release: v2026.4.27-beta6#3255

Merged

houko merged 1 commit into

mainfrom

chore/bump-version-2026.4.27-beta6

Apr 26, 2026

houko commented Apr 26, 2026

Contributor

Release v2026.4.27-beta6

Added

Treat CLI logins as first-class default providers (feat(auto-detect): treat CLI logins as first-class default providers #3061) (@houko)
Grafana Tempo + business-level span instrumentation (feat(observability): Grafana Tempo + business-level span instrumentation #3064) (@houko)
/new creates a new session instead of resetting the current one (feat(chat): /new creates a new session instead of resetting the current one #3071) (@neo-wanderer)
Support image-generation models (registry modality field) (feat(catalog): support image-generation models (registry modality field) #3074) (@houko)
Wire chat attachment uploads in ChatPage (feat(dashboard): wire chat attachment uploads in ChatPage #3075) (@houko)
Add Novita AI as OpenAI-compatible provider (feat(llm-drivers): add Novita AI as OpenAI-compatible provider #3076) (@houko)
Agent name prefix on outbound + Signal plain-text default (feat(channels): agent name prefix on outbound + Signal plain-text default #3077) (@houko)
SSE attach endpoint for multi-client session co-watching (feat(api): SSE attach endpoint for multi-client session co-watching #3078) (@houko)
Add SearXNG self-hosted search provider (feat(web-search): add SearXNG self-hosted search provider #3079) (@houko)
Add AWS Bedrock provider with Bearer token auth (feat(llm-drivers): add AWS Bedrock provider with Bearer token auth #3080) (@houko)
AuditCheck framework + first 3 CLAUDE.md gotcha checks (feat(doctor): AuditCheck framework + first 3 CLAUDE.md gotcha checks #3082) (@houko)
Add LlmFamily enum + LlmDriver::family() (feat(llm-driver): add LlmFamily enum + LlmDriver::family() #3083) (@houko)
SSE attach hook for multi-client session co-watching (feat(dashboard): SSE attach hook for multi-client session co-watching #3087) (@houko)
Add ToolApprovalClass + tool_classifier (no behavior change yet) (feat(types): add ToolApprovalClass + tool_classifier (no behavior change yet) #3092) (@houko)
Session lifecycle event bus (additive, no subscribers yet) (feat(kernel): session lifecycle event bus (additive, no subscribers yet) #3093) (@houko)
Support PDF and text/code file attachments end-to-end (feat(chat): support PDF and text/code file attachments end-to-end #3094) (@houko)
Trajectory export endpoint with privacy redaction (feat(kernel): trajectory export endpoint with privacy redaction #3097) (@houko)
Extend detect_embedding_provider with vLLM + LM Studio fallback (feat(embedding): extend detect_embedding_provider with vLLM + LM Studio fallback #3099) (@houko)
Cron multi-destination delivery with failure isolation (feat(scheduler): cron multi-destination delivery with failure isolation #3102) (@houko)
UI for cron multi-destination delivery targets (feat(dashboard): UI for cron multi-destination delivery targets #3103) (@houko)
Cache /config + reject pageno=0 + annotate truncation (feat(searxng): cache /config + reject pageno=0 + annotate truncation #3108) (@houko)
Re-read agent context.md per turn (feat(runtime): re-read agent context.md per turn #3115) (@houko)
Central slash command registry (PR-1/3) (feat(channels): central slash command registry (PR-1/3) #3122) (@houko)
Slash command registry — CLI/TUI surface (PR-2/3) (feat(cli): slash command registry — CLI/TUI surface (PR-2/3) #3123) (@houko)
