Release v1.0.0 · openagento/agento

First stable 1.x release. It collects everything from 1.0.0rc1 to 1.0.0rc4 since v0.17.2.

Breaking Changes

Runtime split — the sandbox service is removed; agents run in runner-<i> services as per-run uids, beside the new web, proxy, runner and artifacts services.
Networks — db-net, exec-net and web-net replace agento-net, and the backend and the toolbox use separate DB users.
Compose override — rename a sandbox: block in docker-compose.override.yml to runner-1:, and use AGENTO_RUN_GROUPS to give runs access to host directories.

Admin panel — a web panel for conversations, miniapps, artifacts, credentials and config, served through proxy.
Tool dispatcher — every tool call goes through one dispatcher that re-checks the capability per call and writes an audit row first.
subagent module (opt-in) — agent_run / agent_result let an agent delegate work to nested sub-agents (max 3 levels), and the parent resumes when its children end.
Threads — every job belongs to a thread (a Jira issue, a mail conversation, a PR or a panel conversation), and the runs of a thread share ./shared and resume the same session.
Conversations panel — the thread rail shows each sub-agent run as a tree under its parent job, with its status badge.
conversation:backfill (co:ba) — imports the jobs that ended before the conversation module ran into their conversations, with the run events from the Claude session file when it matches.
Conversation timeline — events sort by their time (microseconds), so an imported run sits in its time place.
Conversation retention — retention/event_days and retention/archived_days default to 0 (keep for ever).
Miniapp kit 1.3.0 — a released kit version with the panel's current UI.
Credential checks and CLI shortcuts — check a credential from the CLI or the panel, and use short command aliases.

Session resume — a resume stays on the same harness, and a job whose previous session file is missing starts a fresh session instead of failing.
Session state — agent session state persists across runs in the per-run uid model.
Runner SSH identity — git push / git clone over SSH no longer fail with "No user exists for uid", so the agent_view SSH key works again.
Interactive Claude (agento run) — the TUI no longer stops at the first-run theme picker after a credential re-login.
Sub-agent spawn — concurrent spawns no longer race or fail on DB permissions.
Cron image build — the build no longer fails now that CPython 3.15 is out; the image pins Python 3.12.
agento upgrade — strips an address from MYSQL_PORT.
Panel dark mode — the success badge is a solid green.

New docs/modules/subagent.md, docs/architecture/threads.md and the conversation:backfill section in docs/modules/conversation.md.
The agent CLI default pins (claude 2.1.291, codex 0.157.0) lag behind upstream on purpose.

agento upgrade --version 1.0.0