Skip to content

What shipped

A ledger of what changed.

Every shipped release of the platform, newest first.

Audited end to endGitHub-native workflowExisting checks stay in controlCost visible per task

v0.1.0

Features

  • OAuth connector path for hosted clients
  • agent ergonomics on par with REST — cursor pagination, structured content, retry-safety hints
  • REST parity for the capabilities that were MCP-only
  • reviewer-bench preflight + spend-gated run
  • board-aware placement at the REST + MCP doors
  • real per-tier OpenRouter model ladder
  • MCP verbs for REST-only self/config capabilities
  • surface parity doctrine + capability manifest
  • tenancy fencing + the GitHub App install callback
  • enforce repositories.enabled as a real acting gate
  • theme-aware /world payload + scenes
  • theme cookie + SSR ctx.theme
  • publish /world light clips + /art/light/ stills
  • light /world band + engine tokens
  • a box re-issues its own vault subkey across a KEK rotation
  • footer language link, driven by the page's own hreflang set
  • resolve per-claim App token in the review lane
  • mount the scroll-world island on /world
  • /world page, server-rendered and zero-JS
  • name STRIPE_PRICE_COMPANY in the worker price→tier table
  • world-media runbook + the six diorama stills
  • add the company seat tier as an unreachable tier
  • reviewer-bench part 1 — pin the corpus and emit the funnel
  • the platform KEK can be rotated
  • box releases + box unyank verbs — part 3 of 4
  • release drift alert — part 4 of 4: detection-only cron
  • the agent narrates a fleet task's lifecycle on its GitHub thread
  • RAII port, audit-doc reconciliation, release gate
  • per-call integration.used audit row
  • per-environment config/*.yml — environment variables carry secrets only
  • purchased CI slots become real capacity
  • operator surface to issue and revoke entitlement grants
  • pro seat to $1000/month, bundled CI slots, buyable extra slots
  • user-subject grants + fleet enforcement
  • entitlement grants — audited overrides for orgs and users
  • project setup — dispatch a setup session over an existing repo
  • drop privileges on the coding container
  • wire the raw-signal scheduler lane live
  • board-aware admission — priority, split fan-out, defer
  • report box hardening findings to the control plane
  • box-wide boot-pass GC of finished run-state dirs
  • fleet pool metering scaffold + shared-pool claim path
  • make the internal-org denylist an operator knob
  • durable audit, docs reconciliation, e2e lane, rollout
  • real donate CTA + developerz donate badge
  • donor wizard + maintainer inbox for OSS donations
  • donations REST surface, paywall, Stripe activation
  • donated model allowlist enforcement
  • self-serve donatable eligibility + repo-visibility fence
  • OSS donation schema + model-ceiling contracts
  • blog tag archives, derived prices, honest enterprise tier, axe sweep
  • 21 new indexable pages, 8 docs, and one comparison template
  • log in locally as user or admin, and seed every surface
  • project setup, clone, and greenfield
  • hygiene kinds + gardener env-maintenance
  • verify the dz-runner binary's Ed25519 signature at INSTALL time
  • SSO group role-map editor
  • role elevation from GitHub org role + IdP group claims
  • the README badge carries the handled count
  • staged runner self-update rollout controller
  • Publish + sign the runner binary, and see fleet versions *(clo…
  • handled counts on the /oss directory rows
  • coverage batch — board authoring, task dispatch, ssh enroll, PR drawer freshness
  • tool-service descriptors + working MCP env block
  • rebuild the repo sub-tabs as an underline rail
  • schema, domain, API — sealed per-repo.env
  • check tolerance, CI-wait policy, babysit branch checkout
  • review-loop termination, thread verdicts, human-PR proof
  • gate the enrollment lane on RAM/disk before token→credential
  • scout survey, plan primitives, per-assignment routing
  • team fan-out — harness owns git, editors are adapter calls
  • team fan-out core (pure) + delete dead worktree pool
  • role prompt layer, coordination contract, content fencing
  • OSS free tier (slice 10)
  • fleet scheduler classes/requires/admission (slice 06a)
  • KB initial import + digest ranking (slice 04)
