Proliferate

Proliferate v0.3.47

Daily release train for July 25, 2026.

Release Metadata

| Field | Value |
| --- | --- |
| Version | proliferate-v0.3.47 |
| Train | release-2026-07-25 |
| Base | cd00510 |
| Head | 40cf10a |
| Compare | cd00510...40cf10a |
| Surfaces | server, workers, litellm, e2b, web, mobile, desktop, runtime |
| Workflow | Actions run |

Highlights

• #1227 feat(anyharness): workflow session mutation admission (2b) by @pablonyx (area:anyharness, area:sdk, area:docs, area:release)
• #1246 feat(anyharness): isolated workflow workspace placement (slice 3) by @pablonyx (area:anyharness, area:sdk, area:docs)
• #1248 feat(desktop): dark mono DMG install window by @pablonyx (area:desktop)
• #1249 feat(workspaces): typed missing-worktree state with persistent composer panel by @pablonyx (area:anyharness, area:sdk, area:product)
• #1251 feat(composer): reorder chat-input controls, polish reasoning chip, unify toasts by @pablonyx (area:product)
• #1256 feat(composer): unify status card, environment resources, and popovers by @pablonyx (area:product)

Features

• #1227 feat(anyharness): workflow session mutation admission (2b) by @pablonyx (area:anyharness, area:sdk, area:docs, area:release)
• #1246 feat(anyharness): isolated workflow workspace placement (slice 3) by @pablonyx (area:anyharness, area:sdk, area:docs)
• #1248 feat(desktop): dark mono DMG install window by @pablonyx (area:desktop)
• #1249 feat(workspaces): typed missing-worktree state with persistent composer panel by @pablonyx (area:anyharness, area:sdk, area:product)
• #1251 feat(composer): reorder chat-input controls, polish reasoning chip, unify toasts by @pablonyx (area:product)
• #1256 feat(composer): unify status card, environment resources, and popovers by @pablonyx (area:product)
• #1257 feat(server): independent GitHub repository access and managed-Cloud capabilities (v2) by @pablonyx (area:sdk, area:server, area:cloud)
• #1276 feat(product): ordered repository readiness + truthful availability actions (PR 2) by @pablonyx (area:product)
• #1277 feat(cloud): durable workspace materialization ledger + typed AnyHarness git-status preflight (PR 4) by @pablonyx (area:sdk, area:server, area:cloud, area:product)
• #1278 feat(anyharness): local repository roots and exact-ref workspace materialization (PR 3) by @pablonyx (area:anyharness, area:sdk, area:docs)
• #1279 feat(self-host): serve Web from the server image by @pablonyx (area:server, area:docs, area:website, area:release)
• #1281 feat(mobile): cloud repository access parity (PR 7) by @pablonyx (area:product)
• #1283 feat(desktop): repository clone and explicit workspace linking (PR 5) by @pablonyx (area:sdk, area:server, area:cloud, area:product)
• #1284 feat(product): workspace git reconciliation and recovery (PR 6) by @pablonyx (area:product)
• #1294 feat(workflows): add managed cloud execution by @pablonyx (area:anyharness, area:sdk, area:server, area:cloud, area:docs, area:release, area:product)
• #1303 feat(workflows): add managed Cloud product experience by @pablonyx (area:sdk, area:docs, area:product)
• #1327 feat(agents): show harness update download progress by @pablonyx (area:desktop, area:anyharness, area:sdk, area:docs, area:product)
• #1336 feat(agents): use catalog-driven unattended session defaults by @pablonyx (area:anyharness, area:sdk, area:server, area:cloud, area:docs, area:product)
• #1354 feat(integrations): add durable external-action approvals by @pablonyx (area:anyharness, area:sdk, area:server, area:cloud, area:docs, area:product)
• #1384 feat(cloud): reap orphaned provider sandboxes by @pablonyx (area:server, area:cloud, area:docs, area:release)
• #1389 feat(workspaces): restore missing worktrees safely by @pablonyx (area:desktop, area:anyharness, area:sdk, area:docs, area:product)
• #1398 feat(chat): unify rich composer surfaces by @pablonyx (area:docs, area:product)
• #1423 feat(chat): polish tool results and rich paste by @pablonyx (area:docs, area:product)
• #1426 feat(product): streamline workspace pane chrome by @pablonyx (area:product)
• #1427 feat(product): establish typography and layout foundation by @pablonyx (area:desktop, area:docs, area:product)
• #1428 feat(product): polish Markdown presentation by @pablonyx (area:product)
• #1429 feat(product): make composer mode changes immediate by @pablonyx (area:sdk, area:product)
• #1430 feat(product): improve file browser and path opening by @pablonyx (area:product)
• #1431 feat(product): add integrated crash recovery by @pablonyx (area:desktop, area:docs, area:product)
• #1433 feat(settings): refresh agent configuration hierarchy by @pablonyx (area:sdk, area:cloud, area:product)
• #1434 feat(product): preview composer and transcript attachments by @pablonyx (area:docs, area:product)
• #1435 feat(product): refine sidebar navigation and footer by @pablonyx (area:docs, area:product)
• #1444 feat(product): combine sidebar usage rings by @pablonyx (area:docs, area:product)
• #1448 feat(appearance): scale Desktop and Web UI proportionally by @pablonyx (area:desktop, area:docs, area:release, area:product)

