From 2bf57aa8ff42809b7bad56823acc9c067cd95843 Mon Sep 17 00:00:00 2001 From: Ahmed Sabbour Date: Fri, 28 Aug 2026 21:40:27 -0700 Subject: [PATCH] chore(release): prepare v0.21.0 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 3f94bc67-d29d-4d47-a8f7-5d99540c4b42 --- .changeset/atomic-webhook-claim-recovery.md | 5 -- .../backlog-decomposition-capability.md | 5 -- .changeset/bound-trigger-publication.md | 5 -- .changeset/broker-snapshot-enforcement.md | 5 -- ...ility-snapshot-null-project-fail-closed.md | 9 ---- .changeset/demo-capture-ux-fixes.md | 5 -- .../fence-provisional-trigger-promotion.md | 5 -- .changeset/fenced-activation-snapshots.md | 5 -- .changeset/foundry-kata-command-watchdog.md | 5 -- .../github-repository-selection-codes.md | 5 -- .changeset/identity-persistence-hardening.md | 5 -- .changeset/legacy-trigger-recovery.md | 5 -- .changeset/marketplace-connect-retry.md | 5 -- .changeset/mcp-github-app-capabilities.md | 5 -- .changeset/otel-tool-span-json-gate.md | 5 -- .changeset/per-user-github-identity.md | 5 -- .changeset/persist-tool-approval-scopes.md | 6 --- .changeset/project-copilot-bindings.md | 5 -- .changeset/purpose-bound-github-broker.md | 9 ---- ...laim-abandoned-marketplace-capabilities.md | 5 -- .changeset/remove-legacy-oauth-surfaces.md | 5 -- .changeset/repair-fleet-951-review.md | 5 -- .changeset/repo-app-installation-authority.md | 5 -- .changeset/repo-app-installation-webhook.md | 5 -- .changeset/repo-app-user-authorization.md | 5 -- .changeset/retire-legacy-oauth-core.md | 5 -- .../runtime-capability-credential-broker.md | 5 -- .../safe-copilot-app-callback-feedback.md | 5 -- .changeset/sandbox-exec-oom-memory-limit.md | 5 -- ...sandbox-repository-credential-hardening.md | 7 --- .../terminal-coordinator-orphan-recovery.md | 5 -- .changeset/two-app-persistence.md | 5 -- ...unattended-project-settings-diagnostics.md | 10 ---- .changeset/yummy-ravens-deny.md | 5 -- CHANGELOG.md | 50 +++++++++++++++++++ VERSION | 2 +- package-lock.json | 4 +- package.json | 2 +- 38 files changed, 54 insertions(+), 190 deletions(-) delete mode 100644 .changeset/atomic-webhook-claim-recovery.md delete mode 100644 .changeset/backlog-decomposition-capability.md delete mode 100644 .changeset/bound-trigger-publication.md delete mode 100644 .changeset/broker-snapshot-enforcement.md delete mode 100644 .changeset/capability-snapshot-null-project-fail-closed.md delete mode 100644 .changeset/demo-capture-ux-fixes.md delete mode 100644 .changeset/fence-provisional-trigger-promotion.md delete mode 100644 .changeset/fenced-activation-snapshots.md delete mode 100644 .changeset/foundry-kata-command-watchdog.md delete mode 100644 .changeset/github-repository-selection-codes.md delete mode 100644 .changeset/identity-persistence-hardening.md delete mode 100644 .changeset/legacy-trigger-recovery.md delete mode 100644 .changeset/marketplace-connect-retry.md delete mode 100644 .changeset/mcp-github-app-capabilities.md delete mode 100644 .changeset/otel-tool-span-json-gate.md delete mode 100644 .changeset/per-user-github-identity.md delete mode 100644 .changeset/persist-tool-approval-scopes.md delete mode 100644 .changeset/project-copilot-bindings.md delete mode 100644 .changeset/purpose-bound-github-broker.md delete mode 100644 .changeset/reclaim-abandoned-marketplace-capabilities.md delete mode 100644 .changeset/remove-legacy-oauth-surfaces.md delete mode 100644 .changeset/repair-fleet-951-review.md delete mode 100644 .changeset/repo-app-installation-authority.md delete mode 100644 .changeset/repo-app-installation-webhook.md delete mode 100644 .changeset/repo-app-user-authorization.md delete mode 100644 .changeset/retire-legacy-oauth-core.md delete mode 100644 .changeset/runtime-capability-credential-broker.md delete mode 100644 .changeset/safe-copilot-app-callback-feedback.md delete mode 100644 .changeset/sandbox-exec-oom-memory-limit.md delete mode 100644 .changeset/sandbox-repository-credential-hardening.md delete mode 100644 .changeset/terminal-coordinator-orphan-recovery.md delete mode 100644 .changeset/two-app-persistence.md delete mode 100644 .changeset/unattended-project-settings-diagnostics.md delete mode 100644 .changeset/yummy-ravens-deny.md diff --git a/.changeset/atomic-webhook-claim-recovery.md b/.changeset/atomic-webhook-claim-recovery.md deleted file mode 100644 index 301548027..000000000 --- a/.changeset/atomic-webhook-claim-recovery.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Safely recover abandoned GitHub App webhook deliveries without allowing concurrent retries to process one delivery twice. diff --git a/.changeset/backlog-decomposition-capability.md b/.changeset/backlog-decomposition-capability.md deleted file mode 100644 index ed68b18df..000000000 --- a/.changeset/backlog-decomposition-capability.