Tale v0.5.67

4 PRs since v0.5.66. Two migrations (0142, 0143), both rolling-deploy safe, applied at boot. No proxy, compose or .env change: tale update, then tale deploy as usual.

Projects and tasks

• A run that fails for good is said and told: the task shows The agent couldn't finish this task with the cause, who can fix it, Details and Retry; the run's starter and the task's watchers get the new Agent run failed notification (email when a mailbox is connected), under the existing Agent escalations preference (#4017)
• The retry job retires every run it refuses for good (budget spent, agent gone, starter lost the right, circuit breaker, busy agent) and announces it once; a run card reads a failure as pending only while an armed retry is coming (#4017)
• Run cards follow every state change live; the 2 s poll is gone. Starting a run marks the task's unread failure notifications read (#4017)
• Assignee in a project without agents offers Editors Create an agent… (opens New agent over the task, keeps the draft, assigns the new agent); everyone else is told who can add one. The coding-harness warning is gone (#4017)
• Members get a reader state on the Agents tab; after assigning, whoever can start the agent sees Start agent and "The agent waits until you start it." (#4017)
• The bell and GET /api/v1/notifications/sync name task statuses by the board's labels instead of raw ids (#4017)

Knowledge — websites

• Rendered pages no longer fail with net::ERR_ABORTED after two or three pages: the crawler's browser session gets room for Chromium (pids cap 128 → 512) (#4016)
• Page text keeps its word boundaries; a site that splits its text into inline tags is indexed as words, not letters (#4016)
• Unclosed tags and repeated meta attributes convert in milliseconds instead of blocking the backend for minutes (#4016)
• A redirect within the site is indexed once, under the address it lands on (#4016)
• Pages crawled before an embedding model existed are embedded by the next scan; saving a model or repairing its credential rescans the affected sources; without a model the Websites page says Chat can't search these websites yet (#4016)
• Scans of different sites run in parallel, carry a heartbeat, and resume within minutes after a restart, deploy or kill instead of sitting on Scanning for two hours (#4016)
• Scan now in the row menu and the details dialog; the table follows a running scan without a reload (#4016)
• Website write routes require knowledgeWrite: read-only Members get 403 RBAC_FORBIDDEN (#4016)
• Embedding failures read "The embedding model couldn't process the pages." with the cause on hover; a browser that cannot start fails the batch with its own stderr instead of re-rendering for hours (#4016)
• Pasted addresses with surrounding spaces or HTTPS:// are accepted (#4016)

Agents — Gemini CLI

• Every Gemini CLI kick (comment, automatic retry, answered ask, comment restart) starts a fresh conversation over the preserved workspace: the pinned CLI replays tool results twice on --resume (google-gemini/gemini-cli#29365) and the resumed conversation's first model call was refused (#4025)
• Harness YAML gains capabilities.resume; the exec builder refuses a resume handle on a harness that declares false (#4025)
• The Gemini parser stamps the provider's status (400, 429, …) on a failed turn, so the run's reason reads the provider's sentence and the kick's "400 → start fresh" rule fires (#4025)

Docs and developer surfaces

• Docs (EN/DE/FR): website crawling (search requirement, Scan now, redirects, restart behaviour, troubleshooting), task automation ("When the agent can't finish"), project agents, harnesses (#4016, #4017, #4025)
• @tale/ui exports use-trigger-tooltip-guard (#4017)
• CLI release-fixture Git steps are bounded at 15 s and report a diagnostic instead of a bare SIGTERM (#4018)

API contract changes

None in this range. The contract stays at 3.8.0: 139 operations.