v0.5.2

0.5.2 (2026-10-26)

Features

• providers: add Ollama speech endpoint compatibility (4fd5bc3)
• tracing: export traces to OTLP collectors and LangSmith (ddd5d9d)
• tracing: expose the Langfuse content mode in the dashboard (c339faa)

Bug Fixes

• auth: bind credentials to account state and make each guess cost (c525e4e)
• close three edge cases on the request and cleanup paths (c7e9cff)
• deps: bound decompression and MCP session slots (2f1de23)
• logs: keep secrets, and client widths, out of the log pipeline (0b1a9d0)
• providers: keep provider API keys encrypted at rest (0f6335f)
• security: close the second-axis review of the hardening series (d91271d)
• ssrf: refuse internal hosts for user-supplied endpoints (da73352)
• startup: initialize encryption before the fail-fast config load (1b5e29b)
• streaming: keep model text out of the frame framing (2fc367f)
• team: align member management with documented behavior (20ae853)
• tracing: export Langfuse content by default again (32f8061)
• web-search: treat empty options as enable-with-defaults on every wire (b25dbce)
• ws: charge every socket turn what HTTP charges (c60cb33)

Performance Improvements

• cut request-path CPU in middleware and background writers (b196f59)

Documentation

• admin: correct the personal tracing endpoint path (43a00a9)
• security: record the socket quotas, tracing rule and MCP bounds (651762c)