1.9.1

[1.9.1] - 2026-09-04

Added

• Async instance stop. DELETE /api/instances/<id> returns 202 immediately; a transient stopping state guards docker's ~10s SIGTERM grace. Orange "Stopping…" badge in the UI. Eviction→relaunch stays sync. 7 tests.
• Instant cluster visibility. Launch/stop/restart publish a heartbeat inline; peer cards refresh in one round-trip instead of ~10s.
• Load Mode dropdown. --load-mode (auto/none/mmap/mlock/mmap+mlock/dio), llama.cpp's replacement for --mlock/--mmap/--direct-io. Bad values fold to auto. 20 tests.
• Opt-in perf timing. LLAMAMAN_PERF_LOG=1 logs perf <name> <ms> for auth, heartbeat, proxy forwards, save_state, docker ops, idle-proxy shutdown. No-op when off.

Changed

• Idle reaper stops asynchronously — no longer holds the 5s poller tick through a SIGTERM grace.

Fixed

• Queue stats + sidecar proxy lost across a llamaman restart. Reattached-running instances came back without the "Queue N/M active · K queued" indicator and with their public port unbound. load_state's rebuild block was gated on sleeping only; now covers starting too. 8 tests.
• Image & PDF Input layout. Section stretched end-to-end on desktop and overflowed on tablets — hint <p>s inside a max-content toggle grid blew the columns out to their one-line width. Split into two mini-grids with hints as block siblings; a .mmproj-toggle-table modifier pins label cols so the Offload / Accept-PDF switches align. Phone 1fr 40px still wins ≤480px.
• Nested-repo model update check. 404'd on HuggingFace files in subfolders (every unsloth UD-* quant + multipart siblings) because the check probed resolve/main/<basename> while the subfolder was discarded. A 404 now retries once through resolve_filename; the apply-swap lands by basename instead of double-nesting. Flat root-level models unchanged. 15 tests.