chore: release main

[buremba]

🤖 I have created a release beep boop

lobu: 3.5.0

3.5.0 (2026-04-16)

Features

• add /skills/for/{useCase} routes, version eval schema, clean up duplication (d84a856)
• add 20-minute timeout to all GitHub Actions workflows (0798d77)
• add agent-community use case and extract UseCaseTabs label prop (ba956ad)
• add Bedrock provider and AWS deployment docs (#171) (9210a36)
• add CLI and create-peerbot packages with platform-agnostic architecture (4674b47)
• add direct sessions API for browser/CLI clients (c34ab3c)
• add direct sessions API for browser/CLI clients (8f78d87)
• add ecommerce use case to landing page (4982606)
• add file handling, Slack Assistant support, and comprehensive MCP OAuth system (a3d6f3a)
• add file handling, Slack Assistant support, and comprehensive MCP OAuth system (0f98b23)
• add file handling, Slack Assistant support, and comprehensive MCP OAuth system (44214cf)
• add force npm publish workflow for emergency release (92965fc)
• add Gemini integration and improve gateway/worker architecture (331cdda)
• add github package support and enable plan mode (b9ccf5d)
• add manual npm publish workflow for existing releases (e1c13d4)
• add MCP registry service and discovery routes (fbff9bf)
• add multi-platform support to CLI init wizard (2597712)
• add network isolation, HTTP proxy, and enhanced worker configuration (d3a7db1)
• add platform-agnostic messaging API with self-queueing and MAX_TURNS protection (c872522)
• add privacy policy page and footer link (b9df04f)
• add Reddit and X (Twitter) as OAuth integrations (7a57b9c)
• add Slack multi-workspace OAuth distribution (137ec6a)
• add user interaction system with forms and suggestions (18db834)
• ci: migrate Docker images from Docker Hub to GHCR (c01824a)
• cli,gateway: multi-agent CLI, external OAuth, agent seeding (d4dba49)
• cli,landing: add connections CLI + themeable chat component (506b91c)
• cli: add lobu eval command with model comparison and CI workflow (910da9b)
• cli: add WhatsApp, Teams, and Google Chat to init platform choices (d140b3b)
• config: add system skills for integrations and LLM providers (de25b3c)
• config: add system skills, skill registries, and MCP example config (cb356d0)
• core: add integration, provider config, and skill metadata types (94c1012)
• enable WhatsApp support in community deployment (658bb25)
• enhance Docker security and simplify session management (3f68c50)
• enhance MCP OAuth integration and worker session management (abfdeb4)
• expand landing use cases and normalize network grants (e9b0282)
• gateway: add integration framework — OAuth, credential store, API proxy (0a19e2d)
• gateway: add MCP OAuth 2.1 auth-code + PKCE flow (9ea9f45)
• gateway: add optional body text to link-button cards (#183) (1e93013)
• gateway: agent selector + per-user agent stores (f1c0d85)
• gateway: embedded runtime credential resolver + secret-backed device auth (8b3053a)
• gateway: improve OAuth UX on settings page by removing auto-redirect and adding login button (2757725)
• gateway: integration services, config-driven providers, and orchestration updates (170e824)
• gateway: proxy-driven MCP tool approval with execute-on-approve (cde529a)
• gateway: settings page overhaul — skills section, integration status, remove env vars (02b3160)
• gateway: support leading-dot domain patterns in GrantStore (f2a1006)
• harden file delivery flows and add OpenRouter CI evals (676544c)
• implement multi-tenant space architecture (abc195f)
