chore(main): release agent-engine 1.0.0

[github-actions]

🤖 I have created a release beepboop

1.0.0 (2026-09-01)

⚠ BREAKING CHANGES

• adr: GET /conversations response shape changed from flat list [ConversationSummary] to paginated envelope { items: [ConversationSummary], next_cursor: str | null }
• manager:X-Agent-Chat-User and the widget's user attribute are removed. Every conversation route now requires a verified token; requests without one are 401. Conversations already stored under unverified ids become unreachable rather than exposed.

Features

• agent_manager: add pagination and lazy loading for chat history (#116) (4e005be)
• agent_manager: add pagination and lazy loading for chat history (#116) (984eb09)
• agent-manager: auto-generate conversation titles from the first message (5f7257b)
• agent-manager: auto-generate conversation titles from the first message (279b040), closes#117
• approvals: add can_run_transition predicate (6c8e0e9)
• auth: carry the caller's own credential through to plugin code (90aadab)
• auth: carry the caller's own credential through to plugin code (52b146d)
• cli: handle tool approvals in remote chat (917ba1d)
• cli: handle tool approvals in remote chat (c53199c)
• dev: native development loop with watch and IDE debugging (11faa51)
• dev: native development loop with watch and IDE debugging (53ea8bf)
• engine: add resumable approval lifecycle (6fa8554)
• engine: make the repository the source of truth for tool usage (2c13948)
• engine: resolve prompt variables for orchestrators, not just agents (aae8238)
• engine: resolve prompt variables for orchestrators, not just agents (d87b3f5)
• expose manager playground route (82c405f)
• manager: add immutable conversation lifecycle (1122e83)
• manager: adopt a visitor's conversations when they sign in (81c40c1)
• manager: choose the tool-usage backend in the composition root (3667456)
• manager: require a verified identity on every conversation route (6e3c9ef)
• manager: resume and persist approval decisions (ee6d98c)
• tool-usage: own execution metadata in a dedicated subsystem (f41df6c)
• widget: add human approval actions (ca416af)
• widget: report identity failures instead of silently degrading (b2e28ea)
• widget: report identity failures instead of silently degrading (9d3d6cc)

Bug Fixes

• agent_manager: address review feedback on pagination for PR #124 (#116) (3b2c7b0)
• agent-manager: deliver the generated title over SSE instead of racing it (71f332e)
• agent-manager: forward full model config to the title generator (058d190)
• agent-manager: make title delivery lifecycle-safe (57da8f8)
• api: allow empty body on approve/reject endpoints (712b7d7)
• api: recover the original result on a retried approval decision (0078ca1)
• api: recover the original result on a retried approval decision (5b0e219)
• api: sanitize raw tool exception text to generic error in ToolRecord (4959cfc)
• api: sanitize raw tool exception text to generic error in ToolRecord (24cd005)
• api: santize unexpected failures during approval recovery (a81c797)
• approvals: make run registration atomic (5b67303)
• auth: accept the host token shapes the sub bug was hiding (d8e1db1)
• auth: let an explicit host bearer token outrank the session cookie (3a49342)
• auth: let the host session cookie outrank a visitor pass (c09d3bf)
• auth: stop unconditionally requiring the sub claim before ClaimMapping runs (4697e1a)
• cli: expect agentctl's local caller id in its digested form (0f6bb5b)
• cli: validate config before serving (b172b1a)
• cli: validate config before serving (5f1442f)
• config: rename AGENT_* env vars to EXTRA_* with backward-compat deprecation warnings (a2f20d1)
• config: rename AGENT_env vars to EXTRA_ with backward-compat deprecation warning (c6d2015)
• engine: align run repository and stream contracts (374874f)
• engine: cancel abandoned streaming runs (5d9c5f1)
• engine: extract clean text from MCP tool results instead of stri… (c8667a4)
• engine: extract clean text from MCP tool results instead of stringifying content blocks (763a514)
• engine: unify streamed resume cancellation (3b82d7b)
• explain why using extra (d72f8a2)
• forward the approver's credential on the engine's own approval endpoints (3593608)
• generate: report unreferenced tools (2581c0e)
• generate: report unreferenced tools (cc80456)
• hitl: address approval review feedback (41fc836)
• keep the credential out of AuthContext's repr (bec5c30)
• logging: align uvicorn/third-party logs with structured formatter (90711ab)
• logging: make configure_logging own the root handler unconditionally (861c60f)
• manager: adapt cancellation errors after rebase (f2834b1)
• manager: adapt two upstream tests to the Principal signature (9d762ac)
• manager: close two cancellation gaps on the resume and failure paths (c312837)
• manager: let post-final stream failures propagate (2e1a392)
• manager: log failed identity verification (87087eb)
• manager: persist and sanitize final stream failures (73be056)
• manager: share one token resolution, and bundle what the HTTP edge needs (08f23f6)
• parser: reject unknown and misplaced YAML keys during spec validation (016f89d)
• parser: reject unknown and misplaced YAML keys during spec validation (c981c57)
• runs: expire terminal in-memory run records (8193ad8)
• runs: expire terminal in-memory run records (e4b2484)
• test: resolve mypy typecheck errors in test_repository_contract.py (a8f8352)
• tests: annotate yield fixture as Iterator[None] (3e27ab0)
• tool-usage: address review feedback (00d587c)
• type run status as RunStatus end to end (143adcd)
• widget: add drawer error notice and retry UI, and expand contract tests (b5e7578)
• widget: always clear visitor pass after successful cookie-mode link (5429976)
• widget: avoid crypto.randomUUID crash outside secure contexts (46a98ce)
• widget: avoid crypto.randomUUID crash outside secure contexts (da666bc)
• widget: enable zero-code cookie mode visitor history hand-off (68c776f)
• widget: ensure same-SPA cookie login hand-off and await visitor pass claim (41ce7ae)
• widget: express an off boolean by absence, as HTML means it (590dff7)
• widget: hide internal tool provider labels (5166956)
• widget: hide tool provider labels (3a5f3a2)
• widget: honour an explicit require-identity="false", and stop claiming an outcome (d5d56a1)
• widget: keep active resume controls available (572740c)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (18a4c04)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (4682781)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (8b3884b)
• widget: prevent per-request token resolution race in cookie mode while keeping same-SPA cookie login hand-off (408cb43)
• widget: re-resolve identity when a SPA signs a user in (5ea7134)
• widget: re-resolve identity when a SPA signs a user in (2d8a037)
• widget: replace magic cooldown with event-driven cookie tracking and deterministic history hand-off (852be0c)
• widget: restrict automatic visitor pass claim in tokenSource to cookie mode (e29329d)
• widget: throttle unauthenticated claimVisitorHistory retries in cookie mode (8d05239)

Performance Improvements

• manager: make reading history cost one branch walk and one run lookup (2600ee2)
• parser: optimize _validate_unknown_keys loop (d821d6b)

Reverts

• manager: restore the persistent SQLite default (0d8b4ae)

Documentation

• adr: add ADR 0003 for chat history keyset pagination (ace375d)
• adr: rename ADR 0003 to 0003-cursor-pagination-and-list-response-envelope.md (df28800)
• align architecture with modular packages (28dd390)
• hitl: document approval actions and lifecycle (6e221ac)
• lifecycle: record cancellation and branch contracts (cac3c15)
• make the identity page a task, not a reference (59a7fce)
• readme: address PR #47 review — product hero, graph value, runnable quick start (24de784)
• readme: reposition around "Make your product queryable" (1f39527)
• refine README mark the word zero in the subtitle (651591e)
• refine README messaging and simplify value proposition (20362d8)
• refine README quick start section (0552bb4)
• refine README remove agentctl command (d499f85)
• refine the hero README messaging and simplify value proposition (59e5bd9)
• restore architectural rationale flagged in review (bf9d25b)
• runs: document repository coordination boundary (7f099a1)
• simplify README messaging and clarify Extra's AI specialist architecture (127199b)
• state what begin_execution's boolean return means (15a9ad4)
• tool-usage: record the execution-metadata architecture (f9d88e9)
• trim the identity page to the happy path (d604aeb)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 I have created a release beepboop

1.0.0 (2026-09-01)

⚠ BREAKING CHANGES

• adr: GET /conversations response shape changed from flat list [ConversationSummary] to paginated envelope { items: [ConversationSummary], next_cursor: str | null }
• manager:X-Agent-Chat-User and the widget's user attribute are removed. Every conversation route now requires a verified token; requests without one are 401. Conversations already stored under unverified ids become unreachable rather than exposed.