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Restore secure GitHub Copilot-backed backlog decomposition and show the project connection action when Copilot must be connected. diff --git a/.changeset/bound-trigger-publication.md b/.changeset/bound-trigger-publication.md deleted file mode 100644 index fcf6aa9aa..000000000 --- a/.changeset/bound-trigger-publication.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Prevent workflow schedule and event activations from being claimed before their trusted authorization binding is durable, while allowing a safely failed publication to retry. diff --git a/.changeset/broker-snapshot-enforcement.md b/.changeset/broker-snapshot-enforcement.md deleted file mode 100644 index 8ac045ea3..000000000 --- a/.changeset/broker-snapshot-enforcement.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": minor ---- - -Add immutable, purpose-specific GitHub identity snapshots and fail-closed credential fencing for brokered capabilities. diff --git a/.changeset/capability-snapshot-null-project-fail-closed.md b/.changeset/capability-snapshot-null-project-fail-closed.md deleted file mode 100644 index c47f90999..000000000 --- a/.changeset/capability-snapshot-null-project-fail-closed.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -"agentweaver": patch ---- - -Fix an authorization bypass in the GitHub capability snapshot lifecycle: a missing/unparseable -`Run.ProjectId` could previously let root, child, retry, and resume launches succeed with zero -GitHub capability snapshots, since only an explicitly blank-origin project may skip capture. Root -construction and inherited child/retry snapshots now both fail closed (`github_capability_unavailable`) -whenever the project id is missing, instead of treating an absent project id as an automatic pass. diff --git a/.changeset/demo-capture-ux-fixes.md b/.changeset/demo-capture-ux-fixes.md deleted file mode 100644 index aadface6a..000000000 --- a/.changeset/demo-capture-ux-fixes.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Fix demo capture UX: SlidePanel sticky footer, OutcomePlanPanel footer hoist, CoordinatorRunPage wiring, TeamPage Promise.all cold-start race. Capture plan: beat 1.3 heading wait + 60s timeout, beat 2.2 plan panel open via chip click + 120s Confirm timeout, beat 2.5 followNewPage 60s timeout. diff --git a/.changeset/fence-provisional-trigger-promotion.md b/.changeset/fence-provisional-trigger-promotion.md deleted file mode 100644 index fbb0bd9f8..000000000 --- a/.changeset/fence-provisional-trigger-promotion.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Prevent contributor backlog promotion from publishing a workflow trigger task before its trusted invocation binding completes. diff --git a/.changeset/fenced-activation-snapshots.md b/.changeset/fenced-activation-snapshots.md deleted file mode 100644 index ecfd35b74..000000000 --- a/.changeset/fenced-activation-snapshots.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": minor ---- - -Preserve fenced automation activation snapshots so repository automation safely resumes after restarts without replaying stale activation work. diff --git a/.changeset/foundry-kata-command-watchdog.md b/.changeset/foundry-kata-command-watchdog.md deleted file mode 100644 index 3e16a1005..000000000 --- a/.changeset/foundry-kata-command-watchdog.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Keep Foundry sandbox commands observable and safely bounded while Kata virtual machines finish terminating timed-out processes. diff --git a/.changeset/github-repository-selection-codes.md b/.changeset/github-repository-selection-codes.md deleted file mode 100644 index 5824bb6de..000000000 --- a/.changeset/github-repository-selection-codes.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": minor ---- - -Add an authenticated GitHub repository browse handoff that issues short-lived, single-use selection codes for safe project creation. diff --git a/.changeset/identity-persistence-hardening.md b/.changeset/identity-persistence-hardening.md deleted file mode 100644 index 32d3265f2..000000000 --- a/.changeset/identity-persistence-hardening.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Harden two-GitHub-App persistence with externally safe authorization handles and durable webhook replay claims. diff --git a/.changeset/legacy-trigger-recovery.md b/.changeset/legacy-trigger-recovery.md deleted file mode 100644 index cbfe13f91..000000000 --- a/.changeset/legacy-trigger-recovery.