v0.19.0

Changelog

• 364a28a Merge branch 'claude/deprecate-plaintext-token-cli-858c38'
• 91f4370 Merge pull request #54 from Anirudhx7/claude/model-advisor-pull-runtimes-827f51
• 5cea93c Merge pull request #55 from Anirudhx7/claude/mlx-demo-pull-capability
• f3f6447 Merge pull request #62 from Anirudhx7/claude/ollama-mesh-release-consolidation-1bfb43
• 0892dbe Merge pull request #63 from Anirudhx7/feature/p66-local-only-spill
• 8663c17 Merge pull request #64 from Anirudhx7/feature/p67-local-degradation-chain
• 2b22bbb Merge pull request #65 from Anirudhx7/feature/p67-per-key-degradation-policy
• 8c54602 Merge pull request #67 from Anirudhx7/p54-node-agent-token-scoping
• 33e94ae Merge pull request #69 from Anirudhx7/feature/p24-node-agent-tls
• 61dd2d6 Merge pull request #70 from Anirudhx7/feature/p41-routing-explainability
• 0422875 chore(db): regenerate mesh.demo.db for allow_local_degradation column
• 653d08e chore(demo): regenerate mesh.demo.db for P66 schema (spill_counters, local_only)
• 4d4fa92 chore(release): v0.19.0
• d71fd24 chore: regenerate mesh.demo.db for P41 routing_reason/routing_detail columns
• bc32b56 chore: regenerate mesh.demo.db for node_agent.scope column (P54)
• 808ad05 chore: regenerate mesh.demo.db for node_overrides.gpu_indices column
• 707dbb3 chore: regenerate mesh.demo.db for node_overrides.tls_fingerprint (P24)
• f24644c docs(admin): correct P70's CLI-parity claim, note namespaced-tag ambiguity inline
• 10a0f7c docs(config): fix stale header references in local-degradation doc comments
• 52aaff2 feat(admin): TLS fingerprint validation and tls-probe endpoint (P24)
• 4aa2df7 feat(admin): expose local_only + spill counters through the admin API
• b465240 feat(auth): add per-key local_only policy field
• 597ae4d feat(auth): replace client header with per-key allow_local_degradation policy
• b22c264 feat(bench): add SQLite write-path load sweep tool, publish capacity numbers (P53)
• 349fbbb feat(cli): add login/logout/whoami with a persisted session file
• 2319b14 feat(cli): add mesh key set-local-only and mesh spill
• 8f62757 feat(cli): add nodes confirm-tls subcommand (P24)
• ff47718 feat(cli): close CLI parity gaps for models and runtime Group 2 actions
• 54cdbb8 feat(nodeagent): TLS certificate generation and TLS listener (P24)
• 0fc143a feat(proxy): fail closed on local_only keys, wire spill accounting
• f9d8dea feat(router): TLS fingerprint pinning and dial-time verification (P24)
• 40c8bd0 feat(router): hard per-node in-flight cap that sheds instantly (P64) (#68)
• 721fb7d feat(router,admin,cli,ui): per-request routing explainability (P41)
• 4951169 feat(routing): local-first degradation chain before cloud egress (P67)
• 6d5313b feat(store): add TLS fingerprint column with downgrade-safe upsert (P24)
• fbe0d35 feat(store): add spill_counters table and per-key local_only column
• 85239ad feat(ui): TLS fingerprint pinning UI (P24)
• 2bd9e93 feat(ui): add MB/GB unit selector for VRAM total override
• d53b69a feat(ui): local_only toggle on API keys, Cloud Spill section on Analytics
• c854db1 feat(ui): optional paste-to-verify for TLS fingerprint pinning
• ca685cf feat(ui): searchable dropdown for the fallback-chain alternates field
• e211494 feat(ui): searchable model-name dropdown for Settings config cards
• a9d27af fix(admin): close HF search-layer runtime asymmetry for vllm/tgi/mlx (P77)
• dbc9889 fix(admin): declare per-node GPU scope to fix Advisor double-counting and disclose unknown GPU counts (P75 Gaps B/C/D)
• ff9a687 fix(admin): exclude mmproj vision-projector files from GGUF variant list
• 86b9ebd fix(admin): exclude sharded multi-part GGUF files from variant list
• 81e71e3 fix(admin): extract shared disk-telemetry guard, document P73 in CHANGELOG
• 4c853c7 fix(admin): fix multi-GPU VRAM fit for handleModelFit and largest-basis free calc
• 348172c fix(admin): gate Model Advisor catalog fit and pull on runtime/format compatibility (P70)
• a0b1ec1 fix(admin): hard-block model pulls with unknown size on thin disk headroom (P73)
