fix: allow HuggingFace Spaces iframe embedding (cookies, CSP, CSRF)

feat: add awaiting_owner task status detection (#428)

feat: add Dunk It button animation with CSS transitions (#427)

feat: discover and display per-agent workspace skill roots (#426)

fix: remove CSP nonce from style-src to unblock reagraph canvas (#425)

fix: add workspace skill root to skill-sync.ts (#411)

feat: add workspace skill root and root-based filtering to Skills Hub (#408)

fix: migrate clawdbot CLI calls to gateway RPC and improve session labels (#407)

feat: GNAP sync engine for git-native task persistence (#396)

feat: hybrid mode — show gateway + local sessions simultaneously (#392)

fix(gateway): probe /api/health instead of root URL (#394)

feat: task assignment session targeting (#399)

fix: reduce server memory footprint (#405)

fix: remove duplicate task title constraint, improve delete handling and scrolling (#386)

fix: use gateway call agent for notification delivery (#381)

fix: scope memory health diagnostics to allowed prefixes (#367)

fix: fetch notifications immediately when recipient changes (#380)

fix: stop forcing dangerouslyDisableDeviceAuth + fix exec security value

fix: docker compose pids location + clear stale update banner

fix: unify GitHub sync token resolution with integrations env file

feat(tasks): classify task complexity and route to appropriate model tier

test: add gateway health history e2e + utility unit tests

fix(tasks): use --expect-final for agent dispatch and Aegis review

fix: show all agents in command select, disable those without active session

fix(ui): improve agent panel empty state with discovery hints (#348)

fix: cron panel crash on missing schedule + doctor parser false positive (#347)

fix(gateway): resolve Docker connectivity — 404 endpoints, EROFS write, missing OPENCLAW_HOME (#343)

test: add coverage for pure utility modules, fix Vitest 60% threshold (#339)

fix(db): add busy_timeout pragma and guard build-phase eager init (#337)

fix(onboarding): use POST for gateway health check in wizard (#334)

feat(gateway): detect port-based Tailscale Serve proxies (#330)

fix: prefer explicit public gateway websocket url (#325)

feat: full i18n — 1752 keys across 10 languages, all panels translated (#326)

fix(ui): null-safe trim calls in agent model config (#329)

fix(ui): persist doctor banner dismiss with 24h expiry (#328)

fix(docker): Compose v5 pids_limit + copy public assets (#327)

feat: add first-time setup wizard and zero-config startup

fix(tasks): use gateway agent ID instead of display name for dispatch

Merge pull request #313 from builderz-labs/fix/http-tailscale-login

fix(auth): fix HTTP/Tailscale login — opt-in HTTPS redirect, CSP nonce propagation

feat(auth): add trusted reverse proxy / header authentication (#306)

fix(auth): allow login on fresh HTTP Docker installs (#304)

Add Venice AI integration and model support (#301)

feat(gateways): add health history logging and timeline (#300)

test(tasks): replace external repo fixture with neutral local slug

feat(tasks): persist implementation target metadata for deterministic routing (#297)

fix(session-cookie): migrate to __Host- prefix for secure contexts (#294)

feat(gateway-auth): enhance authentication configuration and credential retrieval (#292)

fix(onboarding): enhance wizard layout and content for improved user experience (#293)

fix: allow unauthenticated status health probe for container checks (#295)