Configurable max history messages (per-agent + global override) (feat: configurable max history messages (per-agent + global override) #3125) (@neo-wanderer)
System_and_3 prompt cache stamping for Anthropic (M1) (feat(llm-drivers): system_and_3 prompt cache stamping for Anthropic (M1) #3126) (@houko)
ParallelSafety projection for batch tool dispatch (PR-1/6) (feat(runtime): ParallelSafety projection for batch tool dispatch (PR-1/6) #3127) (@houko)
Plan_batch + path-overlap planner for tool dispatch (PR-2/6) (feat(runtime): plan_batch + path-overlap planner for tool dispatch (PR-2/6) #3129) (@houko)
Model metadata lookup pipeline (PR-1/3, layers 1+2+5) (feat(runtime): model metadata lookup pipeline (PR-1/3, layers 1+2+5) #3133) (@houko)
Model metadata L3 cache + L4 Ollama probe (PR-2/3) (feat(runtime): model metadata L3 cache + L4 Ollama probe (PR-2/3) #3134) (@houko)
Model metadata L4 Anthropic + OpenAI-compat probes (PR-2.5/3) (feat(runtime): model metadata L4 Anthropic + OpenAI-compat probes (PR-2.5/3) #3140) (@houko)
KernelConfig.parallel_tools section (PR-3/6) (feat(types): KernelConfig.parallel_tools section (PR-3/6) #3144) (@houko)
Cron pre_script + silent_marker schema (PR-1/3) (feat(types): cron pre_script + silent_marker schema (PR-1/3) #3145) (@houko)
Cache_hit_ratio metric + trajectory field (M2/2) (feat(runtime): cache_hit_ratio metric + trajectory field (M2/2) #3149) (@houko)
Agent detail drawer + filter pill i18n (feat(dashboard): agent detail drawer + filter pill i18n #3159) (@houko)
Right-side drawer pattern for inspect-detail surfaces (feat(dashboard): right-side drawer pattern for inspect-detail surfaces #3166) (@houko)
Convert hand detail panel to drawer variant (feat(dashboard): convert hand detail panel to drawer variant #3168) (@houko)
Roll out drawer/panel pattern across all page modals (feat(dashboard): roll out drawer/panel pattern across all page modals #3175) (@houko)
Add Jaeger as second trace backend alongside Tempo (feat(observability): add Jaeger as second trace backend alongside Tempo #3176) (@houko)
Granular MCP taint policy + dashboard tree editor (closes feat(runtime): granular per-tool/per-path/per-rule MCP taint policy + dashboard tree editor #3050) (feat(runtime): granular MCP taint policy + dashboard tree editor (closes #3050) #3193) (@houko)
Jaeger trace backend + Loki/Alloy logs + CLI wiring (feat(observability): Jaeger trace backend + Loki/Alloy logs + CLI wiring #3194) (@houko)
Per-(agent, session) liveness tracking and session-scoped stop (feat(per-session-stop): per-(agent, session) liveness tracking and session-scoped stop #3195) (@houko)
RBAC M2 — audit user/channel attribution + stable UserId (feat(security): unified granular RBAC — user-centric permissions across all channels, tools, agents, and memory #3054) (feat(security): RBAC M2 — audit user/channel attribution + stable UserId (#3054) #3196) (@houko)
Hot-reload log_level via dashboard without daemon restart (feat(kernel): hot-reload log_level via dashboard without daemon restart #3200) (@houko)
RBAC M4 — channel-native role mapping (Telegram/Discord/Slack) (feat(security): unified granular RBAC — user-centric permissions across all channels, tools, agents, and memory #3054) (feat(security): RBAC M4 — channel-native role mapping (Telegram/Discord/Slack) (#3054) #3202) (@houko)