• 5397aa8 fix(admin): patch declared-GPU-scope edge cases found in P75 code review
• b7d9d61 fix(admin): serialize handlePatchNode's TLS validate-to-mutate transaction
• 9c5bd65 fix(admin): size Model Advisor fit against all local GPUs, not GPU 0 only (P69)
• 40302f2 fix(admin): stop excluding vision-language models from vllm/tgi/mlx search (P77 follow-up)
• fbac14a fix(admin): validate resulting TLS pin on URL moves
• 0712e6d fix(admin,ui): make multi-fetch search concurrent/partial-tolerant, fix pipeline_tag badge display (P77 audit)
• c966076 fix(admin,ui): show Model Advisor Pull button for agent-capable non-Ollama nodes
• 05d6363 fix(agent): agent service start/stop --help ignored args, ran the real action
• dc60a77 fix(agent): agent service status --help also ignored args, ran the real check
• c6e7c32 fix(bench): cap loadtest concurrency, correct README env-var claim
• 0000f71 fix(ci): rebuild mesh.demo.db from a clean main checkout
• 8067e95 fix(ci): regenerate demo admin password hash to actually match "admin"
• 0e41dcd fix(ci): update smoke test CLI check for removed --token flag
• a89f4ef fix(cli): address code-review findings on login/logout/whoami
• 86e0645 fix(cli): bench/agent --help now writes to stdout instead of stderr
• 22e075f fix(cli): kill env-secret leak via --help, and 3 more auth findings
• 4ccc088 fix(cli): reject unknown models actions instead of silently listing all models
• da55604 fix(cli): tab-align help tables, add real per-subcommand action help, fix --help exit code
• 6e0f4cc fix(cli): update top-level --help banner for new commands and stale tagline
• 4e02f4b fix(config): reject reserved local/blocked cloud provider names
• 646097e fix(demo): regenerate mesh.demo.db against the fixed admin password hash
• 9fe27cd fix(nodeagent): add per-action token scoping (P54)
• 26b92ec fix(nodeagent): collapse repeated CLI progress lines to one error message
• faaa81a fix(nodeagent): fail closed on unrecognized dotted token scope prefix
• efb7626 fix(nodeagent): fix flaky disk-stats test; expose docker_deployed flag
• 50d23c8 fix(nodeagent,admin): check container's real disk space before a Docker pull
• 30db5fd fix(proxy): harden cloud fallback for /api/embeddings and /api/embed (P78 Phase 1)
• 42f239b fix(proxy): stop truncating unbounded single-JSON responses and clamping unavailable tokens to zero (P80)
• f9f1d31 fix(proxy,admin): preserve real HTTP status through request logging (P82)
• 81145db fix(router): add hard model-identity eligibility filter (P79)
• 884e61e fix(router): preserve/re-derive NodeState.Host across UpdateNodeURL
• 2a3ab01 fix(routing): enforce single-hop local degradation, per-key allow-list, and affinity safety
• bda49dc fix(security): close Node Agent token leak paths (P68)
• 8291b02 fix(security): deprecate plaintext --token CLI args for Node Agent enrollment
• 12b86b7 fix(security): harden UserSession.Token with json:"-"
• ddd5c14 fix(security): remove plaintext --token CLI flag from admin CLI
• 5b772c0 fix(ui): add chevron toggle to the fallback-chain alternates combobox
• b8f806e fix(ui): convert VRAM override value when MB/GB unit is toggled
• 80c8669 fix(ui): demo gpu-node-05 (mlx) as pull-capable for demo parity
• d1e61b5 fix(ui): flag Ollama-only curated catalog on non-Ollama Model Advisor nodes (P76)
• fb222bf fix(ui): keep node edit modal open after TLS pin/reset, match copy button style
• 2223842 fix(ui): mobile horizontal scroll on Model Context Windows add-row
• e445022 fix(ui): promote HF Browse as Model Advisor's primary discovery surface (P77)
• e091c43 fix(ui): put TLS status command and copy button on one row
• 0945aa8 fix(ui): reject self-referencing/duplicate fallback chain entries client-side
• 410cc5c fix(ui): remove now-redundant P76 catalog banner from Model Advisor (P77 follow-up)
• 52979a8 fix(ui): show Mesh Host/GPU Node VRAM panels on Favourites tab
• a39a8dd fix(ui): stop VRAM unit dropdown from collapsing the MB/GB number input
• 32bbc04 refactor: merge mesh CLI binary into root ollama-mesh binary