Skip to content

sidpalas/deputies

v0.1.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agents ai control-plane development

Affected surfaces

auth rbac

Summary

AI summary

Updates Bug Fixes, 0.1.0, and Reverts across a mixed release.

Full changelog

0.1.0 (2026-05-26)

Features

  • add api bearer auth (c079693)
  • add artifacts and callbacks (3f19fec)
  • add core session API loop (c8d28a6)
  • add daytona sandbox provider (a5ceddc)
  • add derived session display status (e17aa23)
  • add durable worker loop (e393143)
  • add event streaming and uat (f0ccd36)
  • add flue runner persistence seam (81f6a7b)
  • add generic webhook integration (40cca7a)
  • add gh tool PR create and edit support (#3) (118bd2f)
  • add graceful shutdown (0acca2b)
  • add Kubernetes Helm deployment (#28) (3cbec87)
  • add message author attribution (a08f2d2)
  • add operator web ui (eee4a96)
  • add postgres app store (3d48239)
  • add readonly github roles (53d0877)
  • add repo model and branch pickers (307fa04)
  • add session artifact reads (8faa7da)
  • add session login (cebeed6)
  • add setup guide (47876cf)
  • add Slack inbound integration (d10dc36)
  • add Slack outbound callbacks (522e08b)
  • add static session demo (f14cac1)
  • add workspace tools (adb27cc)
  • add www architecture modes (815d287)
  • add www landing page (4dd2902)
  • artifacts: add optional object storage (7eb2d96)
  • artifacts: support browser-playable video artifacts (171bb76)
  • artifacts: timestamp storage keys (bd8bf14)
  • batch queued session messages (a6f27f1)
  • cancel active session runs (3109b35)
  • clarify landing page delegation flow (60c843d)
  • deploy: add local split compose mode (f365940)
  • generalize previews as live services (94ff085)
  • group session header tools (5c86dbe)
  • harden json request handling (f86e01e)
  • harden split worker deployment modes (e9cf55f)
  • normalize flue live events (f3cbb63)
  • persist sandbox lifecycle (a87376e)
  • previews: add authenticated sandbox live previews (545f616)
  • reap idle session sandboxes (ff327a8)
  • refine deputy sessions workspace (7b699cd)
  • refine deputy web ui (8df8a05)
  • refine www landing content (c0cc50f)
  • retry callbacks with Slack progress (0e041ea)
  • slack: send session link before completion (032c4fd)
  • slack: show run progress with reactions (f4e34d1)
  • slack: use assistant thread status for progress (e2025f5)
  • support extending sandbox previews (14df25d)
  • track pull requests as external resources (ed4fa59)
  • verify setup connectivity (69fdcaf)
  • wire flue agent factory (3411e9c)
  • www: add built by footer (480d0c2)
  • www: add footer contact button (86745b9)
  • www: add GoatCounter tracking (b6ca93e)
  • www: add open graph image (6206332)
  • www: add Railway deploy button (054aeb8)
  • www: open demo sessions on mobile (9e7dd27)

