v2.45.0

2.45.0 (2026-10-26)

Features

• add private on-demand usage export (#552) (7e56810)
• add usage consolidation report projector (#551) (44383f6)
• delivery: invoke the pinned haynes-ops guard for source-only PRs (#546) (84991e9)
• portal: add fenced PostgreSQL sessions and current authorization (#529) (d4d21ef)
• portal: assemble the internal read-only runtime (#541) (fa8b1e2)
• portal: fence sessions on their actual PostgreSQL connection (#531) (0b14da9)
• portal: make Attention readable on a phone (#528) (190a815)
• portal: serve session summaries and project work packages (#545) (8d655b2)
• providerallowance: add the Story189 source contract (#543) (edfd9c3)
• trials: check synthetic stopped handoffs offline (#532) (2854dbe)

Bug Fixes

• agentd: publish the TTY fixture receipt only when complete (#544) (2da71e8)
• agentd: retain own-SA kubeconfig at zero grants (#555) (25763f5)
• allow terminal outcomes of optional advisory duplicates (#554) (7976b1a)
• delivery: isolate pinned guard execution (#549) (44d9c27)
• deps: update module github.com/go-jose/go-jose/v4 to v4.1.6 (#535) (e279fe4)
• deps: update module golang.org/x/time to v0.16.0 (#537) (480e0cd)
• portal: bind work packages to canonical TaskClaim keys (#542) (5b39ebb)
• portal: enforce page and JSON reader contracts (#550) (3221ca7)