  • GitHub user-token lane (arc 101 slice 05)
  • DARK GA-reliability gate + hourly alert
  • dz-runner compiled Bun binary + direct systemd unit
  • surface the classifier escalation rate on the platform overview
  • provider-keys wiring — routes, rotation, ToS guard
  • provider-keys pool — schema + pure resolver
  • pricing realignment — Pro $2000, Solo $100 floor
  • enforce the preflight gate on box acceptance
  • strongest-model ScoutBrain — multi-group plan authoring
  • live queue board — lifecycle bucket + depth + position
  • signed action links + four lifecycle emails + escalation flood collapse
  • control-plane gap-closure sweep — wire shipped backend into the UI, close projection gaps, docs truth-up
  • stacked-PR body links for plan slices
  • deep review mode — build/test/lint on the VM
  • repo settings write plane + pagination refactor
  • wire the gh task-sink on the api pod
  • wire the platform review verdict into the merge gate (+APPROVE on non-app PRs)
  • Issues tab, triage drawer, and its e2e story
  • grade the HUMAN-MERGE lane per PR
  • setup mode dispatches its authored first tasks
  • enforce the HUMAN-MERGE per-path/branch lane
  • cut a release for a dependency-only bump
  • self-serve seat checkout — teams can buy pro/solo seats
  • notifications home + PWA finish (settings page, onboarding reach-you, SW update prompt)
  • producers + VAPID + escalation deep links (push goes live)
  • multi-source task intake → TaskEnvelope
  • review.depth (inline|deep) config, deep refused until wired
  • fan-out doctrine directive for orchestrated runs
  • brand marks for the remaining BYOK providers
  • fan-out doctrine primitives — RAII verify-mutex + tool-set scoping
  • 👀 ack a human PR comment the moment its session is queued
  • coding-agent review allowlist — reviewable coding-agent identities
  • react 👀 on the comment that triggered a run
  • task-history lookback in boot/triage context
  • resume entities refused while billing-paused
  • resume stalled work when a BYOK key is fixed
  • capability routing — job-class → (tier, effort, fallback)
  • MCP rate-limit verb class + KB scope split
  • Complete platform gap closure — fleet retention, self-update, signals
  • auto-approve platform-staff at login — closed-beta bootstrap lever
  • wire credential-mode ingress end-to-end (seal → deliver → prepare)
  • route Sentry/Linear errors to a triage session (not blind-escalate)
  • lease-epoch fencing, stuck-task reaper, coalesce drain, SKIP LOCKED claims
  • wire the per-account fairness semaphore into agent.run
  • code-enforced merge gate — CI-green + review-pass before gh.prs.merge
  • reposition as an AI automation platform + fix the mega menu
  • leverage doctrine — agents build the guardrails that automate the next run
  • stream sessions/approvals topics — Home patches live
  • project entity number/title into account-wide /v1/sessions
  • account-level audit feed — Home Live-audit View-all target
  • project the PR title into /v1/approvals
  • control-plane redesign — full visual rebuild from the shadcn mock
  • robust dependency-bot CI re-wake (author lookup, not branch-prefix)
  • babysit driver covers non-fleet PRs via a synthetic watch task
  • mailto fallback on contact-form send failure
  • BYOVM gateway durable audit + box-token lifecycle
  • BYOVM credential gateway — transport half
  • session replay — POST /v1/sessions/:id/replay decisions diff
  • notifications inbox — /v1/notifications read + live SSE topic
  • dashboards widget-data resolver — platform readers behind the pager
  • outbound webhooks v1 surface — CRUD + deliveries log + test-send
  • notification preference matrix — resolved grid + one-cell set/reset
  • products nav column, mockup solution art, theme crossfade
  • audit power features — JSONL session export + per-event permalinks
  • file-based blog posts + first three published (no infra)
  • host-aware chrome for the admin.developerz.ai radar
  • CI-log presign transport + dashboard durations
  • wire the merged-PR → release-loop trigger
  • dependency-bot PRs are maintainer tasks, not bot noise
  • self-serve Add-a-box + revoke on the Fleet page
  • deep-linkable /login/email and /login/sso legs
  • credential gateway, in-cluster half — policy-granted Slack tool, server-side creds