Features

• agent_manager: add pagination and lazy loading for chat history (#116) (4e005be)
• agent_manager: add pagination and lazy loading for chat history (#116) (984eb09)
• agent-manager: auto-generate conversation titles from the first message (5f7257b)
• agent-manager: auto-generate conversation titles from the first message (279b040), closes#117
• approvals: add can_run_transition predicate (6c8e0e9)
• auth: carry the caller's own credential through to plugin code (90aadab)
• auth: carry the caller's own credential through to plugin code (52b146d)
• cli: handle tool approvals in remote chat (917ba1d)
• cli: handle tool approvals in remote chat (c53199c)
• dev: native development loop with watch and IDE debugging (11faa51)
• dev: native development loop with watch and IDE debugging (53ea8bf)
• engine: add resumable approval lifecycle (6fa8554)
• engine: make the repository the source of truth for tool usage (2c13948)
• engine: resolve prompt variables for orchestrators, not just agents (aae8238)
• engine: resolve prompt variables for orchestrators, not just agents (d87b3f5)
• expose manager playground route (82c405f)
• manager: add immutable conversation lifecycle (1122e83)
• manager: adopt a visitor's conversations when they sign in (81c40c1)
• manager: choose the tool-usage backend in the composition root (3667456)
• manager: require a verified identity on every conversation route (6e3c9ef)
• manager: resume and persist approval decisions (ee6d98c)
• tool-usage: own execution metadata in a dedicated subsystem (f41df6c)
• widget: add human approval actions (ca416af)
• widget: report identity failures instead of silently degrading (b2e28ea)
• widget: report identity failures instead of silently degrading (9d3d6cc)

Bug Fixes

• agent_manager: address review feedback on pagination for PR #124 (#116) (3b2c7b0)
• agent-manager: deliver the generated title over SSE instead of racing it (71f332e)
• agent-manager: forward full model config to the title generator (058d190)
• agent-manager: make title delivery lifecycle-safe (57da8f8)
• api: allow empty body on approve/reject endpoints (712b7d7)
• api: recover the original result on a retried approval decision (0078ca1)
• api: recover the original result on a retried approval decision (5b0e219)
• api: sanitize raw tool exception text to generic error in ToolRecord (4959cfc)
• api: sanitize raw tool exception text to generic error in ToolRecord (24cd005)
• api: santize unexpected failures during approval recovery (a81c797)
• approvals: make run registration atomic (5b67303)
• auth: accept the host token shapes the sub bug was hiding (d8e1db1)
• auth: let an explicit host bearer token outrank the session cookie (3a49342)
• auth: let the host session cookie outrank a visitor pass (c09d3bf)
• auth: stop unconditionally requiring the sub claim before ClaimMapping runs (4697e1a)
• cli: expect agentctl's local caller id in its digested form (0f6bb5b)
• cli: validate config before serving (b172b1a)
• cli: validate config before serving (5f1442f)
• config: rename AGENT_* env vars to EXTRA_* with backward-compat deprecation warnings (a2f20d1)
• config: rename AGENT_env vars to EXTRA_ with backward-compat deprecation warning (c6d2015)
• engine: align run repository and stream contracts (374874f)
• engine: cancel abandoned streaming runs (5d9c5f1)
• engine: extract clean text from MCP tool results instead of stri… (c8667a4)
• engine: extract clean text from MCP tool results instead of stringifying content blocks (763a514)
• engine: unify streamed resume cancellation (3b82d7b)
• explain why using extra (d72f8a2)
• forward the approver's credential on the engine's own approval endpoints (3593608)
• generate: report unreferenced tools (2581c0e)
• generate: report unreferenced tools (cc80456)
• hitl: address approval review feedback (41fc836)
• keep the credential out of AuthContext's repr (bec5c30)
• logging: align uvicorn/third-party logs with structured formatter (90711ab)
• logging: make configure_logging own the root handler unconditionally (861c60f)
• manager: adapt cancellation errors after rebase (f2834b1)
• manager: adapt two upstream tests to the Principal signature (9d762ac)
• manager: close two cancellation gaps on the resume and failure paths (c312837)
• manager: let post-final stream failures propagate (2e1a392)
• manager: log failed identity verification (87087eb)
• manager: persist and sanitize final stream failures (73be056)
• manager: share one token resolution, and bundle what the HTTP edge needs (08f23f6)
• parser: reject unknown and misplaced YAML keys during spec validation (016f89d)
• parser: reject unknown and misplaced YAML keys during spec validation (c981c57)
• runs: expire terminal in-memory run records (8193ad8)
• runs: expire terminal in-memory run records (e4b2484)
• test: resolve mypy typecheck errors in test_repository_contract.py (a8f8352)
• tests: annotate yield fixture as Iterator[None] (3e27ab0)
• tool-usage: address review feedback (00d587c)
• type run status as RunStatus end to end (143adcd)
• widget: add drawer error notice and retry UI, and expand contract tests (b5e7578)
• widget: always clear visitor pass after successful cookie-mode link (5429976)
• widget: avoid crypto.randomUUID crash outside secure contexts (46a98ce)
• widget: avoid crypto.randomUUID crash outside secure contexts (da666bc)
• widget: enable zero-code cookie mode visitor history hand-off (68c776f)
• widget: ensure same-SPA cookie login hand-off and await visitor pass claim (41ce7ae)
• widget: express an off boolean by absence, as HTML means it (590dff7)
• widget: hide internal tool provider labels (5166956)
• widget: hide tool provider labels (3a5f3a2)
• widget: honour an explicit require-identity="false", and stop claiming an outcome (d5d56a1)
• widget: keep active resume controls available (572740c)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (18a4c04)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (4682781)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (8b3884b)
• widget: prevent per-request token resolution race in cookie mode while keeping same-SPA cookie login hand-off (408cb43)
• widget: re-resolve identity when a SPA signs a user in (5ea7134)
• widget: re-resolve identity when a SPA signs a user in (2d8a037)
• widget: replace magic cooldown with event-driven cookie tracking and deterministic history hand-off (852be0c)
• widget: restrict automatic visitor pass claim in tokenSource to cookie mode (e29329d)
• widget: throttle unauthenticated claimVisitorHistory retries in cookie mode (8d05239)

Performance Improvements

• manager: make reading history cost one branch walk and one run lookup (2600ee2)
• parser: optimize _validate_unknown_keys loop (d821d6b)

Reverts

• manager: restore the persistent SQLite default (0d8b4ae)

Documentation

• adr: add ADR 0003 for chat history keyset pagination (ace375d)
• adr: rename ADR 0003 to 0003-cursor-pagination-and-list-response-envelope.md (df28800)
• align architecture with modular packages (28dd390)
• hitl: document approval actions and lifecycle (6e221ac)
• lifecycle: record cancellation and branch contracts (cac3c15)
• make the identity page a task, not a reference (59a7fce)
• readme: address PR #47 review — product hero, graph value, runnable quick start (24de784)
• readme: reposition around "Make your product queryable" (1f39527)
• refine README mark the word zero in the subtitle (651591e)
• refine README messaging and simplify value proposition (20362d8)
• refine README quick start section (0552bb4)
• refine README remove agentctl command (d499f85)
• refine the hero README messaging and simplify value proposition (59e5bd9)
• restore architectural rationale flagged in review (bf9d25b)
• runs: document repository coordination boundary (7f099a1)
• simplify README messaging and clarify Extra's AI specialist architecture (127199b)
• state what begin_execution's boolean return means (15a9ad4)
• tool-usage: record the execution-metadata architecture (f9d88e9)
• trim the identity page to the happy path (d604aeb)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 I have created a release beepboop

1.0.0 (2026-09-01)

⚠ BREAKING CHANGES

• adr: GET /conversations response shape changed from flat list [ConversationSummary] to paginated envelope { items: [ConversationSummary], next_cursor: str | null }
• manager:X-Agent-Chat-User and the widget's user attribute are removed. Every conversation route now requires a verified token; requests without one are 401. Conversations already stored under unverified ids become unreachable rather than exposed.