• implement multi-tenant space architecture (16b8723)
• improve Claude OAuth authentication flow (4cc1051)
• improve first-time setup UX and add upgrade instructions (e3df936)
• improve status indicators and error handling (7a7684a)
• landing: add connect-from pages and refresh use-case content (1ce6f6c)
• landing: add interactive prompt + output demo to skills section (dc8a806)
• landing: add posthog analytics (b7b431d)
• landing: add terms of service page (0347573)
• landing: embed OpenClaw creator tweet confirming single-user design (4c6537b)
• landing: link OpenClaw runtime to comparison page with architecture reasoning (2977bbb)
• landing: migrate from Vite SPA to Astro with Starlight docs (687c6f7)
• landing: remove Lobu for X labels and redundant use case summaries (e861218)
• landing: rename skills-as-saas to skills and update hero copy (42009c5)
• landing: replace Telegram chat with terminal log for connections row (2a3467e)
• landing: revamp memory page demo (96dba19)
• landing: update copy prompt behavior and text (a551a79)
• live per-agent MCP install flow with discovery and no worker restart (#106) (435202b)
• make examples/ single source of truth for use cases and Owletto orgs (3fc5380)
• make Hero GitHub button contextual to active use case (f1ca9fe)
• make skills page init preview contextual to selected use-case (146e87a)
• mcp-auth: surface login prompts as platform link buttons (9ca5449)
• migrate gateway to Hono and remove Express from worker (#94) (499ab1b)
• migrate owletto examples to models/ directory with type field (3deeb77)
• migrate Owletto plugin to published @lobu/owletto-openclaw package (b4666c5)
• migrate to Chat SDK platform adapters with typed OpenAPI schemas (89573db)
• move workspace files to worker filesystem, fix CI, lint cleanup (142d0c8)
• multi-auth settings UX, base provider module refactor, and infra improvements (1c61b30)
• multi-provider auth, MCP REST API, workspace instructions, dev tooling (2e08491)
• oauth: add PKCE, RFC 8707 resource, auto-grants, and MCP token endpoint (63336a7)
• observability: vendor-neutral OTEL tracing + opt-in Sentry (#172) (f3345d3)
• otel: switch from OTLP HTTP to gRPC exporter (port 4317) (60178db)
• Owletto memory plugin, plugin hooks/services, test infrastructure, and misc improvements (89c27f0)
• proxy: resolve provider credentials via URL path agentId (1dbcb8c)
• re-enable custom tools and remove unused claudeSessionId tracking (2adb766)
• refactor settings page to Alpine.js with pre-compiled Tailwind (2126001)
• refresh cli docs and restore release publish chain (#179) (1ee0595)
• refresh landing pages and pricing UX (c8d8b58)
• rename CTA to "Open in Owletto" and open in new tab (179fc23)
• settings page rewrite (Alpine→Preact), history page, Telegram enhancements, landing page (b2cba55)
• settings: add generic OpenAI provider (fcae8c3)
• settings: add generic OpenAI provider (f60e93a)
• settings: post-install callback with agent resume (d96e99b)
• show nix packages in landing skill previews (6095e13)
• skills: add scoring, URI, and system skill search to SearchSkills (d63d7a8)
• support Telegram webhooks when PUBLIC_GATEWAY_URL is set (c3d266e)
• wire file-first owletto memory config (46c7554)
• worker: ConnectService, CallService, DisconnectService tools and integration runtime (af5a270)
• worker: expand ConnectService to support AI provider setup (45b0c93)
• worker: generic MCP login tools + bash hardening (5e167a4)
• worker: redact sandbox leaks, replace base prompt identity, use signed artifact URLs (a5c33d8)