Bug Fixes

  • add browser logout route (e0220fc)
  • add Docker CLI timeouts (09df381)
  • align composer enter behavior (7d56e92)
  • align merged worker tests (3ad8f1b)
  • align response schema contracts (f598555)
  • align www hero buttons (e3d844e)
  • allow diagnostic panels to chain scroll (7c7b43b)
  • allow flue transitive pi dependencies (e129f14)
  • allow viewers to inspect setup (390d346)
  • archive sessions optimistically (e8e84b4)
  • auth: complete GitHub login before redirecting (486ca28)
  • center mobile sidebar header button (b057a2e)
  • claim session queues without deadlocks (9d89a9e)
  • clarify fake runner setup (fa198be)
  • clarify readonly viewer state (23edc3d)
  • clarify s3 artifact storage label (1d45637)
  • clean up realtime stream resources (#13) (1f6b05d)
  • clean up sandboxes after create failures (c848d66)
  • cleanly reject invalid service websocket upgrades (d35cd06)
  • clear composer before submit refresh (6837efd)
  • close mobile sidebar when starting new thread (#1) (6270ac6)
  • compact static demo message input (a3a6e90)
  • constrain static demo iframe scrolling (5ca02f8)
  • control-plane: shorten flue affinity keys (d21d986)
  • defer streaming code highlighting (4ce1127)
  • disable static demo workspace tools (584c60f)
  • expose sessions sidebar on new session mobile (ffc1f65)
  • expose unavailable model state (f6eeef5)
  • fence integration delivery processing (2ad2394)
  • finalize cancellation after worker abort (1bde453)
  • guard run work by active leases (bc03ef6)
  • harden cookie auth and artifact downloads (bf0d457)
  • harden HTTP completion callbacks (3b11158)
  • harden viewer security edges (40dcb2f)
  • hide jump control while composing (7731ec6)
  • improve mobile session archive controls (#15) (81695e6)
  • improve scroll behavior (ff43796)
  • increase static demo iframe height (e57394b)
  • inject worker artifact service (0127b12)
  • isolate session title edits (1e7fce1)
  • keep cancel run button compact (ed66ee6)
  • keep Enter as newline on mobile (#12) (5b4016e)
  • keep only one context picker open (784c2ef)
  • keep text input responsive (b9c12d5)
  • label unmatched diagnostics as started (9385691)
  • light mode code snippet readability (#10) (3a3f33e)
  • make markdown tables scroll on mobile (5d86ce5)
  • make SSE replay backpressure safe (874dab7)
  • mark sessions queued for pending messages (e298fea)
  • match hero button heights (1187ef2)
  • merge latest services before publishing (33697e9)
  • move mobile sidebar control into session header (6d418da)
  • persist sandbox secrets securely (2c95fa4)
  • place mobile session actions above header (#11) (02bd639)
  • polish readonly demo controls (571f811)
  • preserve services when publishing (6321263)
  • prevent duplicate create-submission in session compose (#2) (d621cde)
  • prevent reconnect banner layout shift (#19) (9b5e508)
  • previews: harden local sandbox preview routing (b36efb9)
  • reconnect desktop event streams (4c5e462)
  • resolve inherited follow-up model (2b1a4cd)
  • restore sessions optimistically (3cb23ee)
  • rotate archived sessions caret (a2393e1)
  • send persisted callback artifacts (47b7b26)
  • show mock workspace tools in static demo (9c0ede4)
  • show readonly composer in static demo (e451b6d)
  • skip husky prepare in production (d687e07)
  • slack: mark failed runs with x (e3516e7)
  • slack: notify on cancelled runs (53c097e)
  • stabilize hunk diff workspace tool (dd1895f)
  • strengthen architecture boundaries (0f0ccb2)
  • support docker preview websocket services (5aa657b)
  • support local TLS previews (a7cf5bc)
  • trust service websocket origins (d29fdb0)
  • update caddyfiles (eb4fbfc)
  • use real header in static demo (3529e50)
  • validate generic webhook repositories (726943f)
  • wake worker loop on queued messages (#18) (a4eaf21)
  • web: blur composer before clearing submitted text (#14) (3613d87)
  • web: cap diagnostic event output (d6538c5)
  • web: constrain long diagnostic output (81b0062)
  • web: disable autocomplete on message inputs (145cfbb)
  • web: handle local Slack deep links (54c9b5f)
  • web: hide context sidebar sooner (#23) (ae85f15)
  • web: improve mobile composer submit (367df4b)
  • web: keep mobile sidebar footer reachable (675572c)
  • web: pause chat autoscroll while composing (488123a)
  • web: render diagnostics as readable activity (828c69b)
  • web: replay global session updates (2950e7c)
  • web: show loading state when switching sessions (578d9d3)
  • web: stabilize streaming deputy progress (cb83b0c)
  • web: suppress mobile credential suggestions (ab6d2fc)
  • www: link external references (d4a7d1c)
  • www: normalize section spacing (812f9b6)
  • www: widen FAQ cards (f76fc21)

Reverts

  • remove autocomplete workaround (2a3cc0e)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track sidpalas/deputies

Get notified when new releases ship.

Sign up free

About sidpalas/deputies

All releases →

Related context

Earlier breaking changes

  • v0.5.0 Removed RUNNER_MODEL env var; use RUNNER_MODEL_DEFAULT instead.
  • v0.5.0 Removed AUTH_GITHUB_ADMIN_ORGANIZATIONS, AUTH_GITHUB_VIEWER_USERS, AUTH_GITHUB_VIEWER_ORGANIZATIONS, UNSAFE_AUTH_GITHUB_ALLOW_ALL_VIEWERS env vars.
  • v0.4.0 Replace Flue-specific runtime config names with runner-oriented names.

Beta — feedback welcome: [email protected]