Fixes

• #1230 fix(settings): show truthful billing and staged GitHub setup by @pablonyx (area:docs, area:product)
• #1250 fix(chat): clickable read rows, persistent thinking label, tighter live-tail gap by @pablonyx (area:product)
• #1262 fix(cloud): pin the runtime home in the E2B template agent bake by @pablonyx (area:cloud)
• #1263 fix(cloud): warn when the worker sidecar is skipped for a missing base URL by @pablonyx (area:server)
• #1264 fix(cloud): destroy provider sandboxes on destroy + reap orphaned E2B sandboxes by @pablonyx (area:server)
• #1266 test(release): stabilize and prove the managed-cloud browser turn by @pablonyx (area:release)
• #1268 fix(anyharness): normalize problem detail errors by @pablonyx (area:anyharness, area:sdk)
• #1269 fix(product): settle replayed and queued chat work by @pablonyx (area:product)
• #1270 fix(product): filter expected query control states by @pablonyx (area:docs, area:product)
• #1271 fix(server): schedule secret materialization once by @pablonyx (area:server)
• #1273 fix(server): persist GitHub App reauthorization by @pablonyx (area:server)
• #1274 fix(product): bound telemetry payload scrubbing by @pablonyx (area:desktop, area:docs, area:website, area:product)
• #1275 fix(server): add Slack MCP OAuth scopes by @pablonyx (area:server)
• #1287 fix(desktop): launch dev cloud worker directly by @pablonyx (area:desktop)
• #1289 fix(ci): stamp runtime release source SHA by @pablonyx (area:release)
• #1290 fix(product): keep repository hosts off login shell by @pablonyx (area:docs, area:product)
• #1291 fix(ci): forward release SHA into cross builds by @pablonyx (area:release)
• #1296 fix(frontend): remount lifecycle root during Fast Refresh by @pablonyx (area:desktop, area:product)
• #1299 fix(server): enforce GitHub App discovery gate by @pablonyx (area:server, area:cloud, area:product)
• #1301 fix(server): bucket usage timeseries in UTC by @pablonyx (area:server, area:release)
• #1302 fix(product): preserve repository readiness hook order by @pablonyx (area:desktop, area:product)
• #1305 fix(server): classify transient GitHub outages by @pablonyx (area:server, area:docs)
• #1307 fix(product): classify local Git prerequisite states by @pablonyx (area:anyharness, area:docs, area:product)
• #1308 fix(server): handle resumable SSE peer closes by @pablonyx (area:server)
• #1309 fix(server): release gateway transaction before proxying by @pablonyx (area:server, area:docs)
• #1310 fix(web): gate local agents and expected cancellation telemetry by @pablonyx (area:website, area:product)
• #1311 fix(desktop): recover orphaned worker credentials by @pablonyx (area:desktop, area:anyharness, area:sdk, area:server, area:docs, area:release, area:product)
• #1313 fix(anyharness): keep agent stderr out of Sentry by @pablonyx (area:anyharness, area:sdk, area:docs, area:product)
• #1317 fix(product): redact support report diagnostics by @pablonyx (area:desktop, area:docs, area:product)
• #1319 fix(server): allow Web environment GitHub returns by @pablonyx (area:server)
• #1320 fix(product): separate desktop transport failures by @pablonyx (area:desktop, area:cloud, area:product)
• #1321 fix(product): classify expected auth control states by @pablonyx (area:desktop, area:docs, area:website, area:product)
• #1322 fix(deploy): enforce hosted Redis deployment contract by @pablonyx (area:server, area:docs, area:release)
• #1326 fix(product-client): recover ready workspace chats by @pablonyx (area:product)
• #1329 fix(product-client): classify missing Cowork threads as query state by @pablonyx (area:docs, area:product)
• #1335 fix(integrations): enforce Slack OAuth scope ceiling by @pablonyx (area:server, area:docs)
• #1337 fix(product-client): prevent replaced sessions from resurfacing by @pablonyx (area:product)
• #1341 fix(integrations): fail closed on Slack writes by @pablonyx (area:server, area:docs)
• #1347 fix(cloud): recover missing managed sandboxes by @pablonyx (area:server, area:cloud, area:docs)
• #1352 fix(transcript): surface native subagent activity by @pablonyx (area:anyharness, area:sdk, area:docs, area:product)
• #1353 fix(goals): fence UI cancellation lifecycle by @pablonyx (area:docs, area:product)
• #1359 fix(server): commit first-run claim before responding by @pablonyx (area:server)
• #1361 fix(auth): map Google token rejections by @pablonyx (area:server, area:docs)
• #1362 fix(server): commit invitation writes before responding by @pablonyx (area:server, area:docs)
• #1363 fix(auth): map rejected GitHub profile callbacks by @pablonyx (area:server, area:docs)
• #1365 fix(desktop): explain unavailable local folder picker by @pablonyx (area:desktop, area:docs, area:product)
• #1366 fix(cloud): bootstrap repo-less sandboxes without GitHub App by @pablonyx (area:server, area:cloud, area:docs)
• #1367 fix(anyharness): reject unapplied session modes by @pablonyx (area:anyharness)
• #1382 fix(community): replace expiring Discord invite by @pablonyx (area:desktop, area:docs, area:product)
• #1385 fix(sessions): resume interrupted empty-session creation by @pablonyx (area:anyharness, area:sdk, area:docs, area:product)
• #1390 fix(product-client): suggest a valid api-key env var for opencode by @pablonyx (area:desktop, area:product)
• #1392 fix(cloud): commit workspace creation before response by @pablonyx (area:server, area:cloud, area:docs)
• #1395 fix(product-client): honor cloud-only default branches by @pablonyx (area:product)
• #1400 fix(anyharness): materialize selected Codex API key by @pablonyx (area:anyharness)
• #1401 fix(server): commit agent key creation before response by @pablonyx (area:server)
• #1414 fix(sessions): adopt recovered runtime session ids by @pablonyx (area:docs, area:product)
• #1416 perf(chat): smooth assistant streaming and composer input by @pablonyx (area:docs, area:product)
• #1418 fix(anyharness): own handled model-gate incidents by @pablonyx (area:anyharness, area:sdk, area:server, area:cloud, area:docs, area:product)
• #1432 fix(product): preserve visible workspace sessions by @pablonyx (area:docs, area:product)
• #1440 fix(litellm): pin upstream image to v1.93.0 by @pablonyx (area:server, area:docs, area:release)
• #1445 fix(product): scale right panel tab chrome by @pablonyx (area:desktop, area:product)
• #1454 fix(ui): align workspace interaction chrome by @pablonyx (area:desktop, area:product)
• #1456 fix(desktop): polish session feedback states by @pablonyx (area:desktop, area:product)
• #1458 fix(release): resolve local tier 3 false reds by @pablonyx (area:release, area:product)
• #1459 fix(release): bind local qualification selectors by @pablonyx (area:docs, area:release)
• #1462 fix(selfhost): unblock CloudFormation public health by @pablonyx (area:server, area:docs, area:release)
• #1463 fix(release): inspect the running CFN image digest by @pablonyx (area:release)