  • connections manager — sealed /v1/secrets vault + credentials UI
  • Product nav mega-menu + solutions card grid
  • add Kimi (Moonshot) provider and glm-5.2 refresh
  • editorial redesign — component-refactor port, dark-first, island nav
  • report boot hygiene via presence BoxStats
  • hygiene core — config, scan, act (pure module)
  • OAuth connect entry point — Connect-with-X + landing flags
  • OAuth connect for integrations — the redirect half of slice 03
  • memory gardener — delete + consolidate
  • integration resource verb — REST parity for /v1/integrations
  • memory usage tracking — columns, bump seams, tests
  • ci: section + generated docs + CodeRabbit migration table
  • coderabbit ingest + activity + enqueue (slice 04b)
  • CodeRabbit schema parity + label/username gating
  • CI durations, refusal badges, log-prune lane
  • CI lane live — arbiter, runner-groups, fork safety, permission
  • CI size-label enforcement in dispatch (slice 01)
  • Register new audit kinds for CI/CodeRabbit integration
  • ingest committed repository policies
  • per-user BYOK provider cascade — personal-first + model override
  • user-repo Skill overrides —.maintainer/skills/*.md
  • org member management + Members-tab redesign
  • on-demand Skills library — curated per-language SWE guides
  • harden a VPS on onboarding — firewall + docker port-hole + exposed scan
  • all-core green gate, heap-safe typecheck, affected-only loop, AGENTS.md
  • pricing comparison + assurance cards, per-route OG cards, transparent favicons
  • capture ToS/consent at first login
  • seed the developerz-ai org IdP row — sso.infra.developerz.ai
  • repo-detail Audit tab — per-repo agent-sessions list, filterable + paginated
  • dedicated in-memory agent executor — shed agent.run from worker
  • account-level activity feed + pending-approvals list
  • unified role-demand arbiter — idle box picks coding vs CI
  • universal per-assignment role — fungible box picks executor by claim
  • mothership PR-babysit driver — webhook-driven PR→merge lifecycle (dark)
  • durable parent-less audit for approvals-plane actions
  • task↔PR link + PR-state projection sink
  • wire the approvals plane + issue/pr write verbs
  • cross-plane idle gate + per-box advisory claim guard (A2a)
  • relocate babysit decision core to domain, delete never-wired on-box loop
  • review memory as a text wiki with references, not pgvector
  • supersede prior in-flight review on a new push
  • review-thread engagement — handle comments + store as KB
  • sticky 'review under way → done' status comment
  • model-driven reviewer with a repo-aware system prompt
  • default junk-file ignore before review
  • kubeez imagery + how-it-works OSS/paid split
  • mobile slide-in drawer nav + responsive fixes
  • surface platform capabilities on home, fix stale copy
  • richer self-hosted inline-SVG icons
  • Link-header pagination + runner-group robustness (slice 07)
  • Policy doctrine enforcement (slice 04, HIGH)
  • billing resource tool — BYOK keys, usage, portal, cap, log sink
  • self-serve SSO admin — owners configure their org IdP
  • real /login — method chooser, org-SSO discovery, brand design
  • issue + pr + digest read resource tools
  • fleet UI product polish — live refresh, honest errors, stream retry
  • email routes — /v1 CRUD + default/override routing
  • infra prod debug/ops tool (bun run infra)
  • URL-based org scoping with per-request account context
  • BYO database URL log sink for extended CI/review log retention
  • weekly gardener — drift/update sweep for managed repos and boxes
  • concise per-runner system prompt
  • cross-org visibility for user-owned runners
  • ensure.mcp.json with codegraph on managed repos via bot PR
  • per-org SSO login links to existing user by verified email (link-or-JIT)
  • solo pricing ladder + OpenClaw comparison page
  • solo tier with graduated per-agent price ladder
  • load MCP servers from project.mcp.json
  • runner-ownership model — shared | private-to-org | private-to-user
  • multi-org seed — sebi ⇒ developerz-ai + tesote orgs
  • per-org unlimited-fleet entitlement (internal dogfood orgs)
  • per-org inbound SAML SSO — unified OIDC+SAML strategy, entitlement-gated
  • admin.developerz.ai radar UI — overview, orgs, users
  • admin.developerz.ai radar backend — reads + MCP writes