RBAC M5 — audit query/export + per-user budget API (feat(security): unified granular RBAC — user-centric permissions across all channels, tools, agents, and memory #3054) (feat(security): RBAC M5 — audit query/export + per-user budget API (#3054) #3203) (@houko)
RBAC M3 — per-user tool policy + memory namespace ACL (feat(security): unified granular RBAC — user-centric permissions across all channels, tools, agents, and memory #3054) (feat(security): RBAC M3 — per-user tool policy + memory namespace ACL (#3054) #3205) (@houko)
RBAC M6 — dashboard (users, identity linking, simulator, CSV import + stubs) (feat(security): unified granular RBAC — user-centric permissions across all channels, tools, agents, and memory #3054) (feat(security): RBAC M6 — dashboard (users, identity linking, simulator, CSV import + stubs) (#3054) #3209) (@houko)
Per-agent + global lane caps for trigger dispatch (feat(kernel): per-agent + global lane caps for trigger dispatch #3210) (@neo-wanderer)
Auto-download voice messages mirroring file path (feat(channels): auto-download voice messages mirroring file path #3212) (@neo-wanderer)
Wip (feat: wip #3213) (@houko)
Hand agent runtime overrides with restart persistence (feat(kernel): hand agent runtime overrides with restart persistence #3216) (@leszek3737)
Deliver HealthCheckFailed to notification.alert_channels (feat(kernel/heartbeat): deliver HealthCheckFailed to notification.alert_channels #3218) (@neo-wanderer)
Per-user budget write/clear endpoints + dashboard editor (feat(api): per-user budget write/clear endpoints + dashboard editor #3224) (@houko)
Activate AuditPage now that M5 audit endpoints shipped (feat(dashboard): activate AuditPage now that M5 audit endpoints shipped #3225) (@houko)
Per-action retention policy with chain-anchor trim (feat(audit): per-action retention policy with chain-anchor trim #3227) (@houko)
RBAC effective-permissions snapshot — wire simulator (feat(security): unified granular RBAC — user-centric permissions across all channels, tools, agents, and memory #3054) (feat(security): RBAC effective-permissions snapshot — wire simulator (#3054) #3228) (@houko)
RBAC M3 — per-user policy GET/PUT + dashboard editor (feat(security): RBAC M3 — per-user policy GET/PUT + dashboard editor #3229) (@houko)
RBAC — single-decision authz/check endpoint (feat(security): unified granular RBAC — user-centric permissions across all channels, tools, agents, and memory #3054) (feat(security): RBAC — single-decision authz/check endpoint (#3054) #3231) (@houko)
User-list summary flags + custom channel rule editor (feat(security): RBAC M3 — per-user policy GET/PUT + dashboard editor #3229 follow-up) (feat(rbac): user-list summary flags + custom channel rule editor (#3229 follow-up) #3232) (@houko)
Owner-only API key rotation with live session kill (feat(security): owner-only API key rotation with live session kill #3233) (@houko)
External mount points in agent.toml ([Feature Request] Mount points in agent.toml for controlled access to external directories #3230) (feat(kernel/workspace): external mount points in agent.toml (#3230) #3234) (@houko)
Channel field as dynamic dropdown with custom fallback (feat(dashboard/audit): channel field as dynamic dropdown with custom fallback #3248) (@houko)
URL-synced filters, JSON export, row detail modal (feat(dashboard/audit): URL-synced filters, JSON export, row detail modal #3252) (@houko)
Move filters into right-docked drawer (feat(dashboard/audit): move filters into right-docked drawer #3254) (@houko)