Performance

• #1247 fix(product-client): keep audio + xterm CSS off the eager login shell (phase-6 budget) by @pablonyx (area:docs, area:release, area:product)
• #1349 perf(transcript): batch high-volume stream reduction by @pablonyx (area:sdk, area:product)
• #1425 fix(web): lazy-load authenticated chat styles by @pablonyx (area:product)

Docs / Website

• #1204 docs(triage): production issue triage runbook + shared agent skill (F2) by @pablonyx (area:docs)
• #1243 docs(wdu): resolve committed conflict markers in unification READMEs by @pablonyx (area:docs)
• #1253 docs(support): quick tracker-issue → S3 evidence access path by @pablonyx (area:docs)
• #1254 docs(observability): how to instrument a new feature's anomalies by @pablonyx (area:docs)
• #1255 docs(specs): promote deployment-capabilities target contract (frozen PR 1) by @pablonyx (area:docs)
• #1325 docs(local): document native services and WSL2 setup by @pablonyx (area:docs)
• #1478 docs(release): update qualification enforcement status by @pablonyx (area:docs, area:release)

Internal / Release

• #1141 chore(server): remove orphaned faux-workspace seed scripts and unused passlib dependency by @Rahul-Ganesan (area:server)
• #1229 refactor(web): replace legacy Web with the shared ProductClient by @pablonyx (area:docs, area:website, area:product)
• #1238 fix(dev): build product-client in make shared-build by @pablonyx (area:desktop)
• #1240 chore(deps): update npm minor and patch dependencies by @dependabot[bot] (area:desktop, area:anyharness, area:sdk, area:server, area:cloud, area:website, area:release, area:product)
• #1241 fix(supervisor): activation logging + skip doomed post-rollback re-gate by @pablonyx (area:anyharness)
• #1242 test(intent): fix cold-start race in workspace-entry sidebar helper by @pablonyx (area:product)
• #1244 feat(cloud): durable background runtime foundation (slice 4) by @pablonyx (area:server, area:cloud, area:docs, area:release)
• #1258 chore(ci): catch max-lines allowlist up to current main by @pablonyx (area:product)
• #1260 fix(ci): drop stale frontend-structure allowlist entry by @pablonyx (area:release)
• #1272 test(release): prove heartbeat-driven managed runtime update (T4-RUNTIME-1) by @pablonyx (area:release)
• #1285 chore(deps): bump the python-minor-and-patch group across 1 directory with 8 updates by @dependabot[bot] (area:server)
• #1286 chore(deps): bump the cargo-minor-and-patch group across 1 directory with 7 updates by @dependabot[bot] (area:release)
• #1288 chore(deps): bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] (area:release)
• #1295 fix(workflows): enforce managed runtime transaction boundaries by @pablonyx (area:server, area:cloud, area:docs)
• #1298 fix(server): restore release suite contracts by @pablonyx (area:server, area:release)
• #1300 test(server): share GitHub App integration setup by @pablonyx (area:server)
• #1306 test(release): retained-release receipts for Tier 4 N-1 artifact identity by @pablonyx (area:docs)
• #1312 test(release): complete runnable self-hosted qualification (baseline + SH-GATEWAY + SH-CFN-WRAPPER) by @pablonyx (area:release)
• #1323 chore(agents): update managed coding-agent harnesses by @pablonyx (area:anyharness, area:server, area:docs, area:release)
• #1334 fix(web): classify expected lifecycle cancellations by @pablonyx (area:sdk, area:website, area:product)
• #1340 fix(release): close failed billing boot fixture by @pablonyx (area:release)
• #1357 fix(release): harden INT audit probe by @pablonyx (area:docs, area:release)
• #1358 fix(release): repair managed-cloud Route53 cleanup by @pablonyx (area:release)
• #1360 fix(release): configure local worker API base URL by @pablonyx (area:release)
• #1364 test(intent): make T2-SH-6 fixture run-scoped by @pablonyx (area:docs, area:release)
• #1369 test(release): verify workspace file secret materialization by @pablonyx (area:cloud, area:release)
• #1371 test(release): re-land local Tier-3 collector repairs missing from main by @pablonyx (area:release)
• #1372 test(release): resolve the newest local session, not the stalest by @pablonyx (area:release)