Features

• agent_manager: add pagination and lazy loading for chat history (#116) (4e005be)
• agent_manager: add pagination and lazy loading for chat history (#116) (984eb09)
• agent-manager: auto-generate conversation titles from the first message (5f7257b)
• agent-manager: auto-generate conversation titles from the first message (279b040), closes#117
• approvals: add can_run_transition predicate (6c8e0e9)
• auth: carry the caller's own credential through to plugin code (90aadab)
• auth: carry the caller's own credential through to plugin code (52b146d)
• cli: handle tool approvals in remote chat (917ba1d)
• cli: handle tool approvals in remote chat (c53199c)
• dev: native development loop with watch and IDE debugging (11faa51)
• dev: native development loop with watch and IDE debugging (53ea8bf)
• engine: add resumable approval lifecycle (6fa8554)
• engine: make the repository the source of truth for tool usage (2c13948)
• engine: resolve prompt variables for orchestrators, not just agents (aae8238)
• engine: resolve prompt variables for orchestrators, not just agents (d87b3f5)
• expose manager playground route (82c405f)
• manager: add immutable conversation lifecycle (1122e83)
• manager: adopt a visitor's conversations when they sign in (81c40c1)
• manager: choose the tool-usage backend in the composition root (3667456)
• manager: require a verified identity on every conversation route (6e3c9ef)
• manager: resume and persist approval decisions (ee6d98c)
• tool-usage: own execution metadata in a dedicated subsystem (f41df6c)
• widget: add human approval actions (ca416af)
• widget: report identity failures instead of silently degrading (b2e28ea)
• widget: report identity failures instead of silently degrading (9d3d6cc)

Bug Fixes

• agent_manager: address review feedback on pagination for PR #124 (#116) (3b2c7b0)
• agent-manager: deliver the generated title over SSE instead of racing it (71f332e)
• agent-manager: forward full model config to the title generator (058d190)
• agent-manager: make title delivery lifecycle-safe (57da8f8)
• api: allow empty body on approve/reject endpoints (712b7d7)
• api: recover the original result on a retried approval decision (0078ca1)
• api: recover the original result on a retried approval decision (5b0e219)
• api: sanitize raw tool exception text to generic error in ToolRecord (4959cfc)
• api: sanitize raw tool exception text to generic error in ToolRecord (24cd005)
• api: santize unexpected failures during approval recovery (a81c797)
• approvals: make run registration atomic (5b67303)
• auth: accept the host token shapes the sub bug was hiding (d8e1db1)
• auth: let an explicit host bearer token outrank the session cookie (3a49342)
• auth: let the host session cookie outrank a visitor pass (c09d3bf)
• auth: stop unconditionally requiring the sub claim before ClaimMapping runs (4697e1a)
• cli: expect agentctl's local caller id in its digested form (0f6bb5b)
• cli: validate config before serving (b172b1a)
• cli: validate config before serving (5f1442f)
• config: rename AGENT_* env vars to EXTRA_* with backward-compat deprecation warnings (a2f20d1)
• config: rename AGENT_env vars to EXTRA_ with backward-compat deprecation warning (c6d2015)
• engine: align run repository and stream contracts (374874f)
• engine: cancel abandoned streaming runs (5d9c5f1)
• engine: extract clean text from MCP tool results instead of stri… (c8667a4)
• engine: extract clean text from MCP tool results instead of stringifying content blocks (763a514)
• engine: unify streamed resume cancellation (3b82d7b)
• explain why using extra (d72f8a2)
• forward the approver's credential on the engine's own approval endpoints (3593608)
• generate: report unreferenced tools (2581c0e)
• generate: report unreferenced tools (cc80456)
• hitl: address approval review feedback (41fc836)
• keep the credential out of AuthContext's repr (bec5c30)
• logging: align uvicorn/third-party logs with structured formatter (90711ab)
• logging: make configure_logging own the root handler unconditionally (861c60f)
• manager: adapt cancellation errors after rebase (f2834b1)
• manager: adapt two upstream tests to the Principal signature (9d762ac)
• manager: close two cancellation gaps on the resume and failure paths (c312837)
• manager: let post-final stream failures propagate (2e1a392)
• manager: log failed identity verification (87087eb)
• manager: persist and sanitize final stream failures (73be056)
• manager: share one token resolution, and bundle what the HTTP edge needs (08f23f6)
• parser: reject unknown and misplaced YAML keys during spec validation (016f89d)
• parser: reject unknown and misplaced YAML keys during spec validation (c981c57)
• runs: expire terminal in-memory run records (8193ad8)
• runs: expire terminal in-memory run records (e4b2484)
• test: resolve mypy typecheck errors in test_repository_contract.py (a8f8352)
• tests: annotate yield fixture as Iterator[None] (3e27ab0)
• tool-usage: address review feedback (00d587c)
• type run status as RunStatus end to end (143adcd)
• widget: add drawer error notice and retry UI, and expand contract tests (b5e7578)
• widget: always clear visitor pass after successful cookie-mode link (5429976)
• widget: avoid crypto.randomUUID crash outside secure contexts (46a98ce)
• widget: avoid crypto.randomUUID crash outside secure contexts (da666bc)
• widget: enable zero-code cookie mode visitor history hand-off (68c776f)
• widget: ensure same-SPA cookie login hand-off and await visitor pass claim (41ce7ae)
• widget: express an off boolean by absence, as HTML means it (590dff7)
• widget: hide internal tool provider labels (5166956)
• widget: hide tool provider labels (3a5f3a2)
• widget: honour an explicit require-identity="false", and stop claiming an outcome (d5d56a1)
• widget: keep active resume controls available (572740c)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (18a4c04)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (4682781)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (8b3884b)
• widget: prevent per-request token resolution race in cookie mode while keeping same-SPA cookie login hand-off (408cb43)
• widget: re-resolve identity when a SPA signs a user in (5ea7134)
• widget: re-resolve identity when a SPA signs a user in (2d8a037)
• widget: replace magic cooldown with event-driven cookie tracking and deterministic history hand-off (852be0c)
• widget: restrict automatic visitor pass claim in tokenSource to cookie mode (e29329d)
• widget: throttle unauthenticated claimVisitorHistory retries in cookie mode (8d05239)

Performance Improvements

• manager: make reading history cost one branch walk and one run lookup (2600ee2)
• parser: optimize _validate_unknown_keys loop (d821d6b)

Reverts

• manager: restore the persistent SQLite default (0d8b4ae)

Documentation

• adr: add ADR 0003 for chat history keyset pagination (ace375d)
• adr: rename ADR 0003 to 0003-cursor-pagination-and-list-response-envelope.md (df28800)
• align architecture with modular packages (28dd390)
• hitl: document approval actions and lifecycle (6e221ac)
• lifecycle: record cancellation and branch contracts (cac3c15)
• make the identity page a task, not a reference (59a7fce)
• readme: address PR #47 review — product hero, graph value, runnable quick start (24de784)
• readme: reposition around "Make your product queryable" (1f39527)
• refine README mark the word zero in the subtitle (651591e)
• refine README messaging and simplify value proposition (20362d8)
• refine README quick start section (0552bb4)
• refine README remove agentctl command (d499f85)
• refine the hero README messaging and simplify value proposition (59e5bd9)
• restore architectural rationale flagged in review (bf9d25b)
• runs: document repository coordination boundary (7f099a1)
• simplify README messaging and clarify Extra's AI specialist architecture (127199b)
• state what begin_execution's boolean return means (15a9ad4)
• tool-usage: record the execution-metadata architecture (f9d88e9)
• trim the identity page to the happy path (d604aeb)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 I have created a release beepboop

1.0.0 (2026-09-01)

⚠ BREAKING CHANGES

• adr: GET /conversations response shape changed from flat list [ConversationSummary] to paginated envelope { items: [ConversationSummary], next_cursor: str | null }
• manager:X-Agent-Chat-User and the widget's user attribute are removed. Every conversation route now requires a verified token; requests without one are 401. Conversations already stored under unverified ids become unreachable rather than exposed.