  • per-org inbound SSO — DB-resolved OIDC IdP, sealed secret, entitlement gate
  • verified-or-silent grounding gate — beat CodeRabbit on signal density
  • queued dispatch — capacity-aware fan-out sink, backpressure + queue visibility
  • hero subhead → "a better Devin" positioning
  • Login with Tesote — first-party OIDC leg + JIT provisioning
  • home/pricing rework + docs overhaul + QA (slice 11)
  • OSS fence + public stats + marketing (slice 10)
  • realtime streams + PWA + notifications (slice 09)
  • dashboard grammar + renderer + pager (slice 09)
  • CI jit-exec + log sink + e2e (slice 07 — Blacksmith competitor)
  • PR webhook → review task + runner handler + babysit + e2e (slice 06)
  • config-translation fixtures + finding-schema tests (slice 06)
  • KB wiki + gardener lint — slice 05
  • 3-layer system prompt + prompt-var KV (slice 05)
  • LLM pool + cross-repo DAG + idle-CI reuse + non-PR outcomes (slice 04)
  • smart setup + box specs/names +.mcp.json provisioning (slice 04)
  • PR babysit loop + auto-merge default flip (slice 04)
  • Idempotency middleware on all write verbs (slice 03)
  • REST list-query grammar + verb-parity + contract tests (slice 03)
  • weekly digest archive — read API, dashboard reading view, worker cron
  • verb/scope matrix script + drift guard (slice 03 final)
  • mark multi-org delivered in specs
  • GitHub App user login + role enforcement (slice 02)
  • identity schema — users, memberships, backfill migration (slice 02)
  • Stripe seat billing slice 01 — entitlements, proration, webhook idempotency
  • pricing tiers + entitlements (slice 01)
  • multi-provider LLM pool — cerebras/minimax/custom + per-task provider×model pick
  • close the dispatch loop — live direct sink + GET /v1/tasks + fleet queue UI
  • self-serve PAT lifecycle + wire template_* MCP verbs
  • add /feature end-to-end workflow command
  • onboarding wizard — spinners, done handoff, loading skeleton
  • adopt DD logo across marketing + dashboard
  • fonts + repos table + digest drawer, design polish
  • Comprehensive intake normalization tests
  • pluggable adapter + per-box env-profile + adapter tests
  • responsive layout + accessibility pass
  • Home / overview — real landing page
  • task state machine — CAS + SKIP-LOCKED claim
  • NATS + JetStream transport foundation for the fleet
  • BYOVM runner enroll + heartbeat plane
  • BYOVM coding toolset — code.read/write/edit/grep/glob/bash
  • CodeGraph mount — stdio MCP transport, allowlisted tools, structural triage
  • blog images via kubeez MCP with rotating OAuth pair
  • user-facing MCP front door — conversational → dispatch
  • threshold compaction fallback for huge CI logs
  • planner tier — raw input → TaskEnvelope(s) + schedule
  • dispatch router + Dispatcher port + sink selector
  • BYOK embeddings light up pgvector recall
  • surface billing-paused state in the Usage view
  • signed Stripe invoice webhooks → pause/resume
  • metered subscription attach + reported-to-Stripe line
  • Stripe usage reporter — meter-events drain
  • live-session view over SSE
  • BYOK provider out-of-credits → pause + email
  • add z.ai (Zhipu) BYOK provider (GLM, high limits)
  • audit timeline — outcome chips, reasoning, trust markers
  • style BYOK Keys view — status chips, provider monogram, modal a11y
  • global loading/error/empty states + repos list wiring
  • dark monochrome console shell + real repos/usage wiring
  • pause dispatch when an account is over its spend cap
  • per-account spend cap + alert thresholds
  • Usage + billing view — handled-unit rollup
  • wire AccountKeys — add/revoke BYOK key modals
  • SEO & assets — OG restyle, self-hosted fonts, JSON-LD
  • register es locale + i18n tests green
  • Nav / Footer / Layout shell + chrome tests
  • Drop Bootstrap, self-host fonts (Inter + JetBrains Mono)
  • i18n namespace, locale readiness, fast CI + Lighthouse budget
  • contact form → email — tests
  • blog generation pipeline — slice 07
  • posts table — schema, queries, migration, tests
  • SSR shell + locale routing — slice 01
  • UI Theme (SCSS) + Components — slice 02
  • usage metering — audit-derived billable-event ledger
  • make the onboarding funnel state-driven
  • dev session/login — authenticated /v1 client
  • BYOK capture endpoints — /v1/billing/keys
  • mount /v1 + bearer auth; wire onboarding + me