• #1376 test(release): claim first-run setup once per local world by @pablonyx (area:release)
• #1377 test(release): snapshot pre-send sessions before the route-change new chat by @pablonyx (area:release)
• #1378 test(release): select gateway route per harness in LOCAL-4 browser world by @pablonyx (area:release)
• #1379 fix(cloud): trace workspace provisioning phases by @pablonyx (area:server, area:cloud)
• #1380 ci(agent-catalog): protect scheduled Catalog Probe by @pablonyx (area:anyharness, area:docs, area:release)
• #1386 test(server): align gateway tests with bound sessions by @pablonyx (area:server, area:cloud)
• #1387 test(release): evict the claimed-owner cache when a local world closes by @pablonyx (area:release)
• #1388 test(release): wait for the Project picker to settle after harness-ready reload by @pablonyx (area:release)
• #1391 test(release): type gateway-unsupported and no-eligible-model outcomes consistently by @pablonyx (area:release)
• #1397 test(release): return LOCAL-4 batch to Home between cells by @pablonyx (area:release)
• #1407 fix(release): isolate manual qualification worlds by @pablonyx (area:release)
• #1417 refactor(chat): satisfy frontend structure rules by @pablonyx (area:product)
• #1424 fix(frontend): satisfy tool UI structure checks by @pablonyx (area:product)
• #1439 test(release): resolve canonical Haiku composer alias by @pablonyx (area:release)
• #1446 test(release): diagnose CFN bootstrap through authorized SSM calls by @pablonyx (area:release)
• #1449 fix(release): preserve CFN bootstrap timeout truth by @pablonyx (area:server, area:docs, area:release)
• #1450 fix(release): persist bootstrap timeout progress by @pablonyx (area:server, area:docs, area:release)
• #1452 fix(release): repair local Tier 3 live controls by @pablonyx (area:release, area:product)
• #1453 test(deploy): await killed bootstrap process reaping by @pablonyx (area:server)
• #1455 fix(release): retain self-host CFN cleanup proof by @pablonyx (area:server, area:docs, area:release)
• #1457 fix(release): repair Local Tier 3 functional qualification by @pablonyx (area:anyharness, area:release)
• #1460 fix(release): prove Grok model config switching by @pablonyx (area:release)
• #1461 fix(release): fail early on missing S3 cleanup authority by @pablonyx (area:docs, area:release)
• #1464 fix(release): isolate sequential self-host world storage by @pablonyx (area:release)
• #1465 fix(release): materialize self-host checksum sidecar by @pablonyx (area:release)
• #1466 fix(release): prove self-host provider absence by @pablonyx (area:docs, area:release)
• #1467 test(release): attest managed-cloud candidate eba7bf9 by @pablonyx (area:release)
• #1468 fix(release): verify managed retry evidence by @pablonyx (area:release)
• #1469 test(release): attest managed-cloud candidate efddfbce by @pablonyx (area:release)
• #1470 fix(release): repair local Tier 3 qualification by @pablonyx (area:docs, area:release)
• #1471 build(deps): bump the python-minor-and-patch group in /server with 4 updates by @dependabot[bot] (area:server)
• #1472 build(deps): update sentry-sdk[fastapi] requirement from >=2.62.0 to >=2.66.1 in /server by @dependabot[bot] (area:server)
• #1473 build(deps): update uvicorn[standard] requirement from >=0.49.0 to >=0.51.0 in /server by @dependabot[bot] (area:server)
• #1474 build(deps): update botocore[crt] requirement from >=1.43.30 to >=1.43.55 in /server by @dependabot[bot] (area:server)
• #1475 build(deps): bump the github-actions group with 5 updates by @dependabot[bot] (area:release)
• #1476 build(deps): bump the cargo-minor-and-patch group with 12 updates by @dependabot[bot] (area:release)
• #1477 build(deps): bump npm minor and patch group with 11 updates by @dependabot[bot] (area:desktop, area:sdk, area:cloud, area:website, area:release, area:product)
• #1479 chore(specs): remove Bifrost-era agent-auth specs and orphaned dead code by @pablonyx (area:desktop, area:server, area:docs, area:product)
• #1480 chore(specs): fix route_auth path prefix and stale credentials.ts references by @pablonyx (area:docs)
• #1481 docs(specs): model gateway platform spec + gateway-models runbook by @pablonyx (area:docs)

