Alex Knight

fix(plugins): honor subagent model-override opt-in in interactive sessions · plugins.entries.<id>.subagent.allowModelOverride is ignored for interactive (client-scoped) subagent runs · fix(state): close agent-db and proxy-capture SQLite handles on exit; rebind stale proxy stores after shared-state close · fix(state): close agent-db and proxy-capture SQLite handles on exit; rebind stale proxy stores after shared-state close (#100827)

fix: show exported tool results in trace viewers · fix(diagnostics-otel): surface error message on run/harness error spans · fix: show exported tool results in trace viewers (#101371) · fix(diagnostics-otel): surface error message on run/harness error spans (#101244)

fix(cli): one-shot agent --local runs never export OTel diagnostics · fix(state): close agent-db and proxy-capture SQLite handles on exit; rebind stale proxy stores after shared-state close · fix(android): add missing new_chat_in_worktree locale strings · fix(ai): never let payload-less media blocks erase tool-result text or emit invalid media parts

fix(plugins): resolve public artifacts from installed plugin roots · fix(plugins): resolve public artifacts from installed plugin roots (#98819) · [Bug]: Mattermost native slash commands return 401 on every callback after 6.11 plugin externalization, even after clean re-registration

fix(plugins): resolve public artifacts from installed plugin roots

Externalized plugins lose non-gateway-auth public artifacts (doctor/secret/message-tool/thread-binding/media/health) on packaged installs · fix(plugins): resolve public artifacts from installed plugin roots · [Bug]: Mattermost native slash commands return 401 on every callback after 6.11 plugin externalization, even after clean re-registration

fix(plugins): plugin loggers drop writes after the log level is raised at runtime · Improve model call telemetry · refactor(diagnostics): keep model-call prompt/usage types module-local to avoid SDK surface growth · fix(diagnostics): capture per-call usage on terminal error streams; skip prompt stats when diagnostics off

fix(plugin-sdk): export approval handler runtime event types

feat(mattermost): persist participated threads for mention-free follow-ups · fix(cron): suppress unavailable-tool self-debug replies · Improve model call telemetry

Improve model call telemetry · Expose agent tool execution context · Configure heartbeat model fallback policy · feat(mattermost): auto-engage on replies to the bot's own thread

feat(mattermost): persist participated threads for mention-free follow-ups · Preserve inherited channel account policies during migration · feat(mattermost): register /oc_queue as a native slash command · fix(telegram): materialize rich message line breaks as <br>

fix(plugin-sdk): export approval handler runtime event types · feat(plugins): persist plugin allow-always approvals

feat(agents): trace compaction summarization model calls · Force manual compaction past empty kept-tail cuts · Fix Mattermost open DM validation · fix(plugins): compose live hook registry view for tool-call hooks

fix(review): tolerate invalid root-cause clusters · fix(cron): dedupe legacy migration by schedule identity · fix(guards): allow auth profile sqlite reader · fix(media): extract large managed inbound PDFs via media-understanding

feat(walk): report unreadable directories in failedDirs · fix(mattermost): keep message tool replies in threads · Fix Mattermost open DM validation · fix(plugins): run message_sending on all channel agent-reply deliveries (#92374)

fix(media): extract large managed inbound PDFs via media-understanding · perf(memory): target session delta syncs with the dirty set instead of full directory scans · perf(memory): coalesce + cache session-file listings to cut NFS READDIR load · fix(memory): do not prune session index from a failed directory scan

fix(doctor): survive throwing plugin hooks and warn on build-version skew · fix(plugins): compose live hook registry view for tool-call hooks · perf(sessions): share one enumeration across archive retention sweeps · perf(memory): target session delta syncs with the dirty set instead of full directory scans

fix(plugins): reconcile managed npm root overrides with managed peer pins · feat(diagnostics-otel): capture tool input/output content via trusted channel · feat(diagnostics-otel): capture tool input/output content via trusted channel (#91256)

