chore: promote staging to staging-promote/c949521d-23562109203 (2026-03-25 20:47 UTC)

[ironclaw-ci]

Auto-promotion from staging CI

Batch range: 0d1a5c210b877f89bcb87e6f1d8584396d12f208..ab0ad948f36c7cc88b1aecf2e92dd0ff94569a94
Promotion branch: staging-promote/ab0ad948-23563320113
Base: staging-promote/c949521d-23562109203
Triggered by: Staging CI batch at 2026-03-25 20:47 UTC

Commits in this batch (46):

• 02fa404 fix: add musl targets for Linux installer fallback
• bca8bbc fix: update Cargo.lock and pin musl CI runners
• 212d661 feat(workspace): layered memory with sensitivity-based privacy redirect (feat(workspace): layered memory with sensitivity-based privacy redirect #1112)
• 9964d5d feat(web-search): include thumbnail URLs in search results (feat(web-search): include thumbnail URLs in results #1313)
• 1d6f7d5 fix: persist startup-loaded MCP clients in ExtensionManager (fix: persist startup-loaded MCP clients in ExtensionManager #1509)
• 6232609 feat(llm): add GitHub Copilot as LLM provider (feat(llm): add GitHub Copilot as LLM provider #1512)
• 8ad7d78 fix: parameter coercion and validation for oneOf/anyOf/allOf schemas (fix: parameter coercion and validation for oneOf/anyOf/allOf schemas #1397)
• 9d53813 fix(oauth): reject malformed ic2.* states in decode_hosted_oauth_state ([CRITICAL] OAuth flow registration and lookup key mismatch #1441) (fix(oauth): reject malformed ic2.* states in decode_hosted_oauth_state (#1441) #1454)
• b97d82d feat(extensions): support text setup fields in web configure modal (feat(extensions): support text setup fields in web configure modal #496)
• 07c338f fix(safety): escape tool output XML content and remove misleading sanitized attr (fix(safety): escape tool output XML content and remove misleading sanitized attr #1067)
• 89394eb feat(cli): add ironclaw hooks list subcommand ( feat(cli): add ironclaw hooks list subcommand #1023)
• ccdea40 feat(agent): queue and merge messages during active turns (feat(agent): queue and merge messages during active turns #1412)
• b58b421 feat(shell): add Low/Medium/High risk levels for graduated command approval (closes Add command risk levels (Low/Medium/High) to shell tool for graduated approval #172) (feat(shell): add Low/Medium/High risk levels for graduated command approval (closes #172) #368)
• 8638895 feat(gemini_oauth): full Gemini CLI OAuth integration with Cloud Code API (feat(gemini_oauth): full Gemini CLI OAuth integration with Cloud Code API #1356)
• a09c023 feat(ux): complete UX overhaul — design system, onboarding, web polish (feat(ux): complete UX overhaul — design system, onboarding, web polish #1277)
• 1a62feb perf(agent): avoid preview allocations for non-truncated strings (fix [MEDIUM] truncate_for_preview allocates String even for non-truncated short strings #894) (perf(agent): avoid preview allocations for non-truncated strings (fix #894) #924)
• fbce9a5 refactor(llm): move transcription module into src/llm/ (refactor(llm): move transcription module into src/llm/ #1559)
• 3aa36c8 fix(tests): eliminate env mutex poison cascade (fix(tests): eliminate env mutex poison cascade #1558)
• 969b559 fix(mcp): handle empty 202 notification acknowledgements (fix(mcp): handle empty 202 notification acknowledgements #1539)
• 3e73dbe perf(tools): remove unconditional params clone in shared execution (fix [MEDIUM] Unnecessary parameter cloning on every tool execution #893) (perf(tools): remove unconditional params clone in shared execution (fix #893) #926)
• 7034e91 fix: generate Mistral-compatible 9-char alphanumeric tool call IDs (fix: generate Mistral-compatible 9-char alphanumeric tool call IDs #1242)
• abba083 docs(feishu): clarify webhook-only event subscription support (docs(feishu): clarify webhook-only event subscription support #1567)
• 4d7501a Fix owner-scoped message routing fallbacks (Fix owner-scoped message routing fallbacks #1574)
