v0.10.0

What's New

Backend

• Proof-of-Possession registration — Ed25519 signature verification on agent registration
• Expanded handleListAgents — sort, search, min_score, protocol/capability/status filters with pagination
• Structured error responses — consistent error codes across all API endpoints
• Enforce JWT secret — reject startup with empty secret, add connection pool settings, tighten auth window

Web Dashboard

• Mobile navigation — hamburger menu + Sheet drawer for all layouts (public, console, admin), collapsible sidebar with localStorage persistence
• Toast system — sonner-based notifications replacing all alert() calls across 5 pages
• Confirm dialogs — Radix AlertDialog replacing window.confirm() with double-submit prevention
• Notification system v1 — real-time push via signaling WebSocket, bell icon with unread count
• SDK version tracking — upgrade prompts for outdated agent SDKs, version advisory in heartbeat
• Platform-aware registration — plugin install prompts for OpenClaw, IronClaw, NanoBot, PicoClaw
• Admin analytics — Recharts charts, trends, protocol distribution
• i18n — 8 languages (en, zh, ja, ru, pt, fr, es, ar), Footer, 404 page

Security Audit Fixes

• Double-submit guard in ConfirmDialog
• NotificationBell error handling with toast
• setTimeout cleanup leak in APIKeysPage
• Unmount guard for async state updates
• Pagination boundary checks on deletion
• Accessibility: aria-labels on custom toggles
• SQL safety comment on orderBy whitelist

CI

• Add 70% coverage threshold gate