Features

• agent_manager: add pagination and lazy loading for chat history (#116) (4e005be)
• agent_manager: add pagination and lazy loading for chat history (#116) (984eb09)
• agent-manager: auto-generate conversation titles from the first message (5f7257b)
• agent-manager: auto-generate conversation titles from the first message (279b040), closes#117
• approvals: add can_run_transition predicate (6c8e0e9)
• auth: carry the caller's own credential through to plugin code (90aadab)
• auth: carry the caller's own credential through to plugin code (52b146d)
• cli: handle tool approvals in remote chat (917ba1d)
• cli: handle tool approvals in remote chat (c53199c)
• dev: native development loop with watch and IDE debugging (11faa51)
• dev: native development loop with watch and IDE debugging (53ea8bf)
• engine: add resumable approval lifecycle (6fa8554)
• engine: make the repository the source of truth for tool usage (2c13948)
• engine: resolve prompt variables for orchestrators, not just agents (aae8238)
• engine: resolve prompt variables for orchestrators, not just agents (d87b3f5)
• expose manager playground route (82c405f)
• manager: add immutable conversation lifecycle (1122e83)
• manager: adopt a visitor's conversations when they sign in (81c40c1)
• manager: choose the tool-usage backend in the composition root (3667456)
• manager: require a verified identity on every conversation route (6e3c9ef)
• manager: resume and persist approval decisions (ee6d98c)
• tool-usage: own execution metadata in a dedicated subsystem (f41df6c)
• widget: add human approval actions (ca416af)
• widget: report identity failures instead of silently degrading (b2e28ea)
• widget: report identity failures instead of silently degrading (9d3d6cc)

Bug Fixes

• agent_manager: address review feedback on pagination for PR #124 (#116) (3b2c7b0)
• agent-manager: deliver the generated title over SSE instead of racing it (71f332e)
• agent-manager: forward full model config to the title generator (058d190)
• agent-manager: make title delivery lifecycle-safe (57da8f8)
• api: allow empty body on approve/reject endpoints (712b7d7)
• api: recover the original result on a retried approval decision (0078ca1)
• api: recover the original result on a retried approval decision (5b0e219)
• api: sanitize raw tool exception text to generic error in ToolRecord (4959cfc)
• api: sanitize raw tool exception text to generic error in ToolRecord (24cd005)
• api: santize unexpected failures during approval recovery (a81c797)
• approvals: make run registration atomic (5b67303)
• auth: accept the host token shapes the sub bug was hiding (d8e1db1)
• auth: let an explicit host bearer token outrank the session cookie (3a49342)
• auth: let the host session cookie outrank a visitor pass (c09d3bf)
• auth: stop unconditionally requiring the sub claim before ClaimMapping runs (4697e1a)
• cli: expect agentctl's local caller id in its digested form (0f6bb5b)
• cli: validate config before serving (b172b1a)
• cli: validate config before serving (5f1442f)
• config: rename AGENT_* env vars to EXTRA_* with backward-compat deprecation warnings (a2f20d1)
• config: rename AGENT_env vars to EXTRA_ with backward-compat deprecation warning (c6d2015)
• engine: align run repository and stream contracts (374874f)
• engine: cancel abandoned streaming runs (5d9c5f1)
• engine: extract clean text from MCP tool results instead of stri… (c8667a4)
• engine: extract clean text from MCP tool results instead of stringifying content blocks (763a514)
• engine: unify streamed resume cancellation (3b82d7b)
• explain why using extra (d72f8a2)
• forward the approver's credential on the engine's own approval endpoints (3593608)
• generate: report unreferenced tools (2581c0e)
• generate: report unreferenced tools (cc80456)
• hitl: address approval review feedback (41fc836)
• keep the credential out of AuthContext's repr (bec5c30)
• logging: align uvicorn/third-party logs with structured formatter (90711ab)
• logging: make configure_logging own the root handler unconditionally (861c60f)
• manager: adapt cancellation errors after rebase (f2834b1)
• manager: adapt two upstream tests to the Principal signature (9d762ac)
• manager: close two cancellation gaps on the resume and failure paths (c312837)
• manager: let post-final stream failures propagate (2e1a392)
• manager: log failed identity verification (87087eb)
• manager: persist and sanitize final stream failures (73be056)
• manager: share one token resolution, and bundle what the HTTP edge needs (08f23f6)
• parser: reject unknown and misplaced YAML keys during spec validation (016f89d)
• parser: reject unknown and misplaced YAML keys during spec validation (c981c57)
• runs: expire terminal in-memory run records (8193ad8)
• runs: expire terminal in-memory run records (e4b2484)
• test: resolve mypy typecheck errors in test_repository_contract.py (a8f8352)
• tests: annotate yield fixture as Iterator[None] (3e27ab0)
• tool-usage: address review feedback (00d587c)
• type run status as RunStatus end to end (143adcd)
• widget: add drawer error notice and retry UI, and expand contract tests (b5e7578)
• widget: always clear visitor pass after successful cookie-mode link (5429976)
• widget: avoid crypto.randomUUID crash outside secure contexts (46a98ce)
• widget: avoid crypto.randomUUID crash outside secure contexts (da666bc)
• widget: enable zero-code cookie mode visitor history hand-off (68c776f)
• widget: ensure same-SPA cookie login hand-off and await visitor pass claim (41ce7ae)
• widget: express an off boolean by absence, as HTML means it (590dff7)
• widget: hide internal tool provider labels (5166956)
• widget: hide tool provider labels (3a5f3a2)
• widget: honour an explicit require-identity="false", and stop claiming an outcome (d5d56a1)
• widget: keep active resume controls available (572740c)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (18a4c04)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (4682781)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (8b3884b)
• widget: prevent per-request token resolution race in cookie mode while keeping same-SPA cookie login hand-off (408cb43)
• widget: re-resolve identity when a SPA signs a user in (5ea7134)
• widget: re-resolve identity when a SPA signs a user in (2d8a037)
• widget: replace magic cooldown with event-driven cookie tracking and deterministic history hand-off (852be0c)
• widget: restrict automatic visitor pass claim in tokenSource to cookie mode (e29329d)
• widget: throttle unauthenticated claimVisitorHistory retries in cookie mode (8d05239)

Performance Improvements

• manager: make reading history cost one branch walk and one run lookup (2600ee2)
• parser: optimize _validate_unknown_keys loop (d821d6b)

Reverts

• manager: restore the persistent SQLite default (0d8b4ae)

Documentation

• adr: add ADR 0003 for chat history keyset pagination (ace375d)
• adr: rename ADR 0003 to 0003-cursor-pagination-and-list-response-envelope.md (df28800)
• align architecture with modular packages (28dd390)
• hitl: document approval actions and lifecycle (6e221ac)
• lifecycle: record cancellation and branch contracts (cac3c15)
• make the identity page a task, not a reference (59a7fce)
• readme: address PR #47 review — product hero, graph value, runnable quick start (24de784)
• readme: reposition around "Make your product queryable" (1f39527)
• refine README mark the word zero in the subtitle (651591e)
• refine README messaging and simplify value proposition (20362d8)
• refine README quick start section (0552bb4)
• refine README remove agentctl command (d499f85)
• refine the hero README messaging and simplify value proposition (59e5bd9)
• restore architectural rationale flagged in review (bf9d25b)
• runs: document repository coordination boundary (7f099a1)
• simplify README messaging and clarify Extra's AI specialist architecture (127199b)
• state what begin_execution's boolean return means (15a9ad4)
• tool-usage: record the execution-metadata architecture (f9d88e9)
• trim the identity page to the happy path (d604aeb)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 I have created a release beepboop

1.0.0 (2026-09-01)

⚠ BREAKING CHANGES

• adr: GET /conversations response shape changed from flat list [ConversationSummary] to paginated envelope { items: [ConversationSummary], next_cursor: str | null }
• manager:X-Agent-Chat-User and the widget's user attribute are removed. Every conversation route now requires a verified token; requests without one are 401. Conversations already stored under unverified ids become unreachable rather than exposed.