• 8f6999a docs: add gitcgr code graph badge (docs: add gitcgr code graph badge #1563)
• d9358b0 feat(workspace): multi-scope workspace reads (feat(workspace): multi-scope workspace reads #1117)
• acb5902 test: Google OAuth URL broken when initiated from Telegram channel (test: Google OAuth URL broken when initiated from Telegram channel #1165)
• 485d156 feat(cli): add ironclaw models subcommands (list/status/set/set-provider) (feat(cli): add ironclaw models subcommands (list/status/set/set-provider) #1043)
• dea789c Default new lightweight routines to tools-enabled (Default new lightweight routines to tools-enabled #1573)
• fa51b9f fix: post-merge review sweep — 8 fixes across security, perf, and correctness (fix: post-merge review sweep — 8 fixes across security, perf, and correctness #1550)
• b441ebe feat: multi-tenant auth with per-user workspace isolation (feat: multi-tenant auth with per-user workspace isolation #1118)
• 3fdb187 refactor(tools): auto-compact WASM tool schemas, add descriptions, improve credential prompts (refactor(tools): auto-compact WASM tool schemas, add descriptions, improve credential prompts #1525)
• 5847479 fix(agent): persist /model selection to .env, TOML, and DB (fix(agent): persist /model selection to .env, TOML, and DB #1581)
• fb35489 fix(tunnel): managed tunnels target wrong port and die from SIGPIPE (fix(tunnel): managed tunnels target wrong port and die from SIGPIPE #1093)
• 01678be fix(routines): normalize status display across web and CLI (fix(routines): normalize status display across web and CLI #1469)
• d3d517f fix(agent): case-insensitive channel match and user_id filter for event triggers (fix(agent): case-insensitive channel match and user_id filter for event triggers #1211)
• 5901451 fix: remove stale stream_token gate from channel-relay activation (fix: remove stale stream_token gate from channel-relay activation #1623)
• f3da30a perf(agent): optimize approval thread resolution (UUID parsing + lock contention) (perf(agent): optimize approval thread resolution (UUID parsing + lock contention) #1592)
• dcb2d89 Fix hosted OAuth refresh via proxy (Fix hosted OAuth refresh via proxy #1602)
• 82822d7 fix: restore owner-scoped gateway startup (fix: restore owner-scoped gateway startup #1625)
• 6561517 feat(cli): show credential auth status in tool info (feat(cli): show credential auth status in tool info #1572)
• 706c3a1 refactor: extract AppEvent to crates/ironclaw_common (refactor: extract AppEvent to crates/ironclaw_common #1615)
• 6daa2f1 fix: ensure LLM calls always end with user message (closes LLM: NEAR AI "No user query found in messages" 400 error on routines #763) (fix: ensure LLM calls always end with user message (closes #763) #1259)
• 41ed0a0 feat(agent): thread per-tool reasoning through provider, session, and all surfaces (feat(agent): thread per-tool reasoning through provider, session, and all surfaces #1513)
• 0341fcc Fix REPL single-message hang and cap CI test duration (Fix REPL single-message hang and cap CI test duration #1643)
• c949521 Fix MCP lifecycle trace user scope (Fix MCP lifecycle trace user scope #1646)
• ab0ad94 Normalize cron schedules on routine create (Normalize cron schedules on routine create #1648)

Current commits in this promotion (2)

Current base: staging-promote/c949521d-23562109203
Current head: staging-promote/ab0ad948-23563320113
Current range: origin/staging-promote/c949521d-23562109203..origin/staging-promote/ab0ad948-23563320113

• ab0ad94 Normalize cron schedules on routine create (Normalize cron schedules on routine create #1648)
• 86d1143 Fix libsql prompt scope regressions (Fix libsql prompt scope regressions #1651)

Auto-updated by staging promotion metadata workflow

Waiting for gates:

• Tests: pending
• E2E: pending
• Claude Code review: pending (will post comments on this PR)

---

Auto-created by staging-ci workflow