  • onboarding lane — provision tenant rows from install lifecycle
  • wire policy MCP servers into the agent session + secret store
  • idempotent webhook re-entry — reconcile side effects
  • remove the step-count leash; budget kill at the boundary
  • wire email + routing ports into the agent-run tool context
  • wire search.* to the DB — dedup, repo memory, contributor history
  • issue triage — scoped plan + confidence gate
  • semantic model tiers + price/context registry
  • route PR review threads by author tier + free praise resolve
  • pin PR CI to head SHA + split CI timeout from failure
  • thread bot-signal + entity context into the session prompt
  • dispatch entity -> loop (select tools + compose prompt by kind)
  • strip forbidden mutating tools per loop at assembly
  • wire agent-run consumer into startup
  • v1 REST surface — repos, issues, prs, me + middleware
  • BYOK envelope crypto + dashboard SPA + onboarding state machine
  • escalation engine + email notifications
  • memory writeback — embed + persist on session.completed
  • agent loop on Vercel AI SDK + agent.run consumer
  • audit writer + hash-chain integrity
  • agent.run payload + entity types in queue package
  • GitHub App client + ingest webhook verify/enqueue
  • policy schema + validator + JSON schema publish
  • MJML templates + SMTP transport via Stalwart
  • deployable shells for all 5 apps + Dockerfiles + CI/CD

Bug Fixes

  • request BYOK structured output via tool-calling
  • tenant-scoped acting resolve for Sentry/Linear intake
  • seat the /world progress bar clear of the nav pill
  • serve /art/<variant>/ stills so the light theme renders
  • attest repo-less fleet runs so the audit outbox stops wedging
  • one font family site-wide, and no em dashes in the copy
  • the approval row names the PR and its author
  • /world polish — em dashes, progress bar, footer font
  • destructive text contrast + dead audit links
  • a PAT names its human on every audit row, and two local-only verify failures
  • world:publish uses a separate R2_ADMIN token for PutBucketCors
  • brand text is unreadable on the dark theme
  • navigate before probing, or the viewport reads 980px
  • CTA band button is unreadable on the dark theme
  • gate the migration generator's baseline against the journal
  • skip link fails AA contrast in axe's blind spot
  • hide #world-scenes before mounting the scroll-world engine
  • give a template the endpoint its compatible backend needs
  • setup must 'codegraph init' a fresh checkout, not 'index' it
  • bound the expectation repair loop — stop offering repair after two rejections
  • fence the monorepo's own source with review.enabled false
  • name WHICH cause an unmet expectation has, per action
  • enforce the art immutability rule, and drop the duplicate video poster fetch
  • give issue-loop step 6 a fleet branch, and a catch-all for the next mode
  • stop waking a maintainer session on check transitions that carry no verdict
  • AgentBackend was missing openai-compatible, and its mirror guard was a hand-written copy
  • unstick the closing CTA band, paint its art, and add the enterprise visual layer
  • the unmerged-index gate ran before staging, refusing every conflict resolution
  • BYOK is 13 providers + any OpenAI-compatible endpoint, not three
  • make a DZ_UPDATE_PUBKEY disagreement loud — boot assertion in the api, box-boot warn in the runner
  • recognise the team AI gateway as a flat-rate subscription endpoint
  • bound fleet-event redeliveries so a permanent failure can't pin the lane
  • restore the e2e exclusion in the package test script
  • disclose when a deep review could not run
  • emit queue-standing frame alongside tasks topic
  • boot-time identity assertion — warn when box runs on a personal OAuth token
  • sweep-side abandon backstop + stop acknowledging bot quota notices
  • a PR closed without merging now retires its babysit state
  • fleet handoff mode + broadcast hardening
  • key the follow-up id on attempt — the retry loop has never retried
  • donate wizard modal width + donations/received section spacing
  • a bot comment no longer pins a PR one branch above merge
  • three faults that left every enrolled box stale, mute and burning tasks
  • hide GitHub-only members from Roster; dedup on every account
