A ledger of what changed.

Bug Fixes

• read roll-drift target from ArgoCD desired images

Bug Fixes

• a block of only dead editors ends with the editors' own failure kind, and the silent-failure alert stops blaming the model

Features

• an error that returns after its fix files generation N+1 and reopens the original issue

Bug Fixes

• the test pool sizes to the box's free CPU, not its core count

Features

• a View queue button on each agent card lists the PRs and tasks that agent holds
• open gitee connects, release n+1 of the Gitee read path
• cache-prefix stability, loop recovery and prompt fixes across the in-cluster loop, the box harness and fan-out
• a language setting that overrides the browser language
• any coding park of an AI-managed PR idle 12h+ goes to the Escalation agent, and an unplaceable round reaches a human
• the Escalation queue lists upcoming hand-overs with a countdown
• detect audit kinds defined but with zero durable rows
• a Sentry error delivery stores its exception class, crash-site frame and group id as data
• PATCH /v1/runners/:id renames a box, with the rename and its runner.renamed row in one transaction
• audit-silent-kinds lists the audit kinds the code writes that have no row since the archive frontier, with their writers
• a nullable column can be a keyset sort key, nulls last in both directions, and the Fleet board sorts by last seen again
• a person reopening an issue files a new generation of its ask
• one disclosed GitHub issue per error group, capped at 5 per repo per day
• Stuck PRs lists every AI-managed PR idle 12h+ or open 72h+ with its park, blocker and rescue state
• onboarding classifies a stale dz/onboarding collision as its own reason
• onboarding PR body lists names the gate never proved it needs
• forge-qualified stored ids, expand then contract
• hold a Sentry error's tasks until its public issue is filed, then link it for Closes #n

Bug Fixes

• stale-lane closes are off unless the maintainer writes the window
• the agent queue's ISO timestamps are validated as ISO
• the warm-first gate opens on the first provider stream event, not the first content
• a rescue round no box ever started is not a spent rescue, and the box's decode refusal names the field
• an undecodable assignment is held for a runner release that can read it, and a live rescue round is not a spent rescue
• a large-diff review reads the whole diff, keeps finished work across a retry, and grades a key wall as the key's
• ops one-off to sweep disabled-repo pending-task orphans
• the onboarding lane's installation and repository rows land on the account's durable chain, not stdout
• an operator can re-run the backlog import for an already-enabled repo, and a re-run reaches past the asks already on file
• the typecheck hook scopes an edit in a clone to that clone, never a whole-graph tsc over the main checkout
• classify bun install --frozen-lockfile mismatch on dep-bot PRs as a tree fault, not an env fault
• an onboarding audit-append failure alerts under onboarding.run, not the dispatch lane
• a failing integration-test teardown fails the run instead of only logging
• typecheck hook resolves root from edited file via git
• relabel login footer to "Request access" → /waitlist
• a closed set the box decodes cannot be widened and written in one diff, and every prod psql read is bounded by a statement timeout
• a review on a subscription key runs its full wave past a busy plan, a refusal shrinks only the reserve, and the lead planner is no longer told an omitted file goes unreviewed
• post-edit hooks start in the project dir and lint a clone edit against that clone, never trusting the edited tree
• a box no longer sees the mothership's mux inbox on its fleet.task subscription
• a survey starved of a model slot ages past newer coding work instead of waiting forever
• biome post-edit hook resolves root from edited file or exits 0 with one line
• pin grace to runner stagger default
• a setup that calls sudo is graded tree with the fix, not unknown
• the schema-correction re-ask records its prompt audit, and constant system prompts are a checked exemption, paying four owed prompt-audit sinks
• stop 320px horizontal scroll on every code-window editorial split
• the scheduled-run alarm action loads again, Lighthouse starts marketing from its own directory, and action expressions may only read contexts an action can see
• drop the requested-page-count clause from the KB import system prompt
• a failed janitor act's error row carries both prompt audits
• the GitHub sign-in's state cookie is age-checked on open
• session replay drops the model's requested escalation channel
• the wip keep is the set match, not the count
• a failed setup's tail is the last error line, not the last N chars
• a FAIL → PASS transition on the same sha posts BOTH verdict comments
• a held fix round names its blocker; delete the writer-less held overlay
• schedules fire again, cross-account repo disable is fenced, gh capture never parses a cut page
• the pre-land gate narrows to the round's workspaces, and a task-cap OOM no longer burns the charged ladder
• a transferred repo cancels and audits the old owner's tasks in-tx; review gh is a required seam; pre-land scope includes autofix output
• pin the FAIL→PASS re-run transition
• KeyCard's provider lookups go through a Map, not a Record
• name the per-test scan cost on the two whole-tree corpus guards
• verify a self-hosted router key against its own gateway
• GPT reasoning effort over the Anthropic-wire router
• sessions, the first-time-contributor guard and the issue answer door read project membership by repo permission
• the merge floor, ask-before-acting, ask stamps and the boot screen grade a definite member project by repo permission