Features

• agent_manager: add pagination and lazy loading for chat history (#116) (4e005be)
• agent_manager: add pagination and lazy loading for chat history (#116) (984eb09)
• agent-manager: auto-generate conversation titles from the first message (5f7257b)
• agent-manager: auto-generate conversation titles from the first message (279b040), closes#117
• approvals: add can_run_transition predicate (6c8e0e9)
• auth: carry the caller's own credential through to plugin code (90aadab)
• auth: carry the caller's own credential through to plugin code (52b146d)
• cli: handle tool approvals in remote chat (917ba1d)
• cli: handle tool approvals in remote chat (c53199c)
• dev: native development loop with watch and IDE debugging (11faa51)
• dev: native development loop with watch and IDE debugging (53ea8bf)
• engine: add resumable approval lifecycle (6fa8554)
• engine: make the repository the source of truth for tool usage (2c13948)
• engine: resolve prompt variables for orchestrators, not just agents (aae8238)
• engine: resolve prompt variables for orchestrators, not just agents (d87b3f5)
• expose manager playground route (82c405f)
• manager: add immutable conversation lifecycle (1122e83)
• manager: adopt a visitor's conversations when they sign in (81c40c1)
• manager: choose the tool-usage backend in the composition root (3667456)
• manager: require a verified identity on every conversation route (6e3c9ef)
• manager: resume and persist approval decisions (ee6d98c)
• tool-usage: own execution metadata in a dedicated subsystem (f41df6c)
• widget: add human approval actions (ca416af)
• widget: report identity failures instead of silently degrading (b2e28ea)
• widget: report identity failures instead of silently degrading (9d3d6cc)

Bug Fixes

• agent_manager: address review feedback on pagination for PR #124 (#116) (3b2c7b0)
• agent-manager: deliver the generated title over SSE instead of racing it (71f332e)
• agent-manager: forward full model config to the title generator (058d190)
• agent-manager: make title delivery lifecycle-safe (57da8f8)
• api: allow empty body on approve/reject endpoints (712b7d7)
• api: recover the original result on a retried approval decision (0078ca1)
• api: recover the original result on a retried approval decision (5b0e219)
• api: sanitize raw tool exception text to generic error in ToolRecord (4959cfc)
• api: sanitize raw tool exception text to generic error in ToolRecord (24cd005)
• api: santize unexpected failures during approval recovery (a81c797)
• approvals: make run registration atomic (5b67303)
• auth: accept the host token shapes the sub bug was hiding (d8e1db1)
• auth: let an explicit host bearer token outrank the session cookie (3a49342)
• auth: let the host session cookie outrank a visitor pass (c09d3bf)
• auth: stop unconditionally requiring the sub claim before ClaimMapping runs (4697e1a)
• cli: expect agentctl's local caller id in its digested form (0f6bb5b)
• cli: validate config before serving (b172b1a)
• cli: validate config before serving (5f1442f)
• config: rename AGENT_* env vars to EXTRA_* with backward-compat deprecation warnings (a2f20d1)
• config: rename AGENT_env vars to EXTRA_ with backward-compat deprecation warning (c6d2015)
• engine: align run repository and stream contracts (374874f)
• engine: cancel abandoned streaming runs (5d9c5f1)
• engine: extract clean text from MCP tool results instead of stri… (c8667a4)
• engine: extract clean text from MCP tool results instead of stringifying content blocks (763a514)
• engine: unify streamed resume cancellation (3b82d7b)
• explain why using extra (d72f8a2)
• forward the approver's credential on the engine's own approval endpoints (3593608)
• generate: report unreferenced tools (2581c0e)
• generate: report unreferenced tools (cc80456)
• hitl: address approval review feedback (41fc836)
• keep the credential out of AuthContext's repr (bec5c30)
• logging: align uvicorn/third-party logs with structured formatter (90711ab)
• logging: make configure_logging own the root handler unconditionally (861c60f)
• manager: adapt cancellation errors after rebase (f2834b1)
• manager: adapt two upstream tests to the Principal signature (9d762ac)
• manager: close two cancellation gaps on the resume and failure paths (c312837)
• manager: let post-final stream failures propagate (2e1a392)
• manager: log failed identity verification (87087eb)
• manager: persist and sanitize final stream failures (73be056)
• manager: share one token resolution, and bundle what the HTTP edge needs (08f23f6)
• parser: reject unknown and misplaced YAML keys during spec validation (016f89d)
• parser: reject unknown and misplaced YAML keys during spec validation (c981c57)
• runs: expire terminal in-memory run records (8193ad8)
• runs: expire terminal in-memory run records (e4b2484)
• test: resolve mypy typecheck errors in test_repository_contract.py (a8f8352)
• tests: annotate yield fixture as Iterator[None] (3e27ab0)
• tool-usage: address review feedback (00d587c)
• type run status as RunStatus end to end (143adcd)
• widget: add drawer error notice and retry UI, and expand contract tests (b5e7578)
• widget: always clear visitor pass after successful cookie-mode link (5429976)
• widget: avoid crypto.randomUUID crash outside secure contexts (46a98ce)
• widget: avoid crypto.randomUUID crash outside secure contexts (da666bc)
• widget: enable zero-code cookie mode visitor history hand-off (68c776f)
• widget: ensure same-SPA cookie login hand-off and await visitor pass claim (41ce7ae)
• widget: express an off boolean by absence, as HTML means it (590dff7)
• widget: hide internal tool provider labels (5166956)
• widget: hide tool provider labels (3a5f3a2)
• widget: honour an explicit require-identity="false", and stop claiming an outcome (d5d56a1)
• widget: keep active resume controls available (572740c)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (18a4c04)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (4682781)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (8b3884b)
• widget: prevent per-request token resolution race in cookie mode while keeping same-SPA cookie login hand-off (408cb43)
• widget: re-resolve identity when a SPA signs a user in (5ea7134)
• widget: re-resolve identity when a SPA signs a user in (2d8a037)
• widget: replace magic cooldown with event-driven cookie tracking and deterministic history hand-off (852be0c)
• widget: restrict automatic visitor pass claim in tokenSource to cookie mode (e29329d)
• widget: throttle unauthenticated claimVisitorHistory retries in cookie mode (8d05239)

Performance Improvements

• manager: make reading history cost one branch walk and one run lookup (2600ee2)
• parser: optimize _validate_unknown_keys loop (d821d6b)

Reverts

• manager: restore the persistent SQLite default (0d8b4ae)

Documentation

• adr: add ADR 0003 for chat history keyset pagination (ace375d)
• adr: rename ADR 0003 to 0003-cursor-pagination-and-list-response-envelope.md (df28800)
• align architecture with modular packages (28dd390)
• hitl: document approval actions and lifecycle (6e221ac)
• lifecycle: record cancellation and branch contracts (cac3c15)
• make the identity page a task, not a reference (59a7fce)
• readme: address PR #47 review — product hero, graph value, runnable quick start (24de784)
• readme: reposition around "Make your product queryable" (1f39527)
• refine README mark the word zero in the subtitle (651591e)
• refine README messaging and simplify value proposition (20362d8)
• refine README quick start section (0552bb4)
• refine README remove agentctl command (d499f85)
• refine the hero README messaging and simplify value proposition (59e5bd9)
• restore architectural rationale flagged in review (bf9d25b)
• runs: document repository coordination boundary (7f099a1)
• simplify README messaging and clarify Extra's AI specialist architecture (127199b)
• state what begin_execution's boolean return means (15a9ad4)
• tool-usage: record the execution-metadata architecture (f9d88e9)
• trim the identity page to the happy path (d604aeb)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 I have created a release beepboop

1.0.0 (2026-09-01)

⚠ BREAKING CHANGES

• adr: GET /conversations response shape changed from flat list [ConversationSummary] to paginated envelope { items: [ConversationSummary], next_cursor: str | null }
• manager:X-Agent-Chat-User and the widget's user attribute are removed. Every conversation route now requires a verified token; requests without one are 401. Conversations already stored under unverified ids become unreachable rather than exposed.