Fixed

Reconnect WhatsApp gateway after transient disconnects (fix: reconnect WhatsApp gateway after transient disconnects #21) (@houko)
Render connection screen via custom URI scheme (closes Librefang-desktop creates empty window (AppImage and NixOS) #3052) (fix(desktop): render connection screen via custom URI scheme (closes #3052) #3056) (@houko)
Create log dir + open log before stdout redirect (fix(cli): create log dir + open log before stdout redirect #3057) (@houko)
Surface CLI logins as their own providers, not API-provider fallbacks (fix(providers): surface CLI logins as their own providers, not API-provider fallbacks #3059) (@houko)
Pre-create logs dir in entrypoint (defense for Docker container stopped while Starting daemon with STATUS Exited (101) #3058) (fix(docker): pre-create logs dir in entrypoint (defense for #3058) #3060) (@houko)
Bundle compose stack in-binary, add OTLP collector (fix(observability): bundle compose stack in-binary, add OTLP collector #3062) (@houko)
Create HTTP trace spans at INFO so OTel exporter sees them (fix(telemetry): create HTTP trace spans at INFO so OTel exporter sees them #3063) (@houko)
Move env_filter to fmt layer so OTel sees INFO spans (fix(telemetry): move env_filter to fmt layer so OTel sees INFO spans #3065) (@houko)
Drop ingester/compactor from Tempo config (fix(observability): drop ingester/compactor from Tempo config #3067) (@houko)
Boot-time TOML drift detection now reaches hand agents (fix(kernel): boot-time TOML drift detection now reaches hand agents #3068) (@neo-wanderer)
Reprobe local providers every 60s + refresh on test (fix(providers): reprobe local providers every 60s + refresh on test #3069) (@houko)
Add missing files to src to fix librefang-cli build (fix(flake.nix): Add missing files to src to fix librefang-cli build #3073) (@FrantaNautilus)
Honor session_mode=new with per-fire isolated sessions (fix(cron): honor session_mode=new with per-fire isolated sessions #3081) (@houko)
Copilot streaming empty tool calls + Claude assistant strip (fix(llm-drivers): Copilot streaming empty tool calls + Claude assistant strip #3084) (@houko)
Gemini array-items default + first-message-must-be-user (fix(runtime/types): Gemini array-items default + first-message-must-be-user #3085) (@houko)
Safe UTF-8 boundary in three remaining truncation sites (fix(runtime): safe UTF-8 boundary in three remaining truncation sites #3086) (@houko)
PowerShell sandbox bypass + agent-config persistence + WS race + Revolt self-host (fix: PowerShell sandbox bypass + agent-config persistence + WS race + Revolt self-host #3088) (@houko)
Cron preservation across hand reactivation + telegram startup timeout + token estimation includes ToolUse (fix: cron preservation across hand reactivation + telegram startup timeout + token estimation includes ToolUse #3090) (@houko)
Capture text from intermediate tool_use iterations (fix(runtime): capture text from intermediate tool_use iterations #3091) (@houko)
Percent-decode WS auth token to preserve base64 characters (fix(api/ws): percent-decode WS auth token to preserve base64 characters #3095) (@houko)
Skip heartbeat timeout for agents in their idle grace window (fix(kernel): skip heartbeat timeout for agents in their idle grace window #3096) (@houko)
Handle BrokenPipe gracefully in doctor --json (fix(cli): handle BrokenPipe gracefully in doctor --json #3100) (@houko)
UTF-8-safe error truncation + 502/504 retry + response classify tests (fix(bedrock): UTF-8-safe error truncation + 502/504 retry + response classify tests #3104) (@houko)
Cap accumulated_text + document streaming non-redelivery contract (fix(agent_loop): cap accumulated_text + document streaming non-redelivery contract #3106) (@houko)
Cron dedupe + next_run + token_length annotation (fix(kernel): cron dedupe + next_run + token_length annotation #3109) (@houko)