Features

• thread lead-planner call identity + prompt sections

Bug Fixes

• project create is advertised only when the App holds administration: write
• hold the review gate's own config for a human, and say only what is true in it

Features

• the public repo page shows the agent-authored numbers, also for consent-only repos
• one rescue round on the escalation model for a stuck AI-managed PR
• a GitLab source can live on jihulab.com as well as gitlab.com
• the PR lane judges comments, declines with a reason, and closes PRs stalled on their author
• an AI-managed PR's red check is taken over in a maintainer's order, and the PR says why it is held

Bug Fixes

• re-arm mark is no longer written for the run's own trigger and is cleared/renewed for the full run
• an answered ask is dropped from the hourly summary; recovery counts the bundles it skips
• the DPA names the real subprocessors and the privacy page states the retention the code enforces
• rotating a webhook source's signing secret keeps a GitLab read failure it cannot fix
• the stalled-PR sweep does not backdate a conflict, counts only a failed check as the author's, and states a true way back
• a stale lockfile on the pinned bun is a verdict on the tree, not a box fault
• a box can no longer forge the reply to a request sent to another box
• 401 test sees operator-credential cache from a prior file
• a blocked PR's hold sentence names its failing and missing checks before the approval
• a task whose PR merged after its run ended is settled to merged

Features

• the issue lane replies only when it moves the issue, closes what waits on a silent reporter, and can reopen and lock

Features

• add BottomSheet primitive + primitives demo
• every landed webhook-source health transition writes one audit row

Bug Fixes

• the escalations page names the three locked escalation categories, tied to the code by a guard

Bug Fixes

• a refused GitLab read marks its webhook source unhealthy until a read succeeds

Bug Fixes

• published contact addresses come from the configured inbox, not a bouncing literal

Bug Fixes

• pin survey-filing repo cap to RAW_TASK_REPOS_MAX

Bug Fixes

• Notifications page reads settings once

Features

• read a gitlab.com project's merge requests into the audit trail

Features

• own and dependency-bot PRs on auto-merge repos are AI-managed end to end

Features

• the public stats route serves agent-authored numbers for repos whose owner consents

Features

• an MCP scope refusal carries a machine-readable verdict

Bug Fixes

• who can mint a token is said once, from the role ceiling

Bug Fixes

• a red task's work is saved on its own dz/ branch, no dz/wip namespace
• every remaining account-audit row carries its own kind

Features

• switch key mid-run on outage, 429 and slow keys; reuse finished review groups
• prompt caching that fits every provider; cached tokens priced at their real rate
• a weekly estimate and the recent list on the Notifications page
• every agent prompt, ours and the product's, is a confident elite-engineer pilot that makes the call itself

Bug Fixes

• the platform-staff gate matches the org by GitHub account id, not login
• admin and control-plane audit rows carry their own kind; the generic fallback is gone
• rename stale $gutter to $explainer-gutter in pipeline explainer

Features

• a re-asked PR says why it is back

Bug Fixes

• a pushed run never completes without its PR
• every by-id query door fenced or declared, webhook save/delete race closed

Features

• delivery timing and a test email on the Notifications page

Bug Fixes

• a fix round may not empty its PR or fully undo a dependency bump; commit-scope guard core

Features

• an unsubscribe link speaks for one person, and the weekly summary is a setting

Bug Fixes

• converged PRs survive their own base update, rearm retires stale splits, dependency-bot PRs reviewed, dead onboarding passes re-minted

Bug Fixes

• every admin write rides the operator credential, plus the member role control

Features

• the Notifications page is tiers, presets and send-to, and the old per-cell grid is gone
• a person can read a weekly email estimate and a list of what was sent and why
• rewrite zh og card copy and regenerate committed PNGs

Bug Fixes

• bot PRs stop stalling green on recheck holds, stuck threads and unreviewed dependency bumps
• deep sweep slice 01 cut C and slice 02, plus CI on Ubicloud with RustFS and Dragonfly
• a pure @developerz-ai review command is not babysit feedback
• deep sweep slices 13 and 14, schema guards, one stored-policy reader, fail-closed Stripe seats
• withhold out-of-scope created files from run commits; conflict lane may edit the PR's own files
• deep sweep slices 07 and 12, honest review posting, disclosed replies, babysit rungs that tell the truth
• deep sweep slices 06 and 08, bounced mail suppressed, errored gardener targets rest, liveness that survives a roll
• deep sweep slices 09 and 11, runner fleet and harness, NKey seeds redacted, no work lost on a refused push
• deep sweep slices 04, 10 and 18, the last open rows: served blog HTML re-sanitised, stale checks graded once