Other Changes

• #1233 fix(cloud): gate repository access and make removal truthful by @pablonyx
• #1235 fix(cowork): stabilize thread presentation states by @pablonyx
• #1236 fix(agent-routing): scope models to active auth route by @pablonyx
• #1245 feat(cloud): cloud workspace identity for repository and scratch (slice 5a) by @pablonyx
• #1292 test(server): configure GitHub App for reauthorization authority proof by @pablonyx
• #1343 test(release): constrain staging qualification cells by @pablonyx
• #1402 fix(testing): reuse qualification TLS capacity by @pablonyx
• #1421 fix(chat): align composer placeholder padding by @pablonyx
• #1441 fix(server): signal CloudFormation bootstrap failures by @pablonyx
• #1442 test(release): retain bounded CFN bootstrap diagnostics by @pablonyx
• #1443 test(release): recover failed CFN instance identity from events by @pablonyx

Artifacts

| Lane | Tag |
| --- | --- |
| Desktop | desktop-v0.3.47 |
| Runtime | runtime-v0.3.47 |
| Server | server-v0.3.47 |

Raw Commits

• d8ceabb refactor(web): replace legacy Web with the shared ProductClient (#1229)
• 9ca44e1 fix(cloud): gate repository access and make removal truthful (#1233)
• 272a729 fix(cowork): stabilize thread presentation states (#1235)
• 5521c64 fix(agent-routing): scope models to active auth route (#1236)
• fd06ff5 fix(settings): show truthful billing and staged GitHub setup (#1230)
• 83d9d03 fix(dev): build product-client in make shared-build (#1238)
• 35dbb03 fix(supervisor): activation logging + skip doomed post-rollback re-gate (#1241)
• 59baca9 test(intent): fix cold-start race in workspace-entry sidebar helper (#1242)
• b60a39c feat(desktop): dark mono DMG install window (#1248)
• 24c0a9e docs(wdu): resolve committed conflict markers in unification READMEs (#1243)
• 75373f7 feat(composer): reorder chat-input controls, polish reasoning chip, unify toasts (#1251)
• 58efece docs(triage): production issue triage runbook + shared agent skill (F2) (#1204)
• 6685e6b feat(composer): environment card replaces worktree modal and overflow menu
• 7b2f4d3 feat(composer): compact Resources section in the environment card
• e21fdbc docs(support): quick tracker-issue -> S3 evidence access path (#1253)
• 0887738 docs(observability): how to instrument a new feature's anomalies (#1254)
• 597e4d1 feat(composer): fold resources and advanced config into the workspace-status card
• 4238761 feat(workspaces): typed missing-worktree state with persistent composer panel (#1249)
• 49f6f1c fix(composer): align worktrees modal with the hover-card anatomy
• 0d079eb fix(chat): clickable read rows, persistent thinking label, tighter live-tail gap (#1250)
• 6f5fa8e feat(composer): restyle integrations popover to the status-card anatomy
• 9fdef7d fix(product-client): keep audio + xterm CSS off the eager login shell (phase-6 budget) (#1247)
• 00f3ccb merge main (post #1247/#1249/#1250)
• 933315f fix(composer): review findings — unstranded advanced config, valid row DOM
• 9bfa49d chore(ci): catch repo-shape allowlists up to current main (#1258)
• 94a1681 fix(ci): drop stale frontend-structure allowlist entry (#1260)
• 5add1c8 test(release): prove one real managed-cloud workspace (CLOUD-PROVISION-1) (#1239)
• 78ac087 feat(cloud): cloud workspace identity for repository and scratch (slice 5a) (#1245)
• 1b75749 fix(cloud): pin the runtime home in the E2B template agent bake (#1262)
• 5e01492 test(release): complete functional local workspace qualification (LOCAL-1..7) (#1252)
• 857a248 fix(product): filter expected query control states (#1270)
• c58bde1 fix(anyharness): normalize problem detail errors (#1268)
• e1dc7ba fix(product): settle replayed and queued chat work (#1269)
• e23c23e fix(product): bound telemetry payload scrubbing (#1274)
• a7aa241 fix(server): schedule secret materialization once (#1271)
• d443fb1 fix(server): persist GitHub App reauthorization (#1273)
• 55099b1 fix(cloud): warn when the worker sidecar is skipped for a missing base URL (#1263)
• a622727 fix(server): add Slack MCP OAuth scopes (#1275)
• 187bdc6 test(release): prove heartbeat-driven managed runtime update (T4-RUNTIME-1) (#1272)
• d2cd9ae fix(cloud): destroy provider sandboxes after DB destroy commits + close create/destroy race (#1264)
• b9b43d2 test(release): stabilize and prove the managed-cloud browser turn (#1266)
• 317f364 test(release): PR 6 shared fixture layer (billingThreshold, callback relay, failure injection, Stripe test-mode wiring) (#1265)
• d12295d fix(desktop): launch dev cloud worker directly (#1287)
• 1759234 test(release): complete self-hosted qualification (PR 7) (#1228)
• 2dddcdd test(release): close the remaining core scenario inventory — deferred mechanism + 4 Tier-2 domain groups (PR 8) (#1267)
• 6c017c4 feat(self-host): serve Web from the server image (#1279)
• 22efeaa feat(cloud): durable background runtime foundation (slice 4) (#1244)