  • collapse developerz-ai roster by verified email + add service identity
  • approve Ivan operator user
  • blog cron advances through seed topics instead of rewriting one post
  • gh.prs.merge reads platform review verdict, not just external reviews
  • solo ladder levels off at $2000/AI dev, matching the published price
  • close the babysit review-absence hole + egress lane re-assert + test-mock leakage
  • correct canonicals, sitemap coverage and social meta; add drift guardrails
  • make blog-gen.test self-sufficient — stop inheriting another package's global SDK mock
  • page-walk the babysit observation reads — a page-2 signal no longer reads as permission
  • re-arm a session for a delivery that landed mid-run
  • destructive dashboard path becomes opt-in + three refusal fixes
  • re-drive a crash-orphaned agent.run after the stuck-session reap
  • a defect asking for a clearer message is a bug, not enhancement
  • suppress z.ai glm-5.2 reasoning on the bounded classifier
  • enforce escalation category vocabulary at the tool boundary
  • plan-DAG lifecycle batch — tenant-fenced task↔PR link, merged flip, stale-repo-row resolve, late-upstream back-fill
  • decode the repos-list last-activity timestamp to a real Date
  • login sync never demotes an existing membership role
  • a deduped force-escalate keeps the operator's new reason
  • revoke removes the box from the fleet roster
  • stop the sidebar clipping the org-switcher popover
  • surface the real failure reason + provider brand marks
  • action feedback everywhere + pagination for long lists
  • onboarding never leaves "Validate" when.maintainer.yml was already validated
  • reload the page on an org switch
  • five console UI bugs — invite, panels, rail, spacing
  • Merge-gate hardening + CI-wait ceiling (120 min)
  • promote operator to owner of its own org
  • verify + delete org BYOK keys, and complete onboarding
  • approve the operator user — closed-beta bootstrap unblock
  • agent.run durability + stuck-session reaper
  • never replay a pending ledger row as success
  • filter fleet dispatch to coding-capable runner roles
  • one session lease + a bounded SIGTERM drain
  • bump happy-dom 15→20 — repairs broken DOM sibling chains
  • seed the missing use:integration:slack scope + a parity guard
  • distinct bell-ring icon for the push toggle
  • pass env to spawns — bun 1.3.14 drops runtime process.env mutations
  • seed a valid audit hash-chain in repo-detail dev seed
  • provider-aware fallback ceiling for metered unregistered BYOK ids
  • route missing-key fallbacks through t.has()
  • flat-rate BYOK keys book $0 and never trip the session cap
  • only landed follow-ups may retire a human PR comment
  • waitlist CTAs, orchestrator-honest hero, light-theme logo
  • make expectation reconciliation resilient to split batches
  • steer a rejected check to re-check the same expectation, not split
  • suppress redundant classifier fallback after a substantive comment
  • re-check the same expectation instead of splitting
  • dedupe PR trigger replies
  • route PR conversation comments to PR loop
  • recover bounded classifier attempts
  • attach the weekly digest cron — deliver stored routine escalations
  • enforce the free-tier session cap — waived accounts get a hard monthly ceiling
  • Policy tab / project.inspect return the effective policy — tier gate applied to the display path
  • wire the triage boot memory to the live similar-issues search
  • apply the free-OSS auto-merge tier gate on the loop path
  • allow ns:name colon in RefName so integration refs parse
  • restore reconciled expectation aliases
  • repair GLM label arrays
  • require expectations before mutations
  • route GLM JSON through schema prompt
  • atomic org-member mutations — close the last-owner TOCTOU
  • make expectation IDs copy-safe and repairable
  • ground issue questions in repo files
  • retry empty structured OpenRouter responses
  • fail closed on inconsistent model output
  • repair remaining GLM tool shapes
  • replace phantom pause with honest defer
  • repair known GLM tool argument shapes
  • answer PR mentions without self-triggering
  • activate native review and credential-mode replies
  • preserve task branch identifiers
  • require task marker in coding PRs
  • bound structured classifier calls
  • persist fleet run audit
