v0.5.46

Highlights

Model cards: record what each model is.

• In Connections, each model's edit form has a new Model card row: a type (Hugging Face, Commercial or RAG / system), an identifier such as Qwen/Qwen3-30B-A3B or gpt-4.1, and an optional card URL. For Hugging Face models the card link is derived from the identifier; a pasted huggingface.co/... URL is trimmed to owner/model.
• The model list shows a chip with a link to the card.
• The identity is frozen into each new run's snapshot, and the run page's Frozen Manifest shows it under Target, Auditor and Judge. Remapping a model later never changes what past runs show; runs created before this release show no chip.
• Agents need nothing extra: an agent run shows its base model's identity.

Extensions: companion tools next to Studio (#83).

SIMPLEAUDIT_EXTENSIONS (inline JSON or a path to a JSON file) adds, without forking templates:

• Sidebar menu items, filtered by role on the server, optionally grouped under a section heading.
• Stylesheets and scripts on Studio pages (defer, optional integrity, optional pages globs such as /runs/*).
• window.Studio for scripts (user, role, workspace, CSRF token, version, onPage() helper) and a studio:ready event.
• Embed pages at /x/<slug>/ that show a same-origin app inside the Studio shell.
• GET /ext/authz?role=…, a forward-auth endpoint with the same contract as /chat/authz, so a companion app behind a proxy can reuse Studio's login.

Off by default: with the setting unset nothing changes. The manifest is operator code (its scripts run with full same-origin privileges), so it is read only from configuration. See docs/extensions.md, with an example in docs/examples/extensions.json.

Upgrade note: includes the migration model_registry.0021 (adds model_identity; no data changes). Restart the worker together with the web process.