v3.0.0

3.0.0 (2026-10-05)

⚠ BREAKING CHANGES

• decabill: file signing is enabled by default and requires a
  secret key to be set upon rollout of the new application version

• feat(decabill): document signature check

allow checking any document signature by providing any file without
actually saving it to the archive

• feat(decabill): document download by id
• shared: configuration structure changed causing existing remote configs to break
• shared: port consolidation requires changes to the deployment files

Features

• agenstra: chat restore batching (#634) (6e9412d)
• agenstra: empty opencode settings lock (#637) (00443fa)
• agenstra: mcp market (#636) (cb84302)
• agenstra: mcp market whitelist and blacklist (#644) (18ea9dd)
• agenstra: opencode harness lock-in (#633) (6d28331)
• agenstra: worker vnc sessions (#645) (49fc78c)
• decabill: file manager (#654) (d7297df)

Bug Fixes

• agenstra: container image hardening (#643) (623e84b)
• decabill: websocket tenant id fallback (#649) (48b7877)
• shared: websocket cors origin fallthrough (#652) (0e2570a)

Chores

• agenstra: remove integrated ui mode (#646) (6d70a78)
• agenstra: remove security-critical docker images (#642) (8d83eed)
• shared: environment definitions split (#653) (75afda8)
• shared: remove empty draft file (#651) (9eb6b25)
• shared: websocket api consolidation (#648) (70a0ae0)