Bug Fixes

• add CSS generation step to CI typecheck job (de4e500)
• add CSS generation step to gateway Dockerfile (d361129)
• add default model fallback per provider and fix z-ai base URL env var (ebb8237)
• add HTTP to HTTPS redirect for community.lobu.ai (1b22074)
• add missing orchestrator defaults to Helm values (b882ad3)
• add production environment to Docker publish workflow and clean up outputs (9fe8120)
• add production environment to release-please workflow for npm publishing (1cd6121)
• add production environment to release-please workflow for npm publishing (92a5c26)
• address critical security and functionality issues in direct sessions API (782f617)
• apply code formatting fixes (0e17f0c)
• build core package before running tests in CI (1752131)
• build only required packages for npm publishing (55065a7)
• ci: bump Bun to 1.3.5 to fix CONNECT test failures (1970c9a)
• ci: drop package-name from release-please config to fix auto-tagging (#190) (31056a2)
• ci: gate release steps on explicit true output (47346e5)
• ci: guard docker sha tags on release events (#181) (48b75ac)
• ci: include component in title pattern to fix release-please auto-tagging (#194) (deaa3dc)
• ci: include component in title pattern to fix release-please auto-tagging (#196) (524e715)
• ci: pin bun version for landing deploy (0c62bf0)
• ci: put version in release-please PR title + add workflow_dispatch (#176) (9021308)
• ci: reconcile release-please config + Chart.yaml appVersion (#174) (c6ea7c8)
• ci: release-please triggers publish-packages via gh workflow run (87b14cb)
• ci: remove invalid secrets check from eval workflow job condition (1889cc4)
• ci: repair broken npm publish workflows (6f6ea08)
• ci: restore release config for package releases (6c7190c)
• ci: restore release manifest for package releases (892cdc5)
• ci: restore release-please pull-request-title-pattern (#186) (699f40b)
• ci: set empty component to fix release-please auto-tagging (#192) (ec809f9)
• ci: set include-component-in-tag true so release-please auto-tags (#197) (85cc88a)
• ci: sync bun lockfile (16c91dd)
• ci: upgrade npm to latest for OIDC trusted publishing (a85bbb2)
• ci: use default release-please title pattern variables (#178) (26709e3)
• ci: use GitHub secret for Telegram token, not k8s sealed secret (ff27697)
• ci: use Node 24 for bundled npm 11 (OIDC trusted publishing) (3697004)
• ci: use NODE_AUTH_TOKEN for npm auth instead of manual .npmrc (606a82b)
• ci: use OIDC trusted publishing, drop stale NPM_TOKEN path (e8f5ca0)
• ci: use simpler release-please title pattern that actually works (#188) (11e1e70)
• ci: use yaml updater for Chart.yaml version + appVersion (58819bc)
• clear mismatched default model in auto-mode provider selection (ab20949)
• clear stale session when provider changes (080afe0)
• cli: auth reliability — server-side logout, --force login, stale cred cleanup, concurrent refresh (b0ee7a3)
• cli: hide hidden skills from 'lobu skills list' (abbf99e)
• cli: replace RequestInfo with portable fetch input type (ba23c4a)
• cli: restore system skills and add CLI to publish workflow (1fc3687)
• correct session-manager tests to use proper session key format (45af581)
• deduplicate owletto URL logic, fix skills card title, add skills link to memory reuse step (78ad65e)
• delete existing webhook before starting Telegram long polling (c6cd02c)
• deploy: remove broken global.imageRegistry that caused double-slash in Bitnami Redis image paths (e37d81c)
• deploy: update sealed secrets with all required keys (fbe588e)
• disable Nix sandbox for arm64 QEMU builds (e54e712)
• disable WhatsApp in community deployment (no credentials) (2e14197)
• docs: correct outdated references across documentation (b78fa65)
• docs: fix Teams Chat SDK link and update CLI generated files list (737a3d7)
• eval: continue running remaining evals after individual failures (8187b7f)
• eval: create data dir for Redis persistence in CI (3f7f598)
• eval: disable Redis RDB persistence in CI to avoid MISCONF errors (c131bbb)
• eval: don't override provider/model unless --model flag is set (8b8bd4b)
• eval: don't pass provider/model to session creation, use agent config (49f3b4d)
• eval: improve judge prompts with prose fallback, CI runs smoke only (6876107)
• eval: isolate trials + feat(worker): MCP-as-CLI for embedded mode (#184) (c256d6d)
• eval: pass Z_AI_API_KEY to gateway container in docker-compose (ad890e3)
• export ActionButton and ModuleSessionContext types and fix implicit any (6d6bc01)
• gateway: escape oauth callback template values (#122) (d4cfc45)
• gateway: preserve base path when mounted as sub-app (edc0be5)
• gateway: publish embedded runtime packages (148e7dc)
• gateway: redact secrets in agent config response (#127) (6af4424)
