ChannelGate 0.5.5

ChannelGate 0.5.5 — everything since 0.5.1 (0.5.2–0.5.4 had no release page), and the first signed release since 0.5.2.

Highlights

• SSH into a channel's container instead of the gateway host, including VS Code Remote-SSH on one VS Code server shared by every channel. Interactive claude over SSH is the same Claude a Slack turn runs: same lockdown, gateway and Composio tools, secrets, and a signed-in account. Setup: docs/SSH-ACCESS.md.
• Claude Opus 5.5 and GPT-6 Sol / GPT-6 Luna (Claude Code 2.1.281, Codex CLI 0.156.1), with GPT-6 rates in the Codex cost estimate.
• Failover keeps a conversation's tools when one engine runs out of quota, and the gateway's own notices (failover, license, skipped MCP) now appear in streamed answers.
• Usage you can trust: usage outside chat is counted, one Claude response is no longer charged several times, per-model Claude rates, and charts stacked by model.
• Secrets in three scopes (organization, personal, conversation), with one tool per verb.
• Slack ⚙️ Settings, reworked: five pages behind one dropdown. Access, engine/model and the skill template are edited in place, and the VPN sits under the network switch. The admin reset all channels asks whether to include existing threads' pins and now resets effort too.
• Files leave Slack when asked: "just send me the file" sends it, plus temporary public file links for APIs that ingest by URL.
• A second Anthropic-compatible harness (Qwen EU), on-demand Google Drive sync, the channel-VPN health-check fix, and more. Full list in CHANGELOG.md.

Security: the runtime image no longer carries SSH host private keys. Installing openssh-server generated /etc/ssh/ssh_host_*_key. Nothing used them (each channel has its own key), but every channel container on a host held the same three keys. They are now deleted in the step that installs sshd.

Upgrade: npm run update (or scripts/update.sh). It rebuilds the runtime image itself (spec 1.3.0 → 1.5.1), and channel containers are recreated on their next run; if that step warns, run npm run build:image. Three additive database migrations (v27–v29: SSH keys and sessions, external usage, public file links). No dependency changes. SSH access is optional and needs the root installer scripts/install-ssh-access.sh.

Tags without artifacts: v0.5.3 and v0.5.4 exist, but their signed build stopped at the image secret scan (the host keys above), so they have no release artifacts. Use 0.5.5.

Evidence: full regression suite, static analysis, secret scan, security coverage, dependency audit and DCO passed on the exact candidate; CI green. Signed build evidence (runtime image archive, SPDX inventory, model hashes, checksums, GitHub attestations) is in the release workflow run. Its image scan waived 31 reviewed public look-alikes, each pinned to its official upstream archive in scripts/reviewed-artifact-fixtures.json, and found nothing else. Verify with sha256sum -c SHA256SUMS and gh attestation verify <artifact> --repo makeitfutureDev/channelgate. Live acceptance covered Claude for the SSH, failover and file-delivery work. Codex live acceptance, the later Settings changes and the full live campaign were not run for this release (see docs/RELEASE-ACCEPTANCE.md).