• 0393328 docs(specs): promote deployment-capabilities target contract (frozen PR 1) (#1255)
• 3cb284a feat(server): independent GitHub repository access and managed-Cloud capabilities (v2) (#1257)
• e5b93cd feat(product): ordered repository readiness and truthful availability actions (PR 2) (#1276)
• c60dc33 feat(mobile): cloud repository access parity (PR 7) (#1281)
• 6a9ef86 feat(anyharness): local repository roots and exact-ref workspace materialization (PR 3) (#1278)
• e887ad0 feat(cloud): durable workspace materialization ledger + typed AnyHarness git-status preflight (PR 4) (#1277)
• 16253a8 feat(desktop): repository clone and explicit workspace linking (PR 5) (#1283)
• c0fc001 feat(product): workspace git reconciliation and recovery (PR 6) (#1284)
• 0635b0c release: prepare hotfix-2026-07-16-45
• c41efd1 fix(ci): stamp runtime release source SHA (#1289)
• d11bf7d release: prepare hotfix-2026-07-16-46
• 36658b0 fix(ci): forward release SHA into cross builds (#1291)
• e4529e8 release: prepare hotfix-2026-07-16-47
• ac18465 fix(product): keep repository hosts off login shell (#1290)
• 6026745 release: prepare hotfix-2026-07-16-48
• 69311a9 feat(anyharness): workflow session mutation admission (#1227)
• 331055a test(server): configure GitHub App for reauthorization authority proof (#1292)
• 7500ece release: prepare hotfix-2026-07-16-49
• 3af6f7c feat(anyharness): isolated workflow workspace placement (#1246)
• 02a14f2 release: prepare hotfix-2026-07-16-50
• 0c3121c feat(workflows): add managed cloud execution (#1294)
• 7734bf8 release: prepare hotfix-2026-07-16-51
• 719b3a9 fix(frontend): reset lifecycle root during fast refresh (#1296)
• 02c1c77 fix(server): restore release suite contracts (#1298)
• 5065c88 fix(server): enforce GitHub App discovery gate (#1299)
• e61afc2 release: prepare hotfix-2026-07-16-52
• 5848d3e fix(server): bucket usage timeseries in UTC (#1301)
• 77c1e1f test(server): share GitHub App integration setup (#1300)
• d45b038 release: prepare hotfix-2026-07-17-53
• 99f2363 release: prepare hotfix-2026-07-17-54
• 3e6e4fa fix(workflows): enforce managed runtime transaction boundaries (#1295)
• 1caa42f chore(deps): bump the cargo-minor-and-patch group across 1 directory with 7 updates (#1286)
• dd7b1f4 chore(deps): bump the python-minor-and-patch group across 1 directory with 8 updates (#1285)
• 12bd550 fix(product): preserve repository readiness hook order (#1302)
• 17001c8 release: prepare hotfix-2026-07-17-55
• 6eaaf7d chore(deps): bump the github-actions group across 1 directory with 6 updates (#1288)
• ee9735f chore(deps): update npm minor and patch dependencies (#1240)
• 0a15512 feat(workflows): add managed Cloud product experience (#1303)
• a9915ea fix(product): classify local Git prerequisite states
• a682d33 fix(server): release gateway transaction before proxying
• b682fb1 fix(web): gate local agents and expected cancellation telemetry (#1310)
• e6d0c15 fix(server): classify transient GitHub outages (#1305)
• 9d5d70c fix(server): handle resumable SSE peer closes (#1308)
• 50f133c fix(anyharness): keep agent stderr out of Sentry (#1313)
• 390d873 fix(product): separate desktop transport failures (#1320)
• 72b4937 fix(product): classify expected auth control states (#1321)
• 8ad3684 fix(server): allow Web environment GitHub returns (#1319)
• 840ddeb fix(product): close support diagnostics privacy gaps (#1317)
• 1ee44f9 fix: harden desktop worker credential rotation (#1311)
• eb5be95 chore(agents): update managed coding-agent harnesses (#1323)
• 1e5fd54 fix(deploy): enforce hosted Redis deployment contract (#1322)
• 9d9620b test(release): retained-release receipts for Tier 4 N-1 artifact identity (#1306)
• e30a533 chore(server): remove orphaned faux-workspace seed scripts and unused passlib dependency (#1141)
• 4740431 docs(local): document native services and WSL2 setup (#1325)
• 8c447f2 fix(product-client): recover ready workspace chats (#1326)
• d132508 fix(product-client): classify missing Cowork threads as query state (#1329)
• f47ee5d feat(agents): show harness update download progress (#1327)
• 6be4e7f fix(web): classify expected lifecycle cancellations (#1334)
• 1c690d9 fix(integrations): enforce Slack OAuth scope ceiling (#1335)
• 3c617a5 feat(agents): use catalog-driven unattended session defaults (#1336)
• db65613 fix(release): close failed billing boot fixture (#1340)
• bf8c097 fix(release): fail closed on leaked runner handles (#1344)
• 1786d5c fix(product-client): prevent replaced sessions from resurfacing (#1337)
• 45bfa43 test(release): constrain staging qualification cells (#1343)
• bd76405 test(release): preserve self-host setup failure phase (#1348)
• e10e4a5 fix(release): preserve local qualification truth (#1350)
• 34dc170 perf(transcript): batch high-volume stream reduction (#1349)
