What's Changed
- Runtime parity for ptone#5513: keep per-agent state dirs out of the shared workspace view. by @ptone in #3966
- chore: update LATEST.json for nightly-20261022 by @github-actions[bot] in #3982
- fix(transfer): reject non-2xx responses and limit error bodies by @Ravshan04 in #3914
- Graduate project chat thread groups by @ptone in #3970
- Decide the sender for thread-keyed agent message posts first by @ptone in #3972
- agent, cmd: one model channel for the harness argv; scion create --model/--thinking-level by @ptone in #3976
- web: show the keys a conflicting settings save wrote before the conflict by @ptone in #3974
- fix(transfer): avoid temporary file collisions during normalization by @Ravshan04 in #3814
- cmd, preflight, config: the hidden 'scion server preflight' subcommand (read-only, no writes) by @ptone in #3981
- agent: scope the reprovision running-container check to the agent's project by @ptone in #3955
- docs(scion-discord): document the gRPC health probe for Cloud Run by @ptone in #3548
- hub: stop scheduled-event timers on agent delete without a second cancel by @ptone in #3679
- cloudrun: map Instance conditions to agent phases in List by @ptone in #3821
- config, cmd: settings sweep follow-ups (project ID env reads, URL redaction, LoadSettingsFromDir, server.auth keys, read-only config commands) by @ptone in #3979
- tests: pin the co-located launch drain before the hub's HTTP drain by @ptone in #3941
- web: terminal workspace gives the screen to the terminal while the mobile keyboard is up by @ptone in #3682
- web: create form sends harness config only when picked by @ptone in #3980
- Admin settings pages save only what changed; new projects inherit the global profile by @ptone in #3984
- cr-ci: GitHub Actions runners on Cloud Run Jobs with a mediator service by @ptone in #3943
- fix(web): default subscription triggers match the Hub's agent-create set by @ptone in #3968
- Upload handlers: always remove parsed multipart forms by @ptone in #3977
- runtimebroker, hub, hubclient: settings sweep follow-ups (global-dir refusal order, restart not-found mapping, request-time settings reads, ProjectSettings fields) by @ptone in #3987
- Remove the Hub WebDAV endpoint and project-level scion sync by @ptone in #3989
- hub: wait for the failed move's reconcile in the force-move refusal test by @ptone in #3990
- test(cmd): keep the attach test's terminal output off the shared test stream by @ptone in #3688
- fix/scheduled-user-status-helper by @ptone in #3958
- fix/group-participant-mode-cleanup by @ptone in #3963
- e2e(artifacts): R2b, the HTML bundle in the chat preview, graded at the UI by @ptone in #3993
- fix/hub-redirect-origin-rule by @ptone in #3996
- Skill resolution: quieter, more accurate warnings and errors by @ptone in #4000
- hub: prepare the maintenance executors for their move to pkg/hub/maintenance (part 2) by @ptone in #4003
- cloudrun-sandbox: narrow the sandbox gone-output fragments by @ptone in #4007
- audit: ingress operation context and broker lifecycle envelopes by @ptone in #4009
- Restore the service-account assignment when a reincarnation fails by @ptone in #4010
- cloudrun: map a stopped Instance to stopped and a started one to running by @ptone in #4013
- Extend agent response redaction to MCP server env and headers, and service env, for callers without attach by @ptone in #4016
- web: New artifact on the hub Artifacts page, with a project picker defaulting to the global project by @ptone in #4012
- web: Edit page covers every field; retire the Configure page (ptone#3975) by @ptone in #4008
- Artifacts: agents send attachments as bytes and receive them as files in their home (attachments phase 2) by @ptone in #3937
- Re-render provision-time files at start when the hub reports them changed (ptone#3982) by @ptone in #4011
- sciontool hook status and telemetry correctness by @ptone in #4001
- hub: cancel an agent's scheduled events on delete only while pending by @ptone in #4004
- config: update a test to the two-argument LinkEntryForProject by @ptone in #4027
- test(cmd): import os in attach_cli_fixes_test.go by @ptone in #4026
