v0.5.1.0 — dashboard section-scoped save

0.5.1.0: dashboard section-scoped save

Minor release fixing a dashboard save path that re-ran cloud credential verification on unrelated Network/Swarm edits. Includes everything in 0.5.0.1.

Fixed

• Section-scoped dashboard save (PR #65) — Save POSTs only config sections whose wire patch changed from the last-saved snapshot. Server-side apply_config_guards(..., patch=...) skips cloud provider verification when the patch omits cloud, so saving a cluster token or swarm toggle no longer surfaces Moonshot/OpenRouter “verify your API key” warnings for providers you did not edit.
• No-op save fallback — When a dirty save has no wire diff (e.g. toggling a field to its current value), the dashboard no longer falls back to posting the full config (which re-triggered cloud guards).

Docs

• Config guard scoping documented in config-guards-audit.md and package DOX rails.

Upgrade

From v0.5.0.1:

git checkout v0.5.1.0   # after tag ships
uv sync
./netllm restart      # or menubar Restart Agent / systemctl --user restart netllm

Hard-refresh the dashboard (Cmd+Shift+R) if the browser still serves cached dashboard.js.

Verify:

curl -sf http://127.0.0.1:11400/health
./netllm doctor
open http://127.0.0.1:11400/ui/   # Network save without cloud warnings

Test plan (release gate)

• ./scripts/verify-before-pr.sh
• ./scripts/ci.sh e2e — includes test_saving_never_blanks_a_stored_secret swarm-only POST assertion

Previous release

• v0.5.0.1 notes — Phase B closeout (netllm connect, F-38/F-57 fixes)