contracts + schemas + bypass tripwire) by @heznpc in #337
• docs(experiments): unify baseline primary/secondary across design, preflight, schema by @heznpc in #338
• docs(readme): correct Swift-bridge shipping claim (it ships in no channel) by @heznpc in #339
• feat(experiments): pre-runner contract hardening (schema, conformance, oracle, taxonomy, tripwire) by @heznpc in #340
• docs(experiments): §11.7 current-state re-verification (baseline instances + receipt) by @heznpc in #341
• feat(experiments): runner-zero plumbing (matrix + trial-record format, no execution) by @heznpc in #342
• fix(circuit-breaker): deflake timing tests via injected clock seam by @heznpc in #343
• feat(experiments): trial-record consistency guard (4-split invariants + validate-or-die) by @heznpc in #344
• fix(experiments): close trial-record schema vacuous-if-match (base-required + partial domain) by @heznpc in #345
• test(cli): deflake app-owned runtime connect checks by @heznpc in #346
• ci(release): attach mcpb from npm publish workflow by @heznpc in #347
• chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 in the actions-minor-patch group across 1 directory by @dependabot[bot] in #315
• ci(release): add dry preflight artifacts by @heznpc in #348
• chore(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 in the actions-minor-patch group by @dependabot[bot] in #351
• chore(release): v2.13.0 by @heznpc in #354
• chore(deps-dev): bump the development-minor-patch group across 1 directory with 7 updates by @dependabot[bot] in #349
• feat: add opt-in spatial prep module by @heznpc in #355
• feat: add profile-based runtime exposure by @heznpc in #356

Full Changelog: v2.12.0...v2.14.0