Sticky has_processed_message replaces time-based grace (fix(kernel): sticky has_processed_message replaces time-based grace #3111) (@houko)
Use 127.0.0.1 instead of localhost for local LLM URLs (fix(providers): use 127.0.0.1 instead of localhost for local LLM URLs #3112) (@houko)
Pass agents_dir to hand route candidate scan to silence WARN flood (fix(router): pass agents_dir to hand route candidate scan to silence WARN flood #3113) (@houko)
Close non-loopback auth bypass when api_key is empty (fix(api): close non-loopback auth bypass when api_key is empty #3114) (@houko)
Downgrade pure-normalization to debug, keep WARN for real repair (fix(session-repair): downgrade pure-normalization to debug, keep WARN for real repair #3117) (@houko)
Use "default" provider/model in custom-agent template (fix(examples): use "default" provider/model in custom-agent template #3121) (@houko)
Forward api_key as Bearer in local provider probe (fix(provider-health): forward api_key as Bearer in local provider probe #3128) (@houko)
Degrade Memory page gracefully when proactive memory is disabled (fix(memory): degrade Memory page gracefully when proactive memory is disabled #3131) (@houko)
Allow named workspaces in read-side path resolution (fix(workspace): allow named workspaces in read-side path resolution #3137) (@neo-wanderer)
Unbreak cron_delivery tests + move guards to input validation (fix(cron-delivery): unbreak cron_delivery tests + move guards to input validation #3139) (@houko)
Unbreak local provider config in GUI (fix(providers): unbreak local provider config in GUI #3141) (@houko)
Re-render hand [[settings]] tail after boot-time TOML drift (fix(kernel): re-render hand [[settings]] tail after boot-time TOML drift #3142) (@neo-wanderer)
Relax probe timeout for remote local-provider URLs (fix(provider-health): relax probe timeout for remote local-provider URLs #3146) (@houko)
Preserve tool annotations for parallel safety classification (PR-6/6) (fix(runtime-mcp): preserve tool annotations for parallel safety classification (PR-6/6) #3147) (@houko)
Include SearXNG in web_search_available check (fix(config): include SearXNG in web_search_available check #3152) (@houko)
Drop redundant runtime SSRF check in deliver_webhook (fix(cron-delivery): drop redundant runtime SSRF check in deliver_webhook #3155) (@houko)
Add .desktop entry and install icon (fix(flake.nix): Add .desktop entry and install icon #3157) (@FrantaNautilus)
Seed [[settings]] defaults into hand instance config on activation (fix(kernel): seed [[settings]] defaults into hand instance config on activation #3160) (@houko)
Skip empty Blocks when stamping prompt cache markers (review fix for feat(llm-drivers): system_and_3 prompt cache stamping for Anthropic (M1) #3126) (fix(llm-drivers): skip empty Blocks when stamping prompt cache markers (review fix for #3126) #3161) (@houko)
Expose vLLM + LM Studio in embedding provider dropdown (refs Local providers cannot be configured in GUI #3138) (fix(dashboard): expose vLLM + LM Studio in embedding provider dropdown (refs #3138) #3162) (@houko)
Re-render Reference Knowledge + Your Team tails after TOML drift (fix(kernel): re-render Reference Knowledge + Your Team tails after TOML drift #3164) (@houko)
Provide .desktop entry and icon for librefang-desktop (Nix Flake does not set up LibreFang .desktop entry and icon #3156) (fix(nix): provide .desktop entry and icon for librefang-desktop (#3156) #3165) (@houko)
Regenerate config_schema golden after parallel_tools addition (fix(api): regenerate config_schema golden after parallel_tools addition #3167) (@houko)
Stop drawer scroll chaining into the page (fix(dashboard): stop drawer scroll chaining into the page #3169) (@houko)
Observability auto-start opt-in + home_dir isolation + RAII cleanup (fix(server): observability auto-start opt-in + home_dir isolation + RAII cleanup #3170) (@houko)