• 5c9a4e9 fix(integrations): fail closed on Slack writes (#1341)
• e49688e test(release): recover managed-cloud resources after cancellation (#1351)
• 475ac02 test(release): attest managed-cloud LiteLLM attribution (#1355)
• 57fa376 fix(release): repair managed-cloud Route53 cleanup (#1358)
• 090bfb6 fix(release): harden INT audit probe (#1357)
• fd26a53 fix(goals): fence UI cancellation lifecycle (#1353)
• dc31edc fix(transcript): surface native subagent activity (#1352)
• 689a196 fix(cloud): recover missing managed sandboxes (#1347)
• c9768f7 feat(integrations): add durable external-action approvals (#1354)
• ff41cd7 fix(server): commit first-run claim before responding (#1359)
• f0faeca fix(release): configure local worker API base URL (#1360)
• 6631529 fix(auth): map Google token rejections (#1361)
• 9510ba8 fix(server): commit invitation writes before responding (#1362)
• 22cf3f0 fix(auth): map rejected GitHub profile callbacks (#1363)
• 917367a test(intent): make T2-SH-6 fixture run-scoped (#1364)
• 47b1b05 fix(desktop): explain unavailable local folder picker (#1365)
• 60fb8ff fix(cloud): skip GitHub auth for repo-less sandboxes (#1366)
• 7214da0 test(release): verify workspace file secret materialization (#1369)
• 1269ee5 fix(anyharness): reject unapplied session modes (#1367)
• 9b01957 test(release): re-land local Tier-3 collector repairs missing from main (#1371)
• 7045e35 test(release): resolve the newest local session, not the stalest (#1372)
• 7f9151d test(release): harden qualification execution reliability (#1373)
• 52e5a70 test(release): claim first-run setup once per local world (#1376)
• 44ea800 test(release): attest managed-cloud candidate c872b36ed (#1374)
• cbd67e3 test(release): snapshot pre-send sessions before the route-change new chat (#1377)
• 3b90003 test(release): select gateway route per harness in LOCAL-4 browser world (#1378)
• ca92564 fix(cloud): trace workspace provisioning phases (#1379)
• efa3c77 fix(community): replace expiring Discord invite (#1382)
• 8ffd75a ci(agent-catalog): protect scheduled Catalog Probe (#1380)
• f2f8908 test(server): align gateway tests with bound sessions (#1386)
• b4d1929 feat(workspaces): restore missing worktrees safely
• 3efb0f3 fix(ci): satisfy restore repository shape gates
• 4a17a1b test(release): evict the claimed-owner cache when a local world closes (#1387)
• f4851ff test(release): wait for the Project picker to settle after harness-ready reload (#1388)
• 5b1378f fix(product-client): suggest a valid api-key env var for opencode (#1390)
• 583955d test(release): type gateway-unsupported and no-eligible-model outcomes consistently (#1391)
• 72c20b3 fix(workspaces): restore the recorded current branch
• 3c6069d feat(cloud): reap orphaned provider sandboxes (#1384)
• 5e6cbea Merge pull request #1389 from proliferate-ai/codex/restore-missing-worktree-1383
• a37d679 fix(cloud): commit workspace creation before response (#1392)
• 6421a85 fix(sessions): resume interrupted empty-session creation (#1385)
• 9b225a8 fix(product-client): honor cloud-only default branches (#1395)
• 216278f test(release): attest managed-cloud candidate 8c13ae78a (#1399)
• 9d6466c test(release): return LOCAL-4 batch to Home between cells (#1397)
• bd58ece fix(anyharness): materialize selected Codex API key (#1400)
• 482f76c fix qualification TLS capacity (#1402)
• 027ff93 fix(server): commit agent key creation before response (#1401)
• 6a7b0eb test(release): attest managed-cloud fixture source sha
• 6242bb2 test(release): attest managed-cloud evidence repair sha
• a91b0ff feat(chat): render user prompts as markdown (#1393)
• 7744513 feat(chat): add rich workspace composer (#1396)
• 196b509 feat(chat): unify rich composer surfaces (#1398)
• a4311a2 fix(release): isolate manual qualification worlds (#1407)
• 6fdec94 test(release): attest managed-cloud version repair (#1408)
• d49dc63 test(release): attest fixture TLS repair (#1412)
• 1dd3710 fix(release): wait for local sidebar navigation readiness (#1413)
• a62ca4e perf(chat): smooth assistant streaming and composer input (#1416)
• e6c7592 test(release): attest managed-cloud composer repair (#1415)
• a1d94a1 refactor(chat): satisfy frontend structure rules (#1417)
• 0184483 release: prepare hotfix-2026-07-18-56
• 94f0b21 fix(sessions): adopt recovered runtime session ids (#1414)
• e4a3cd3 test(release): attest managed-cloud authority refresh repair (#1419)
• d9cfe91 test(release): attest managed-cloud cleanup replay repair (#1420)
• e7b61bd fix(chat): align composer placeholder padding (#1421)
• e34e34e release: prepare hotfix-2026-07-19-57
• 0a7eb90 test(release): attest managed-cloud provider retry repair (#1422)
• 448cbb4 feat(chat): polish tool results and rich paste (#1423)
• 92d4f3c fix(frontend): satisfy tool UI structure checks (#1424)
