[bug-ops]

Summary

Batch of 26 backlog issues: single-writer MCP tool id registry with a typed McpServerId, per-session ACP IDE MCP servers, Claude usage and error handling, chain-of-entropy wiring, secret scrubber hardening, sub-agent block recording and inherited trust, CI clippy coverage, and mechanical cleanups.

• MCP: McpToolList single writer and McpToolIdsHandle replace four registries and colon-split server ids; fail-safe join with executor definitions is kept; shadowed tools are shown in /mcp list and the TUI.
• ACP: IDE mcpServers are leased per session on new, load, fork and resume with ownership-safe release and release on connection close. Tools of IDE servers stay hidden (fail-closed) until an allowlist source exists.
• LLM: logprobs feed ChatExtras.entropy (OpenAI, compatible, Ollama) with a retry latch; CoE shadow usage goes to auxiliary; background and ensemble usage is billed at the serving provider's speed, counters and model price; Claude usage.speed, speed latch, 404 detail logged once.
• Security: scrubber boundaries (CSI, colon SGR, =3D, split tokens), scrubbed provider error text, sub-agent pre-dispatch block recording, inherited trust floor for transcripts and knowledge import, Telegram guest proxy body cap.
• CI: clippy entries for zeph-skills/miner and test-utils of zeph-db, zeph-memory, zeph-index, zeph-orchestration; weekly stable-toolchain clippy workflow.
• Cleanup: map_or_default and assert_matches! sweep, shared BodyLimit::from_const, plugin overlay renderer, goal list errors, serve store_routing.

Breaking changes (listed in CHANGELOG): McpServerId in MCP types, removed SpawnContext.session_mcp_servers/mcp_tool_names and TranscriptMeta.mcp_tool_names, LlmError::ApiError.detail, llm.coe.intra_threshold range widened to any finite value >= 0.

Closing notes

• cache MCP tool ids in McpToolExecutor instead of cloning definitions per batch #7072: McpToolList caches the id set, but the fail-safe join with executor definitions still reads definitions per batch; the remaining per-batch cost is tracked in a follow-up.
• ACP IDE-provided mcpServers are unreachable from the session and leak #7073: registration and release work on all four session paths; IDE servers expose no tools without an allowlist (existing fail-closed policy); the allowlist source is a follow-up security decision.
• missing tests: ACP ResourceLink limit, StatusScope cancel in mcp and assembly, url-open guard wiring #7064: item 3 was already covered by tests/url_open_loop_guard.rs; items 1 and 2 are added.
• assert_matches migration and from_utf8_lossy replacement left over from #6900 #6940: only the assert_matches! migration is done; the from_utf8_lossy part needs MSRV 1.99 and is a follow-up.
• introduce an McpServerId newtype for MCP server ids #7071: McpServerId stops at the manager and config boundary (follow-up).
• claude fast mode has no runtime speed view, usage.speed parsing or rejection latch #7063: the latch-state display line was dropped from scope.
• async supervision scan helpers count doc-comment lines (blocking scan 58 raw vs 55 true) #7045 is intentionally not part of this PR: the rules file it edits is untracked in this repository.

Verification

Full CI-matching suite on the final HEAD: fmt, clippy --profile ci (CI feature set, miner, test-utils entries), nextest lib+bins (16866 passed), rustdoc gate, cargo check -D warnings --locked, doc-tests, root integration tests. Local rustc is 1.100 while CI pins 1.98; four 1.100-only lints were suppressed locally.

LLM serialization gate: live round-trip on local Ollama (qwen2.5:0.5b) with chat_with_extras logprobs and a two-turn agent session without 400/422. Not exercised live: the OpenAI path and the 400 retry latch (wiremock only), CoE escalation through the router, Claude fast-mode billing and 404 detail (unit and wiremock tests only).

Follow-up issues: listed in a comment below.

Closes #7075
Closes #7071
Closes #7072
Closes #7070
Closes #7069
Closes #7074
Closes #7073
Closes #7064
Closes #7066
Closes #7063
Closes #7058
Closes #6956
Closes #7052
Closes #7065
Closes #7055
Closes #7027
Closes #7029
Closes #7062
Closes #7061
Closes #7057
Closes #7056
Closes #7060
Closes #7059
Closes #6940
Closes #6925
Closes #7026

[bug-ops]

Follow-up issues

• telegram guest proxy forwards file downloads to a doubled upstream path #7079 telegram guest proxy forwards file downloads to a doubled upstream path (P2)
• mcp executor recomputes sanitized ids and per-batch classification clones every tool definition #7080 mcp executor recomputes sanitized ids and per-batch classification clones every tool definition (P3)
• IDE-provided MCP servers have no allowlist source and expose zero tools #7081 IDE-provided MCP servers have no allowlist source and expose zero tools (P3)
• no per-session cap on IDE-provided mcpServers #7082 no per-session cap on IDE-provided mcpServers (P4)
• acp sessions and the daemon never apply mcp tools/list_changed #7083 acp sessions and the daemon never apply mcp tools/list_changed (P3)
• rustc 1.100 lint and cargo-manifest warnings fail local gates #7084 rustc 1.100 lint and cargo-manifest warnings fail local gates (P3)
• openai ModelCapabilityMismatch message embeds the raw 400 body unscrubbed #7085 openai ModelCapabilityMismatch message embeds the raw 400 body unscrubbed (P3)
• acp attach of an already hydrated session on a second connection re-registers the first connection's IDE servers #7086 acp attach of an already hydrated session on a second connection re-registers the first connection's IDE servers (P3)
• mcp tool order is HashMap-derived so the shadowed-id winner can flip after tools/list_changed #7087 mcp tool order is HashMap-derived so the shadowed-id winner can flip after tools/list_changed (P3)
• String::from_utf8_lossy replacement needs MSRV 1.99 #7088 String::from_utf8_lossy replacement needs MSRV 1.99 (P4)
• derive Debug on 64 matched types so assert_matches! can replace assert!(matches!) #7089 derive Debug on 64 matched types so assert_matches! can replace assert!(matches!) (P4)
• missing tests: scheduler_loop ensemble billing (#7058) and a single ERROR line per failed Claude 404 (#7066) #7090 missing tests: scheduler_loop ensemble billing and a single ERROR line per failed Claude 404 (P4)
• sync_executor_tools clones the full MCP tool list every turn #7091 sync_executor_tools clones the full MCP tool list every turn (P4)
• McpServerId stops at the mcp manager and config boundary #7092 McpServerId stops at the mcp manager and config boundary (P4)