feat(#159): add Agent-Level Identity & Attribution

feat(#160): add Real-Time Workload Signals API endpoint

feat(#163): add Agent Self-Diagnostics API endpoint

fix: correct token costing and add provider subscription detection

feat: add validated @mentions for tasks and comments

Merge pull request #155 from builderz-labs/feat/issues-146-143-145

fix: unify agent config save across mission control and gateway

merge: resolve PR conflicts and add OpenClaw offline E2E harness

feat: add workspace discoverability and multi-project task support

fix: add OpenClaw 3.2 compatibility for spawn and gateway health

feat: upgrade local-mode virtual office and flight deck integration

feat: scope workflows and webhooks to workspace (#132)

feat: phase 1 workspace isolation across auth and core APIs (#112)

feat: enrich agent config with workspace identity and tools

feat: aggregate token usage from db with stable agent grouping

fix: sync agent SOUL content with workspace files (#91) (#95)

feat: add Update Available banner with GitHub release check (#94)

fix: task board SSE wiring, priority enum, webhook event, auto-advance, parallel broadcast (#73) (#89)

fix: deduplicate sessions by sessionId and add task edit modal (#86)

fix: healthcheck auth, secure cookie auto-detect, model object crash (#84)

feat: add local mode auto-detection for no-gateway users (#83)

fix: cherry-pick improvements from PR #57 (#71)

feat: audit hardening, webhook retry, and local Claude session tracking (#68)

feat: add GitHub Issues sync (Phase 1, Issue #58)

feat: add direct CLI integration for gateway-free tool connections

feat: add OpenAPI 3.1 documentation with Scalar UI

feat: add per-agent cost breakdown panel

feat: v1.2.0 — validation hardening, unit tests, quality improvements

fix: scrub deployment-specific data from public repo

fix: patch command injection, missing rate limit, Docker build, logger crash

Merge remote-tracking branch 'origin/main' into feat/medium-priority-v1.1

feat: error boundaries, pino logger, a11y, HSTS, zod validation, export limits

feat: add Docker support, session controls, model catalog, API rate limiting

chore: CODE_OF_CONDUCT, issue templates, DELETE patterns, limit caps, CSRF origin check

fix: strict mode, test stubs, pagination counts, N+1 queries, CSP hardening

fix: remove legacy auth, add login rate limiting, block SSRF metadata, parameterize migration SQL

fix: add auth checks on all GET endpoints, timing-safe comparisons, and XSS sanitization

feat: initial open-source release