• gateway: remove settings token query exposure (#130) (9d4adb8)
• gateway: require auth for channel binding routes (#123) (6736fe9)
• gateway: require settings token for chatgpt start/poll (#124) (4004401)
• gateway: skip enqueuing worker delivery receipts to thread response queue (c5c352d)
• gateway: stop logging WhatsApp credential payloads (#128) (68968b5)
• handle empty HOME env in git cache fallback (c00ebfe)
• helm: expose ADMIN_PASSWORD and platform tokens as gateway env vars (968f4a8)
• helm: make claude-code-oauth-token secret ref optional (992a2e6)
• helm: remove platform token env vars from gateway deployment (062f18f)
• improve error handling for streaming validation errors (ea72817)
• improve team ID handling in Slack events (d083365)
• include mcp-servers.json in gateway Docker image (d0c9cd3)
• include z.ai API path prefix in upstream base URL (4ad79c9)
• landing: bold connector label inline instead of separate heading (3ac690e)
• landing: clarify use-case source CTA (d0b64f2)
• landing: correct homepage prompt and CLI command references (5f4429f)
• landing: correct owletto demo links (150a7c9)
• landing: improve hero CTA labels (ae6a807)
• landing: inline connector labels to balance recall/auth column heights (6125016)
• landing: keep homepage hero generic (8078103)
• landing: left-align skills workspace preview (54519ca)
• landing: resolve zod alias from installed package (f09e12d)
• landing: use descriptive agent names in ConnectionsPanel (f8f38c1)
• make memory step layouts consistent (990bf61)
• map z-ai gateway slug to zai model registry provider name (64b606e)
• packages: add repository.url to all published package.json files (c3f14c0)
• pass TELEGRAM_BOT_TOKEN in community deploy workflow (e9c86e9)
• pin redis chart version to avoid Helm OCI panic (af348ef)
• point agent-community Try Now to venture-capital org (b117767)
• properly configure Nix sandbox for arm64 builds (71daf7b)
• proxy: handle CONNECT method in request handler for Bun on Linux (320e028)
• README link rendering and enable auto-deploy on push (f7743a8)
• recreate scaled-down workers with fresh env vars on wake-up (879cd41)
• release: sync helm chart to 3.0.5 (92c5142)
• remove broken integration tests causing 6-hour CI timeout (1abd9c4)
• remove CLI_VERSION pinning, use latest for worker package (9c33352)
• repair failing tests and exclude workspaces from test discovery (3227430)
• resolve biome lint and format errors in landing/ (#107) (40965cb)
• resolve CI workflow syntax errors (a312b9f)
• resolve K8s deployment issues (9d48358)
• resolve K8s deployment issues (dcd6eff)
• resolve linting issues in test files (b214013)
• resolve worker CJS/ESM module error and missing Nix in production (fda47de)
• respect installed provider order when no explicit model is set (2319f36)
• restart stream on message_not_in_streaming_state error (32db4a1)
• security hardening and reliability improvements across gateway/worker (ea00cef)
• session reset clears history, Telegram plain-text fallback (7af9703)
• settings: make OAuth client optional so Telegram mini app works without it (f51abed)
• settings: rename "Scheduled Reminders" to "Schedules" (6a74299)
• settings: skip identity linked notification if already linked (1674a3b)
• simplify Docker multi-arch support and improve MCP configuration (5f4e2d8)
• simplify manual npm publish to use main branch (423eb43)
• skip arm64 worker build due to Nix/QEMU seccomp issue (fa3f96c)
• telegram: add platform=telegram param to provider setup URL (61d9aed)
• telegram: auto-enable when bot token is present (a951747)
• temporarily disable custom tools to fix npm build (2065c74)
• track tailwind.config.js so CI CSS generation works (ae6f1e7)
• update ChatGPT device code OAuth flow and skill display (a81594a)
• update community deployment for Hetzner cluster (fe5bf90)
• update README and landing page (Baileys→Cloud API, Anthropic→OpenRouter, bare lobu→npx) (45ee64f)
• update worker-job-router tests to match fire-and-forget architecture (b7d00d2)
• upgrade Helm to 3.16 to fix OCI registry panic (e4f88de)
• use bun instead of tsx in gateway Helm template (77dccfa)
• use npx @lobu/cli consistently across CLI output, docs, and landing page (ca1133c)
• use PAT for repository_dispatch in deploy trigger (10add7e)
• use strategic merge patch for K8s deployment scaling (fde3201)
• use writable temp directory for git cache fallback (c45fc01)
• worker: use string concatenation for session-context URL (09d474e)

---

This PR was generated with Release Please. See documentation.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.

[buremba]

Closing to regenerate with correct title (component was missing due to stale config). Will re-trigger release-please.