Portal v0.57.0 — Medusa backups and least-privilege pack recipes

A new Medusa pack for Cassandra backups, host-access recipes that no longer run deployment-owned code as root, and five packs that retire older versions that were unsafe to keep running.

Security

• Pack retirements. git-local 0.1.12 redacts credentials in every remote URL. cloud-init 0.1.20 truncates only its two logs instead of resetting instance state, and writes its log bundle readable by root alone. php-fpm 0.1.17 runs Composer with plugins and scripts off. GitHub workflow reruns and PM2 log flushes now need approval. Each retires the versions before it.
• Least-privilege recipes. python-app and terraform-readonly grant a group instead of root, refuse a folder whose group is root, and say what code runs as the runner.
• SSO forms. Sign-in, MFA, invitation, and identity-link forms reach the identity provider through the handoff page, so form-action 'self' no longer blocks them.
• Request limits. The portal bounds request bodies, applies the HTTP/1 header limit, and answers a malformed OAuth client registration with 400.
• Windows installer. The MCP installer keeps an existing install folder's permissions and refuses a folder other users can change.

Packs

• New Medusa pack: Cassandra backups, verification, retention, and restore.
• Twenty fixes, including Redis database indexes beyond 15, zfs pool names and interval samples, memcached flush refusals, dnf update checks, and a crontab read that covers every user.
• Postgres gains a sampling-window read for pg_stat_statements, and MySQL reads work with the real MySQL client.
• Sentry alert reads use the current workflow API, and Cloud Monitoring metric queries keep their interval across pages.
• git-local and python-app have behavior plans, and cloud-init status reports a boot that finished with recoverable errors as done.

MCP and runner

• Argument refusals name the rule and every colliding argument. emisar-mcp connect keeps other servers in Codex and Grok configs, and tool schemas ship without a top-level allOf. The Windows installer drops -ConnectAll.
• Every runner usage mistake exits with the usage code, and emisar state check-dispatch-log is removed in favor of emisar doctor.
• Runner 0.32.0 and MCP Bridge 0.18.0 ship with this release.

Console and platform

• A pending-approval email goes to the person who started the run and to those who can approve it.
• The Agents, approvals, runbooks, SSO settings, and Team pages get a round of fixes.
• Image scans carry evidenced exceptions for zlib and ntpsec findings Debian has not fixed. The release-cookie cutover toggle, the legacy checkout preflight, and DATABASE_SSL_CACERTFILE are retired.