变更记录一览。

Features

• the public stats route serves agent-authored numbers for repos whose owner consents

Features

• an MCP scope refusal carries a machine-readable verdict

Bug Fixes

• who can mint a token is said once, from the role ceiling

Bug Fixes

• a red task's work is saved on its own dz/ branch, no dz/wip namespace
• every remaining account-audit row carries its own kind

Features

• switch key mid-run on outage, 429 and slow keys; reuse finished review groups
• prompt caching that fits every provider; cached tokens priced at their real rate
• a weekly estimate and the recent list on the Notifications page
• every agent prompt, ours and the product's, is a confident elite-engineer pilot that makes the call itself

Bug Fixes

• the platform-staff gate matches the org by GitHub account id, not login
• admin and control-plane audit rows carry their own kind; the generic fallback is gone
• rename stale $gutter to $explainer-gutter in pipeline explainer

Features

• a re-asked PR says why it is back

Bug Fixes

• a pushed run never completes without its PR
• every by-id query door fenced or declared, webhook save/delete race closed

Features

• delivery timing and a test email on the Notifications page

Bug Fixes

• a fix round may not empty its PR or fully undo a dependency bump; commit-scope guard core

Features

• an unsubscribe link speaks for one person, and the weekly summary is a setting

Bug Fixes

• converged PRs survive their own base update, rearm retires stale splits, dependency-bot PRs reviewed, dead onboarding passes re-minted

Bug Fixes

• every admin write rides the operator credential, plus the member role control

Features

• the Notifications page is tiers, presets and send-to, and the old per-cell grid is gone
• a person can read a weekly email estimate and a list of what was sent and why
• rewrite zh og card copy and regenerate committed PNGs

Bug Fixes

• bot PRs stop stalling green on recheck holds, stuck threads and unreviewed dependency bumps
• deep sweep slice 01 cut C and slice 02, plus CI on Ubicloud with RustFS and Dragonfly
• a pure @developerz-ai review command is not babysit feedback
• deep sweep slices 13 and 14, schema guards, one stored-policy reader, fail-closed Stripe seats
• withhold out-of-scope created files from run commits; conflict lane may edit the PR's own files
• deep sweep slices 07 and 12, honest review posting, disclosed replies, babysit rungs that tell the truth
• deep sweep slices 06 and 08, bounced mail suppressed, errored gardener targets rest, liveness that survives a roll
• deep sweep slices 09 and 11, runner fleet and harness, NKey seeds redacted, no work lost on a refused push
• deep sweep slices 04, 10 and 18, the last open rows: served blog HTML re-sanitised, stale checks graded once

Features

• withdraw a cleared base-red episode's pending fix ask
• redact keys and personal details in the model-written text the bot posts to issues, PRs and reviews
• pause a repo's bot coding after two of its changes are reverted within 24 hours
• non-urgent email waits for an hourly bundle, an ask already told is not mailed twice, and a crashed send is taken over once
• the release lane opens a bump PR that also rolls the changelog
• a person's email cadence is stored, and one request saves a preset, a cadence and cells atomically
• a repo with release.channels [] gets the bump PR and no platform-cut tag

Bug Fixes

• in-cluster sessions honour fleet reservations and wake parked work on release
• unchanged holds, parks and flags are recorded once, not on every pass
• a webhook payload holding a NUL byte is stored instead of refused on every redelivery
• a PR merged before its held review ran says so on the review check
• the gate failure excerpt drops the actual failure when it follows a ==== separator
• a repo with no semver tag gets no release session per merge, one blocker instead
• the gate excerpt keeps the failure after a closing ==== and minitest's red summary
• the operator-token door refuses a session that signed in more than an hour ago
• a session whose only escalation reconciled to an old one ends failed, not escalated
• a refused operator-token step-up writes one audit row
• an owner toggle-off retires the bot's own onboarding PR, and every disable names its writer
• the claim order leads with admission rank, so a reserved key unit reaches the task it waits for
• eight templates keep their blocks inside table cells, and a guard covers every template
• each key learns the largest triage batch its judge answers before the deadline
• waiting work applies the claim's own gates, so a gated row stops reserving a key unit
• waiting work applies the claim's gates with a once-per-call area arm, below the JIT threshold
• a writer the starved-writer arm holds back no longer reserves a key unit
• operator overrides and member role changes commit write + audit atomically
• the post-deploy grader refuses a non-shell Live test fence instead of failing the deploy
• OPENROUTER_REFERENCE rows drifted from live prices
• a bot PR finishes itself in a repo humans share
• the box gate is scoped to the diff, plus a db/api/worker correctness sweep
• deep sweep slice 01 cut A, faults that went silent now speak

Performance

• developerz's own Postgres pool runs with jit off
• the coding loop stops paying for work that does not prevent rework, and boxes maintain themselves
• admission reads less, triage stops starving behind its own output, and an ask's cause is stored

Bug Fixes

• a triage batch that fails on one key re-checks at once when another usable key remains
• a gate base-red whose check names no failing test still files a fix ask

Bug Fixes

• in-cluster sessions and triage bind to the lane's selected key

Features

• notification bodies open with a plain sentence, the model's reason under Details

Features

• a per-device sound for new notifications, with a test button

Bug Fixes

• fix-wave editors write the file the fix lives in; title-only failures are routed
• a box-credential pool cooldown refuses only claims that would run on the box credentials
• the team gate grades the index the commit takes
• admin grants and billing polish
• the babysit pre-land gate grades the index the land commits
• a route pin via catalogue tag without an envelope pin stamps route
• the native post-edit check grades the index the commit takes
• es FAQ answer — "triages" was "tría", replaced with proper Spanish
• classifier and reasoning-probe record the ceiling re-ask
• two partials overwrote the shared $gutter token
• a survey correction continues the reading instead of re-surveying
• an Agents-page selection bounds its lane's fleet claims, and a change applies at once

Features

• in-cluster sessions pass key capacity admission before billed work

Features

• an AI-first repo with no bot merge for 48 hours while pr work waits pages its account once

Bug Fixes

• admin Orgs, Grants and Run pages composed from house primitives
• a redelivered job closes the dead attempt's open session before it runs

Features

• an admin page per user, and staff role changes that keep the last owner

Features

• a review run's events record the stream grant it ran under

Bug Fixes

• the delayed takeover recheck reads the incumbent's quota notice from issue comments

Bug Fixes

• fix wave resolves gate-named files nobody declared; gate tail keeps the report rows

Bug Fixes

• honor admitted review stream width across shared generation

Performance

• overlap immutable review reads safely

Bug Fixes

• retain invocation usage through shared cancellation

Features

• a repo can opt in to deleting a declined pull request's branch

Bug Fixes

• renew review liveness from fenced stream content

Bug Fixes

• stream structured inference with owned lifetimes