Features

• agent_manager: add pagination and lazy loading for chat history (#116) (4e005be)
• agent_manager: add pagination and lazy loading for chat history (#116) (984eb09)
• agent-manager: auto-generate conversation titles from the first message (5f7257b)
• agent-manager: auto-generate conversation titles from the first message (279b040), closes#117
• approvals: add can_run_transition predicate (6c8e0e9)
• auth: carry the caller's own credential through to plugin code (90aadab)
• auth: carry the caller's own credential through to plugin code (52b146d)
• cli: handle tool approvals in remote chat (917ba1d)
• cli: handle tool approvals in remote chat (c53199c)
• dev: native development loop with watch and IDE debugging (11faa51)
• dev: native development loop with watch and IDE debugging (53ea8bf)
• engine: add resumable approval lifecycle (6fa8554)
• engine: make the repository the source of truth for tool usage (2c13948)
• engine: resolve prompt variables for orchestrators, not just agents (aae8238)
• engine: resolve prompt variables for orchestrators, not just agents (d87b3f5)
• expose manager playground route (82c405f)
• manager: add immutable conversation lifecycle (1122e83)
• manager: adopt a visitor's conversations when they sign in (81c40c1)
• manager: choose the tool-usage backend in the composition root (3667456)
• manager: require a verified identity on every conversation route (6e3c9ef)
• manager: resume and persist approval decisions (ee6d98c)
• tool-usage: own execution metadata in a dedicated subsystem (f41df6c)
• widget: add human approval actions (ca416af)
• widget: report identity failures instead of silently degrading (b2e28ea)
• widget: report identity failures instead of silently degrading (9d3d6cc)

Bug Fixes

• agent_manager: address review feedback on pagination for PR #124 (#116) (3b2c7b0)
• agent-manager: deliver the generated title over SSE instead of racing it (71f332e)
• agent-manager: forward full model config to the title generator (058d190)
• agent-manager: make title delivery lifecycle-safe (57da8f8)
• api: allow empty body on approve/reject endpoints (712b7d7)
• api: recover the original result on a retried approval decision (0078ca1)
• api: recover the original result on a retried approval decision (5b0e219)
• api: sanitize raw tool exception text to generic error in ToolRecord (4959cfc)
• api: sanitize raw tool exception text to generic error in ToolRecord (24cd005)
• api: santize unexpected failures during approval recovery (a81c797)
• approvals: make run registration atomic (5b67303)
• auth: accept the host token shapes the sub bug was hiding (d8e1db1)
• auth: let an explicit host bearer token outrank the session cookie (3a49342)
• auth: let the host session cookie outrank a visitor pass (c09d3bf)
• auth: stop unconditionally requiring the sub claim before ClaimMapping runs (4697e1a)
• cli: expect agentctl's local caller id in its digested form (0f6bb5b)
• cli: validate config before serving (b172b1a)
• cli: validate config before serving (5f1442f)
• config: rename AGENT_* env vars to EXTRA_* with backward-compat deprecation warnings (a2f20d1)
• config: rename AGENT_env vars to EXTRA_ with backward-compat deprecation warning (c6d2015)
• engine: align run repository and stream contracts (374874f)
• engine: cancel abandoned streaming runs (5d9c5f1)
• engine: extract clean text from MCP tool results instead of stri… (c8667a4)
• engine: extract clean text from MCP tool results instead of stringifying content blocks (763a514)
• engine: unify streamed resume cancellation (3b82d7b)
• explain why using extra (d72f8a2)
• forward the approver's credential on the engine's own approval endpoints (3593608)
• generate: report unreferenced tools (2581c0e)
• generate: report unreferenced tools (cc80456)
• hitl: address approval review feedback (41fc836)
• keep the credential out of AuthContext's repr (bec5c30)
• logging: align uvicorn/third-party logs with structured formatter (90711ab)
• logging: make configure_logging own the root handler unconditionally (861c60f)
• manager: adapt cancellation errors after rebase (f2834b1)
• manager: adapt two upstream tests to the Principal signature (9d762ac)
• manager: close two cancellation gaps on the resume and failure paths (c312837)
• manager: let post-final stream failures propagate (2e1a392)
• manager: log failed identity verification (87087eb)
• manager: persist and sanitize final stream failures (73be056)
• manager: share one token resolution, and bundle what the HTTP edge needs (08f23f6)
• parser: reject unknown and misplaced YAML keys during spec validation (016f89d)
• parser: reject unknown and misplaced YAML keys during spec validation (c981c57)
• runs: expire terminal in-memory run records (8193ad8)
• runs: expire terminal in-memory run records (e4b2484)
• test: resolve mypy typecheck errors in test_repository_contract.py (a8f8352)
• tests: annotate yield fixture as Iterator[None] (3e27ab0)
• tool-usage: address review feedback (00d587c)
• type run status as RunStatus end to end (143adcd)
• widget: add drawer error notice and retry UI, and expand contract tests (b5e7578)
• widget: always clear visitor pass after successful cookie-mode link (5429976)
• widget: avoid crypto.randomUUID crash outside secure contexts (46a98ce)
• widget: avoid crypto.randomUUID crash outside secure contexts (da666bc)
• widget: enable zero-code cookie mode visitor history hand-off (68c776f)
• widget: ensure same-SPA cookie login hand-off and await visitor pass claim (41ce7ae)
• widget: express an off boolean by absence, as HTML means it (590dff7)
• widget: hide internal tool provider labels (5166956)
• widget: hide tool provider labels (3a5f3a2)
• widget: honour an explicit require-identity="false", and stop claiming an outcome (d5d56a1)
• widget: keep active resume controls available (572740c)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (18a4c04)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (4682781)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (8b3884b)
• widget: prevent per-request token resolution race in cookie mode while keeping same-SPA cookie login hand-off (408cb43)
• widget: re-resolve identity when a SPA signs a user in (5ea7134)
• widget: re-resolve identity when a SPA signs a user in (2d8a037)
• widget: replace magic cooldown with event-driven cookie tracking and deterministic history hand-off (852be0c)
• widget: restrict automatic visitor pass claim in tokenSource to cookie mode (e29329d)
• widget: throttle unauthenticated claimVisitorHistory retries in cookie mode (8d05239)

Performance Improvements

• manager: make reading history cost one branch walk and one run lookup (2600ee2)
• parser: optimize _validate_unknown_keys loop (d821d6b)

Reverts

• manager: restore the persistent SQLite default (0d8b4ae)

Documentation

• adr: add ADR 0003 for chat history keyset pagination (ace375d)
• adr: rename ADR 0003 to 0003-cursor-pagination-and-list-response-envelope.md (df28800)
• align architecture with modular packages (28dd390)
• hitl: document approval actions and lifecycle (6e221ac)
• lifecycle: record cancellation and branch contracts (cac3c15)
• make the identity page a task, not a reference (59a7fce)
• readme: address PR #47 review — product hero, graph value, runnable quick start (24de784)
• readme: reposition around "Make your product queryable" (1f39527)
• refine README mark the word zero in the subtitle (651591e)
• refine README messaging and simplify value proposition (20362d8)
• refine README quick start section (0552bb4)
• refine README remove agentctl command (d499f85)
• refine the hero README messaging and simplify value proposition (59e5bd9)
• restore architectural rationale flagged in review (bf9d25b)
• runs: document repository coordination boundary (7f099a1)
• simplify README messaging and clarify Extra's AI specialist architecture (127199b)
• state what begin_execution's boolean return means (15a9ad4)
• tool-usage: record the execution-metadata architecture (f9d88e9)
• trim the identity page to the happy path (d604aeb)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 I have created a release beepboop

1.0.0 (2026-09-01)

⚠ BREAKING CHANGES

• adr: GET /conversations response shape changed from flat list [ConversationSummary] to paginated envelope { items: [ConversationSummary], next_cursor: str | null }
• manager:X-Agent-Chat-User and the widget's user attribute are removed. Every conversation route now requires a verified token; requests without one are 401. Conversations already stored under unverified ids become unreachable rather than exposed.

