v0.58.0

Minor release: fleet usage answers over MCP, a durable WorkflowRun ledger with period-deduped admission, operator alerts when a brain cannot authenticate or is out of credits, one executor and one turn primitive behind every run, the mcp 2.0 breakage closed, and the review-remediation initiative finished.

Added

• Rolling fleet usage summary over MCP: per-fleet job counts, tokens, and cost over a 1-365 day window, with per-instance detail and partial results (#1061)
• A WorkflowRun ledger entry for every run; period: hourly|daily|weekly|monthly dedupes admission per bucket across every dispatch path (#1052, #1049)
• Alerts on brain authentication and credit failures; auth failures are terminal and visible, triggering messages stay replayable (#1042, #1041)
• A framework communication baseline prepended to every team's instructions; opt out with BOBI_COMMUNICATION_STYLE=off (#1044)

Fixed

• Framework protection via launch-time file-integrity checks instead of runtime chmod, unblocking uv tool upgrade/pipx/pip (#1060)
• mcp pinned >=1.23.0,<2 plus shims for the 2.0 renames that broke fresh installs (#1046, #1054)
• connect() is never a turn: dispatch text no longer executes before step 0 (#1017)
• Sleep cycle no longer wedges on over-budget memory (#1069)
• Liveness verdicts deferred under legitimate heavy load (#1022)
• doctor detects processes running code an in-place upgrade replaced (#1035)
• Failed monitor publishes parked and retried; duplicate suppression on by default; dated runtime logs; attributed preflight failures (#1019, #1036, #1033, #1034)
• Login destination no longer caller-controlled; team archives fail closed; issue-assignment dispatch scoped to self (#1009, #1031, #1032)
• Distribution builds accept Node 20+ (#1010)

Changed

• Ad-hoc --wait runs through the workflow executor; spawn_adhoc's executor role retired (#1058)
• Review-remediation initiative closed: consolidation refactors, deferred web-UI items, test-suite cleanup (#1065, #1059)

Full detail in CHANGELOG.md 0.58.0.