- Hub operational settings: apply ordering and save report fixes by @ptone in #4032
- build: drop the unused volume_test tag from vet targets and hubshard by @ptone in #3702
- Remove the unused Kubernetes pod sync-from path by @ptone in #4030
- agent: give the Cloud Run running-instance Start test a project identity by @ptone in #4031
- Carry the executable bit through hub templates and harness-configs (ptone#5652) by @ptone in #4028
- CLI tunnel, ssh and start usability fixes. by @ptone in #4025
- Port proxy: redirect the bare proxy URL to the trailing slash and explain failed page sub-requests by @ptone in #4033
- skills: add scion-web-serving platform skill for pages served through scion expose by @ptone in #3975
- Derive the shared-workspace mount layout from broker-known paths by @ptone in #4037
- web: agent harness vendor and model size badges behind web.agent_badges by @ptone in #3973
- Upload handlers: attachment uploads use the shared multipart helper by @ptone in #4036
- Fix the T1 Postgres failures in the hub settings revision tests by @ptone in #4038
- Broker start path: confine writes and removals under the agent home to the home (ptone#5654) by @ptone in #4024
- cmd: an initial hub auth login makes that hub current by @ptone in #4040
- docs: use scion expose and unexpose in the tunnel live runbook by @ptone in #4042
- logging: URL user info in log text follows the CLI display rule by @ptone in #4043
- Take profile, harness config and runtime from the hub's start request by @ptone in #4029
- skills discovery: pass through only supported query parameters; log candidate URIs without their query by @ptone in #4034
- hub: make constraint subject group removal and delete session only by @ptone in #3962
- Settings APIs: one thinking-level rule, federation from one source, null federation refused, gcp_project_id registered by @ptone in #4018
- server, hub: the web base URL follows the operator hub endpoint; refuse an http base URL on a non-loopback listener by @ptone in #4014
- test: bundle ptone#5617 test hygiene by @ptone in #4047
- fix/hub-agent-schedule-scope by @ptone in #4048
- fix/native-chat-thread-panel by @ptone in #4022
- hub: asynchronous start, resume and restart behind hub.async_agent_start by @ptone in #4015
- artifacts: owner-deleted state, Retention and Delete in the web UI, canRetire on GET by @ptone in #4006
- urlredact: refresh the skills-discover copy after the handler token and ForceQuery change by @ptone in #4050
- build(deps): bump source-map-js from 1.2.1 to 1.2.2 in /docs-site by @dependabot[bot] in #2753
- feat(hub): delegated project read and the agent delegation policy setting (ptone#2132) by @ptone in #4017
- conduit relay tests: no path lengthens a session's cap or drain deadline by @ptone in #3988
- hub: pin the recovery handoff on forced-move failures by @ptone in #3964
- SSE phase 0: measure the browser events streams by @ptone in #4039
- extras/scion-slack: tidy go.sum by @ptone in #4054
- Placement check reads the request settings view; koanf tags on K8sToleration by @ptone in #4055
- Mount project configuration read-only into agents that share the workspace by @ptone in #4045
- ci: build golangci-lint with the go-tools unused (issue 1839) fix by @ptone in #4061
- cr-ci: fixes from the live PoC (exit codes, disk sizing, warm-up, docs) by @ptone in #4046
- web: close streams in hidden tabs and jitter the first reconnect by @ptone in #3995
- hub: move the maintenance executors to pkg/hub/maintenance by @ptone in #4062
- telemetrycontract: shared analytics event envelope (scion-analytics, schema v1) by @ptone in #4019
- test(attache2e): retry BrokerDrop re-attach while the broker reconnects by @ptone in #4063
- dev sign-in: send dev credentials only to loopback hub endpoints by @ptone in #4035
- runtime: always mask the agents directory for plain workspaces on Docker and Podman by @ptone in #4064
- feat/batch-invite-p1 by @ptone in #3986
- feat(doctor): JSON v2 with generation context and a Platform Health state by @ptone in #4056
Full Changelog: nightly-20261022...v0.3.0-preview.4