  • reconcile consequential custom tools
  • scope push and installation tool surfaces
  • reconcile digest queue writes
  • persist terminal audit before session projection
  • make issue-loop transitions deterministic
  • ground completed sessions and event order
  • harden OpenRouter structured classification
  • hard-stop ended sessions and dedupe greetings
  • respond to mention comments
  • ground-truth session.check — reject a phantom pass
  • persist terminal session state
  • durable audit on approvals no-op + failure branches
  • issue triage qualifies FIRST, then behaves per type
  • durably audit forced handoff/escalate failures
  • read arbiter coding demand over the box's claim scope
  • token.mint must exclude admin:* from the default scope set
  • babysit address-once for human comments + sweep ceiling
  • version escalate idempotency key by PR head sha
  • surface thrown HTTPExceptions as problem+json, not a masked 500
  • idempotent forced escalate — one open escalation per (issue, category)
  • point policy + runner empty-state CTAs at their real targets
  • balance the /pricing tier grid into 2 + 3
  • real loop-card images, styled cost calculator, closed-beta badge
  • maskable icon + waitlist error alert
  • Frontend correctness — SolidJS (slice 09)
  • real telemetry on failed/escalated (task 46)
  • Validate X-Dz-Account shape + uniform error contract
  • accept the uuid ids the list emits on issue/PR detail routes
  • require reconcile ledger for mutating tools (fail closed)
  • lighthouse workflow nits — never cancel live audits, red nightlies, re-audit labeled pushes
  • stop pruning GHCR by version count; disable buildx provenance
  • unify secret redaction across all provider key shapes
  • DX correctness — local dev loop (setup, dev-stack, new-package, editor config)
  • install CTAs link straight to the GitHub App page
  • finished wizard offers the GitHub App install link
  • repo-detail hardening — honest counts, pinned refetch, deflaked tests, axe every tab
  • reaper revives a DB-offline runner whose presence is live (offline->online reconcile)
  • scout declines re-authoring a scout-authored task (breaks re-scout loop)
  • narrow it.each llm tuples with as const
  • transparent logo — drop baked-in white background box
  • honest overview — drop unreachable last-release stat
  • zero-config dev bootstrap — same-origin API base
  • point vite dev proxy at API's actual port 3001
  • COPY assets/ into marketing image — build:icons needs the repo-root logo
  • real logo for OG/favicon + restyle contact form
  • build the real SolidJS SPA, not a placeholder
  • retry GHCR prune once — delete API 500s intermittently
  • run api image from source to fix ReadOnlyFileSystem boot crash
  • exact per-(account,window) ordinal for spend-cap crossing
  • hard spend-cap ceiling via atomic in-flight reservation
  • drop the reversed repo-count pricing gate (usage billing)
    • per-app ports so the local stack actually starts
  • restore broken layout CSS, fingerprint assets, add logo + brand illustrations
  • accept raw-UUID BYOK key ids on revoke/verify
  • run worker + ingest from source (bun build bundle broke them)
  • marketing build actually runs — fonts + correct invocation
  • build marketing with real pipeline, run SSR from source
  • reliable test harness — no SSR false-red, no dist phantoms
  • redirect / to /repos + catch-all 404
  • harden onboarding lane — defensive account kind + durable dedupe
  • concise event summary in boot prompt, not raw webhook JSON
  • don't RepoIdSchema.parse a bare-uuid repo id in memory write-back
  • wire a BYOK-backed Classifier so classify.* tools resolve
  • wire a production SessionSink so session.* tools resolve
  • rewrite dotted tool names at the OpenAI/Gemini wire

Performance

  • responsive AVIF art ladder, a looping sci-fi hero video, and foreground parallax
  • fix three confirmed memory leaks + cut the per-edit typecheck tax
  • shard the suite across cores and stop paying for DOM diffs
  • assigner concurrency + event-sink partitioning
  • quick wins — presence batch, consumer create, kick-primary + measurement
  • Playwright browser cache, parallelize build, gate release image builds
  • batch four N+1 query sites in the worker
  • batch playbook loading into one GraphQL request