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Recover interrupted schedule and event trigger tasks after upgrades without publishing duplicate runs or exposing provisional tasks to contributors. diff --git a/.changeset/marketplace-connect-retry.md b/.changeset/marketplace-connect-retry.md deleted file mode 100644 index f69762b32..000000000 --- a/.changeset/marketplace-connect-retry.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Let connected project owners retry marketplace classification with a short-lived, single-use Copilot capability, reclaim unused capability records, and report the currently required API Key Vault secret in cluster diagnostics. diff --git a/.changeset/mcp-github-app-capabilities.md b/.changeset/mcp-github-app-capabilities.md deleted file mode 100644 index b22310e88..000000000 --- a/.changeset/mcp-github-app-capabilities.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": minor ---- - -Add explicit Repo App and project Copilot App browser handoffs to MCP, with redacted capability readiness and subject-bound authorization status polling. diff --git a/.changeset/otel-tool-span-json-gate.md b/.changeset/otel-tool-span-json-gate.md deleted file mode 100644 index c41f72438..000000000 --- a/.changeset/otel-tool-span-json-gate.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Gate `gen_ai.tool.call.result` OTel span tag on JSON-shaped output to prevent plain-text file contents and shell output from leaking into App Insights traces. JSON objects and arrays are tagged (and redacted via the existing `RedactJsonStringIfApplicable` pipeline); all other result formats are silently omitted. diff --git a/.changeset/per-user-github-identity.md b/.changeset/per-user-github-identity.md deleted file mode 100644 index ba0e3fdd1..000000000 --- a/.changeset/per-user-github-identity.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Remove static project-level GitHub identity override from CallerTokenScopeProvider. All agent runs now use the submitting user's own linked GitHub identity, eliminating agenthost Copilot auth failures caused by stale or missing project-level tokens. diff --git a/.changeset/persist-tool-approval-scopes.md b/.changeset/persist-tool-approval-scopes.md deleted file mode 100644 index 7effb30d3..000000000 --- a/.changeset/persist-tool-approval-scopes.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"agentweaver": patch ---- - -Keep 'Allow for session' approvals within the current orchestration, and keep eligible 'Always -allow' approvals for future runs in the same project without applying them to other projects. diff --git a/.changeset/project-copilot-bindings.md b/.changeset/project-copilot-bindings.md deleted file mode 100644 index ca2f7ac46..000000000 --- a/.changeset/project-copilot-bindings.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": minor ---- - -Add project-scoped GitHub Copilot App bindings with Owner authorization, safe reconnect state, and a separate disconnect path. diff --git a/.changeset/purpose-bound-github-broker.md b/.changeset/purpose-bound-github-broker.md deleted file mode 100644 index fc63340e9..000000000 --- a/.changeset/purpose-bound-github-broker.md +++ /dev/null @@ -1,9 +0,0 @@ ---- - -"agentweaver": minor - ---- - - - -Add purpose-bound GitHub capability fencing with immutable run snapshots for root, child, retry, and recovery launches. Root snapshots are now selected and captured directly from live authorization, repository grant, and Copilot binding sources at launch; the finite v1 legacy table is migration-only and is never consulted for new runs. Only a project whose persisted origin is explicitly blank may launch with zero snapshots; a GitHub-origin project that currently resolves none of the four purposes is denied rather than silently launched without capability protection. GitHub App history rows (installations, grants, bindings) are no longer used as the blank-project signal, since a GitHub-origin project can legitimately have none of those rows yet. diff --git a/.changeset/reclaim-abandoned-marketplace-capabilities.md b/.changeset/reclaim-abandoned-marketplace-capabilities.md deleted file mode 100644 index 841779bdd..000000000 --- a/.changeset/reclaim-abandoned-marketplace-capabilities.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Reclaim expired marketplace Copilot capabilities whose broker request was interrupted after claiming them, while keeping active redemptions lease-fenced and fail-closed. diff --git a/.changeset/remove-legacy-oauth-surfaces.md b/.changeset/remove-legacy-oauth-surfaces.md deleted file mode 100644 index 4cffbe1ab..000000000 --- a/.changeset/remove-legacy-oauth-surfaces.