Surface provider model list above the fold (fix(dashboard): surface provider model list above the fold #3179) (@houko)
Wire OS keyring (libsecret/Keychain/Credential Manager) (fix(vault): wire OS keyring (libsecret/Keychain/Credential Manager) #3180) (@houko)
Wrap with wrapGAppsHook3 so tray icon resolves on NixOS (fix(desktop): wrap with wrapGAppsHook3 so tray icon resolves on NixOS #3197) (@houko)
Probe OpenAI fallback for ollama-slot servers, hide non-discovered local models (fix(providers): probe OpenAI fallback for ollama-slot servers, hide non-discovered local models #3204) (@houko)
Correct max_level_hint test assertions (fix(log-reload): correct max_level_hint test assertions #3206) (@houko)
Correct max_level_hint test assertions (fix(log-reload): correct max_level_hint test assertions #3207) (@houko)
Set sender_user_id metadata so RBAC works in groups (fix(channels/telegram): set sender_user_id metadata so RBAC works in groups #3215) (@neo-wanderer)
Serialize channel config writes via toml_edit + lock (fix(api): channel config writes race against config/set, can wipe provider settings #3183) (fix(api/channels): serialize channel config writes via toml_edit + lock (#3183) #3223) (@houko)
Attribute loopback callers to user_api_keys when token provided (fix(api/auth): attribute loopback callers to user_api_keys when token provided #3236) (@houko)
Invalidate effective-permissions on policy/budget mutations (feat(security): RBAC effective-permissions snapshot — wire simulator (#3054) #3228 follow-up) (fix(dashboard/simulator): invalidate effective-permissions on policy/budget mutations (#3228 follow-up) #3237) (@houko)
Prefix sender_chat ids so they can't collide with user namespace (fix(channels/telegram): set sender_user_id metadata so RBAC works in groups #3215 follow-up) (fix(channels/telegram): prefix sender_chat ids so they can't collide with user namespace (#3215 follow-up) #3238) (@houko)
RBAC M3 follow-up — memory ACL fail-closed for anonymous callers (fix(security): RBAC M3 follow-up — memory ACL fail-closed for anonymous callers #3239) (@houko)
Include prev_hash so verifiers can replay the chain (feat(security): RBAC M5 — audit query/export + per-user budget API (#3054) #3203 follow-up) (fix(audit/export): include prev_hash so verifiers can replay the chain (#3203 follow-up) #3240) (@houko)
RBAC M4 follow-up — role_cache reload + Telegram DM owner-escalation (fix(security): RBAC M4 follow-up — role_cache reload + Telegram DM owner-escalation #3241) (@houko)
Mark scope as user_policy_only to match implementation (feat(security): RBAC — single-decision authz/check endpoint (#3054) #3231 follow-up) (fix(authz/check): mark scope as user_policy_only to match implementation (#3231 follow-up) #3242) (@houko)
Attribute admin actions to caller + log old->new diffs (fix: reconnect WhatsApp gateway after transient disconnects #21 follow-up) (fix(audit): attribute admin actions to caller + log old->new diffs (#21 follow-up) #3245) (@houko)
Harden CSV import + flag identity-link risk (feat(security): RBAC M6 — dashboard (users, identity linking, simulator, CSV import + stubs) (#3054) #3209 follow-up) (fix(dashboard): harden CSV import + flag identity-link risk (#3209 follow-up) #3246) (@houko)
RBAC M3 follow-up — namespace traversal + case-insensitive deny + memory audit emit (feat(security): RBAC M3 — per-user tool policy + memory namespace ACL (#3054) #3205) (fix(security): RBAC M3 follow-up — namespace traversal + case-insensitive deny + memory audit emit (#3205) #3249) (@houko)
Autonomous-loop tool calls bypass user gate (closes RBAC blocks autonomous agent tool calls: no sender/channel → guest_gate → approval queue floods #3243) (fix(rbac): autonomous-loop tool calls bypass user gate (closes #3243) #3251) (@houko)
Channel dropdown uses /api/channels for full 44-adapter list (fix(dashboard/audit): channel dropdown uses /api/channels for full 44-adapter list #3253) (@houko)

