v3.0.0

This release adds live per-agent model selection and durable requirement changes for independent agent teams, with fixes for child MCP startup, team recovery, and hands-free voice sessions.

Features

• Live per-agent model selection — choose models for built-in, dynamic, and team agents from the dashboard or through authorized MCP tools. Changes take effect at the next LLM call; the current call finishes on its captured model. Revision checks prevent stale edits, and a gateway probe rejects models that cannot complete a request. The selector supports searchable suggestions, light/dark themes, and mobile layouts. (#161)
• Change team requirements while work is running — Jarvis can track independent team sessions in a conversation and send numbered, persisted requirement changes to the intended orchestrator. Monitor shows the revision, and unread changes are recovered after a backend restart. (#159)
• Selective Jira and Confluence reads — opt into Jira brief results or Confluence metadata, compare page versions, and read selected attachments. Full output remains the default. An explicitly empty Jira description is preserved so agents can distinguish it from an omitted field. (#159)

Fixes

• Child-agent MCP startup — fixes the event-loop failure that left spawned agents unable to connect to most configured MCP servers. Teams can connect their tools and retain skills when resumed. (#160, #159)
• Team message routing and recovery — communication, prompt injection, history, and live events use session identity. Ambiguous name-only controls return a conflict. Inbox acknowledgement and restart recovery reduce lost directives, and lifecycle events preserve the PM's name so worker completion wakes the correct orchestrator. (#159)
• Monitor and notification updates — live turns survive a slower initial-history response, and chat/notifications share the global activity stream to reduce competing browser connections. (#159)
• Hands-free session ownership — only one voice session can own the shared speech recognizer. A second tab or device receives a busy message without disturbing the first; startup failures release ownership for a later connection. (#158)
• Generated MCP verification — the latest test result for each tool wins, so an earlier success cannot hide a later failure. (#157)

Security

• Content-bound generated MCP approval — approval and verification are tied to the reviewed candidate. Changed code requires a new review, forbidden-pattern findings block verification, and approval gates cover installation and execution. This continues to operate within the trusted internal shell/OS-user boundary; it does not add per-agent sandboxing. (#159)

Upgrade notes

• Update the repository and its pinned submodules together, back up persistent data, and restart the backend. New SQLite tables persist team bindings, requirement revisions, and model overrides.
• Live model switching supports openai.<model> IDs through the configured OpenAI-compatible gateway. Switching provider families is not supported by this release.
• A requirement marked delivered has been queued in the team's inbox; this does not mean it has been completed. External side effects are not guaranteed exactly once after a crash. Agent display names remain globally unique.

Full changelog: v2.15.0...v3.0.0