v0.9.0

0.9.0 (2026-07-07)

Features

• infra: capture Firebase Auth sign-in config as code (79ed568)
• relay: remote reachability (Wave 2 crit #5) (463654a)
• relay: self-refreshing relay credential (Wave 2 crit #6) (aea50fd)
• remote: Decide command, direction/picker routing, exactly-once client retry (ae69714)
• sim: protocol-fidelity harness — a dumb agent that must follow rendered prompts (ffe29d5)
• tunnel: host-side command dedupe (Wave 2 Step 1d) (c6395bf)
• web/server: Firestore session registry (Wave 2 Step 1b) (44f2db3)
• web/server: Firestore-backed relay-token broker (Wave 2 Step 1a) (5c1da13)
• web/server: Pub/Sub cross-instance frame bus (Wave 2 Step 1c) (f61b54c)

Bug Fixes

• auth: refresh hosted GitLab tokens via a website broker route (1c03df1)
• engine: close engine-minor gap findings (mode-picker copy, await/pure-read docs) (8983893)
• prompts: drop the dead darkrun_checkpoint_choose reference (ad3c911)
• vcs: refresh GitLab OAuth token before hosting/PR requests (b1f0edc)
• web: paginate portfolio + run discovery so >100 items aren't dropped (6bfcab2)
• web: serve robots.txt + sitemap + feeds (run the SEO generator in the image) (03da11f)
• web: serve robots.txt + sitemap + feeds (run the SEO generator in the image) (#203) (5acc680)