Features

• agent_manager: add pagination and lazy loading for chat history (#116) (4e005be)
• agent_manager: add pagination and lazy loading for chat history (#116) (984eb09)
• agent-manager: auto-generate conversation titles from the first message (5f7257b)
• agent-manager: auto-generate conversation titles from the first message (279b040), closes#117
• approvals: add can_run_transition predicate (6c8e0e9)
• auth: carry the caller's own credential through to plugin code (90aadab)
• auth: carry the caller's own credential through to plugin code (52b146d)
• cli: handle tool approvals in remote chat (917ba1d)
• cli: handle tool approvals in remote chat (c53199c)
• dev: native development loop with watch and IDE debugging (11faa51)
• dev: native development loop with watch and IDE debugging (53ea8bf)
• engine: add resumable approval lifecycle (6fa8554)
• engine: make the repository the source of truth for tool usage (2c13948)
• engine: resolve prompt variables for orchestrators, not just agents (aae8238)
• engine: resolve prompt variables for orchestrators, not just agents (d87b3f5)
• expose manager playground route (82c405f)
• manager: add immutable conversation lifecycle (1122e83)
• manager: adopt a visitor's conversations when they sign in (81c40c1)
• manager: choose the tool-usage backend in the composition root (3667456)
• manager: require a verified identity on every conversation route (6e3c9ef)
• manager: resume and persist approval decisions (ee6d98c)
• tool-usage: own execution metadata in a dedicated subsystem (f41df6c)
• widget: add human approval actions (ca416af)
• widget: report identity failures instead of silently degrading (b2e28ea)
• widget: report identity failures instead of silently degrading (9d3d6cc)

Bug Fixes

• agent_manager: address review feedback on pagination for PR #124 (#116) (3b2c7b0)
• agent-manager: deliver the generated title over SSE instead of racing it (71f332e)
• agent-manager: forward full model config to the title generator (058d190)
• agent-manager: make title delivery lifecycle-safe (57da8f8)
• api: allow empty body on approve/reject endpoints (712b7d7)
• api: recover the original result on a retried approval decision (0078ca1)
• api: recover the original result on a retried approval decision (5b0e219)
• api: sanitize raw tool exception text to generic error in ToolRecord (4959cfc)
• api: sanitize raw tool exception text to generic error in ToolRecord (24cd005)
• api: santize unexpected failures during approval recovery (a81c797)
• approvals: make run registration atomic (5b67303)
• auth: accept the host token shapes the sub bug was hiding (d8e1db1)
• auth: let an explicit host bearer token outrank the session cookie (3a49342)
• auth: let the host session cookie outrank a visitor pass (c09d3bf)
• auth: stop unconditionally requiring the sub claim before ClaimMapping runs (4697e1a)
• cli: expect agentctl's local caller id in its digested form (0f6bb5b)
• cli: validate config before serving (b172b1a)
• cli: validate config before serving (5f1442f)
• config: rename AGENT_* env vars to EXTRA_* with backward-compat deprecation warnings (a2f20d1)
• config: rename AGENT_env vars to EXTRA_ with backward-compat deprecation warning (c6d2015)
• engine: align run repository and stream contracts (374874f)
• engine: cancel abandoned streaming runs (5d9c5f1)
• engine: extract clean text from MCP tool results instead of stri… (c8667a4)
• engine: extract clean text from MCP tool results instead of stringifying content blocks (763a514)
• engine: unify streamed resume cancellation (3b82d7b)
• explain why using extra (d72f8a2)
• forward the approver's credential on the engine's own approval endpoints (3593608)
• generate: report unreferenced tools (2581c0e)
• generate: report unreferenced tools (cc80456)
• hitl: address approval review feedback (41fc836)
• keep the credential out of AuthContext's repr (bec5c30)
• logging: align uvicorn/third-party logs with structured formatter (90711ab)
• logging: make configure_logging own the root handler unconditionally (861c60f)
• manager: adapt cancellation errors after rebase (f2834b1)
• manager: adapt two upstream tests to the Principal signature (9d762ac)
• manager: close two cancellation gaps on the resume and failure paths (c312837)
• manager: let post-final stream failures propagate (2e1a392)
• manager: log failed identity verification (87087eb)
• manager: persist and sanitize final stream failures (73be056)
• manager: share one token resolution, and bundle what the HTTP edge needs (08f23f6)
• parser: reject unknown and misplaced YAML keys during spec validation (016f89d)
• parser: reject unknown and misplaced YAML keys during spec validation (c981c57)
• runs: expire terminal in-memory run records (8193ad8)
• runs: expire terminal in-memory run records (e4b2484)
• test: resolve mypy typecheck errors in test_repository_contract.py (a8f8352)
• tests: annotate yield fixture as Iterator[None] (3e27ab0)
• tool-usage: address review feedback (00d587c)
• type run status as RunStatus end to end (143adcd)
• widget: add drawer error notice and retry UI, and expand contract tests (b5e7578)
• widget: always clear visitor pass after successful cookie-mode link (5429976)
• widget: avoid crypto.randomUUID crash outside secure contexts (46a98ce)
• widget: avoid crypto.randomUUID crash outside secure contexts (da666bc)
• widget: enable zero-code cookie mode visitor history hand-off (68c776f)
• widget: ensure same-SPA cookie login hand-off and await visitor pass claim (41ce7ae)
• widget: express an off boolean by absence, as HTML means it (590dff7)
• widget: hide internal tool provider labels (5166956)
• widget: hide tool provider labels (3a5f3a2)
• widget: honour an explicit require-identity="false", and stop claiming an outcome (d5d56a1)
• widget: keep active resume controls available (572740c)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (18a4c04)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (4682781)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (8b3884b)
• widget: prevent per-request token resolution race in cookie mode while keeping same-SPA cookie login hand-off (408cb43)
• widget: re-resolve identity when a SPA signs a user in (5ea7134)
• widget: re-resolve identity when a SPA signs a user in (2d8a037)
• widget: replace magic cooldown with event-driven cookie tracking and deterministic history hand-off (852be0c)
• widget: restrict automatic visitor pass claim in tokenSource to cookie mode (e29329d)
• widget: throttle unauthenticated claimVisitorHistory retries in cookie mode (8d05239)

Performance Improvements

• manager: make reading history cost one branch walk and one run lookup (2600ee2)
• parser: optimize _validate_unknown_keys loop (d821d6b)

Reverts

• manager: restore the persistent SQLite default (0d8b4ae)

Documentation

• adr: add ADR 0003 for chat history keyset pagination (ace375d)
• adr: rename ADR 0003 to 0003-cursor-pagination-and-list-response-envelope.md (df28800)
• align architecture with modular packages (28dd390)
• hitl: document approval actions and lifecycle (6e221ac)
• lifecycle: record cancellation and branch contracts (cac3c15)
• make the identity page a task, not a reference (59a7fce)
• readme: address PR #47 review — product hero, graph value, runnable quick start (24de784)
• readme: reposition around "Make your product queryable" (1f39527)
• refine README mark the word zero in the subtitle (651591e)
• refine README messaging and simplify value proposition (20362d8)
• refine README quick start section (0552bb4)
• refine README remove agentctl command (d499f85)
• refine the hero README messaging and simplify value proposition (59e5bd9)
• restore architectural rationale flagged in review (bf9d25b)
• runs: document repository coordination boundary (7f099a1)
• simplify README messaging and clarify Extra's AI specialist architecture (127199b)
• state what begin_execution's boolean return means (15a9ad4)
• tool-usage: record the execution-metadata architecture (f9d88e9)
• trim the identity page to the happy path (d604aeb)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 I have created a release beepboop

1.0.0 (2026-09-01)

⚠ BREAKING CHANGES

• adr: GET /conversations response shape changed from flat list [ConversationSummary] to paginated envelope { items: [ConversationSummary], next_cursor: str | null }
• manager:X-Agent-Chat-User and the widget's user attribute are removed. Every conversation route now requires a verified token; requests without one are 401. Conversations already stored under unverified ids become unreachable rather than exposed.

