escapeboy/agent-fleet-o

What's changed

• chore: release v1.11.0 (1ea32ba)
• fix(auth): register Passport scope middleware aliases in bootstrap/app.php (a4b5d74)
• fix(security): address remaining security audit findings (c9011d2)
• fix(security): address findings from security review (4415ee0)
• fix(tests): resolve pre-existing rate-limiting test failures (791ef7c)
• feat(workflow): add 6 new node types, Langfuse LLMOps export, and message annotations (ebe30cc)
• fix(workflow): sanitize imported JSON nodes/edges — validate type and team-owned entity UUIDs (14c8a55)
• fix(crew): quality_gate convergence allows synthesis to proceed — QA score check is post-synthesis (3301d22)
• feat(workflow,crew): SLANG-inspired improvements — convergence, budget cap, schema editor, graph overlay (5c748e8)
• fix(bridge): clear stale endpoint_url when relay re-registers WebSocket connection (d57eb5b)
• feat(bridge): UI for HTTP tunnel connect + ping in team settings (46fc753)
• feat(bridge): HTTP tunnel mode — connect via endpoint URL instead of relay (837ca0f)
• feat: notify team owner when integration requires re-authorization (5a43211)
• feat: add browser_relay built-in tool kind (b6abfaa)
• fix: extend bridge relay timeout to 1200s for long-running agent tasks (5f6ff86)
• fix(ai-gateway): fallback to google/gemini-2.5-flash (no Anthropic keys) (618c9e5)
• feat(ai-gateway): bridge-first default with cloud fallback (a6a97fb)
• fix(experiments): use correct column name 'stage' in CostBreakdownPanel (27114ad)
• fix(memory): use havingRaw for PostgreSQL-compatible COUNT filtering (bd99200)
• fix: correct batch catch signature and null credentials in tool creation (cd51f9c)
• fix(notifications): replace WebPushMessage::create() with constructor (d68f598)
• fix(integrations): apply 6 OAuth2 security hardening fixes (8f1ec87)
• feat(integrations): migrate 18 drivers from API keys to OAuth2 (69d8090)
• fix(linkedin): bypass userinfo validation for w_member_social scope (50e6dd0)
• fix(linkedin): use only w_member_social scope (e58afed)
• fix(linkedin): remove unapproved OAuth scopes to unblock connection (f1b8ed5)
• fix: add missing agent_id column to experiments table (c799012)
• fix(twitter): use OAuth 1.0a for /users/me — bearer token (App-Only) is forbidden (c7eb352)
• fix(experiment): add agent_id to fillable array (95e67a0)
• fix(project): propagate lead_agent_id from project to experiment on run (f6faff2)
• fix(twitter): use structural validation only — live API check causes false negatives (097dc30)
• fix(twitter): fix credential validation to use search endpoint instead of /users/me (2568888)
• feat(integration): add Twitter/X integration driver (eab0552)
• chore: add glama.ai score badge to README (a77b8e1)
• feat(mcp-gateway): add Node.js stdio proxy for glama.ai inspection (e21eeac)
• chore: update built service worker (b529434)
• feat(integration): add LinkedIn OAuth2 integration driver (814884a)
• fix(pwa): use empty array fallback for WB_MANIFEST (3c2611d)
• fix(pwa): add skipWaiting to force immediate SW activation (b2e0202)
• fix(pwa): bump SW version and clear page cache on activate (6f88878)
• fix(pwa): guard view transitions against Livewire 4.5+ navigate event (baaacd2)
• fix(security): harden category filter and loop detection (64ef0f5)
• feat(memory): add per-agent capacity cap to pruning (2e95ad4)
• feat(memory): add category classification to memories (b8690da)
• feat(agent): add semantic tool call repetition detection (ff33336)
• feat(analysis): add domain import boundary PHPStan rule (c73e394)
• fix(security): address QA review findings — harden sandbox, OCSF coverage, N+1, collision log (49f0cc5)
• feat(security): agent process isolation sandbox (enterprise) (a024795)
• feat(security): data classification routing + marketplace profiles + workflow policy export (4d4e2f8)
• feat(security): add network egress policy for tools + OCSF audit schema (84e0cf9)
• fix(pwa): guard livewire:navigate visit() — add play icon for Runs sidebar (2f1db25)
• feat(security): inject credential env vars into bash tools for all agent types (1385bfb)
• feat(credential): add Reddit browser session token auto-refresh (44acb02)
• chore: commit pending changes before branch sync (51eca3b)
• fix(memory): make agent_id nullable, add content_hash in MemoryAddTool (6e2b509)
• fix(bridge): skip progress keepalive chunks in response streaming (ab565b3)
• fix(security): address QA/security review findings in BroodMind features (703ce32)
• feat(outbound): register WhatsApp connector in OutboundConnectorManager (93f754b)
• feat(assistant): BroodMind-inspired 3-second send grace window (1845cba)
• feat(crew): BroodMind worker permission templates for CrewMember (65cb82d)
• feat(agent): BroodMind-inspired heartbeat scheduling (808005e)
• feat(memory): extract failure lessons from failed experiments (a8cd655)
• feat(memory): add tier system (proposed/canonical/facts/decisions/failures) (1d5eee6)
• feat(agent): tool loop circuit breakers + context health monitoring (8d70366)
• fix(project): guard against invalid projectId in ExecuteProjectRunJob and sync stale project runs (1a871d1)
• feat(bridge): inject agent credentials as env vars into bridge payload (2d4fffd)
• fix(bridge): increase RELAY_TIMEOUT from 90s to 600s (19d8957)
• feat: add Resolved Provider indicator to Agent and Skill detail pages (8644d7e)
• fix(reverb): increase ping_interval to 120s to prevent stale connection pruning (dc66c97)
• fix(reverb): increase activity_timeout to 300s to prevent idle connection drops (00c8802)
• fix(reverb): reduce ping interval to 30s for Cloudflare compatibility (faf42f9)
• fix(bridge): make HandleBridgeRelayResponse synchronous and fix chunk format (bc0fe58)
• fix(bridge): handle Pusher double-encoded data + fix $content scope in Sentry closure (38a7c87)
• fix(bridge): separate internal vs public Reverb host for broadcasting (8b01815)
• feat(bridge): broadcast agent requests via Reverb for direct bridge connections (77c98ea)
• fix(bridge): resolve team from token abilities instead of current_team_id (3e815a1)
• fix: resolve Blade compile errors in email and approvals doc pages (4acc548)
• fix: add missing pages to DocsController whitelist (a6d5dca)
• docs: expand documentation — add 14 new doc pages and update existing ones (1506dc8)
• fix: add missing system.deploy label in notification preferences (c1cabd0)
• fix: bypass proc_open restriction in entrypoint and Makefile (4d35284)
• chore: regenerate PHPStan baseline (2567 errors) (13e841e)
• feat: outbound connector manager, notification channel, pluggable delivery (0549889)
• chore: regenerate PHPStan baseline (2567 errors) (f768d14)
• chore: fix unused import in api_v1.php (Pint) (a714988)
• feat: outbound connector manager, notification channel, pluggable delivery (a2e2852)
• fix: remove unused import in api_v1.php (Pint) (300db93)

Upgrade

git fetch --tags origin
git checkout tags/v1.11.0
composer install --no-dev --optimize-autoloader
php artisan migrate --force
php artisan optimize

Docker users: Pull the latest image and restart your containers.