fix: remove CSP nonce from style-src to unblock reagraph canvas (#425)

feat: GNAP sync engine for git-native task persistence (#396)

fix: reduce server memory footprint (#405)

fix: docker compose pids location + clear stale update banner

fix: unify GitHub sync token resolution with integrations env file

fix: cron panel crash on missing schedule + doctor parser false positive (#347)

test: add coverage for pure utility modules, fix Vitest 60% threshold (#339)

fix(db): add busy_timeout pragma and guard build-phase eager init (#337)

feat(gateway): detect port-based Tailscale Serve proxies (#330)

fix(ui): null-safe trim calls in agent model config (#329)

fix(ui): persist doctor banner dismiss with 24h expiry (#328)

fix(docker): Compose v5 pids_limit + copy public assets (#327)

fix(auth): fix HTTP/Tailscale login — opt-in HTTPS redirect, CSP nonce propagation

fix(auth): allow login on fresh HTTP Docker installs (#304)

Add Venice AI integration and model support (#301)

test(tasks): replace external repo fixture with neutral local slug

feat(tasks): persist implementation target metadata for deterministic routing (#297)

fix: dynamic coordinator routing + boxed doctor parsing (#279)

feat(refactor): ready for manual QA after main sync (#274)

fix(sync): support commented/trailing-comma OpenClaw config (#235)

fix(security): enforce server-side actor identity (#224)

chore: merge main into feat/task-outcome-feedback-192 to resolve PR #207 conflicts

feat(tasks): add outcome tracking and feedback analytics

feat(costs): add task-level token attribution and task-cost rollups

fix(gateway): use stored token for websocket connect payload

fix(gateway): improve remote websocket URL handling and client-id errors

Merge pull request #201 from builderz-labs/fix/184-assignment-status-normalization

fix(tasks): auto-normalize assignment status transitions

fix: correct token costing and add provider subscription detection

feat: add validated @mentions for tasks and comments

fix: resolve cron calendar and auth regressions from open issues

fix: support AUTH_PASS_B64 for seeded admin password

feat: phase 1 workspace isolation across auth and core APIs (#112)

feat: audit hardening, webhook retry, and local Claude session tracking (#68)

feat: v1.2.0 — validation hardening, unit tests, quality improvements

fix: strict mode, test stubs, pagination counts, N+1 queries, CSP hardening