• 48e90ae test(release): prove managed-cloud world and shared fixtures live (MANAGED-CLOUD-FIXTURE-SMOKE-1) (#1304)
• c91d6f9 fix(web): lazy-load authenticated chat styles (#1425)
• fbb8dc3 release: prepare hotfix-2026-07-19-59
• b68fe0a test(release): classify local turn failures safely (#1436)
• 47cbca5 test(release): resolve canonical Haiku composer alias (#1439)
• c78b755 test(release): complete runnable self-hosted qualification (baseline + SH-GATEWAY + SH-CFN-WRAPPER) (#1312)
• d5210d4 feat(product): streamline workspace pane chrome (#1426)
• 46eb326 fix(litellm): pin upstream image to v1.93.0 (#1440)
• 7a6d97f feat(product): preview composer and transcript attachments (#1434)
• aaa6b94 fix(server): signal CloudFormation bootstrap failures (#1441)
• 81cbdc8 test(release): retain CFN bootstrap diagnostics (#1442)
• 0921641 feat(product): refine sidebar navigation and footer (#1435)
• d8c1c9a test(release): recover failed CFN instance identity from events (#1443)
• 0e82d4b feat(product): add integrated crash recovery (#1431)
• 73649d4 feat(product): improve file browser and path opening (#1430)
• aacd494 feat(product): make composer controls immediate (#1429)
• bff8323 fix(product): preserve visible workspace sessions
• f7827d6 feat(product): polish Markdown presentation (#1428)
• 0e50751 feat(product): establish typography and layout foundation
• e54415b feat(product): combine sidebar usage rings (#1444)
• ec2aafc Fix right panel tab scaling (#1445)
• 342f470 feat(settings): refresh agent configuration hierarchy (#1433)
• 51cd43c test(release): diagnose CFN bootstrap through authorized SSM calls (#1446)
• 1dfc1fb feat(appearance): scale Desktop and Web UI proportionally
• 7eb9d01 release: prepare hotfix-2026-07-19-61
• 80e8a68 fix(release): preserve CFN bootstrap timeout truth (#1449)
• cb95f3e fix(release): persist bootstrap timeout progress (#1450)
• 43db5ef fix(ui): align workspace interaction chrome (#1454)
• 280e678 test(deploy): await killed bootstrap process reaping (#1453)
• 2a9ab46 fix(release): repair local Tier 3 live controls (#1452)
• d57d607 fix(desktop): polish session feedback states (#1456)
• 6c1a5c9 release: prepare hotfix-2026-07-20-62
• e35d406 fix(release): retain self-host CFN cleanup proof (#1455)
• 35cb6f2 fix(release): repair Local Tier 3 functional qualification (#1457)
• 88358f3 fix(release): resolve local tier 3 false reds (#1458)
• 06b723d fix(release): bind local qualification selectors (#1459)
• 4864348 fix(release): prove Grok model config switch (#1460)
• 62490b5 fix(release): fail early on missing S3 cleanup authority (#1461)
• 47d0f3a fix(selfhost): unblock CloudFormation public health (#1462)
• e305f51 fix(release): inspect the running image digest (#1463)
• 9f15953 fix(release): isolate sequential self-host worlds
• e6a3727 Merge pull request #1464 from proliferate-ai/codex/selfhost-scenario-world-custody
• 5698c7e fix(release): materialize self-host checksum sidecar
• 05d91d8 fix(release): bind self-host checksum manifest
• e93e49c Merge pull request #1465 from proliferate-ai/codex/selfhost-bundle-sums-custody
• 675e18b fix(release): prove self-host provider absence
• eba7bf9 Merge pull request #1466 from proliferate-ai/codex/selfhost-provider-absence-observation
• 531a489 test(release): attest managed-cloud candidate eba7bf9
• cfd9909 Merge pull request #1467 from proliferate-ai/codex/attest-managed-cloud-eba7bf9
• 730b617 fix(release): verify managed retry evidence
• efddfbc Merge pull request #1468 from proliferate-ai/codex/fix-managed-handoff-attempt
• 5789291 test(release): attest managed-cloud candidate efddfbce
• 4d3213a Merge pull request #1469 from proliferate-ai/codex/attest-managed-efddfbce
• c215d32 fix(release): repair local Tier 3 qualification (#1470)
• dff1030 docs: update release qualification enforcement status (#1478)
• cfe1c0e build(deps): bump the github-actions group with 5 updates (#1475)
• 0c1a15f build(deps): bump the cargo-minor-and-patch group with 12 updates (#1476)
• ab0e31e build(deps): bump the python-minor-and-patch group (#1471)
• fdb8ec9 build(deps): update botocore[crt] requirement in /server (#1474)
• 605c7d6 build(deps): update sentry-sdk[fastapi] requirement in /server (#1472)
• cbfe754 build(deps): update uvicorn[standard] requirement in /server (#1473)
• 33f5a58 fix(anyharness): own handled model-gate incidents (#1418)
• e1d932f chore(specs): remove Bifrost-era agent-auth specs and orphaned setup-modal/BYOK dead code (#1479)
• 8d1f00e build(deps): bump npm minor and patch group with 11 updates
• 9a1ca08 Merge pull request #1477 from proliferate-ai/dependabot/npm_and_yarn/npm-minor-and-patch-05635c2445
• 47c926a chore(specs): fix route_auth path prefix and stale credentials.ts references (#1480)
• 3d4a801 docs(specs): add model-gateway platform spec and gateway-models operating runbook (#1481)
• 40cf10a release: prepare release-2026-07-25