Features

• agent_manager: add pagination and lazy loading for chat history (#116) (4e005be)
• agent_manager: add pagination and lazy loading for chat history (#116) (984eb09)
• agent-manager: auto-generate conversation titles from the first message (5f7257b)
• agent-manager: auto-generate conversation titles from the first message (279b040), closes#117
• approvals: add can_run_transition predicate (6c8e0e9)
• auth: carry the caller's own credential through to plugin code (90aadab)
• auth: carry the caller's own credential through to plugin code (52b146d)
• cli: handle tool approvals in remote chat (917ba1d)
• cli: handle tool approvals in remote chat (c53199c)
• dev: native development loop with watch and IDE debugging (11faa51)
• dev: native development loop with watch and IDE debugging (53ea8bf)
• engine: add resumable approval lifecycle (6fa8554)
• engine: make the repository the source of truth for tool usage (2c13948)
• engine: resolve prompt variables for orchestrators, not just agents (aae8238)
• engine: resolve prompt variables for orchestrators, not just agents (d87b3f5)
• expose manager playground route (82c405f)
• manager: add immutable conversation lifecycle (1122e83)
• manager: adopt a visitor's conversations when they sign in (81c40c1)
• manager: choose the tool-usage backend in the composition root (3667456)
• manager: require a verified identity on every conversation route (6e3c9ef)
• manager: resume and persist approval decisions (ee6d98c)
• tool-usage: own execution metadata in a dedicated subsystem (f41df6c)
• widget: add human approval actions (ca416af)
• widget: report identity failures instead of silently degrading (b2e28ea)
• widget: report identity failures instead of silently degrading (9d3d6cc)

Bug Fixes

• agent_manager: address review feedback on pagination for PR #124 (#116) (3b2c7b0)
• agent-manager: deliver the generated title over SSE instead of racing it (71f332e)
• agent-manager: forward full model config to the title generator (058d190)
• agent-manager: make title delivery lifecycle-safe (57da8f8)
• api: allow empty body on approve/reject endpoints (712b7d7)
• api: recover the original result on a retried approval decision (0078ca1)
• api: recover the original result on a retried approval decision (5b0e219)
• api: sanitize raw tool exception text to generic error in ToolRecord (4959cfc)
• api: sanitize raw tool exception text to generic error in ToolRecord (24cd005)
• api: santize unexpected failures during approval recovery (a81c797)
• approvals: make run registration atomic (5b67303)
• auth: accept the host token shapes the sub bug was hiding (d8e1db1)
• auth: let an explicit host bearer token outrank the session cookie (3a49342)
• auth: let the host session cookie outrank a visitor pass (c09d3bf)
• auth: stop unconditionally requiring the sub claim before ClaimMapping runs (4697e1a)
• cli: expect agentctl's local caller id in its digested form (0f6bb5b)
• cli: validate config before serving (b172b1a)
• cli: validate config before serving (5f1442f)
• config: rename AGENT_* env vars to EXTRA_* with backward-compat deprecation warnings (a2f20d1)
• config: rename AGENT_env vars to EXTRA_ with backward-compat deprecation warning (c6d2015)
• engine: align run repository and stream contracts (374874f)
• engine: cancel abandoned streaming runs (5d9c5f1)
• engine: extract clean text from MCP tool results instead of stri… (c8667a4)
• engine: extract clean text from MCP tool results instead of stringifying content blocks (763a514)
• engine: unify streamed resume cancellation (3b82d7b)
• explain why using extra (d72f8a2)
• forward the approver's credential on the engine's own approval endpoints (3593608)
• generate: report unreferenced tools (2581c0e)
• generate: report unreferenced tools (cc80456)
• hitl: address approval review feedback (41fc836)
• keep the credential out of AuthContext's repr (bec5c30)
• logging: align uvicorn/third-party logs with structured formatter (90711ab)
• logging: make configure_logging own the root handler unconditionally (861c60f)
• manager: adapt cancellation errors after rebase (f2834b1)
• manager: adapt two upstream tests to the Principal signature (9d762ac)
• manager: close two cancellation gaps on the resume and failure paths (c312837)
• manager: let post-final stream failures propagate (2e1a392)
• manager: log failed identity verification (87087eb)
• manager: persist and sanitize final stream failures (73be056)
• manager: share one token resolution, and bundle what the HTTP edge needs (08f23f6)
• parser: reject unknown and misplaced YAML keys during spec validation (016f89d)
• parser: reject unknown and misplaced YAML keys during spec validation (c981c57)
• runs: expire terminal in-memory run records (8193ad8)
• runs: expire terminal in-memory run records (e4b2484)
• test: resolve mypy typecheck errors in test_repository_contract.py (a8f8352)
• tests: annotate yield fixture as Iterator[None] (3e27ab0)
• tool-usage: address review feedback (00d587c)
• type run status as RunStatus end to end (143adcd)
• widget: add drawer error notice and retry UI, and expand contract tests (b5e7578)
• widget: always clear visitor pass after successful cookie-mode link (5429976)
• widget: avoid crypto.randomUUID crash outside secure contexts (46a98ce)
• widget: avoid crypto.randomUUID crash outside secure contexts (da666bc)
• widget: enable zero-code cookie mode visitor history hand-off (68c776f)
• widget: ensure same-SPA cookie login hand-off and await visitor pass claim (41ce7ae)
• widget: express an off boolean by absence, as HTML means it (590dff7)
• widget: hide internal tool provider labels (5166956)
• widget: hide tool provider labels (3a5f3a2)
• widget: honour an explicit require-identity="false", and stop claiming an outcome (d5d56a1)
• widget: keep active resume controls available (572740c)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (18a4c04)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (4682781)
• widget: merge anonymous visitor history in cookie authentication mode (#104) (8b3884b)
• widget: prevent per-request token resolution race in cookie mode while keeping same-SPA cookie login hand-off (408cb43)
• widget: re-resolve identity when a SPA signs a user in (5ea7134)
• widget: re-resolve identity when a SPA signs a user in (2d8a037)
• widget: replace magic cooldown with event-driven cookie tracking and deterministic history hand-off (852be0c)
• widget: restrict automatic visitor pass claim in tokenSource to cookie mode (e29329d)
• widget: throttle unauthenticated claimVisitorHistory retries in cookie mode (8d05239)

Performance Improvements

• manager: make reading history cost one branch walk and one run lookup (2600ee2)
• parser: optimize _validate_unknown_keys loop (d821d6b)

Reverts

• manager: restore the persistent SQLite default (0d8b4ae)

Documentation

• adr: add ADR 0003 for chat history keyset pagination (ace375d)
• adr: rename ADR 0003 to 0003-cursor-pagination-and-list-response-envelope.md (df28800)
• align architecture with modular packages (28dd390)
• hitl: document approval actions and lifecycle (6e221ac)
• lifecycle: record cancellation and branch contracts (cac3c15)
• make the identity page a task, not a reference (59a7fce)
• readme: address PR #47 review — product hero, graph value, runnable quick start (24de784)
• readme: reposition around "Make your product queryable" (1f39527)
• refine README mark the word zero in the subtitle (651591e)
• refine README messaging and simplify value proposition (20362d8)
• refine README quick start section (0552bb4)
• refine README remove agentctl command (d499f85)
• refine the hero README messaging and simplify value proposition (59e5bd9)
• restore architectural rationale flagged in review (bf9d25b)
• runs: document repository coordination boundary (7f099a1)
• simplify README messaging and clarify Extra's AI specialist architecture (127199b)
• state what begin_execution's boolean return means (15a9ad4)
• tool-usage: record the execution-metadata architecture (f9d88e9)
• trim the identity page to the happy path (d604aeb)

---

This PR was generated with Release Please. See documentation.