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": minor ---- - -Browser sign-in now uses Microsoft Entra ID only. Repository selection and Copilot access continue through their separate Repo App and Copilot App authorization handoffs, and Azure deployment setup no longer provisions legacy browser OAuth credentials. diff --git a/.changeset/repair-fleet-951-review.md b/.changeset/repair-fleet-951-review.md deleted file mode 100644 index dab3c6ff0..000000000 --- a/.changeset/repair-fleet-951-review.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Copilot-backed classification now redeems only the active run's purpose-bound capability, and AKS deployments no longer provision or export retired MCP OAuth signing configuration. diff --git a/.changeset/repo-app-installation-authority.md b/.changeset/repo-app-installation-authority.md deleted file mode 100644 index 2f2c112b4..000000000 --- a/.changeset/repo-app-installation-authority.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Derive Repo App repository permissions and display metadata from GitHub before unattended automation is configured. diff --git a/.changeset/repo-app-installation-webhook.md b/.changeset/repo-app-installation-webhook.md deleted file mode 100644 index 9ce58525b..000000000 --- a/.changeset/repo-app-installation-webhook.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": minor ---- - -Add Repo App installation-token downscoping and a bounded, replay-safe App webhook receiver for repository automation. diff --git a/.changeset/repo-app-user-authorization.md b/.changeset/repo-app-user-authorization.md deleted file mode 100644 index a08753d43..000000000 --- a/.changeset/repo-app-user-authorization.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": minor ---- - -Add explicit, Entra-user-bound GitHub Repo App authorization with PKCE, safe callback handling, refresh, and revocation. diff --git a/.changeset/retire-legacy-oauth-core.md b/.changeset/retire-legacy-oauth-core.md deleted file mode 100644 index 15a21c381..000000000 --- a/.changeset/retire-legacy-oauth-core.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": minor ---- - -Retire legacy GitHub OAuth, device-flow, account-link, and MCP OAuth-server paths. Agentweaver now requires Microsoft Entra sign-in and server-side two-App GitHub capabilities. diff --git a/.changeset/runtime-capability-credential-broker.md b/.changeset/runtime-capability-credential-broker.md deleted file mode 100644 index c5bd931db..000000000 --- a/.changeset/runtime-capability-credential-broker.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Route AgentRuntime and AgentHost GitHub credentials exclusively through immutable, run-bound capability snapshots, removing ambient Host token-store fallbacks. diff --git a/.changeset/safe-copilot-app-callback-feedback.md b/.changeset/safe-copilot-app-callback-feedback.md deleted file mode 100644 index b2db2feb7..000000000 --- a/.changeset/safe-copilot-app-callback-feedback.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": minor ---- - -Show a safe Project Gallery confirmation after connecting a project's Copilot App capability. diff --git a/.changeset/sandbox-exec-oom-memory-limit.md b/.changeset/sandbox-exec-oom-memory-limit.md deleted file mode 100644 index c4a30a1de..000000000 --- a/.changeset/sandbox-exec-oom-memory-limit.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Raise agentweaver-exec container memory limit from 2Gi to 4Gi (request from 1Gi to 2Gi) to prevent kernel OOM kills when an agent runs a preview server alongside its own process. Scheduling density is unchanged — CPU (1000m/pod) remains the binding constraint at ~3 pods/node; only the per-container memory limit (a cgroup ceiling, not a scheduling input) was raised. diff --git a/.changeset/sandbox-repository-credential-hardening.md b/.changeset/sandbox-repository-credential-hardening.md deleted file mode 100644 index c5800e63b..000000000 --- a/.changeset/sandbox-repository-credential-hardening.md +++ /dev/null @@ -1,7 +0,0 @@ ---- - -"agentweaver": patch - ---- - -Harden sandbox repository credential delivery by starting validated GitHub CLI commands directly and retrying failed credential revocation during run cleanup. diff --git a/.changeset/terminal-coordinator-orphan-recovery.md b/.changeset/terminal-coordinator-orphan-recovery.md deleted file mode 100644 index 24598e318..000000000 --- a/.changeset/terminal-coordinator-orphan-recovery.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Stop terminal coordinator runs from being repeatedly recovered after a service restart. diff --git a/.changeset/two-app-persistence.md b/.changeset/two-app-persistence.md deleted file mode 100644 index 86e86944f..000000000 --- a/.changeset/two-app-persistence.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": minor ---- - -Add durable, redacted identity, authorization, repository-grant, automation, run-snapshot, and audit records for the two-GitHub-App model. diff --git a/.changeset/unattended-project-settings-diagnostics.md b/.changeset/unattended-project-settings-diagnostics.md deleted file mode 100644 index 188c2c85e..000000000 --- a/.changeset/unattended-project-settings-diagnostics.md +++ /dev/null @@ -1,10 +0,0 @@ ---- - -"agentweaver": minor - ---- - -Add a redacted unattended automation readiness view to Project Settings. The view verifies the -live Copilot App registration, uses fixed remediation codes, and avoids exposing GitHub -credentials or provider details. Remove legacy per-project GitHub identity, webhook provisioning, -and webhook-secret settings controls in favor of the Repo App's App-level webhook. diff --git a/.changeset/yummy-ravens-deny.md b/.changeset/yummy-ravens-deny.md deleted file mode 100644 index 8fc4282ad..000000000 --- a/.changeset/yummy-ravens-deny.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"agentweaver": patch ---- - -Ensure approval notifications open the run that is waiting for review. diff --git a/CHANGELOG.md b/CHANGELOG.md index 6e85a46b2..287b48b99 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,55 @@ # Changelog +## 0.21.0 + +### Minor Changes + +- 15ef610: Add immutable, purpose-specific GitHub identity snapshots and fail-closed credential fencing for brokered capabilities. +- 97027a3: Preserve fenced automation activation snapshots so repository automation safely resumes after restarts without replaying stale activation work. +- 0a972d4: Add an authenticated GitHub repository browse handoff that issues short-lived, single-use selection codes for safe project creation. +- daf7152: Add explicit Repo App and project Copilot App browser handoffs to MCP, with redacted capability readiness and subject-bound authorization status polling. +- 7e3d446: Add project-scoped GitHub Copilot App bindings with Owner authorization, safe reconnect state, and a separate disconnect path. +- b7df33f: Add purpose-bound GitHub capability fencing with immutable run snapshots for root, child, retry, and recovery launches. Root snapshots are now selected and captured directly from live authorization, repository grant, and Copilot binding sources at launch; the finite v1 legacy table is migration-only and is never consulted for new runs. Only a project whose persisted origin is explicitly blank may launch with zero snapshots; a GitHub-origin project that currently resolves none of the four purposes is denied rather than silently launched without capability protection. GitHub App history rows (installations, grants, bindings) are no longer used as the blank-project signal, since a GitHub-origin project can legitimately have none of those rows yet. +- 7bbe99c: Browser sign-in now uses Microsoft Entra ID only. Repository selection and Copilot access continue through their separate Repo App and Copilot App authorization handoffs, and Azure deployment setup no longer provisions legacy browser OAuth credentials. +- 08e02f8: Add Repo App installation-token downscoping and a bounded, replay-safe App webhook receiver for repository automation. +- 9431463: Add explicit, Entra-user-bound GitHub Repo App authorization with PKCE, safe callback handling, refresh, and revocation. +- c014960: Retire legacy GitHub OAuth, device-flow, account-link, and MCP OAuth-server paths. Agentweaver now requires Microsoft Entra sign-in and server-side two-App GitHub capabilities. +- 2c55e89: Show a safe Project Gallery confirmation after connecting a project's Copilot App capability. +- 217577d: Add durable, redacted identity, authorization, repository-grant, automation, run-snapshot, and audit records for the two-GitHub-App model. +- 44e0fc8: Add a redacted unattended automation readiness view to Project Settings. The view verifies the + live Copilot App registration, uses fixed remediation codes, and avoids exposing GitHub + credentials or provider details. Remove legacy per-project GitHub identity, webhook provisioning, + and webhook-secret settings controls in favor of the Repo App's App-level webhook. + +### Patch Changes + +- f0a6139: Safely recover abandoned GitHub App webhook deliveries without allowing concurrent retries to process one delivery twice. +- 7bbe99c: Restore secure GitHub Copilot-backed backlog decomposition and show the project connection action when Copilot must be connected. +- cccfa29: Prevent workflow schedule and event activations from being claimed before their