[plugin sdk] Allow declared installed trusted hooks

fix(memory): do not prune session index from a failed directory scan · perf(memory): coalesce + cache session-file listings to cut NFS READDIR load · feat(diagnostics-otel): capture tool input/output content via trusted channel · fix(diagnostics): populate inputMessages/outputMessages on model.call events

feat(cron): configurable minimum interval guardrail for recurring jobs

Warn about stale OpenAI keys with Codex auth

Add development trace UI · fix(codex): preserve native hook relay across restarts · fix(reply): derive explicit control command turns

fix(channels): tag typed text-slash control commands with CommandSource across all channel ingresses · fix(agents/doctor): surface tool-result cap advisory and make truncation marker actionable · fix(mattermost): tag typed text-slash control commands so /new and /reset acks survive message_tool_only suppression · Fix deadcode unused-file allowlist

fix(ui): scope chat session picker to active agent · Fix Codex usage-limit recovery copy · fix Codex preflight compaction auth routing · fix codex usage-limit recovery copy (#86305)

docs(skills): clarify control ui recording proof · Smooth chat focus mode layout · fix(ui): keep chat picker search current · Reject unsafe device read paths (#22)

Deny sensitive host file mutations · [codex] fix gateway derived plugin metadata reuse · fix(ui): move chat session search into picker · test: add mocked Control UI E2E tests and playwright for local verification and development

Add root mutation deny policies · fix: support ACP audio prompt content · fix: use session/resume for ACP reconnects · fix: use agent-side session list

Add OpenRouter provider routing params · Add OpenRouter provider routing params (#84579)

Fix managed Gateway updates across CLI and service Node skew · Fix managed Gateway updates across CLI and service Node skew (#84043)

Release embedded session write lock before model I/O · Release embedded session write lock before model I/O (#82891)

Fix context overflow fallback to larger models · Honor OpenAI Codex auth order for explicit PI runs · Fix Claude CLI runtime migration for gateway turns · Fix Kimi Coding tool-call replay

Relay ACP exec approval permissions · fix(fetch-timeout): pass operation and url context at omitting call sites (#79195) · Add ACP session load event ledger

Add ACP session load event ledger · Implement ACP bridge lifecycle handlers · fix(compaction): ignore metadata bytes in preflight pressure · docs(msteams): document replyStyle resolution precedence and thread context preservation

fix(msteams): preserve proactive thread replies · fix(cron): allow restricted self introspection · fix(update): preserve pnpm custom global root · Fix ACP streamed progress summary spacing

feat(plugin-sdk): expose sessionTarget and agentId on cron_changed hook events · feat(plugin-sdk): expose sessionTarget and agentId on cron_changed hook events (#77641)

feat(plugin-state): add atomic dedupe claims · test: stabilize gateway server shard · feat(plugin-state): add registerIfAbsent keyed store · test: stabilize gateway server shard (#77131)

fix: session_status 'current' resolves to live run session instead of stale sandbox key (#76708) · Fix LLM-only model runs with inherited allowlists · fix(tools): allow no-tool llm-task runs · fix(plugins): start configured speech providers

fix(heartbeat): make phase scheduling active-hours-aware (#75487) (#75597)

msteams: persist sent-message markers best-effort · matrix: persist approval reaction targets best-effort · fix(heartbeat): make phase scheduling active-hours-aware (#75487) · discord: persist component registries best-effort

channels: opt-in SDK-backed persistent state for slack, discord, msteams, matrix · channels: make plugin state persistence best effort by default · fix(gateway): show config recovery validation details · fix(security): stop implicit tool grants from config sections (#47487)

feat(plugins): add SQLite plugin state store · feat(plugin-sdk): add persistent keyed store helper · fix(deepseek): add provider-policy-api to hydrate contextWindow and cost from catalog

fix(acpx): validate runtime session mode at wrapper boundary (#73071) · fix(gateway): prewarm effective tool inventory cache · fix: decode web fetch legacy charsets · fix: Discord read/search timeout, session-key fallback, and gateway execution mode

Add cron changed plugin hook · fix(cli): mark embedded agent fallback · Fix null params for parameterless tools · [codex] stabilize agentic agents CI shard

[codex] Add bundled plugin policy mode

feat(cron): add optional external scheduler sync

[codex] Add bundled plugin policy mode

feat(plugin-sdk): add persistent keyed store helper · fix: archive completed run-mode subagents · fix: clear embedded runs before lifecycle end

perf(slack): narrow runtime-setter + lazy-load 4 modules + narrow 2 SDK surfaces

perf(plugin-sdk): per-phase + per-jiti-call probes for bundled channel entries · fix(tui): arm streaming watchdog on every delta, not only visible ones · fix(codex): exclude codex-app-server synthetic apiKey from secrets audit · perf(plugin-sdk): per-phase + per-jiti-call probes for bundled channel entries (#69537)

perf(slack): narrow runtime-setter specifier to avoid loading 284KB barrel

fix(ui): stop unsupported wiki RPC probes during startup · docs: clarify source Control UI dev/build flow