Code

[hooks] FS-hardening follow-up: RESOLVE_NO_XDEV bind-mount containment

Rename CLAUDE.md to something more semantic

RFC: Add canonical OpenAPI/AsyncAPI contracts for Gateway, WebUI, and event surfaces

[QA] `select_archive_for_arch()` and `download_binary_and_run_installer()` functions are brokwn in installer script for macOS/Linux since 0.26, a month ago

Harden LocalFilesystem: honor CAS::Absent + durable writes (atomic rename + fsync)

Pattern: default-to-no-op guardrails get silently bypassed (3 instances across reborn-integration PRs)

subagent E2E §5.2: blocking spawn parent recovers after child completion

[Question] Mission notify_channels inherit selected conversation source in Web UI Chat

Improve channel badges in Web UI conversation list

Failed Mission “Retry” button calls fire endpoint but returns fired:false

Thread::restore_from_messages drops orphan assistant rows, preventing out-of-band context injection

v0.28.2: Improve Configure UI for non-API-key providers and AWS Bedrock

Per-user / per-tenant tool enable/disable in the web UI

Editing AGENTS.md in the web UI does not update the system prompt for current or future conversations

ANSI coloring causes log string to break

Workspace embed loop: AuthFailed hint is OpenAI-specific but error can come from NEAR AI / Bedrock too

OpenAI embeddings: /v1/v1/embeddings double-up when base_url already ends in /v1

ironclaw doctor: Bedrock embeddings fall through to OPENAI_API_KEY check

embed_batch overrides skip max_input_length check per item

Unknown embedding provider names silently route to OpenAI

Bedrock embeddings ignore DB/TOML model setting

Settings Telegram pairing approval shows duplicate success toasts

Invalid Gmail token shows success/activated toast

Gmail auth gate shows inconsistent UI: OAuth link in one thread, manual token input in another

Chat re-prompts `tool_install(gmail)` even though Gmail is already installed

Failed `tool_install` calls are shown as successful after page refresh

Denying `tool_install(gmail)` once re-prompts the same approval and final response asks user to approve after repeated denial

v0.28.2 macOS prebuilt: gateway never binds despite config + doctor reporting it enabled

[Deferred] Reborn: route web chat send through product-live workflow

[Deferred] Reborn: roll product-live workflow to CLI, Telegram, and webhooks