trusted authorization binding is durable, while allowing a safely failed publication to retry. +- b7df33f: Fix an authorization bypass in the GitHub capability snapshot lifecycle: a missing/unparseable + `Run.ProjectId` could previously let root, child, retry, and resume launches succeed with zero + GitHub capability snapshots, since only an explicitly blank-origin project may skip capture. Root + construction and inherited child/retry snapshots now both fail closed (`github_capability_unavailable`) + whenever the project id is missing, instead of treating an absent project id as an automatic pass. +- 5074e00: Fix demo capture UX: SlidePanel sticky footer, OutcomePlanPanel footer hoist, CoordinatorRunPage wiring, TeamPage Promise.all cold-start race. Capture plan: beat 1.3 heading wait + 60s timeout, beat 2.2 plan panel open via chip click + 120s Confirm timeout, beat 2.5 followNewPage 60s timeout. +- cccfa29: Prevent contributor backlog promotion from publishing a workflow trigger task before its trusted invocation binding completes. +- 12bda78: Keep Foundry sandbox commands observable and safely bounded while Kata virtual machines finish terminating timed-out processes. +- 5915f62: Harden two-GitHub-App persistence with externally safe authorization handles and durable webhook replay claims. +- cccfa29: Recover interrupted schedule and event trigger tasks after upgrades without publishing duplicate runs or exposing provisional tasks to contributors. +- 7bbe99c: Let connected project owners retry marketplace classification with a short-lived, single-use Copilot capability, reclaim unused capability records, and report the currently required API Key Vault secret in cluster diagnostics. +- 41d9322: Gate `gen_ai.tool.call.result` OTel span tag on JSON-shaped output to prevent plain-text file contents and shell output from leaking into App Insights traces. JSON objects and arrays are tagged (and redacted via the existing `RedactJsonStringIfApplicable` pipeline); all other result formats are silently omitted. +- c1d55a2: Remove static project-level GitHub identity override from CallerTokenScopeProvider. All agent runs now use the submitting user's own linked GitHub identity, eliminating agenthost Copilot auth failures caused by stale or missing project-level tokens. +- 9b9ee1c: Keep 'Allow for session' approvals within the current orchestration, and keep eligible 'Always + allow' approvals for future runs in the same project without applying them to other projects. +- 7bbe99c: Reclaim expired marketplace Copilot capabilities whose broker request was interrupted after claiming them, while keeping active redemptions lease-fenced and fail-closed. +- 7bbe99c: Copilot-backed classification now redeems only the active run's purpose-bound capability, and AKS deployments no longer provision or export retired MCP OAuth signing configuration. +- 7db37f1: Derive Repo App repository permissions and display metadata from GitHub before unattended automation is configured. +- e9fe264: Route AgentRuntime and AgentHost GitHub credentials exclusively through immutable, run-bound capability snapshots, removing ambient Host token-store fallbacks. +- 70b653f: Raise agentweaver-exec container memory limit from 2Gi to 4Gi (request from 1Gi to 2Gi) to prevent kernel OOM kills when an agent runs a preview server alongside its own process. Scheduling density is unchanged — CPU (1000m/pod) remains the binding constraint at ~3 pods/node; only the per-container memory limit (a cgroup ceiling, not a scheduling input) was raised. +- 4cc0cc3: Harden sandbox repository credential delivery by starting validated GitHub CLI commands directly and retrying failed credential revocation during run cleanup. +- 3c59232: Stop terminal coordinator runs from being repeatedly recovered after a service restart. +- 4a1daf9: Ensure approval notifications open the run that is waiting for review. + ## 0.20.0 ### Minor Changes diff --git a/VERSION b/VERSION index 5a03fb737..885415662 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -0.20.0 +0.21.0 diff --git a/package-lock.json b/package-lock.json index 3ca88f2df..f9b859221 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "agentweaver", - "version": "0.20.0", + "version": "0.21.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "agentweaver", - "version": "0.20.0", + "version": "0.21.0", "devDependencies": { "@changesets/cli": "^3.0.0", "@types/node": "^26.2.0", diff --git a/package.json b/package.json index 7dd1b7083..1b01eaf4c 100644 --- a/package.json +++ b/package.json @@ -41,5 +41,5 @@ "@types/node": "^26.2.0", "playwright": "^1.62.1" }, - "version": "0.20.0" + "version": "0.21.0" }