Changed

Derive JSON Schema from KernelConfig via schemars (refactor(config): derive JSON Schema from KernelConfig via schemars #3055) (@houko)
Extract SessionStore trait alongside SQLite substrate (refactor(memory): extract SessionStore trait alongside SQLite substrate #3089) (@houko)
Make bridge helpers crate-private (refactor(channels): make bridge helpers crate-private #3181) (@houko)
Remove unused public helpers (refactor(runtime): remove unused public helpers #3182) (@houko)
Tighten visibility of internal request structs (refactor(api): tighten visibility of internal request structs #3184) (@houko)
Merge duplicate type definitions across crates (refactor: merge duplicate type definitions across crates #3185) (@houko)
Rename Action enums to disambiguate from domain types (refactor(cli/tui): rename Action enums to disambiguate from domain types #3188) (@houko)

Documentation

Add tool_timeouts configuration documentation (docs: add tool_timeouts configuration documentation #3098) (@leszek3737)
Backfill reference for cron / config / providers / channels / api / observability (docs: backfill reference for cron / config / providers / channels / api / observability #3189) (@houko)
Clarify worktree continuation drives to PR (docs: clarify worktree continuation drives to PR #3190) (@houko)
Align left nav with file tree (docs(nav): align left nav with file tree #3199) (@houko)
Backfill source-vs-doc gaps (providers / channels — config / API / CLI to follow) (docs: backfill source-vs-doc gaps (providers / channels — config / API / CLI to follow) #3201) (@houko)
Drop HTML comment that broke Deploy Docs on main (docs: drop HTML comment that broke Deploy Docs on main #3208) (@houko)
Align Chinese translations with English source (docs(zh): align Chinese translations with English source #3220) (@houko)

Maintenance

Rename normalize_schema_recursive + warn on items fallback (chore(types): rename normalize_schema_recursive + warn on items fallback #3105) (@houko)
Document apply_agent_prefix idempotency caveats (chore(channels): document apply_agent_prefix idempotency caveats #3107) (@houko)
Timing-side-channel mitigation in percent_decode (chore(api/ws): timing-side-channel mitigation in percent_decode #3110) (@houko)
Align localhost test expectations with fix(providers): use 127.0.0.1 instead of localhost for local LLM URLs #3112 default change (test(model_catalog): align localhost test expectations with #3112 default change #3118) (@houko)
Ignore local .plans/ working notes directory (chore: ignore local .plans/ working notes directory #3130) (@houko)
Sync librefang-types tracing dep into Cargo.lock (chore(lockfile): sync librefang-types tracing dep into Cargo.lock #3132) (@houko)
Unbreak main — cargo fmt for model_metadata.rs (style(runtime): unbreak main — cargo fmt for model_metadata.rs #3150) (@houko)
Unbreak main — fix clippy manual_pattern_char_comparison (style(types): unbreak main — fix clippy manual_pattern_char_comparison #3153) (@houko)
Hand-level skills propagation regression for Hand-level skills allowlist does not propagate to per-role agent manifests #3135 (test(kernel): hand-level skills propagation regression for #3135 #3163) (@houko)
Pull librefang-api into selective lane on librefang-types changes (ci: pull librefang-api into selective lane on librefang-types changes #3171) (@houko)
Drop LEGACY_TEAM_TAIL_MARKER fallback (chore(kernel): drop LEGACY_TEAM_TAIL_MARKER fallback #3177) (@houko)
Install libdbus-1-dev for OpenAPI Drift job (ci: install libdbus-1-dev for OpenAPI Drift job #3186) (@houko)
Remove unused dependencies across workspace (chore(deps): remove unused dependencies across workspace #3187) (@houko)
Pin push_notification routing for health_check_failed (test(kernel/notification): pin push_notification routing for health_check_failed #3222) (@houko)
Unbreak typecheck on sessions-stream test (chore(dashboard): unbreak typecheck on sessions-stream test #3235) (@houko)
Unbreak typecheck on UserBudgetPage + duplicate type export (chore(dashboard): unbreak typecheck on UserBudgetPage + duplicate type export #3244) (@houko)

Other

Unbreak main — use local user_api_keys snapshot (hotfix(api/auth): unbreak main — use local user_api_keys snapshot #3250) (@houko)

Full diff: v2026.4.24-beta5...v2026.4.27-beta6


          chore: bump version to v2026.4.27-beta6

houko enabled auto-merge (squash)

April 26, 2026 15:25

chatgpt-codex-connector Bot commented Apr 26, 2026

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

houko merged commit 2a5568f into main

15 checks passed

houko deleted the chore/bump-version-2026.4.27-beta6 branch

April 26, 2026 15:25

github-actions Bot assigned houko

github-actions Bot added area/docs area/sdk ready-for-review size/M and removed ready-for-review labels

houko added a commit that referenced this pull request


          chore(openapi): regenerate openapi.json for v2026.4.27-beta6

465c007

The version bump in #3255 didn't regenerate openapi.json, so every
PR since has been failing the OpenAPI Drift CI check on the same
single-line diff. Run 'cargo xtask codegen --openapi' to sync.

houko mentioned this pull request

fix: unbreak main — namespace traversal substring + openapi.json bump #3258

Merged

4 tasks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment