PyPI - observal-cli - Versions diffs - 1.4.2__tar.gz → 1.4.3__tar.gz - Mend

observal-cli 1.4.2tar.gz → 1.4.3tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (944) hide show

{observal_cli-1.4.2 → observal_cli-1.4.3}/CHANGELOG.md RENAMED Viewed

@@ -10,6 +10,27 @@
 All notable changes to this project will be documented in this file.
+## [1.4.3] - 2026-05-31
+### Added
+- persist audit log search filters in URL params (**web**) ([bbf7e47](https://github.com/BlazeUp-AI/Observal/commit/bbf7e473a6a0f4352778fa5ce4d34c922fa9bdbc))
+- persist trace filters in URL search params ([324d47f](https://github.com/BlazeUp-AI/Observal/commit/324d47fcd68bffabcea433b5f3d2c7bc0f502077))
+### Documentation
+- add cli/skill.md reference (#1207) ([3e8d0bf](https://github.com/BlazeUp-AI/Observal/commit/3e8d0bf01f03e22147818e213e092adcafa1151c))
+### Fixed
+- support BYO-VPC Fargate deployment with private zones (**infra**) ([5dabfc0](https://github.com/BlazeUp-AI/Observal/commit/5dabfc01027ca9362d92161e65af39047095f7bf))
+- use dynamic agent-specific rules file paths (**opencode**) ([c1097b7](https://github.com/BlazeUp-AI/Observal/commit/c1097b7cbfe717a23d033eed15ebcfea051ee7e1))
+- unify loading skeletons via shared canonical layouts (**web**) ([5b56253](https://github.com/BlazeUp-AI/Observal/commit/5b56253199ea27e7516dff99d2ad0453b48f628c))
+- replace magic status codes with constants in test_payload_protection.py (**lint**) ([0ee8bd1](https://github.com/BlazeUp-AI/Observal/commit/0ee8bd1f56daab81efb233795d7c1e8299cf83b2))
+### Testing
+- add E2E tests for auth and scan commands (**cli**) ([feb6f29](https://github.com/BlazeUp-AI/Observal/commit/feb6f29e12e86480ffb699486f385a94fea5e684))
 ## [1.4.2] - 2026-05-31
 ### Added
@@ -17,8 +38,78 @@ All notable changes to this project will be documented in this file.
 - add dependency review action for PR license gate (**ci**) ([b6327d9](https://github.com/BlazeUp-AI/Observal/commit/b6327d951fc6a8f9ce37d311bde8c2e74c8c19a1))
 - add OpenVEX and THIRD_PARTY_NOTICES generation (**ci**) ([6687430](https://github.com/BlazeUp-AI/Observal/commit/6687430908ea2105e8a24ee9eb725d1d6000e90e))
 - move insights out of ee/ and remove license gate ([4330b37](https://github.com/BlazeUp-AI/Observal/commit/4330b373a0b0063c2348959999a69ba37b11cc19))
+### Documentation
+- add commercial licensing whitepaper for enterprise buyers ([55f4535](https://github.com/BlazeUp-AI/Observal/commit/55f45356b85214166265c0de512ec5c998b4ae29))
+### Fixed
+- resolve all prod deployment failures in Terraform module (**infra**) ([3579aa0](https://github.com/BlazeUp-AI/Observal/commit/3579aa02bdf5b82b9d4a5cf51cf59bb501157a04))
+## [1.4.1] - 2026-05-31
+### Added
 - add GCP Terraform module for self-hosting (**infra**) ([3f4312b](https://github.com/BlazeUp-AI/Observal/commit/3f4312b1c9456d0074a3f5819fe673fb44cc62ea))
+### Fixed
+- close API key redaction gaps across ingest, GraphQL, and settings (**security**) ([100c272](https://github.com/BlazeUp-AI/Observal/commit/100c27281bd7aa83d7e0418c1d51dd3148a2db9d))
+- auto-enable APIs, fix Cloud SQL edition, AR proxy for ghcr.io (**infra/gcp**) ([31652c0](https://github.com/BlazeUp-AI/Observal/commit/31652c0a9fb2520f8b0a1257b4f2b938aa773388))
+- align Terraform env vars with v1.0 and fix template bugs (**infra**) ([685cca3](https://github.com/BlazeUp-AI/Observal/commit/685cca3e4cd294c7b25178283620af00de44c4bb))
+## [1.4.0] - 2026-05-31
+### Added
 - make sensitive settings write-once and retractable (**security**) ([b6b4fc1](https://github.com/BlazeUp-AI/Observal/commit/b6b4fc1f4f90d30c3c6bceef9d62d6faa5d214c7))
+### Fixed
+- correct tool count and strip ANSI from thinking blocks (**ui+parser**) ([cb97420](https://github.com/BlazeUp-AI/Observal/commit/cb974206eb1aead4429f2345b59a80296bcd9e3b))
+- fix off-by-one in byte offset tracking (**pi-extension**) ([39e2135](https://github.com/BlazeUp-AI/Observal/commit/39e2135ea59eeb4c43a87fdb66fac2d5f3ef1f22))
+- prevent partial line reads during concurrent agent writes (**cli**) ([c9f9b32](https://github.com/BlazeUp-AI/Observal/commit/c9f9b32cfc9c5f94ebbbf4f851f23ad868c84e86))
+- fix TS type errors in incremental session fetch (**frontend**) ([794f98b](https://github.com/BlazeUp-AI/Observal/commit/794f98b1eb55bbdaaaa0c0935b11a550b2b53ec6))
+- add tmpfs mounts and remove enterprise image logic (**infra**) ([02886aa](https://github.com/BlazeUp-AI/Observal/commit/02886aa8312169683a45e5306e4443c3dbc592e1))
+### Other
+- remove obsolete release-enterprise workflow ([cdf0078](https://github.com/BlazeUp-AI/Observal/commit/cdf007890efe0c23dd0d83ff8aaf563770cb8ef7))
+### Performance
+- add partition key to session_stats_agg (**clickhouse**) ([013aae1](https://github.com/BlazeUp-AI/Observal/commit/013aae196ec58bc5e6c3394572c7650bf973e72a))
+- tune for 512M container with 500+ concurrent users (**postgres**) ([bc161e0](https://github.com/BlazeUp-AI/Observal/commit/bc161e03a8a2667f40a223bd38e363dd58aac09c))
+- convert 3 BaseHTTPMiddleware to pure ASGI (**middleware**) ([0b7096a](https://github.com/BlazeUp-AI/Observal/commit/0b7096aa86d303735ef1ba4a925bb1a806f8d29d))
+- add slim query variants without blob columns (**clickhouse**) ([1415fb1](https://github.com/BlazeUp-AI/Observal/commit/1415fb11696456510ed3b290900ec2d9ff5c4443))
+- skip dedup query on first push with Redis flag guard (**ingest**) ([575842d](https://github.com/BlazeUp-AI/Observal/commit/575842dd3facf0aa5f186543ee4b16604655cdd0))
+- incremental session detail fetch with after_offset (**frontend**) ([b64a8a2](https://github.com/BlazeUp-AI/Observal/commit/b64a8a2f2e2c96110d9c3b2159334546309d3342))
+- add after_offset param for incremental detail fetch (**sessions**) ([6e2676b](https://github.com/BlazeUp-AI/Observal/commit/6e2676bc6dbba781b1f101d2027eb9f6ff83d885))
+- raise merge tree part thresholds for high ingest (**clickhouse**) ([cce4b91](https://github.com/BlazeUp-AI/Observal/commit/cce4b91f14cee7cdd16bc17c33ecd0eb84f2dffd))
+- cache agent_id name→UUID resolution in Redis (5min TTL) (**ingest**) ([90e19fd](https://github.com/BlazeUp-AI/Observal/commit/90e19fdbfd5063f798d7875d0cca3a57860ee8a4))
+- combine 15 regex patterns into single alternation (**redactor**) ([847ecde](https://github.com/BlazeUp-AI/Observal/commit/847ecde2d807c48e1120039502f179d2960b8882))
+- enable async_insert with sync override for audit (**clickhouse**) ([b890023](https://github.com/BlazeUp-AI/Observal/commit/b89002305ed1e4b55b10b31e2878af7412d6f244))
+- set maxmemory 200mb with volatile-lru eviction (**redis**) ([22a4f2b](https://github.com/BlazeUp-AI/Observal/commit/22a4f2b5994d3ca96a35b212d0d7f8467784425b))
+- add rate limit of 300/minute per client IP (**ingest**) ([cd66b15](https://github.com/BlazeUp-AI/Observal/commit/cd66b152b3f2b7e2ad7e2a3a1cf00981482dc078))
+- skip ContentType depth check on ingest/telemetry (**middleware**) ([22acc2b](https://github.com/BlazeUp-AI/Observal/commit/22acc2bff68c083c6175c8a49ba093109707066a))
+- remove GZipMiddleware, nginx handles compression (**middleware**) ([0d68724](https://github.com/BlazeUp-AI/Observal/commit/0d68724b846781aea78eba30d82a17040f2f94c8))
+- remove _invalidate_cache from hot-path inserts (**cache**) ([8314cca](https://github.com/BlazeUp-AI/Observal/commit/8314cca002410e7a5300f30ff5ef65d2d9ad3c40))
+- reduce session detail polling to 5s fallback (**frontend**) ([cd0a61c](https://github.com/BlazeUp-AI/Observal/commit/cd0a61c64717e37b0cf815898a784988ecab4704))
+- increase max_jobs from 5 to 15 (**worker**) ([9504a75](https://github.com/BlazeUp-AI/Observal/commit/9504a75e05b25a743d77116df87019577bf505a6))
+- add uvicorn workers for multi-core throughput (**docker**) ([8c7181d](https://github.com/BlazeUp-AI/Observal/commit/8c7181dbe1955f4c3dc1c0a3fd1d733435aa8c30))
+- increase connection pool sizes for 500+ concurrent users (**scale**) ([c28d325](https://github.com/BlazeUp-AI/Observal/commit/c28d3255193a1b5f9f5fe566108a33df772cad0a))
+- set keepalive connections equal to max connections (**clickhouse**) ([8ffb7ee](https://github.com/BlazeUp-AI/Observal/commit/8ffb7eee53d75e0246cdfe5b82f123bc571326cf))
+- add upstream keepalive and WebSocket timeout (**nginx**) ([6465c6e](https://github.com/BlazeUp-AI/Observal/commit/6465c6ef88832639bb0b358c9ed6bd4dfe5967ff))
+- fire-and-forget Redis publish on session ingest (**ingest**) ([cf502c4](https://github.com/BlazeUp-AI/Observal/commit/cf502c4e5e984589b1ab33e049a6ab4cdead69fa))
+- use session-specific channels for targeted fan-out (**pubsub**) ([bc615fe](https://github.com/BlazeUp-AI/Observal/commit/bc615fe5ded1eafc111edb8febdffe9b38eb9d54))
+- use OrderedDict for O(1) LRU eviction in registry cache (**cache**) ([c1fa3fd](https://github.com/BlazeUp-AI/Observal/commit/c1fa3fd3d31a737022be50080aaec9a3ca17bbd7))
+- add partition-independent FINAL optimization (**dashboard**) ([c8f09ad](https://github.com/BlazeUp-AI/Observal/commit/c8f09ad6b71ec9c4daee1fc6929a573ce6899412))
+- parallelize ClickHouse queries with asyncio.gather (**dashboard**) ([dcb03fd](https://github.com/BlazeUp-AI/Observal/commit/dcb03fdfa4c42913c921c3ee4b8fe65edde83158))
+- pipeline 3 Redis checks into 1 round-trip (**auth**) ([9a777fd](https://github.com/BlazeUp-AI/Observal/commit/9a777fd6e051f3b8213924208059c7e7e783812d))
+- publish sessions:updated on successful session ingest (**ingest**) ([f6e8450](https://github.com/BlazeUp-AI/Observal/commit/f6e84505138dc382840fd02b4acc5747dc6d0765))
+## [1.3.1] - 2026-05-30
+### Added
 - migrate from Next.js to Vite + TanStack Router (**web**) ([c4578d7](https://github.com/BlazeUp-AI/Observal/commit/c4578d78ccea5385ed618cbd2cfed55b64cc0e1d))
 - add ring buffer sink, SSE log streaming, CLI --remote (**optic**) ([76979cb](https://github.com/BlazeUp-AI/Observal/commit/76979cb99a1788d085c494434bdadb29829ea506))
 - add Okta OIDC setup documentation (**saml**) ([2657aa3](https://github.com/BlazeUp-AI/Observal/commit/2657aa37a1f8afdf5b298d4934a8b0f006915528))
@@ -43,21 +134,8 @@ All notable changes to this project will be documented in this file.
 - break clickhouse client/schema cycle via _settings module (**server**) ([e65b884](https://github.com/BlazeUp-AI/Observal/commit/e65b884b5cacc574a4df9f20611bcb10817649a6))
 - extract DashboardRangeContext to break 3 import cycles (**web**) ([bbc105e](https://github.com/BlazeUp-AI/Observal/commit/bbc105e912bb8fc8af5ab390a6be3dc2c3c8de2c))
-### Documentation
-- add commercial licensing whitepaper for enterprise buyers ([55f4535](https://github.com/BlazeUp-AI/Observal/commit/55f45356b85214166265c0de512ec5c998b4ae29))
 ### Fixed
-- resolve all prod deployment failures in Terraform module (**infra**) ([3579aa0](https://github.com/BlazeUp-AI/Observal/commit/3579aa02bdf5b82b9d4a5cf51cf59bb501157a04))
-- close API key redaction gaps across ingest, GraphQL, and settings (**security**) ([100c272](https://github.com/BlazeUp-AI/Observal/commit/100c27281bd7aa83d7e0418c1d51dd3148a2db9d))
-- auto-enable APIs, fix Cloud SQL edition, AR proxy for ghcr.io (**infra/gcp**) ([31652c0](https://github.com/BlazeUp-AI/Observal/commit/31652c0a9fb2520f8b0a1257b4f2b938aa773388))
-- align Terraform env vars with v1.0 and fix template bugs (**infra**) ([685cca3](https://github.com/BlazeUp-AI/Observal/commit/685cca3e4cd294c7b25178283620af00de44c4bb))
-- correct tool count and strip ANSI from thinking blocks (**ui+parser**) ([cb97420](https://github.com/BlazeUp-AI/Observal/commit/cb974206eb1aead4429f2345b59a80296bcd9e3b))
-- fix off-by-one in byte offset tracking (**pi-extension**) ([39e2135](https://github.com/BlazeUp-AI/Observal/commit/39e2135ea59eeb4c43a87fdb66fac2d5f3ef1f22))
-- prevent partial line reads during concurrent agent writes (**cli**) ([c9f9b32](https://github.com/BlazeUp-AI/Observal/commit/c9f9b32cfc9c5f94ebbbf4f851f23ad868c84e86))
-- fix TS type errors in incremental session fetch (**frontend**) ([794f98b](https://github.com/BlazeUp-AI/Observal/commit/794f98b1eb55bbdaaaa0c0935b11a550b2b53ec6))
-- add tmpfs mounts and remove enterprise image logic (**infra**) ([02886aa](https://github.com/BlazeUp-AI/Observal/commit/02886aa8312169683a45e5306e4443c3dbc592e1))
 - escape shell variable in user-data.sh.tftpl (**infra**) ([b60cd16](https://github.com/BlazeUp-AI/Observal/commit/b60cd161c6fbda5ba2cd2d6af77714ae6d9ae36a))
 - remove references to nonexistent enterprise artifacts (**infra**) ([9292cf9](https://github.com/BlazeUp-AI/Observal/commit/9292cf90b8d73f4d30be84bc1ca1c09f9297b50e))
 - update scancode license-policy path after move to .reuse/ (**ci**) ([d081dfa](https://github.com/BlazeUp-AI/Observal/commit/d081dfaacde4f3ea9623db0440d0407c8bf49d85))
@@ -96,7 +174,6 @@ All notable changes to this project will be documented in this file.
 ### Other
-- remove obsolete release-enterprise workflow ([cdf0078](https://github.com/BlazeUp-AI/Observal/commit/cdf007890efe0c23dd0d83ff8aaf563770cb8ef7))
 - set version to 1.3.0 (skip burned release) ([9318611](https://github.com/BlazeUp-AI/Observal/commit/93186116796e13089ec73a856365d96f00585eed))
 - update actions/setup-node action to v6 (#1278) (**deps**) ([1a015f4](https://github.com/BlazeUp-AI/Observal/commit/1a015f4f569b0177801afc40e1f698f2788b02c1))
 - remove outdated docs, images, and stale references ([b831dd5](https://github.com/BlazeUp-AI/Observal/commit/b831dd555d5f5efcb5902aef9710dc82da0df774))
@@ -104,38 +181,6 @@ All notable changes to this project will be documented in this file.
 - update dependency ruff to v0.15.15 (#1275) (**deps**) ([90b3fb4](https://github.com/BlazeUp-AI/Observal/commit/90b3fb413dd5f62eff9ccd4cc4eaa1e8a54b4d18))
 - update docker images (minor/patch) (#1276) (**deps**) ([e287405](https://github.com/BlazeUp-AI/Observal/commit/e287405c45997b8c02715abaedc3b02fe982753d))
-### Performance
-- add partition key to session_stats_agg (**clickhouse**) ([013aae1](https://github.com/BlazeUp-AI/Observal/commit/013aae196ec58bc5e6c3394572c7650bf973e72a))
-- tune for 512M container with 500+ concurrent users (**postgres**) ([bc161e0](https://github.com/BlazeUp-AI/Observal/commit/bc161e03a8a2667f40a223bd38e363dd58aac09c))
-- convert 3 BaseHTTPMiddleware to pure ASGI (**middleware**) ([0b7096a](https://github.com/BlazeUp-AI/Observal/commit/0b7096aa86d303735ef1ba4a925bb1a806f8d29d))
-- add slim query variants without blob columns (**clickhouse**) ([1415fb1](https://github.com/BlazeUp-AI/Observal/commit/1415fb11696456510ed3b290900ec2d9ff5c4443))
-- skip dedup query on first push with Redis flag guard (**ingest**) ([575842d](https://github.com/BlazeUp-AI/Observal/commit/575842dd3facf0aa5f186543ee4b16604655cdd0))
-- incremental session detail fetch with after_offset (**frontend**) ([b64a8a2](https://github.com/BlazeUp-AI/Observal/commit/b64a8a2f2e2c96110d9c3b2159334546309d3342))
-- add after_offset param for incremental detail fetch (**sessions**) ([6e2676b](https://github.com/BlazeUp-AI/Observal/commit/6e2676bc6dbba781b1f101d2027eb9f6ff83d885))
-- raise merge tree part thresholds for high ingest (**clickhouse**) ([cce4b91](https://github.com/BlazeUp-AI/Observal/commit/cce4b91f14cee7cdd16bc17c33ecd0eb84f2dffd))
-- cache agent_id name→UUID resolution in Redis (5min TTL) (**ingest**) ([90e19fd](https://github.com/BlazeUp-AI/Observal/commit/90e19fdbfd5063f798d7875d0cca3a57860ee8a4))
-- combine 15 regex patterns into single alternation (**redactor**) ([847ecde](https://github.com/BlazeUp-AI/Observal/commit/847ecde2d807c48e1120039502f179d2960b8882))
-- enable async_insert with sync override for audit (**clickhouse**) ([b890023](https://github.com/BlazeUp-AI/Observal/commit/b89002305ed1e4b55b10b31e2878af7412d6f244))
-- set maxmemory 200mb with volatile-lru eviction (**redis**) ([22a4f2b](https://github.com/BlazeUp-AI/Observal/commit/22a4f2b5994d3ca96a35b212d0d7f8467784425b))
-- add rate limit of 300/minute per client IP (**ingest**) ([cd66b15](https://github.com/BlazeUp-AI/Observal/commit/cd66b152b3f2b7e2ad7e2a3a1cf00981482dc078))
-- skip ContentType depth check on ingest/telemetry (**middleware**) ([22acc2b](https://github.com/BlazeUp-AI/Observal/commit/22acc2bff68c083c6175c8a49ba093109707066a))
-- remove GZipMiddleware, nginx handles compression (**middleware**) ([0d68724](https://github.com/BlazeUp-AI/Observal/commit/0d68724b846781aea78eba30d82a17040f2f94c8))
-- remove _invalidate_cache from hot-path inserts (**cache**) ([8314cca](https://github.com/BlazeUp-AI/Observal/commit/8314cca002410e7a5300f30ff5ef65d2d9ad3c40))
-- reduce session detail polling to 5s fallback (**frontend**) ([cd0a61c](https://github.com/BlazeUp-AI/Observal/commit/cd0a61c64717e37b0cf815898a784988ecab4704))
-- increase max_jobs from 5 to 15 (**worker**) ([9504a75](https://github.com/BlazeUp-AI/Observal/commit/9504a75e05b25a743d77116df87019577bf505a6))
-- add uvicorn workers for multi-core throughput (**docker**) ([8c7181d](https://github.com/BlazeUp-AI/Observal/commit/8c7181dbe1955f4c3dc1c0a3fd1d733435aa8c30))
-- increase connection pool sizes for 500+ concurrent users (**scale**) ([c28d325](https://github.com/BlazeUp-AI/Observal/commit/c28d3255193a1b5f9f5fe566108a33df772cad0a))
-- set keepalive connections equal to max connections (**clickhouse**) ([8ffb7ee](https://github.com/BlazeUp-AI/Observal/commit/8ffb7eee53d75e0246cdfe5b82f123bc571326cf))
-- add upstream keepalive and WebSocket timeout (**nginx**) ([6465c6e](https://github.com/BlazeUp-AI/Observal/commit/6465c6ef88832639bb0b358c9ed6bd4dfe5967ff))
-- fire-and-forget Redis publish on session ingest (**ingest**) ([cf502c4](https://github.com/BlazeUp-AI/Observal/commit/cf502c4e5e984589b1ab33e049a6ab4cdead69fa))
-- use session-specific channels for targeted fan-out (**pubsub**) ([bc615fe](https://github.com/BlazeUp-AI/Observal/commit/bc615fe5ded1eafc111edb8febdffe9b38eb9d54))
-- use OrderedDict for O(1) LRU eviction in registry cache (**cache**) ([c1fa3fd](https://github.com/BlazeUp-AI/Observal/commit/c1fa3fd3d31a737022be50080aaec9a3ca17bbd7))
-- add partition-independent FINAL optimization (**dashboard**) ([c8f09ad](https://github.com/BlazeUp-AI/Observal/commit/c8f09ad6b71ec9c4daee1fc6929a573ce6899412))
-- parallelize ClickHouse queries with asyncio.gather (**dashboard**) ([dcb03fd](https://github.com/BlazeUp-AI/Observal/commit/dcb03fdfa4c42913c921c3ee4b8fe65edde83158))
-- pipeline 3 Redis checks into 1 round-trip (**auth**) ([9a777fd](https://github.com/BlazeUp-AI/Observal/commit/9a777fd6e051f3b8213924208059c7e7e783812d))
-- publish sessions:updated on successful session ingest (**ingest**) ([f6e8450](https://github.com/BlazeUp-AI/Observal/commit/f6e84505138dc382840fd02b4acc5747dc6d0765))
 ### Testing
 - update agent listing tests for auth requirement ([f74a674](https://github.com/BlazeUp-AI/Observal/commit/f74a674337a827c978c9d40e45b78bcf0396b04f))
@@ -610,78 +655,6 @@ All notable changes to this project will be documented in this file.
 - JSON paste as default MCP submit/edit with shared parser (**UI**) ([55daede](https://github.com/BlazeUp-AI/Observal/commit/55daede837428239afdc88fe7fb67adebbc0247a))
 - make JSON paste the default MCP submission method (**cli**) ([ff9e3de](https://github.com/BlazeUp-AI/Observal/commit/ff9e3de8716ac129f3e3d573d899fab036ebff8f))
 - add backend integration tests against real DB ([7e1e8ee](https://github.com/BlazeUp-AI/Observal/commit/7e1e8eee215aeb02ad1eb1c29339ddf1ff049cb8))
-### CI
-- add workflow for backend integration tests ([ba4e741](https://github.com/BlazeUp-AI/Observal/commit/ba4e741feaf813f27eec071c7720ac9451f90866))
-### Documentation
-- update quick start with curl-install and move license to bottom ([d1b4dfa](https://github.com/BlazeUp-AI/Observal/commit/d1b4dfa2f07f645111086d5b957d9b8ed3e1a9d3))
-### Fixed
-- correct sentinel timestamp causing broken duration/started columns (**traces**) ([56733af](https://github.com/BlazeUp-AI/Observal/commit/56733af5d0ed0361eea48baa7273158625c521e1))
-- stub page and hide from sidebar pending rework (**errors**) ([7ccf37b](https://github.com/BlazeUp-AI/Observal/commit/7ccf37b57d84e05a2efac59cf9b52d99345f142d))
-- replace import-based detection with INSIGHTS_AVAILABLE env flag (**insights**) ([d822993](https://github.com/BlazeUp-AI/Observal/commit/d82299371690c6cec3d214cbef09da6fb14fbc34))
-- resolve pre-commit and pre-push hook failures ([236f9c1](https://github.com/BlazeUp-AI/Observal/commit/236f9c1081d337fd7b5a2de16d6d74ecbbbefea8))
-- wire token counts and correct duration in session list ([7719683](https://github.com/BlazeUp-AI/Observal/commit/7719683887a0d2573ee0783f46a9b3860671f1c1))
-- use sessionStorage for access token in loginToWebUI helper (**e2e**) ([4d39d12](https://github.com/BlazeUp-AI/Observal/commit/4d39d12148611f478ba7108ee76e9487bbe98588))
-- replace nonexistent observal-hook.sh with session_push.py (**hooks**) ([77014e6](https://github.com/BlazeUp-AI/Observal/commit/77014e61ddf3207400ed1305bd5e88b2ace5a1e3))
-- stop enterprise compose file from overriding DEPLOYMENT_MODE ([08e317d](https://github.com/BlazeUp-AI/Observal/commit/08e317d00bb73c6166faaf754b5bae5050e890bc))
-- login page respects ?next= param after authentication ([0acca4b](https://github.com/BlazeUp-AI/Observal/commit/0acca4b2aef48136b845d240b1015d7c8f3d995c))
-- migrate JWT signing from HS256 to ES256 (**security**) ([e562524](https://github.com/BlazeUp-AI/Observal/commit/e56252495d9e6297ca29dfc3064032ad77f0d93d))
-- user-level token revocation and Redis fail-closed auth (**security**) ([899fa0c](https://github.com/BlazeUp-AI/Observal/commit/899fa0c910086f93754c8e69dac4f098ef4c476a))
-- update remaining localStorage reads to sessionStorage for access token ([71feea2](https://github.com/BlazeUp-AI/Observal/commit/71feea2e2ff2fe3f082dd9060088792f39760d31))
-- enforce org ownership on component source routes (**security**) ([2f9dbcb](https://github.com/BlazeUp-AI/Observal/commit/2f9dbcb97c7c50e7bf51b0fa819b1a1334c01323))
-- scope admin dashboard and telemetry queries to requesting user's org (**security**) ([afe13b1](https://github.com/BlazeUp-AI/Observal/commit/afe13b16a3760c851fe24aeb9b7cd8e951e67c5d))
-- private agents not visible to anonymous callers in local mode (**security**) ([78d465f](https://github.com/BlazeUp-AI/Observal/commit/78d465f52c0dc2c137628de0497301af14b9f7b9))
-- scope private registry listings to owner org (**security**) ([af993b0](https://github.com/BlazeUp-AI/Observal/commit/af993b04dca6db3fe8e60b21165bdf10e5dc1021))
-- require authentication on GraphQL telemetry endpoint (**security**) ([ed65c9e](https://github.com/BlazeUp-AI/Observal/commit/ed65c9eda6d4dbe188747123f4a6b78354c1c72c))
-- block startup with weak SECRET_KEY, warn on insecure defaults in settings (**security**) ([a22ec35](https://github.com/BlazeUp-AI/Observal/commit/a22ec35d325082bb1966d6f367624003448515f6))
-- enforce password strength on account creation and change (OBSV-SEC-006) (**security**) ([cc65f9f](https://github.com/BlazeUp-AI/Observal/commit/cc65f9f0f33e73664672c61820071b96b256da71))
-- add 'unsafe-inline' to CSP script-src for Next.js hydration ([15dcaf8](https://github.com/BlazeUp-AI/Observal/commit/15dcaf8e183c7c4a5d68523864c6d23ec1c3082f))
-- hide OpenAPI docs and metrics endpoints by default (OBSV-SEC-015) (**security**) ([c338b88](https://github.com/BlazeUp-AI/Observal/commit/c338b88f8e43cbdc91de07f846f06710496d3c80))
-- require approved status for agent install, validate MCP commands (OBSV-SEC-027) (**security**) ([5b6a3a0](https://github.com/BlazeUp-AI/Observal/commit/5b6a3a0852c277dc5eeb9dc4838203b2e40a9247))
-- block password lifecycle routes in SSO-only mode (OBSV-SEC-028) (**security**) ([298cc09](https://github.com/BlazeUp-AI/Observal/commit/298cc090c60a11bd9a97f5b1b9428760f51e2265))
-- rate limiting only trusts XFF from configured trusted proxies (OBSV-SEC-003) (**security**) ([1b9f087](https://github.com/BlazeUp-AI/Observal/commit/1b9f08741256a98dca7499a3ca3fad1e79b750c9))
-- address PR review feedback ([007e05c](https://github.com/BlazeUp-AI/Observal/commit/007e05cc626c46c8bd0d16542487d5635178eca4))
-- add SPDX header and suppress bandit false positive (**ci**) ([a2efe47](https://github.com/BlazeUp-AI/Observal/commit/a2efe476cb1b8f837f10a7ac03ac4b543657da41))
-- renumber insight migration 0004 -> 0005 (**alembic**) ([050a8c2](https://github.com/BlazeUp-AI/Observal/commit/050a8c24ee63c3b5e8b80088bb13287fafcd4dc2))
-- CSP middleware and access token in sessionStorage (OBSV-SEC-025) (**security**) ([1040029](https://github.com/BlazeUp-AI/Observal/commit/10400295015f6a398e60901bb98bf2e7d34dbaa4))
-- harden EC2 bootstrap script (OBSV-SEC-020) (**security**) ([d230bf0](https://github.com/BlazeUp-AI/Observal/commit/d230bf081b281be00e506d1c0629d47369968915))
-- block operational paths at ALB by default (OBSV-SEC-018) (**security**) ([0b35ccf](https://github.com/BlazeUp-AI/Observal/commit/0b35ccfae02fbc7b94dc4a0c30a6411e2b92b455))
-- block operational metadata paths in nginx (OBSV-SEC-017) (**security**) ([4a430ab](https://github.com/BlazeUp-AI/Observal/commit/4a430ab80e2a0f24b228b6636d95a3dce70b7baf))
-- centralise SSRF guard for webhooks, git clone, MCP analysis (OBSV-SEC-012/013/014) (**security**) ([b78dc96](https://github.com/BlazeUp-AI/Observal/commit/b78dc96b4fc11b0260445c82081567497c87100a))
-- allow MCP config fields in version extras validation (**api**) ([831a0d1](https://github.com/BlazeUp-AI/Observal/commit/831a0d14624545a14dbb2bc4bc9b6686f8039662))
-- emit JSON-RPC error notification on MCP startup failure (**shim**) ([4b64b5e](https://github.com/BlazeUp-AI/Observal/commit/4b64b5e18eff18627f24049657fec040ddea757c))
-- bind stateful services to loopback in Docker Compose (OBSV-SEC-016) (**security**) ([6dbcfac](https://github.com/BlazeUp-AI/Observal/commit/6dbcfac2ad69af80ec69e3c4ea32c9ee0d69c694))
-- include auth identity in cache key to prevent cross-user hits (OBSV-SEC-023) (**security**) ([cd3acf6](https://github.com/BlazeUp-AI/Observal/commit/cd3acf6a8e131f9e9f5fb06d213ce0adf6e8c5b6))
-- redact secrets from support log collector output (OBSV-SEC-022) (**security**) ([7a27288](https://github.com/BlazeUp-AI/Observal/commit/7a27288102be0fe34be25418d4329257467f8abc))
-- redact secrets before sending content to LLM providers (OBSV-SEC-021) (**security**) ([19ac039](https://github.com/BlazeUp-AI/Observal/commit/19ac0397d2c222ab760329b01eefdddac6c712c2))
-- require auth on telemetry reconcile endpoint (OBSV-SEC-011) (**security**) ([9f275df](https://github.com/BlazeUp-AI/Observal/commit/9f275df2cc66224b2560e26fa4b5ab5972f3adab))
-- restrict support diagnostics to admin role (OBSV-SEC-008) (**security**) ([4ed0883](https://github.com/BlazeUp-AI/Observal/commit/4ed08833c822aad9c97c6a1e5a2349328f73effd))
-- apply execution time floor to every ClickHouse query (OBSV-SEC-026) (**security**) ([b1d80bd](https://github.com/BlazeUp-AI/Observal/commit/b1d80bd657b16f1a80850380d2168e20ec910d37))
-- validate session IDs before SQL interpolation in shim enrichment (**security**) ([66ca3d0](https://github.com/BlazeUp-AI/Observal/commit/66ca3d02439e845d028d59c4e7d5d5799babed6d))
-- use FINAL instead of GROUP BY for session_stats_agg (**server**) ([ce8069b](https://github.com/BlazeUp-AI/Observal/commit/ce8069bea89238b2471e6018c1dbe13fa0aece65))
-- default to ~/.observal on macOS for Docker compatibility (**deploy**) ([119aed3](https://github.com/BlazeUp-AI/Observal/commit/119aed3127ee4847ce146785816386656feb87ee))
-- add OBSERVAL_FORCE=1 to skip overwrite prompt (**deploy**) ([9910a94](https://github.com/BlazeUp-AI/Observal/commit/9910a94a353a2ecdf654f6842cb5478eb5d99563))
-- read from /dev/tty so curl|bash works interactively (**deploy**) ([4bc203b](https://github.com/BlazeUp-AI/Observal/commit/4bc203bbaf4b0b16f46078700e0783098ae2b103))
-### Other
-- remove hardcoded dev paths and stale internal docs ([6f39743](https://github.com/BlazeUp-AI/Observal/commit/6f39743cc3c2d6cec4c54be833a3410a6334b957))
-- ignore pi-lens cache directories ([b8d84e2](https://github.com/BlazeUp-AI/Observal/commit/b8d84e2d39a0f6daa0c2b6cca32d7814d293ec07))
-- update dependency authlib to v1.7.1 [security] (#923) (**deps**) ([6a00ce3](https://github.com/BlazeUp-AI/Observal/commit/6a00ce3e33f89ffdc05d42d2a563ef0633ac761e))
-- ignore and untrack Terraform plan files (OBSV-SEC-019) (**security**) ([c4873d4](https://github.com/BlazeUp-AI/Observal/commit/c4873d4469a5efdc6db470a82f156fec4763fa4c))
-### Testing
-- add coverage for MCP config parser, shim errors, and edit/submit ([8896814](https://github.com/BlazeUp-AI/Observal/commit/889681403a06bca72120a7e4869b337f4d2b5f51))
-## [0.5.0] - 2026-05-13
-### Added
 - slim curl-install to use pre-built images only (**deploy**) ([630a19f](https://github.com/BlazeUp-AI/Observal/commit/630a19f0752d0560e916e6376fb6751f085362a4))
 - add browser-level Playwright e2e tests for 4 UI flows ([28f0274](https://github.com/BlazeUp-AI/Observal/commit/28f0274c8a6611cca9d12bbba02c0c7c2de96285))
 - user profile picture is configurable (**UI**) ([442bc7c](https://github.com/BlazeUp-AI/Observal/commit/442bc7ce16c1869d936c2ed590bb008bd76ec7a9))
@@ -765,376 +738,14 @@ All notable changes to this project will be documented in this file.
 - add AgentVersion table and restructure Agent to identity-only (**db**) ([93b4a70](https://github.com/BlazeUp-AI/Observal/commit/93b4a70e4d8c199ded7a1b2f0e476ddc2f4ca42a))
 - add component version tables for all 5 types (**db**) ([3dab14b](https://github.com/BlazeUp-AI/Observal/commit/3dab14b8453a5bf69e42b47e3ed27cd483a55f89))
 - implement agent registry RBAC (**server**) ([196a040](https://github.com/BlazeUp-AI/Observal/commit/196a0407d8e83e46b4d13353beb692feb58117c4))
-### CI
-- add deploy-dev workflow for main branch auto-deploy ([40f2203](https://github.com/BlazeUp-AI/Observal/commit/40f22031befc48c38ec3af8c6886ead52ac61cca))
-- add deploy-dev workflow for main branch auto-deploy ([4393ce0](https://github.com/BlazeUp-AI/Observal/commit/4393ce0fcfd3a2832fcb9f5dbebd7cb3b9e3a893))
-- trigger on release tags only, not push to main (**deploy**) ([83cbf33](https://github.com/BlazeUp-AI/Observal/commit/83cbf3367b3426cd08d615af693191a7c3a6ae1e))
-- add stale issue/PR workflow with keep open exemption ([b3f8433](https://github.com/BlazeUp-AI/Observal/commit/b3f8433750f8f5292ea448b8b41fb5b8eef262ba))
-### Changed
-- derive org columns and NOT NULL defaults from schema, improve warnings ([5380a65](https://github.com/BlazeUp-AI/Observal/commit/5380a650744196d1eba88e93b700eb03a6b6c9d9))
-- address review feedback on migrate import ([1fa852e](https://github.com/BlazeUp-AI/Observal/commit/1fa852e9e82994d796b35bc3c8003801c8f30289))
-- redesign HTML report with warm, refined color scheme (**insights**) ([894e327](https://github.com/BlazeUp-AI/Observal/commit/894e327939d3e36807605ba2b2ca3df7ec01e61d))
-- remove triplicated display logic from CLI and frontend ([b5ab0be](https://github.com/BlazeUp-AI/Observal/commit/b5ab0be6d63a83de5e06c1c89174d950b41b0fbd))
-- move extra_ingest_rows into kiro.py (**ingest**) ([f0e7540](https://github.com/BlazeUp-AI/Observal/commit/f0e754078fcf951c4ad45514d8396dd26811529f))
-- move Kiro credits logic to ingest_classify.py (**ingest**) ([054fbf1](https://github.com/BlazeUp-AI/Observal/commit/054fbf1abc1fd1d83ca45718826d58044ac008ca))
-- ruff format hook_event resolution (**kiro**) ([723ec55](https://github.com/BlazeUp-AI/Observal/commit/723ec55782d66e6827f413213cef0f4db15ae3d7))
-- replace enrichment-heavy route with clean Harness version (**reconcile**) ([95d34e0](https://github.com/BlazeUp-AI/Observal/commit/95d34e0311b16edc25581aeb7c572e22d894ea6b))
-- remove CLI commands, keep crash recovery library (**reconcile**) ([5103982](https://github.com/BlazeUp-AI/Observal/commit/5103982496d42ac0782816c071c3dd170c4c5023))
-- remove legacy hook pipeline, keep shim and buffer (**telemetry**) ([40a5be4](https://github.com/BlazeUp-AI/Observal/commit/40a5be4d63a796dc02ddb49221370ed4d4e424a7))
-- rewrite queries to use session_events table (**sessions**) ([437cf58](https://github.com/BlazeUp-AI/Observal/commit/437cf5873da924b1c9b8d193aa14f32a56c5329a))
-- strip shim/OTEL logic, keep only session push hooks (**doctor**) ([883b95a](https://github.com/BlazeUp-AI/Observal/commit/883b95aee1b364f9f361543eda6f7fb4fca3ad8a))
-- squash all 28 migrations into single baseline (**migrations**) ([1c5abdd](https://github.com/BlazeUp-AI/Observal/commit/1c5abdd04e7bfea798026f54391d984bce0f1a8f))
-- ruff format agent.py ([4ef21c3](https://github.com/BlazeUp-AI/Observal/commit/4ef21c345ae13302cf66530a6e8ca5a2a63c6cf3))
-- ruff format api route files ([b003bbe](https://github.com/BlazeUp-AI/Observal/commit/b003bbe0eb66dbf225348834e0a8f65a04a217ce))
-- ruff format component_version_extras and component_versions ([af394b6](https://github.com/BlazeUp-AI/Observal/commit/af394b685ff123900710bed6c98f3d177acd24a6))
-### Documentation
-- fix support bundle docs to match implementation ([5ace152](https://github.com/BlazeUp-AI/Observal/commit/5ace1528505828edd2b5d75116fe1c6222d33996))
-- add CLI reference for support bundle commands ([59c661e](https://github.com/BlazeUp-AI/Observal/commit/59c661e206b75acac76d2fde576606e97ee45081))
-- move AnkiDroid callout before ToC and expand attribution note ([0c890be](https://github.com/BlazeUp-AI/Observal/commit/0c890be4f1f419b0c21e69f22a711f48a9a69e70))
-- add CLA and update CONTRIBUTING.md ([b9e7ae8](https://github.com/BlazeUp-AI/Observal/commit/b9e7ae8934a98f3157d88b842ee8671f4eaf20aa))
-- update docs link, CLI examples, and fix self-hosting diagram ([c9dcb78](https://github.com/BlazeUp-AI/Observal/commit/c9dcb78526a80032b29e37e3e74d747d8c856992))
-- add CLI reference for observal migrate commands ([ad9c1c2](https://github.com/BlazeUp-AI/Observal/commit/ad9c1c2f4a3f2efa9f85d11e555314ff9c31e440))
-- overhaul README, SETUP, AGENTS, add screenshots, drop e2e artifacts ([ca435f5](https://github.com/BlazeUp-AI/Observal/commit/ca435f5df8eb061899c2c4c31727a2bc1e25bb5a))
-- add Insights V2 roadmap tracking progress across 5 phases ([fe037d5](https://github.com/BlazeUp-AI/Observal/commit/fe037d5c616e7215a135aa2fe4d148e2b93ab6a1))
-- update AGENTS.md with new routes, services, and components ([dc5f1aa](https://github.com/BlazeUp-AI/Observal/commit/dc5f1aa1a48cc705d18b91e3159bc2a3de2be7a2))
-- update e2e checklist with versioning, editing, and trace toggle tests ([c72c9d3](https://github.com/BlazeUp-AI/Observal/commit/c72c9d31312f70d70970611c8bc86e6c25f81479))
-- add screenshots for agent edit form PR ([7860394](https://github.com/BlazeUp-AI/Observal/commit/786039462ee8ffa626c461040e2066967869df6b))
-### Fixed
-- preserve SPDX headers in generated changelog (**compliance**) ([636a359](https://github.com/BlazeUp-AI/Observal/commit/636a359b3fafb4d4cd17223f3bc8220937f10a1d))
-- improve setup.sh post-install output (**deploy**) ([6884923](https://github.com/BlazeUp-AI/Observal/commit/6884923078e1647b0f12735f2e43b291c41c8270))
-- add SPDX copyright headers to support.md (**compliance**) ([6c358bd](https://github.com/BlazeUp-AI/Observal/commit/6c358bdb58654f9f8b179fa27ffed8e062e79fe0))
-- resolve CircularDependencyError in review approve endpoint ([a17b435](https://github.com/BlazeUp-AI/Observal/commit/a17b435a5aa42a08da8681747e3da47f1ef0deb6))
-- wrap SPDX string in REUSE-Ignore to fix reuse-lint (**ci**) ([cef600f](https://github.com/BlazeUp-AI/Observal/commit/cef600ffaec97a10b82ca22bbcb3faa13a513d26))
-- move coverage config to observal-server/pyproject.toml (**ci**) ([9ef4f1c](https://github.com/BlazeUp-AI/Observal/commit/9ef4f1cf985c21c17b86c57c30209ec512732b9e))
-- add version tables to INSERT_ORDER and disable FK checks during import ([9943142](https://github.com/BlazeUp-AI/Observal/commit/9943142224970e0b196c2b3c1c77b36070faab91))
-- remove unused import and fix license-policy formatting (**ci**) ([b76831d](https://github.com/BlazeUp-AI/Observal/commit/b76831dbccf075d29f2682cb86a9e569066e36e5))
-- replace magic values with named constants in deps.py (**lint**) ([f7ff034](https://github.com/BlazeUp-AI/Observal/commit/f7ff0349ad726a221702218271c43837ff2537f5))
-- resolve SimpleAggregateFunction query errors in session_stats_agg (**clickhouse**) ([b6bdd99](https://github.com/BlazeUp-AI/Observal/commit/b6bdd99fc907157ea1841c368996de3087f71ddf))
-- update postgres volume mount for v18 compatibility (**docker**) ([93c0600](https://github.com/BlazeUp-AI/Observal/commit/93c060078f3eb3234b21d24278f807ce9619a2ff))
-- trigger EC2 deploy on push to main instead of tags (**deploy**) ([6cda8b1](https://github.com/BlazeUp-AI/Observal/commit/6cda8b18250a3b8eb719c2f64d73a847f19fc2da))
-- trigger EC2 deploy on push to main instead of tags (**deploy**) ([cb7bae4](https://github.com/BlazeUp-AI/Observal/commit/cb7bae4963ea3b3654417c62f666447225213679))
-- replace all Apache 2.0 references with AGPL-3.0 ([66abe34](https://github.com/BlazeUp-AI/Observal/commit/66abe34ddb19d779eeb75174aa7038192f60105b))
-- update redis image assertion to 8-alpine (**tests**) ([7da9551](https://github.com/BlazeUp-AI/Observal/commit/7da955197387f74d2fbedc3fcdf57f24c844eabc))
-- capture post-Stop tail lines via delayed flush subprocess (**cli**) ([357fdee](https://github.com/BlazeUp-AI/Observal/commit/357fdeeb356784242097f95b6b3713cf4d99f64c))
-- exclude subagent sessions from top-level list (**sessions**) ([ac0052c](https://github.com/BlazeUp-AI/Observal/commit/ac0052c8d3b54ed4b90bee2ab7d823eace3469f3))
-- auto-refresh expired tokens in session_push hook (**cli**) ([6ba62cd](https://github.com/BlazeUp-AI/Observal/commit/6ba62cdb6e214166c9b86fa7d9c6e727beae23a7))
-- resolve ClickHouse ILLEGAL_AGGREGATION in session query (**insights**) ([d9e72aa](https://github.com/BlazeUp-AI/Observal/commit/d9e72aa466684fde340e0dfa50c9dfa974ea0fec))
-- ruff fixes in ee/observal_insights (**lint**) ([39da878](https://github.com/BlazeUp-AI/Observal/commit/39da8782b4f5f3ed3b03f68ad51be65118ee1825))
-- use cursor offset not ctime for pulled_at guard (**attribution**) ([afcfccc](https://github.com/BlazeUp-AI/Observal/commit/afcfcccce06c29469780b4e1b2d5b52c890a7964))
-- remove unused imports, use datetime.UTC alias (**lint**) ([05db9db](https://github.com/BlazeUp-AI/Observal/commit/05db9db96e228bb73fbbcc3658c89f8b1603a10c))
-- renumber meta_cache migration to 0003 (**migration**) ([2dd2e2a](https://github.com/BlazeUp-AI/Observal/commit/2dd2e2a182b4d22987d7ca1c89c5e4e736db0459))
-- prevent session leak via pulled_at timestamp (**attribution**) ([77e7ce8](https://github.com/BlazeUp-AI/Observal/commit/77e7ce89569f0872e73e86932acab824b9c483e3))
-- update web frontend (minor/patch) (#779) (**deps**) ([a9b3722](https://github.com/BlazeUp-AI/Observal/commit/a9b37224e053836b86bf8f480b429f0e782ec5f3))
-- include per-IDE model overrides in agent snapshot and pull flow ([a048910](https://github.com/BlazeUp-AI/Observal/commit/a048910ee18d8998b68e2a19e4db321e91a7628a))
-- use 2099 sentinel timestamp for kiro_credits row (**kiro**) ([5804c15](https://github.com/BlazeUp-AI/Observal/commit/5804c1500250771cbf793d757a3d6be075c88e57))
-- proper Callable type for _EXTRA_ROWS_HANDLERS (**types**) ([959ca3b](https://github.com/BlazeUp-AI/Observal/commit/959ca3be3789dc0a2293c27a6f9d6fbdefa7edbd))
-- store credits even when Stop has no new JSONL lines (**kiro**) ([b9d8284](https://github.com/BlazeUp-AI/Observal/commit/b9d8284bc6edd3636bfd8d5117ba7822028db949))
-- fix credits not being sent on Stop hook (**kiro**) ([75597f0](https://github.com/BlazeUp-AI/Observal/commit/75597f0af0ccb0003a7bc94ea50f37b216f1bf1a))
-- remove stale CLI usage docstring (**reconcile**) ([27bbd66](https://github.com/BlazeUp-AI/Observal/commit/27bbd66d9734a2cab66fefd777cdcfa424505b33))
-- restore --hook/--shim/--all flags and shim helpers (**doctor**) ([fdfc0b8](https://github.com/BlazeUp-AI/Observal/commit/fdfc0b89738486f475275c040453772890a3874e))
-- replace --all with --hook in doctor patch calls (**auth**) ([3ba67dd](https://github.com/BlazeUp-AI/Observal/commit/3ba67dde79e44f5b2a69c063a162bd978299fab2))
-- fix ruff unused imports, remove stale telemetry tests (**lint+tests**) ([34e4b16](https://github.com/BlazeUp-AI/Observal/commit/34e4b1617c1c49cf9c1dad92666c4659d394f723))
-- remove Active Hooks section + sentinel-safe stats (**traces**) ([f1341ff](https://github.com/BlazeUp-AI/Observal/commit/f1341ff0ef83463c6e9de8c33b01c00df485ac02))
-- sentinel-safe first timestamp in trace title/breadcrumb (**ui**) ([1067087](https://github.com/BlazeUp-AI/Observal/commit/10670878041545087a3bd380adcc3174b2256456))
-- filter kiro_credits events + unify token accumulation (**traces**) ([5f0fc42](https://github.com/BlazeUp-AI/Observal/commit/5f0fc427dd612c9c520f8fa7a6a2ef670e6cec5a))
-- add session_parser key to CLI ide_registry mirror (**ingest**) ([e07a4ba](https://github.com/BlazeUp-AI/Observal/commit/e07a4ba93abcec5bb4b7050f05ab2c39f34405c6))
-- apply ruff formatting to hook submit (**cli**) ([ebe53f1](https://github.com/BlazeUp-AI/Observal/commit/ebe53f108b097d703bcb8487049bc38ee009df33))
-- handle invalid JSON in `hook submit` handler config prompt (**cli**) ([7b2469e](https://github.com/BlazeUp-AI/Observal/commit/7b2469eb2b8c5f88ad38c3944f8165762682576e))
-- auto-populate Owner field in all submit forms (**registry**) ([1700c63](https://github.com/BlazeUp-AI/Observal/commit/1700c63f3790c9229954a2a95af488508c21057c))
-- display rate limit error properly on login page (**web**) ([c632ad6](https://github.com/BlazeUp-AI/Observal/commit/c632ad67ba7db05c7342dfdf786adb7ce9f71e3c))
-- remove session ID from all user-facing views (**ui**) ([38ab52b](https://github.com/BlazeUp-AI/Observal/commit/38ab52bd8cba0b1445837955d73e7eea00a9af87))
-- full screen utilization and flex wrap issues (**insights**) ([caae785](https://github.com/BlazeUp-AI/Observal/commit/caae7858ae042d6e4f1e51b906804f335d7c368b))
-- remove dead metrics endpoints and legacy telemetry tables (**dashboard**) ([27cb6a8](https://github.com/BlazeUp-AI/Observal/commit/27cb6a8bd6793220278427d2da4ba496ae52e081))
-- pin pnpm@10 to fix ERR_PNPM_IGNORED_BUILDS in CI (**docker**) ([2313e19](https://github.com/BlazeUp-AI/Observal/commit/2313e19565a1d48bf191a7282f4eba3c0261183d))
-- resolve lint, import-boundary, and docker-build failures (**ci**) ([1850779](https://github.com/BlazeUp-AI/Observal/commit/1850779482589b1debe4c180b166a2fef0bc1af4))
-- align session_cache and facets with actual DB schema (**insights**) ([eeef3fa](https://github.com/BlazeUp-AI/Observal/commit/eeef3faa1ed86d6aa43f99ab4a0e8a3ce5dfc86c))
-- add TTL retention for system logs to prevent OOM (**clickhouse**) ([2224992](https://github.com/BlazeUp-AI/Observal/commit/22249920659e416b91a854283b5fc7bf89bd08e8))
-- docs & add bootstrap ([5feb50e](https://github.com/BlazeUp-AI/Observal/commit/5feb50e225d575a388efea49f70f0661ca7f0a31))
-- remove unused locals flagged by tflint (**infra**) ([11239fa](https://github.com/BlazeUp-AI/Observal/commit/11239fa7c377a65d0a8cc4ba695364334f189821))
-- resolve lint, format, and test failures (**ci**) ([dc0a89e](https://github.com/BlazeUp-AI/Observal/commit/dc0a89ed3e5e9c642a951b8a2c5360fc13256d45))
-- restore trace_dedup module needed for session detail view (**sessions**) ([28095bc](https://github.com/BlazeUp-AI/Observal/commit/28095bcfa6b4db739aa2ac800410be491b56dad2))
-- call configure_insights() on worker startup (**worker**) ([8a59c3d](https://github.com/BlazeUp-AI/Observal/commit/8a59c3d189e84ace7eeaf1c5e8268558627b0315))
-- strip insights source post-install instead of pre-build (**docker**) ([b47578b](https://github.com/BlazeUp-AI/Observal/commit/b47578b1db05d5b42747591d73ee162e4e0a176b))
-- sum credits in sessions list instead of picking arbitrary value ([8df012d](https://github.com/BlazeUp-AI/Observal/commit/8df012d0786672a91788645f5d4ba9c87ce12fb3))
-- read credits from Kiro session files instead of SQLite ([fbd6678](https://github.com/BlazeUp-AI/Observal/commit/fbd6678bfff0d2bb32f2a9e809fbfe50e47a8a34))
-- use absolute Python path in Kiro hook commands ([38ef120](https://github.com/BlazeUp-AI/Observal/commit/38ef1202ac4500cff0475b4df0b2f6ccda57a8ea))
-- show prompt count fallback and rewrite hook python paths (**kiro**) ([e32c48e](https://github.com/BlazeUp-AI/Observal/commit/e32c48e4227ef08757c1d4e58250eba732cdeadb))
-- persist session_id between Kiro hooks and add debug logging (**hooks**) ([f9c1c28](https://github.com/BlazeUp-AI/Observal/commit/f9c1c284e1a5b5c7c1ba5ff75781cbb84c09fdc9))
-- allow super_admin to manage agents regardless of org_id (**agents**) ([0be9d76](https://github.com/BlazeUp-AI/Observal/commit/0be9d76196fe20d2693790654e935081191f4ec6))
-- set owner_org_id and public visibility on bulk-create (**agents**) ([29222c9](https://github.com/BlazeUp-AI/Observal/commit/29222c9b96d75649948a958a14dc3e85888b6eb4))
-- correct setup steps — use doctor patch, remove local server section (**docs**) ([9de5581](https://github.com/BlazeUp-AI/Observal/commit/9de55819751e3169dc26ab99463a393d4c1c0182))
-- use short summary in skill file YAML frontmatter (**skills**) ([3819631](https://github.com/BlazeUp-AI/Observal/commit/38196310bcde75ec22d7f18c2432327f0bab02a6))
-- remove AWS env var overrides that clobber .env credentials (**docker**) ([17f3fbb](https://github.com/BlazeUp-AI/Observal/commit/17f3fbb01178f0e0006ce07b7196c41346a31a87))
-- derive component downloads from agent installs (#736) (**leaderboard**) ([823dd77](https://github.com/BlazeUp-AI/Observal/commit/823dd77e0c4ba8586cc05d81a5226038da0cf12c))
-- hide notifications stub from account settings (**web**) ([2a11947](https://github.com/BlazeUp-AI/Observal/commit/2a119473220919bb9fa9558757bb160170bb44a3))
-- flush version changes before updating latest_version_id (**review**) ([0a7253d](https://github.com/BlazeUp-AI/Observal/commit/0a7253dc81fe2d31e5f000568fe5596f21726a40))
-- update web frontend (minor/patch) (#576) (**deps**) ([ce578e4](https://github.com/BlazeUp-AI/Observal/commit/ce578e410bb549f12f816316b205b3327d83a251))
-- use persistent SSL config so merges stop breaking HTTPS (**deploy**) ([9f50890](https://github.com/BlazeUp-AI/Observal/commit/9f5089049bde8e0ee2840edaf2246dd7eb393840))
-- version-aware component review queue, detail, and actions (**review**) ([a4aef71](https://github.com/BlazeUp-AI/Observal/commit/a4aef7174a9975b6a4ad6a726cab83ab86d298fa))
-- inject prompt component templates into generated rules files (**agent-install**) ([c5114b8](https://github.com/BlazeUp-AI/Observal/commit/c5114b8e5155173c5912622dbb05e96da28c6ff0))
-- only infer frontend URL behind TLS proxy, not local nginx (**api**) ([e82be65](https://github.com/BlazeUp-AI/Observal/commit/e82be65634c34e67ac5d13d31a3b26a983a8190f))
-- only owners and co-maintainers can edit their agents (**agent-edit**) ([45fbf1a](https://github.com/BlazeUp-AI/Observal/commit/45fbf1ab1e56e2afe0764ab0505617d4f36dd33d))
-- allow admins to release versions, save draft as new version (**agent-edit**) ([78d2878](https://github.com/BlazeUp-AI/Observal/commit/78d28789d4b2166199a6a07b9b0c207f310f6c0d))
-- derive device auth verification URL from request headers (**api**) ([2d7373a](https://github.com/BlazeUp-AI/Observal/commit/2d7373a2b9415887ea0a942fa1a6388dd1dbcb66))
-- fix empty component board, TS build, sandbox type (**leaderboard+feedback**) ([1c7a719](https://github.com/BlazeUp-AI/Observal/commit/1c7a71910cba612b6697b625049f72cf5432b89c))
-- remove f-string without placeholder, use ternary (**lint**) ([31c5898](https://github.com/BlazeUp-AI/Observal/commit/31c5898234519e9d7a6f6e9532f9f1c01996d299))
-- materialize hook components into Kiro agent configs (**hooks**) ([8d3508e](https://github.com/BlazeUp-AI/Observal/commit/8d3508e3585dcbe30dd073697f683e419a4b6799))
-- allow regular users to unarchive their own agents (**agents**) ([04adb4e](https://github.com/BlazeUp-AI/Observal/commit/04adb4e1d31e3833cc33ecea34ee6302fe11e9c6))
-- allow unarchive/delete to find non-approved agents (**agents**) ([4915a9c](https://github.com/BlazeUp-AI/Observal/commit/4915a9c1175ea1a4c23ac269019b831acd4252da))
-- write skill files to disk during agent pull (**cli**) ([f848842](https://github.com/BlazeUp-AI/Observal/commit/f84884288462d3c5319b5ecabad0023980f3b131))
-- grant same-org users view access to all org agents (**agents**) ([0c6e808](https://github.com/BlazeUp-AI/Observal/commit/0c6e808df9b58da305cf5a6b9a28f88d90212fb9))
-- allow same-org users to see all org agents (**agents**) ([43b5132](https://github.com/BlazeUp-AI/Observal/commit/43b51329e0a731e48f4068cbee0c582fffa24862))
-- wire hook components into agent config generation (**agents**) ([a738e39](https://github.com/BlazeUp-AI/Observal/commit/a738e39d0af6a3a5eb817e4d5c695bc15bb94b6c))
-- use posix paths for hook scripts on Windows (**cli**) ([13f5228](https://github.com/BlazeUp-AI/Observal/commit/13f5228f8de72ccf58aad80294e75a0591413ede))
-- rename "My Submissions" to "Drafts" on agents page (**web**) ([7b69959](https://github.com/BlazeUp-AI/Observal/commit/7b699599ac9c3d12e40ee52ba4e3fdd47b0625f6))
-- prevent archiving non-approved agents, show archived in my agents (**agents**) ([6fd60fd](https://github.com/BlazeUp-AI/Observal/commit/6fd60fdaafd0dfa54439de5fc2c60f823aeaa1b8))
-- allow null git_url in manifest export (**agents**) ([8c97332](https://github.com/BlazeUp-AI/Observal/commit/8c97332830ef9e94596705d631f6ad46a9a165b9))
-- exclude archived agents from pending review count (**web**) ([228f6ad](https://github.com/BlazeUp-AI/Observal/commit/228f6ad25aaef54a0dedb0573e0ee1f2608ba970))
-- resolve_listing status filter joins through version table (**registry**) ([8ad9f4d](https://github.com/BlazeUp-AI/Observal/commit/8ad9f4d810dfb50f8d643abd60a5b78fe8e66f19))
-- handle Unicode output on Windows cp1252 consoles (**cli**) ([05181f6](https://github.com/BlazeUp-AI/Observal/commit/05181f6d2176c28abbfb1c210dc0aa709108184a))
-- use explicit SQL update for archive/unarchive status (**agents**) ([198ad36](https://github.com/BlazeUp-AI/Observal/commit/198ad36cc0dcbe465d4d466c6dcb634fa4c02544))
-- default visibility to public in local deployment mode (**agents**) ([e380f2c](https://github.com/BlazeUp-AI/Observal/commit/e380f2c52a4e8591819d43ea5381674f905c9537))
-- resolve duplicate Alembic revision 0023 causing deploy failure (**db**) ([d99ec31](https://github.com/BlazeUp-AI/Observal/commit/d99ec31fca620e314b53af9888fb568444f25aac))
-- remove max-width constraint and add min-w-0 for flex scaling (**web**) ([b7c4ef3](https://github.com/BlazeUp-AI/Observal/commit/b7c4ef3c8131d3d061f314a0378226a121b35f59))
-- set edit-lock fields on agent mock to prevent TypeError (**tests**) ([22a2a93](https://github.com/BlazeUp-AI/Observal/commit/22a2a930d8ad8d678b3d79d172b5664a4581fc25))
-- harden edit lock concurrency and review correctness (**api,cli,web**) ([eb9cd6a](https://github.com/BlazeUp-AI/Observal/commit/eb9cd6a3512eee3cea1186aabb6fadd96fb5d57c))
-- resolve lint errors and test failures from edit lock feature (**api**) ([f335927](https://github.com/BlazeUp-AI/Observal/commit/f335927afec215098deccfbb462292fc3961d826))
-- harden edit lock, review approve/reject, and error handling (#663) (**api,web**) ([3b80fae](https://github.com/BlazeUp-AI/Observal/commit/3b80faeef04283c57852960ccd7e4a1ff691c5f2))
-- harden component version validation (**api**) ([3412812](https://github.com/BlazeUp-AI/Observal/commit/341281257781b666ac93c1f2cdaa96d2a4eca303))
-- update e2e assertions for new hook_bridge features and agent paths (**tests**) ([e0ff08e](https://github.com/BlazeUp-AI/Observal/commit/e0ff08ed6d671c75fd2f2a04fef6d489cf093668))
-- cache race condition, unbounded memory, and repeated HTTP calls ([4fc41f0](https://github.com/BlazeUp-AI/Observal/commit/4fc41f00861f240890dc0be9f941040b0375ccb8))
-- update copilot rules_file path assertion (**tests**) ([12a342a](https://github.com/BlazeUp-AI/Observal/commit/12a342abe64d37bdbe4b96b2d35f944be778e4a5))
-- resolve hook paths for all IDEs, not a hardcoded subset (**cli**) ([86a75ee](https://github.com/BlazeUp-AI/Observal/commit/86a75ee323f68cc6db3991d476efaa7524d883c2))
-- raise 401 for expired tokens in optional_current_user (**auth**) ([ed2862c](https://github.com/BlazeUp-AI/Observal/commit/ed2862cad4bb784f617ed0254c105817d1802d08))
-- add trim() to /take and /drop to handle trailing whitespace (**ci**) ([7e4b180](https://github.com/BlazeUp-AI/Observal/commit/7e4b180ac9ea54d7a9bc50b9adc2020ae0504126))
-- resolve agent version approve CircularDependencyError (**api**) ([9bc3ce2](https://github.com/BlazeUp-AI/Observal/commit/9bc3ce20cd9eb0c488d755104979a5e25c66d813))
-- flush version status before promoting latest_version_id (**review**) ([4471a7d](https://github.com/BlazeUp-AI/Observal/commit/4471a7d574e4c628843f2b4a38e5b3050c656329))
-- use short model names in frontmatter instead of stripped IDs (**config**) ([5147d33](https://github.com/BlazeUp-AI/Observal/commit/5147d33b2cda99a0e6f3bf2d57b827cf799b9215))
-- approve/reject agent by pending version, not latest_version (**review**) ([b868453](https://github.com/BlazeUp-AI/Observal/commit/b868453e4add9d8ccc5aeabd9408ca100ea23688))
-- migrate update_draft to version-scoped component columns (**agent**) ([e9875cf](https://github.com/BlazeUp-AI/Observal/commit/e9875cf566ce4bd304f9a41ddb0f4c315781c996))
-- pass full model ID instead of short name in frontmatter (**config**) ([bee95bd](https://github.com/BlazeUp-AI/Observal/commit/bee95bd0738c9bbdeffe98a0c17f4614222123d2))
-- use agent's stored model_name as fallback in config generator (**config**) ([3ffb739](https://github.com/BlazeUp-AI/Observal/commit/3ffb7396dd122e13fed2af8cf31f285f3fa32719))
-- handle cross-version import and include all ClickHouse tables in deep copy (#681) (**migrate**) ([832166a](https://github.com/BlazeUp-AI/Observal/commit/832166a3423b9a1db4bcc81a10c568cde63b2e47))
-- stop traces after logout by revoking tokens server-side (#668) (**auth**) ([e1c6a50](https://github.com/BlazeUp-AI/Observal/commit/e1c6a50395d599d56ffc3170ca1ac6174de9e812))
-- resolve agent names via server instead of stale local cache (#684) ([228c656](https://github.com/BlazeUp-AI/Observal/commit/228c65615542424787e9fb3272e8bcfa0bedb451))
-- resolve agent update 500 error (missing property setters) (**api**) ([a91878a](https://github.com/BlazeUp-AI/Observal/commit/a91878a4502d470f88d9fd5367234450617085d8))
-- fix agent edit form Playwright tests (**e2e**) ([7d8c2d5](https://github.com/BlazeUp-AI/Observal/commit/7d8c2d59158db1d1434470f8e346cb00fdc3f7c0))
-- resolve component delete 500 errors (#677, #678) (**api**) ([ca33351](https://github.com/BlazeUp-AI/Observal/commit/ca333511348e291dff76ef5fce9b3e44407d8595))
-- correct version lookup and sync lockfile (**cli**) ([9c474dc](https://github.com/BlazeUp-AI/Observal/commit/9c474dc26757155aa35a2eada68784e35836da22))
-- detect and block conflicting `observal` package (#671) (**cli**) ([d6e6616](https://github.com/BlazeUp-AI/Observal/commit/d6e661672b05c653ddae50e30ef379578418f87c))
-- move pull command from root to `observal agent pull` (#673) (**cli**) ([f092894](https://github.com/BlazeUp-AI/Observal/commit/f092894c93f077a514aeb007b29bfcb69685a796))
-- add latest_approved_version to response and fix agent pull (#667) (**api**) ([9f1256a](https://github.com/BlazeUp-AI/Observal/commit/9f1256a69bdc6eb3628e8d01f71e348048c6bb0b))
-- resolve agent deletion 500 errors (**api**) ([e19c67c](https://github.com/BlazeUp-AI/Observal/commit/e19c67ca7ecb14af4a2f24089b1c4ef21c715312))
-- review queue queries pending versions directly (**api**) ([2c989b3](https://github.com/BlazeUp-AI/Observal/commit/2c989b3540f9f929a8030be0566c324bd35d1317))
-- address 5 correctness bugs in agent edit form (**web**) ([c3429c9](https://github.com/BlazeUp-AI/Observal/commit/c3429c991411beb3df25858582ae51dd3e094102))
-- use canonical IDE list from ide_registry.py in edit form (**web**) ([48330d1](https://github.com/BlazeUp-AI/Observal/commit/48330d1ae7981d6eced1a4db897bb4f873b47adb))
-- resolve entrypoint migration incompatibility on fresh DB (**docker**) ([59fddfd](https://github.com/BlazeUp-AI/Observal/commit/59fddfd3491656ae5314b8dce87664975b0e4170))
-- wire version dropdown to fetch and display version-specific data (**web**) ([9aec74d](https://github.com/BlazeUp-AI/Observal/commit/9aec74dc3f256f8ff91e4b04be7c507bd7e3c0ed))
-- address 3 bugs in agent release/pull commands (**cli**) ([610c5fc](https://github.com/BlazeUp-AI/Observal/commit/610c5fc05e76fb661bd876612eb33f14bc375a7a))
-- complete agent versioning spec compliance (#622) (**api**) ([9a2c78c](https://github.com/BlazeUp-AI/Observal/commit/9a2c78c7d6ab4d34ceccef724fecc869b7d64970))
-- address RBAC review feedback (**server**) ([b705660](https://github.com/BlazeUp-AI/Observal/commit/b7056609fb885b4e5726aa87db97ef61f66abf3d))
-- apply ruff format to RBAC files (**server**) ([3af617a](https://github.com/BlazeUp-AI/Observal/commit/3af617a28afdf449301e54ade1b0c6b530711409))
-- fix import sorting in alembic migration (**server**) ([99a7b81](https://github.com/BlazeUp-AI/Observal/commit/99a7b819ce48341af7feb6aa29da7be5029e1045))
-- fixed the linting issues (**server**) ([b5eb5a0](https://github.com/BlazeUp-AI/Observal/commit/b5eb5a0a98ecc2fcbb427d45c45566fb3c1a8988))
-### Other
-- add SPDX license headers for REUSE compliance ([df9b065](https://github.com/BlazeUp-AI/Observal/commit/df9b0652949043dd53710d12f8bdf8ada5c9ced3))
-- add SPDX headers and fix pre-commit hook for new files ([4653ffa](https://github.com/BlazeUp-AI/Observal/commit/4653ffac901632e251cf7a791b82aec517688c20))
-- add Codecov for test coverage reporting (**ci**) ([016d312](https://github.com/BlazeUp-AI/Observal/commit/016d3121c992e15b7e4838696fe3307ac61d7df0))
-- add SPDX headers to all source files (REUSE 3.3 compliant) ([193d7c9](https://github.com/BlazeUp-AI/Observal/commit/193d7c94a1360cd7918617a47e84ef691a35a493))
-- remove DCO, CLA-assistant is the sole contributor agreement ([90635ca](https://github.com/BlazeUp-AI/Observal/commit/90635ca6a8afe6d8adb1ee66f7948372aeab233f))
-- update terraform-linters/setup-tflint action to v6 (**deps**) ([47e7736](https://github.com/BlazeUp-AI/Observal/commit/47e77365da31820a113860e5a094b9146a335fe9))
-- update pnpm/action-setup action to v6 (**deps**) ([cb1c7e1](https://github.com/BlazeUp-AI/Observal/commit/cb1c7e1c21245ee914df229cf3d65aab8207977b))
-- update redis docker tag to v8 (**deps**) ([c8a7592](https://github.com/BlazeUp-AI/Observal/commit/c8a75924d65c0339449957671ea1b2865a42e8c9))
-- update postgres docker tag to v18 (**deps**) ([0905772](https://github.com/BlazeUp-AI/Observal/commit/0905772b1d115eacee0e2cd19c19e50c894fc201))
-- update hashicorp/setup-terraform action to v4 (**deps**) ([bd36feb](https://github.com/BlazeUp-AI/Observal/commit/bd36feb5e63d1ba40f6ec31d3a4178aa192cb67b))
-- update github/codeql-action action to v4 (**deps**) ([1089756](https://github.com/BlazeUp-AI/Observal/commit/10897565ed1ff5d18cbc3f4b3d820721e5326c9e))
-- update actions/checkout action to v6 (**deps**) ([8be0707](https://github.com/BlazeUp-AI/Observal/commit/8be07072fd91e9f05b53088b027283170cb0914f))
-- update tflint plugin terraform-linters/tflint-ruleset-aws to v0.47.0 (#778) (**deps**) ([574d28f](https://github.com/BlazeUp-AI/Observal/commit/574d28fa3ea0fc22a7cca02d8e2402c291a7ce4b))
-- remove ops sync tombstone (**ops**) ([2917e1c](https://github.com/BlazeUp-AI/Observal/commit/2917e1ce93d3fd960ccc224951f6d43743b7d2f2))
-- update docker images (minor/patch) (#777) (**deps**) ([4d29e1f](https://github.com/BlazeUp-AI/Observal/commit/4d29e1f299fddfc77a37ccf16bf42ca7e1468fe0))
-- update dependency python-multipart to v0.0.27 [security] (#767) (**deps**) ([66db454](https://github.com/BlazeUp-AI/Observal/commit/66db4547aa49dbc0a56ad6824ea3319fb9a940f2))
-- update dependency mako to v1.3.12 [security] (#766) (**deps**) ([f1c6fd4](https://github.com/BlazeUp-AI/Observal/commit/f1c6fd4628545c261814d94888cdbeb259680871))
-- add pyrightconfig.json to observal-server ([4a02084](https://github.com/BlazeUp-AI/Observal/commit/4a0208466b66ce58c6e6125e8d9a3016969c71c5))
-- update github artifact actions (**deps**) ([af5e2db](https://github.com/BlazeUp-AI/Observal/commit/af5e2db8e345fc00b56e4d96549a8a5d195fd3a0))
-- update actions/stale action to v10 (**deps**) ([a11966a](https://github.com/BlazeUp-AI/Observal/commit/a11966ad46461c19bc7517252534d6981746c0b7))
-- update actions/github-script action to v9 (**deps**) ([3a2b92c](https://github.com/BlazeUp-AI/Observal/commit/3a2b92c5d9fb1c54b1f105bee15e5b12cab0850c))
-- update astral-sh/setup-uv action to v8 (**deps**) ([b7d0896](https://github.com/BlazeUp-AI/Observal/commit/b7d08965ead0f40fa17e0b46eda6752468bc5bdc))
-- update actions/setup-python action to v6 (**deps**) ([0002d7f](https://github.com/BlazeUp-AI/Observal/commit/0002d7f4ec49b92f8206eeb93851629109e1d992))
-- update actions/checkout action to v6 (**deps**) ([04db00c](https://github.com/BlazeUp-AI/Observal/commit/04db00c3addd189bcef7fa0455fe583060c2a882))
-- update actions/attest-build-provenance action to v4 (**deps**) ([2e23a47](https://github.com/BlazeUp-AI/Observal/commit/2e23a4758f1d6a195d0158e98c9e844f313b954f))
-- update dependency python to 3.14 (#577) (**deps**) ([5420a10](https://github.com/BlazeUp-AI/Observal/commit/5420a100006067355651befb83f1289413077f83))
-- update docker images (minor/patch) (#578) (**deps**) ([9a86d40](https://github.com/BlazeUp-AI/Observal/commit/9a86d40d82fd6b378758aa0ec2a607c48a12fb36))
-- automerge minor+patch Renovate PRs (**deps**) ([66cb1ba](https://github.com/BlazeUp-AI/Observal/commit/66cb1baf8d0b84760cb1564a6614eb98700581f2))
-- cleanup anti-patterns in registered-agents-only files ([3e0ee48](https://github.com/BlazeUp-AI/Observal/commit/3e0ee4810f2eae53990c1022c79e8a8557798729))
-- ruff format agent_config_generator ([742e0d7](https://github.com/BlazeUp-AI/Observal/commit/742e0d7816f5aa1d8526644bfe856794761ee2f6))
-- ruff format agent routes ([89c869f](https://github.com/BlazeUp-AI/Observal/commit/89c869f6d9aad692e381375968f4cc836fab5ee6))
-- ruff format agent routes ([a82308e](https://github.com/BlazeUp-AI/Observal/commit/a82308e3c876fc565d32ce2bf21ec6f220c7e589))
-- cleanup anti-patterns in review and api modules ([7bc87b4](https://github.com/BlazeUp-AI/Observal/commit/7bc87b487aefdcade8d1cb2f619ac7e9825787a9))
-- cleanup anti-patterns in CLI agent commands ([dd0a5aa](https://github.com/BlazeUp-AI/Observal/commit/dd0a5aa494e81ec54c6ba775c21b7ec266885efe))
-- cleanup mechanical anti-patterns in routes ([6e9732e](https://github.com/BlazeUp-AI/Observal/commit/6e9732e5988c9d42a7d27c58035be7abd5871031))
-- cleanup anti-patterns in agent RBAC implementation ([98e72db](https://github.com/BlazeUp-AI/Observal/commit/98e72db3d5d967f1b4e701afdd0965ef2bd80b10))
-### Performance
-- migrate _ev_session_details to session_stats_agg (**insights**) ([d3463ea](https://github.com/BlazeUp-AI/Observal/commit/d3463ea14e59aa8b65139553cabe96db317af521))
-- migrate _ev_per_session_tokens to session_stats_agg (**insights**) ([b6f6053](https://github.com/BlazeUp-AI/Observal/commit/b6f60534a81f8ed6b9602091c4721884cee17613))
-- migrate _ev_subagent_stats to session_stats_agg (**insights**) ([5844f3b](https://github.com/BlazeUp-AI/Observal/commit/5844f3bdad656e7b1215397f6a140910c7c702c3))
-- migrate _ev_duration_stats to session_stats_agg (**insights**) ([70006ad](https://github.com/BlazeUp-AI/Observal/commit/70006ad2285da64e0ad0c088cb71479648b8a5f1))
-- migrate _ev_credit_aggregates to session_stats_agg (**insights**) ([6626780](https://github.com/BlazeUp-AI/Observal/commit/66267805db095898607367cca44300dc7936abc1))
-- migrate _ev_token_aggregates to session_stats_agg (**insights**) ([3aaa7c2](https://github.com/BlazeUp-AI/Observal/commit/3aaa7c2ea11015ce124baadf87899ead2a73e7f5))
-- migrate _ev_session_overview to session_stats_agg (**insights**) ([ea867b4](https://github.com/BlazeUp-AI/Observal/commit/ea867b4d93e4ddb5e8a0d401914918e5d9080d2f))
-- migrate _count_sessions_in_events to session_stats_agg (**insights**) ([53db78e](https://github.com/BlazeUp-AI/Observal/commit/53db78eb7a9a1deaed00d6058faf3136270b57b9))
-- add proj_session_view projection on session_events (**clickhouse**) ([0100bb9](https://github.com/BlazeUp-AI/Observal/commit/0100bb9d500920ba34bd08bdbda91bcdc7349690))
-- replace parent_session_id bloom_filter with set(0) (**clickhouse**) ([4d38c70](https://github.com/BlazeUp-AI/Observal/commit/4d38c705e553694ef7b4820f38b0ae5b3803e70f))
-- replace event_type bloom_filter with set(20) skip index (**clickhouse**) ([b0f595a](https://github.com/BlazeUp-AI/Observal/commit/b0f595a3beb117e7f610087163c04d5b98f23f96))
-- drop FINAL from session existence check (**reconcile**) ([ce7733b](https://github.com/BlazeUp-AI/Observal/commit/ce7733bac026b74c667eb8e4bae91717c216e58a))
-- parallel FINAL scans + partition-scoped dedup in get_session (**sessions**) ([1152bc2](https://github.com/BlazeUp-AI/Observal/commit/1152bc2ebf32c8a55c305eb31359d307423c422a))
-- migrate stats endpoint to session_stats_agg (**sessions**) ([99db552](https://github.com/BlazeUp-AI/Observal/commit/99db552be788bbcaad5b24fc7982d721ba34a3bc))
-- migrate summary endpoint to session_stats_agg (**sessions**) ([11d7474](https://github.com/BlazeUp-AI/Observal/commit/11d7474df650a45fb25d2c919dd2f1939eca41dc))
-- rank top-50 sessions via session_stats_agg, drop FINAL scan (**insights**) ([b6e84b1](https://github.com/BlazeUp-AI/Observal/commit/b6e84b140a37a2036bf9f7492b5443558df731c8))
-- replace JSONExtract with materialized columns in metrics (**insights**) ([5a2e1bb](https://github.com/BlazeUp-AI/Observal/commit/5a2e1bb52c825d4c116efa5964210923111d1d5a))
-- add session_stats_agg AggregatingMergeTree MV (**clickhouse**) ([5d54f30](https://github.com/BlazeUp-AI/Observal/commit/5d54f30d2df1b2726606b8313b286544b15777ba))
-### Testing
-- cover IDE feature inference (**server**) ([49d341e](https://github.com/BlazeUp-AI/Observal/commit/49d341eb87e81318cfd384abcaf719a2c0790605))
-- add component edit form screenshot spec (**e2e**) ([6fd363b](https://github.com/BlazeUp-AI/Observal/commit/6fd363b2d6bf0323862b868ebdc2a0ed1d425a78))
-- add full edit → release → review Playwright flow (**e2e**) ([8672d9a](https://github.com/BlazeUp-AI/Observal/commit/8672d9ae8fdd62ecde89060ab1cdf6c85c7223a6))
-## [0.4.0] - 2026-04-28
-### Added
 - add account page with profile, theme picker, and notifications (**web**) ([d748558](https://github.com/BlazeUp-AI/Observal/commit/d7485587c3bbdfd043fdfe58eb6bc4c4170758e1))
 - add 10 curated IDE themes with hand-tuned oklch palettes (**web**) ([dcbb704](https://github.com/BlazeUp-AI/Observal/commit/dcbb7047bb31d3fc0fd590b9092b5bbe3270e8ce))
 - add `observal doctor cleanup` command (**cli**) ([ab26241](https://github.com/BlazeUp-AI/Observal/commit/ab26241ab2a129a9479e92b78425138dc5477e8e))
-### Changed
-- centralize IDE registry into single source of truth (**registry**) ([295ad48](https://github.com/BlazeUp-AI/Observal/commit/295ad486387ee2804c3e357d8c974dcda206fa54))
-- restructure scan/doctor commands, fix Kiro active sessions (**cli**) ([7273872](https://github.com/BlazeUp-AI/Observal/commit/7273872f5f3e2d3de06f56542ade3ea05f9759af))
-- extract IDE hook specs into observal_cli/ide_specs/ (**cli**) ([4ff36b5](https://github.com/BlazeUp-AI/Observal/commit/4ff36b5989da2a22486051676973de9bfc5be299))
-- rename hooks_spec.py → claude_code_spec.py (**cli**) ([404831b](https://github.com/BlazeUp-AI/Observal/commit/404831bdb5635731c7c77fe7fe7d6dec5314260c))
-- format test_ide_config_e2e.py ([707156a](https://github.com/BlazeUp-AI/Observal/commit/707156a0612a9f52abc44c4e418f8e69bfc9c195))
-- format telemetry.py and cmd_scan.py ([cc92e5b](https://github.com/BlazeUp-AI/Observal/commit/cc92e5b21005b8155a9e8d11059f42a7602a1b4a))
-- format test_settings_reconciler.py ([fedfcbb](https://github.com/BlazeUp-AI/Observal/commit/fedfcbbfb840bfc9a4e895c11d76eef3b1d76a10))
-- fix remaining /otel/hooks references across CLI commands (**cli**) ([637e8fd](https://github.com/BlazeUp-AI/Observal/commit/637e8fd1a6a0c6fa17efec9c7e7b2c3b5931855c))
-- merge OTLP handlers from otlp.py, delete otlp.py (**telemetry**) ([098995e](https://github.com/BlazeUp-AI/Observal/commit/098995e7b6e94ec4ddbc372cc75be690feec5d40))
-- rename otel_dashboard → sessions, prefix /api/v1/sessions (**api**) ([ea9275a](https://github.com/BlazeUp-AI/Observal/commit/ea9275a195b1e44ae8bf963cd39af299da5d4a1b))
-- rename /otel/ API paths to /sessions/ (**web**) ([22cc14d](https://github.com/BlazeUp-AI/Observal/commit/22cc14d157118b55c29fe96f2df51d763e1e970a))
-- move hooks handler from otel_dashboard to telemetry router (**telemetry**) ([aee071e](https://github.com/BlazeUp-AI/Observal/commit/aee071e7325ca0ff6d23357c01924d3585962a58))
-- use server_url for OTLP, remove port derivation (**cli**) ([637ee9f](https://github.com/BlazeUp-AI/Observal/commit/637ee9f2eea346b0e54a5789d457aa8e3e5f264e))
-- fix OTLP fallbacks and hook URL paths (**config-gen**) ([6717515](https://github.com/BlazeUp-AI/Observal/commit/67175151797e7ca9d2b8b93122ce3f2ec2cc1a98))
-- switch to HTTP/JSON OTLP, single-endpoint URLs (**hooks-spec**) ([f532296](https://github.com/BlazeUp-AI/Observal/commit/f532296ac1cc8eb39a6a5d955ddf8840617fb8f2))
-- single-endpoint OTLP — remove gRPC, default to API URL (**config**) ([79e9801](https://github.com/BlazeUp-AI/Observal/commit/79e9801577c640e7318b11a9cba032816bbcfefc))
-- remove OTEL collector, add nginx /v1/ routing (**infra**) ([d4f45ed](https://github.com/BlazeUp-AI/Observal/commit/d4f45edeb7e141c70d56a3f191f32a60e9b09198))
-- remove redundant steering file generation (**kiro**) ([c49ec3c](https://github.com/BlazeUp-AI/Observal/commit/c49ec3c39505d4b46ddfa7e2ca4b5fd13fd58810))
-### Documentation
-- update stale docstring references to claude_code_spec ([e00e193](https://github.com/BlazeUp-AI/Observal/commit/e00e1930240eddabf2a9e583e59c0eda3f378434))
-- update for single-endpoint architecture ([861a3cf](https://github.com/BlazeUp-AI/Observal/commit/861a3cf6fc1cf060e1c92a69c8ea08ded3295ef4))
-### Fixed
-- update IDE paths and add skill support per official docs (**registry**) ([1904f94](https://github.com/BlazeUp-AI/Observal/commit/1904f94c15a9ab980d73ff8818fd76fa6bd0a49b))
-- correct VS Code mcp_servers_key and Claude Code home_mcp_config (**registry**) ([1693b40](https://github.com/BlazeUp-AI/Observal/commit/1693b404923b70543ab735c7e5084ab196b3ea0a))
-- make session DAG visualization theme-aware (**web**) ([9f5f542](https://github.com/BlazeUp-AI/Observal/commit/9f5f542a5e7ce10a87d8273dcd9d7897c80eedcd))
-- replace hardcoded colors with semantic theme tokens (**web**) ([ae3b5c4](https://github.com/BlazeUp-AI/Observal/commit/ae3b5c4fecc0ed619aab1316ec8ee4ee9663d022))
-- hide enterprise-only sidebar items in local mode, fix collapsed logo (**web**) ([aad850f](https://github.com/BlazeUp-AI/Observal/commit/aad850f7cd000cbe5ca4720f6195ad128670014d))
-- prevent duplicate Observal hooks in Kiro agent configs ([6256a56](https://github.com/BlazeUp-AI/Observal/commit/6256a569b3f86c1571c81811e0d623429b340486))
-- use sys.executable and python detection for cross-platform hook injection (**hooks**) ([7ee202a](https://github.com/BlazeUp-AI/Observal/commit/7ee202a1375cf29f349d0c88738202500476255f))
-- use sys.executable for hook commands, not hardcoded python3 (**cli**) ([1ddcc81](https://github.com/BlazeUp-AI/Observal/commit/1ddcc8140e982caaf6eadb1af4965e589108a0c6))
-- update crypto public-key URL and e2e test paths (**cli**) ([f01e635](https://github.com/BlazeUp-AI/Observal/commit/f01e6359406b857e03cec640ca02edddb210cb85))
-- update copilot CLI hook test to use module invocation format (**test**) ([d526a4b](https://github.com/BlazeUp-AI/Observal/commit/d526a4b52de380b4f0b9e27a1d874fc940d48363))
-- doctor cleanup should also clean kiro_default.json (**cli**) ([5f7a755](https://github.com/BlazeUp-AI/Observal/commit/5f7a75528263fc0101b1e4b917f29412f58dbae1))
-- use module invocation for hook injection, not cat|python3 pipes (**cli**) ([50af818](https://github.com/BlazeUp-AI/Observal/commit/50af81803f3d3eedbfc6f9fbe0ea5978ba82f314))
-- write native OTLP logs to otel_logs table (**telemetry**) ([4381188](https://github.com/BlazeUp-AI/Observal/commit/4381188f5b0c85f8049e12cc3824d59b3fd9b739))
-- update copilot CLI hooks and remaining otel/hooks references (**cli**) ([be5c960](https://github.com/BlazeUp-AI/Observal/commit/be5c960f0532a5b27f9eccc4ea0fed4977198eca))
-- normalize all IDE ServiceName values in SQL query (**sessions**) ([4e86302](https://github.com/BlazeUp-AI/Observal/commit/4e863026c55c27c4ad29b529d5989652c32640ec))
-- remove exception detail leaks in eval kernel (**security**) ([9d56b6c](https://github.com/BlazeUp-AI/Observal/commit/9d56b6c4770d784912af702a60f580eb0c68e178))
-- address CodeQL findings (**security**) ([ef08221](https://github.com/BlazeUp-AI/Observal/commit/ef08221f2028a04171073d7c03f6b10e7c8c337e))
-- update test expectations and fix eslint warnings (**ci**) ([723a29c](https://github.com/BlazeUp-AI/Observal/commit/723a29cfe32099ead233eaaaddbe9c3245e3d836))
-- seed Kiro hooks with telemetry commands (**agent-builder**) ([14bea3d](https://github.com/BlazeUp-AI/Observal/commit/14bea3d1170e97927e43eeb67792525212cbb781))
-- move /traces /errors /stats above /{session_id} catch-all (**sessions**) ([39d9a60](https://github.com/BlazeUp-AI/Observal/commit/39d9a60b15bd4e9dc4c8a3581f8bbc583a1fdd2d))
-- remove duplicate /sessions prefix from route paths (**sessions**) ([606a00d](https://github.com/BlazeUp-AI/Observal/commit/606a00d16d1e67ca6d5516d988681a48910e5cda))
-- replace structlog with stdlib logging (**sessions**) ([106d489](https://github.com/BlazeUp-AI/Observal/commit/106d4898e6cf1799d1248351456a4fa11b6a84d7))
-- fix remaining OtelSession type reference (**web**) ([c6983a8](https://github.com/BlazeUp-AI/Observal/commit/c6983a86ab148d31266dd637787f57a8e8235f3e))
-- add otel_logs DDL to init_clickhouse (**clickhouse**) ([17fd514](https://github.com/BlazeUp-AI/Observal/commit/17fd514a87d6ac0a1e7cf20d6640dd724adc1b07))
-### Other
-- update docker/build-push-action action to v7 (**deps**) ([20f2626](https://github.com/BlazeUp-AI/Observal/commit/20f26263f09cfc4c9f95b52d6e5509f3d34af58a))
-- update docker/login-action action to v4 (**deps**) ([e5d87a9](https://github.com/BlazeUp-AI/Observal/commit/e5d87a9dd2fa1b06b384efae2dd87019fbc36d6c))
-- update docker/setup-buildx-action action to v4 (**deps**) ([5e5f3f8](https://github.com/BlazeUp-AI/Observal/commit/5e5f3f8f9b0749265cb28ae39912acd0f0d2c1fb))
-- sync observal-server uv.lock version to 0.3.4 ([eed7bdd](https://github.com/BlazeUp-AI/Observal/commit/eed7bdded2218e60d08aafb623cefa698223b7ff))
-### Testing
-- update expectations for single-endpoint architecture ([3d271a6](https://github.com/BlazeUp-AI/Observal/commit/3d271a629adc4b5f4e380152b5f5e59f66aeea5c))
-## [0.3.4] - 2026-04-25
-### Added
 - add copilot-cli doctor checks and SLI repair ([fe8f91a](https://github.com/BlazeUp-AI/Observal/commit/fe8f91af37c6e3d354906c022aaba2e12eb4b816))
 - add copilot-cli scan and hook injection ([8956644](https://github.com/BlazeUp-AI/Observal/commit/8956644008e824ba59675be52448880170a544e8))
 - add copilot-cli server-side config generation ([7c71b94](https://github.com/BlazeUp-AI/Observal/commit/7c71b94b2bdeb3827ecfb48bda0180b065d4de8f))
 - add copilot-cli hook scripts ([4e22c5c](https://github.com/BlazeUp-AI/Observal/commit/4e22c5cf5907c30488e9cb73137495e057463535))
 - add copilot-cli to IDE constants and feature matrix ([065900b](https://github.com/BlazeUp-AI/Observal/commit/065900b63c6f7fd60c1c6d11d9e730d51732293e))
-### Documentation
-- add copilot-cli integration guide ([c459254](https://github.com/BlazeUp-AI/Observal/commit/c459254ee837e396e9d8dc3a9fc8b3c40d7c4cb6))
-### Fixed
-- add missing event name mappings for prompt counting (**copilot**) ([0a3acf7](https://github.com/BlazeUp-AI/Observal/commit/0a3acf7c0f135e79291915a9d5081996a7d54762))
-- auto-shim copilot/opencode MCP servers during login (**auth**) ([3d12220](https://github.com/BlazeUp-AI/Observal/commit/3d1222013fd0c2907ae82f5b346949c4bf673795))
-- match native agent config schema and fix prompt injection (**kiro**) ([cb773cc](https://github.com/BlazeUp-AI/Observal/commit/cb773cc090540150bc1284063d06b6b243c5e5fc))
-- replace fragile cat|sed|curl Unix pipelines with Python hook scripts (**kiro**) ([c304172](https://github.com/BlazeUp-AI/Observal/commit/c304172d8a96ed48e56b9f92d73fa5f876effe29))
-- use LB URL as Dockerfile build-time default for API rewrites (**docker**) ([af54ebd](https://github.com/BlazeUp-AI/Observal/commit/af54ebd826ea4789b88894d51136644c25a4e683))
-- preserve URL scheme in endpoint derivation and fix port issues (**config**) ([ef28cfe](https://github.com/BlazeUp-AI/Observal/commit/ef28cfe33e801c816ce529d6b827d84e14979340))
-- reformat test_ide_config_e2e.py to satisfy ruff (**lint**) ([4c065ba](https://github.com/BlazeUp-AI/Observal/commit/4c065ba732c07dd43326eb3d84bbe12be2b040d8))
-- rename camelCase test function to satisfy ruff N802 (**test**) ([77a57d4](https://github.com/BlazeUp-AI/Observal/commit/77a57d47a276495b8898dd2706fd6321cfda02ae))
-- add Copilot CLI platform detection and hide unsupported fields (**web**) ([2259794](https://github.com/BlazeUp-AI/Observal/commit/22597942a864c521e61d3d3f0d5fbf2cf97552c1))
-- add JSONC parsing and per-event hook names for Copilot CLI (**cli**) ([096fd3c](https://github.com/BlazeUp-AI/Observal/commit/096fd3c5092d0fa0e4d6e439d0e7c86ad85540a3))
-- normalize Copilot CLI payloads and inject event names (**hooks**) ([a9d47fa](https://github.com/BlazeUp-AI/Observal/commit/a9d47faa3e327c64bb8ba5cb7be34c9c212ae50e))
-- respect --ide filter in fallback home scan (**scan**) ([cf379dd](https://github.com/BlazeUp-AI/Observal/commit/cf379ddeaca9b24ab6b2f158e3711da433903520))
-- only trace registered Kiro agents, skip kiro_default (**scan**) ([db39514](https://github.com/BlazeUp-AI/Observal/commit/db3951494f61f3e724c6dfc3fb659badd6e916ba))
-- only trace registered Kiro agents, skip kiro_default (**scan**) ([63d2b5d](https://github.com/BlazeUp-AI/Observal/commit/63d2b5dc21b608e7039ddfbd8794afff5de58943))
-- only trace registered Kiro agents, skip kiro_default (**scan**) ([9cdc9c5](https://github.com/BlazeUp-AI/Observal/commit/9cdc9c5cd7b451c968696fd0dda288c7db8f97d1))
-- preserve host port in proxy headers to fix Kiro agent tracing (**nginx**) ([60dcda9](https://github.com/BlazeUp-AI/Observal/commit/60dcda95124b5e0e06307c66a43db2fde8056907))
-### Other
-- update dependency ruff to v0.15.12 (#575) (**deps**) ([a8a406d](https://github.com/BlazeUp-AI/Observal/commit/a8a406df83a1978b157c0c8d6aac359d70a2da7b))
-### Performance
-- multi-stage API build, expand dockerignore, add nginx gzip (**docker**) ([21fd2a4](https://github.com/BlazeUp-AI/Observal/commit/21fd2a461bd01709df7775655aedc91a07e608e6))
-### Testing
-- update assertions for new config format (**kiro**) ([550ade5](https://github.com/BlazeUp-AI/Observal/commit/550ade505fa9eb1658799bdce050cd140927a2d4))
-- add copilot-cli e2e tests ([dfabf02](https://github.com/BlazeUp-AI/Observal/commit/dfabf0215d6bdbb9bc1d0f0e2fb50e36dbe6f6d4))
-## [0.3.3] - 2026-04-24
-### Fixed
-- filter release artifact download to skip Docker metadata (**ci**) ([dbd6a1b](https://github.com/BlazeUp-AI/Observal/commit/dbd6a1b66ec1dd3a6db067ecc9bc41a17174a329))
-## [0.3.2] - 2026-04-24
-### Added
 - add Edit and Resubmit UI for rejected agents and components (**web**) ([1d22a61](https://github.com/BlazeUp-AI/Observal/commit/1d22a61a940d2cf7dd3248515079b1d7d34429f0))
 - inject hooks via scan and auth login, update doctor (**gemini**) ([2e3b3a0](https://github.com/BlazeUp-AI/Observal/commit/2e3b3a0e8beffa44d9db3121fbd559ebb0f8bd08))
 - add hook_bridge and otlp_telemetry to feature matrix (**gemini**) ([e3b442c](https://github.com/BlazeUp-AI/Observal/commit/e3b442c99a3ba3df986703cc9813172980ac806d))
@@ -1199,14 +810,108 @@ All notable changes to this project will be documented in this file.
 - add structlog and prometheus-fastapi-instrumentator dependencies ([ce788b9](https://github.com/BlazeUp-AI/Observal/commit/ce788b945d791189134cbcb7ee772f97c8063a5f))
 - split settings into sections with resource tooltips (**web**) ([227b783](https://github.com/BlazeUp-AI/Observal/commit/227b783761c96280997bd6dafd859d00df744163))
 - add runtime ClickHouse resource tuning via admin UI (**server,web**) ([6400bd6](https://github.com/BlazeUp-AI/Observal/commit/6400bd66346af9679025e8e915a945402b4ef1d3))
+- redesign traces page with unified Kiro and Claude Code view (**web**) ([e648ad5](https://github.com/BlazeUp-AI/Observal/commit/e648ad535a0766fcea6bb42a3df7bd3fbb390baf))
+- extend session types, API layer, and hooks for v4 traces (**web**) ([5575ac4](https://github.com/BlazeUp-AI/Observal/commit/5575ac404506fe3242261230c91c8f58c296b39f))
+- add user resolution, platform/time filters, and summary endpoint (**server**) ([2befd44](https://github.com/BlazeUp-AI/Observal/commit/2befd44097c3b3b799578a237b16473842b98ff5))
+- propagate username through hooks and env vars (**cli**) ([f41ff37](https://github.com/BlazeUp-AI/Observal/commit/f41ff37201574e1b44dea3be7f8d48c5a97a79df))
+- show IDE compatibility badges on agent cards and detail pages (**web**) ([151e55b](https://github.com/BlazeUp-AI/Observal/commit/151e55be229f64a878182dbc100aba69e33e1bed))
+- auto-infer IDE compatibility on agent create/update and warn at install (**server**) ([e1e39ae](https://github.com/BlazeUp-AI/Observal/commit/e1e39ae3ca9e03796dffb19f518f6d0d74889424))
+- add required_ide_features and inferred_supported_ides to agent model (**server**) ([1214bc3](https://github.com/BlazeUp-AI/Observal/commit/1214bc3ac76932759951658688dd091abcd86b22))
+- add IDE feature inference service (**server**) ([82b897e](https://github.com/BlazeUp-AI/Observal/commit/82b897e66a47f4c2926f6a9a5703852f3a77a4ff))
+- add IDE feature capability matrix to constants (**server**) ([f259125](https://github.com/BlazeUp-AI/Observal/commit/f25912560f3807a1a0cdf629391fda4f747d0fc2))
+- detect dollar-sign input vars in git-URL submit path (**cli**) ([a22c37e](https://github.com/BlazeUp-AI/Observal/commit/a22c37e29a83f852d6a49a3b99a901dc7ea7af6f))
+- substitute $VAR placeholders in stored args at install time (**server**) ([a415036](https://github.com/BlazeUp-AI/Observal/commit/a415036096c927a22b8389b5270d686d43f84a58))
+- detect dollar-sign input variables in mcp submit --config (**cli**) ([0705ee0](https://github.com/BlazeUp-AI/Observal/commit/0705ee00b0ff0d2c00f110f10a15de5df8bb2210))
+- add ASCII welcome banner on auth login (#202) ([043147f](https://github.com/BlazeUp-AI/Observal/commit/043147fde13efc05c3fb1da7e539d160b00c91bd))
+- add Redis-backed caching and gzip compression ([1803470](https://github.com/BlazeUp-AI/Observal/commit/18034709d7d1cccafd490bfe06558e53156d3547))
+- add post-auth onboarding with IDE detection and component upload ([8660f3e](https://github.com/BlazeUp-AI/Observal/commit/8660f3e8fdc2ce0fe91faadf49bc6f1c4257a78b))
+- allow users to view their own traces (#431) (**traces**) ([3be2c5c](https://github.com/BlazeUp-AI/Observal/commit/3be2c5c69d95f2f9b6df9cdeeb442586144050d1))
+- generate IDE-specific skill files on agent install (#431) (**skills**) ([b276718](https://github.com/BlazeUp-AI/Observal/commit/b276718d29427a5ab30a5db0e35d12f4440db339))
+- add structured security event logging for SIEM integration (#233) (**sec**) ([5d61282](https://github.com/BlazeUp-AI/Observal/commit/5d61282f9003c7001d4b19226362a92971982c99))
+- add escape_like() utility and tests (**sec**) ([2c9ee56](https://github.com/BlazeUp-AI/Observal/commit/2c9ee561d4fc4e01e8b6da0d858376452a6843f1))
+- add shim badge on trace events with merged shim data (**ui**) ([929cb47](https://github.com/BlazeUp-AI/Observal/commit/929cb47023c810f9db9861d9c6a79ec7615e1179))
+- add unarchive action for archived agents ([9a9e352](https://github.com/BlazeUp-AI/Observal/commit/9a9e352c283f88e6b73697d3cfe1fdbb0f8908c0))
+- add delete/withdraw action for pending items in review queue ([71e4250](https://github.com/BlazeUp-AI/Observal/commit/71e4250702288ed2be517f1cff06a6191005110b))
+- add draft workflow and submission forms for all component types ([2f52f02](https://github.com/BlazeUp-AI/Observal/commit/2f52f02ceeb4ed3471bde8a98c60f90cbc6dde5f))
+- add custom inline prompt input to agent builder Prompts tab (**web**) ([6029763](https://github.com/BlazeUp-AI/Observal/commit/60297638de8be62e05c3f30cd7676d75f7fb4b93))
+- unwrap mcpServers wrappers and extract server name from pasted configs (**cli**) ([1ddc49b](https://github.com/BlazeUp-AI/Observal/commit/1ddc49bdde6e46458aa4505282a535456a0a806c))
+- add header prompting at install time for SSE/HTTP servers (**cli**) ([b4dd457](https://github.com/BlazeUp-AI/Observal/commit/b4dd457f445a148319c7504828b267e6e1b3916d))
+- revamp submit UX with config preview and direct JSON config support (**cli**) ([0a3ff6f](https://github.com/BlazeUp-AI/Observal/commit/0a3ff6f4ca8a5485fab5510e6ac3822100a41d61))
+- support three transport types — stdio, SSE, HTTP proxy (**config**) ([522f270](https://github.com/BlazeUp-AI/Observal/commit/522f27081b5066e8be3f815d2bd6054acad477e8))
+- store command/args/url/headers on submit, pass headers on install (**routes**) ([9b38fff](https://github.com/BlazeUp-AI/Observal/commit/9b38fffd7f094b938b3434c88bbd9fc8a23330d2))
+- auto-detect docker images and infer command/args from repos (**validator**) ([1b6b34c](https://github.com/BlazeUp-AI/Observal/commit/1b6b34c7e40ce2095ca44ce504fdc61fa5facef8))
+- add transport/SSE/header fields to MCP schemas (**schemas**) ([daa2d5d](https://github.com/BlazeUp-AI/Observal/commit/daa2d5d624218b44502dba5878126325a834f2fb))
+- add command, args, url, headers, auto_approve columns to mcp_listings (**db**) ([a7f184c](https://github.com/BlazeUp-AI/Observal/commit/a7f184c4f5aa78e4fe66e4958fe69f22aa188c38))
+- org-scope agent endpoints and stamp owner_org_id on all listings (**multi-tenancy**) ([aff0883](https://github.com/BlazeUp-AI/Observal/commit/aff088355fce90806e720181baeb679ae745b011))
+- org-scoped project_id and route filtering (**multi-tenancy**) ([10c41e4](https://github.com/BlazeUp-AI/Observal/commit/10c41e4a82606caa6cab5e5156a122fbee34c527))
+- scope user management to org and assign org_id on creation (**admin**) ([2bdf1ea](https://github.com/BlazeUp-AI/Observal/commit/2bdf1eafd4a4bce56da6223b978c8291122d9901))
+- add org-aware dependencies and auto-assign default org (**auth**) ([0d25bd2](https://github.com/BlazeUp-AI/Observal/commit/0d25bd2a0fa7a2faee1fcdd6096ec6e8773e7b63))
+- add version bump dialog to agent builder (**web**) ([5875985](https://github.com/BlazeUp-AI/Observal/commit/5875985c550d3476a5bc548b134b424268c6d66c))
+- add draft workflow with localStorage auto-save (**web**) ([837e3dc](https://github.com/BlazeUp-AI/Observal/commit/837e3dc6a9eb93e35e99e5b868dca7427779a57e))
+- add agents tab with component readiness to review page (**web**) ([a20cd85](https://github.com/BlazeUp-AI/Observal/commit/a20cd8549677e1bcb10204025c14648308290006))
+- add agent bulk-create command (**cli**) ([d2d360b](https://github.com/BlazeUp-AI/Observal/commit/d2d360bedd7ec543e60d29bb371fdeab978d3af9))
+- add user filter and component tabs to leaderboard (**web**) ([cb52a55](https://github.com/BlazeUp-AI/Observal/commit/cb52a55b62d288ea4da10c5d229146b860ff63d4))
+- add archive action to agent pages (**web**) ([ddc8e9c](https://github.com/BlazeUp-AI/Observal/commit/ddc8e9c1291166754c3126c507f9d5b490505b75))
+- add API hooks for review, archive, draft, version, leaderboard, bulk (**web**) ([7e2fe92](https://github.com/BlazeUp-AI/Observal/commit/7e2fe92969b4962a789f8939c80b3068ede93653))
+- add bulk agent upload endpoint and schemas (**server**) ([1295e58](https://github.com/BlazeUp-AI/Observal/commit/1295e58317932d5852b95fabd7598152bc6b04e1))
+- add archived variant to StatusBadge (**web**) ([7bf035d](https://github.com/BlazeUp-AI/Observal/commit/7bf035dfa936b03180f1ea4ccc0f38e80286a421))
+- add dismissible GitHub star banner to page header ([11d3d09](https://github.com/BlazeUp-AI/Observal/commit/11d3d0927e84927d33d2a1c3d77803aebcfb251b))
+- add username field to User model (#339) (**auth**) ([c001b1b](https://github.com/BlazeUp-AI/Observal/commit/c001b1b3f29ff66a87ce3e96e3fa91a6598e6a80))
+- add delete agent functionality to frontend (**web**) ([4204176](https://github.com/BlazeUp-AI/Observal/commit/42041769d2a52f6f6a9d5d4c920cbce856a52a3a))
+- add review queue, versioning, bundles, archive, and draft workflow (**agent**) ([27f1f6a](https://github.com/BlazeUp-AI/Observal/commit/27f1f6a81f4258d63c3814464b684cde072d4385))
+- add observal agents cli cmds (**agent**) ([7e6a206](https://github.com/BlazeUp-AI/Observal/commit/7e6a2069817aa13777891f847c8843c3ff93431a))
+- robust multi-language env var detection and config generation fixes ([5d633c5](https://github.com/BlazeUp-AI/Observal/commit/5d633c555d350895b461859d6c818c67466564f0))
+- unify telemetry — merge hooks, shims, and OTLP into one event stream ([1dce747](https://github.com/BlazeUp-AI/Observal/commit/1dce7472b2a3706fbf92cd4dbbd01d6cf105bc8f))
+- add live session updates via GraphQL subscriptions ([9cc5bd1](https://github.com/BlazeUp-AI/Observal/commit/9cc5bd188617dbbfd51005336cdd9d24e34665e5))
 ### CI
+- add workflow for backend integration tests ([ba4e741](https://github.com/BlazeUp-AI/Observal/commit/ba4e741feaf813f27eec071c7720ac9451f90866))
+- add deploy-dev workflow for main branch auto-deploy ([40f2203](https://github.com/BlazeUp-AI/Observal/commit/40f22031befc48c38ec3af8c6886ead52ac61cca))
+- add deploy-dev workflow for main branch auto-deploy ([4393ce0](https://github.com/BlazeUp-AI/Observal/commit/4393ce0fcfd3a2832fcb9f5dbebd7cb3b9e3a893))
+- trigger on release tags only, not push to main (**deploy**) ([83cbf33](https://github.com/BlazeUp-AI/Observal/commit/83cbf3367b3426cd08d615af693191a7c3a6ae1e))
+- add stale issue/PR workflow with keep open exemption ([b3f8433](https://github.com/BlazeUp-AI/Observal/commit/b3f8433750f8f5292ea448b8b41fb5b8eef262ba))
 - use GitHub App token for release tag push ([0c9c696](https://github.com/BlazeUp-AI/Observal/commit/0c9c69635a6c9f0772d3bf465e4956b577d02c16))
 - automated release pipeline for CLI, Docker, and server packages ([877e4e1](https://github.com/BlazeUp-AI/Observal/commit/877e4e1705f900f88c6c03582fcd39569aec8268))
+- add asyncpg and hypothesis to test runner ([abff6ad](https://github.com/BlazeUp-AI/Observal/commit/abff6ad95887a6414636b4cd8b64100b450037e5))
+- add auto-deploy workflow for EC2 server ([c6d3fc8](https://github.com/BlazeUp-AI/Observal/commit/c6d3fc886422702b880f8ddfea4bbfab64d44ed4))
 ### Changed
+- derive org columns and NOT NULL defaults from schema, improve warnings ([5380a65](https://github.com/BlazeUp-AI/Observal/commit/5380a650744196d1eba88e93b700eb03a6b6c9d9))
+- address review feedback on migrate import ([1fa852e](https://github.com/BlazeUp-AI/Observal/commit/1fa852e9e82994d796b35bc3c8003801c8f30289))
+- redesign HTML report with warm, refined color scheme (**insights**) ([894e327](https://github.com/BlazeUp-AI/Observal/commit/894e327939d3e36807605ba2b2ca3df7ec01e61d))
+- remove triplicated display logic from CLI and frontend ([b5ab0be](https://github.com/BlazeUp-AI/Observal/commit/b5ab0be6d63a83de5e06c1c89174d950b41b0fbd))
+- move extra_ingest_rows into kiro.py (**ingest**) ([f0e7540](https://github.com/BlazeUp-AI/Observal/commit/f0e754078fcf951c4ad45514d8396dd26811529f))
+- move Kiro credits logic to ingest_classify.py (**ingest**) ([054fbf1](https://github.com/BlazeUp-AI/Observal/commit/054fbf1abc1fd1d83ca45718826d58044ac008ca))
+- ruff format hook_event resolution (**kiro**) ([723ec55](https://github.com/BlazeUp-AI/Observal/commit/723ec55782d66e6827f413213cef0f4db15ae3d7))
+- replace enrichment-heavy route with clean Harness version (**reconcile**) ([95d34e0](https://github.com/BlazeUp-AI/Observal/commit/95d34e0311b16edc25581aeb7c572e22d894ea6b))
+- remove CLI commands, keep crash recovery library (**reconcile**) ([5103982](https://github.com/BlazeUp-AI/Observal/commit/5103982496d42ac0782816c071c3dd170c4c5023))
+- remove legacy hook pipeline, keep shim and buffer (**telemetry**) ([40a5be4](https://github.com/BlazeUp-AI/Observal/commit/40a5be4d63a796dc02ddb49221370ed4d4e424a7))
+- rewrite queries to use session_events table (**sessions**) ([437cf58](https://github.com/BlazeUp-AI/Observal/commit/437cf5873da924b1c9b8d193aa14f32a56c5329a))
+- strip shim/OTEL logic, keep only session push hooks (**doctor**) ([883b95a](https://github.com/BlazeUp-AI/Observal/commit/883b95aee1b364f9f361543eda6f7fb4fca3ad8a))
+- squash all 28 migrations into single baseline (**migrations**) ([1c5abdd](https://github.com/BlazeUp-AI/Observal/commit/1c5abdd04e7bfea798026f54391d984bce0f1a8f))
+- ruff format agent.py ([4ef21c3](https://github.com/BlazeUp-AI/Observal/commit/4ef21c345ae13302cf66530a6e8ca5a2a63c6cf3))
+- ruff format api route files ([b003bbe](https://github.com/BlazeUp-AI/Observal/commit/b003bbe0eb66dbf225348834e0a8f65a04a217ce))
+- ruff format component_version_extras and component_versions ([af394b6](https://github.com/BlazeUp-AI/Observal/commit/af394b685ff123900710bed6c98f3d177acd24a6))
+- centralize IDE registry into single source of truth (**registry**) ([295ad48](https://github.com/BlazeUp-AI/Observal/commit/295ad486387ee2804c3e357d8c974dcda206fa54))
+- restructure scan/doctor commands, fix Kiro active sessions (**cli**) ([7273872](https://github.com/BlazeUp-AI/Observal/commit/7273872f5f3e2d3de06f56542ade3ea05f9759af))
+- extract IDE hook specs into observal_cli/ide_specs/ (**cli**) ([4ff36b5](https://github.com/BlazeUp-AI/Observal/commit/4ff36b5989da2a22486051676973de9bfc5be299))
+- rename hooks_spec.py → claude_code_spec.py (**cli**) ([404831b](https://github.com/BlazeUp-AI/Observal/commit/404831bdb5635731c7c77fe7fe7d6dec5314260c))
+- format test_ide_config_e2e.py ([707156a](https://github.com/BlazeUp-AI/Observal/commit/707156a0612a9f52abc44c4e418f8e69bfc9c195))
+- format telemetry.py and cmd_scan.py ([cc92e5b](https://github.com/BlazeUp-AI/Observal/commit/cc92e5b21005b8155a9e8d11059f42a7602a1b4a))
+- format test_settings_reconciler.py ([fedfcbb](https://github.com/BlazeUp-AI/Observal/commit/fedfcbbfb840bfc9a4e895c11d76eef3b1d76a10))
+- fix remaining /otel/hooks references across CLI commands (**cli**) ([637e8fd](https://github.com/BlazeUp-AI/Observal/commit/637e8fd1a6a0c6fa17efec9c7e7b2c3b5931855c))
+- merge OTLP handlers from otlp.py, delete otlp.py (**telemetry**) ([098995e](https://github.com/BlazeUp-AI/Observal/commit/098995e7b6e94ec4ddbc372cc75be690feec5d40))
+- rename otel_dashboard → sessions, prefix /api/v1/sessions (**api**) ([ea9275a](https://github.com/BlazeUp-AI/Observal/commit/ea9275a195b1e44ae8bf963cd39af299da5d4a1b))
+- rename /otel/ API paths to /sessions/ (**web**) ([22cc14d](https://github.com/BlazeUp-AI/Observal/commit/22cc14d157118b55c29fe96f2df51d763e1e970a))
+- move hooks handler from otel_dashboard to telemetry router (**telemetry**) ([aee071e](https://github.com/BlazeUp-AI/Observal/commit/aee071e7325ca0ff6d23357c01924d3585962a58))
+- use server_url for OTLP, remove port derivation (**cli**) ([637ee9f](https://github.com/BlazeUp-AI/Observal/commit/637ee9f2eea346b0e54a5789d457aa8e3e5f264e))
+- fix OTLP fallbacks and hook URL paths (**config-gen**) ([6717515](https://github.com/BlazeUp-AI/Observal/commit/67175151797e7ca9d2b8b93122ce3f2ec2cc1a98))
+- switch to HTTP/JSON OTLP, single-endpoint URLs (**hooks-spec**) ([f532296](https://github.com/BlazeUp-AI/Observal/commit/f532296ac1cc8eb39a6a5d955ddf8840617fb8f2))
+- single-endpoint OTLP — remove gRPC, default to API URL (**config**) ([79e9801](https://github.com/BlazeUp-AI/Observal/commit/79e9801577c640e7318b11a9cba032816bbcfefc))
+- remove OTEL collector, add nginx /v1/ routing (**infra**) ([d4f45ed](https://github.com/BlazeUp-AI/Observal/commit/d4f45edeb7e141c70d56a3f191f32a60e9b09198))
+- remove redundant steering file generation (**kiro**) ([c49ec3c](https://github.com/BlazeUp-AI/Observal/commit/c49ec3c39505d4b46ddfa7e2ca4b5fd13fd58810))
 - fix ruff lint and format issues ([6e33021](https://github.com/BlazeUp-AI/Observal/commit/6e33021f5d2ad5b5484b45e591a75458e10ec2b3))
 - ruff format main.py ([14832c9](https://github.com/BlazeUp-AI/Observal/commit/14832c9ecda57dba9a9a07843dfc7103eaef34a8))
 - fix ruff lint (ternary + import sorting) ([2406c3d](https://github.com/BlazeUp-AI/Observal/commit/2406c3d2168d1a1729f4bd03da00a7a68a11d2e1))
@@ -1220,9 +925,32 @@ All notable changes to this project will be documented in this file.
 - fix ruff format line length in redis.py ([0a5400a](https://github.com/BlazeUp-AI/Observal/commit/0a5400a57073fd944072ba47902c76ba29095c06))
 - convert f-string logs to structured keyword arguments ([33e49b3](https://github.com/BlazeUp-AI/Observal/commit/33e49b36b32bb8086cbd40ab6c8a61daca8b02ba))
 - fix ruff formatting in admin routes and clickhouse service ([b57c9fa](https://github.com/BlazeUp-AI/Observal/commit/b57c9fa64ff4462a32a21d8bae2fe81c9e0b4813))
+- fix ruff lint and formatting in client.py (**cli**) ([ab5935c](https://github.com/BlazeUp-AI/Observal/commit/ab5935c0e6240103527df084394ff80dae82fd01))
+- format review.py for ruff ([f2c68fe](https://github.com/BlazeUp-AI/Observal/commit/f2c68fe4ac0fa704871098f5de093435c99179e7))
+- fix ruff formatting in route and CLI files ([55b5f2b](https://github.com/BlazeUp-AI/Observal/commit/55b5f2baf96dbcd52a1789496818bcceab25e436))
+- format test_docker_detection.py for ruff ([e6f5d11](https://github.com/BlazeUp-AI/Observal/commit/e6f5d1106361475c25271bd51715b68d02770e99))
+- fix ruff format violations in agent_config_generator and cmd_pull ([7128f79](https://github.com/BlazeUp-AI/Observal/commit/7128f79625f5339dd568a4cdfbd6ab956cf47b90))
+- apply ruff format to test_eval_phase8.py ([edce7e6](https://github.com/BlazeUp-AI/Observal/commit/edce7e6957d49fded1238426e0ef3401cd2669af))
+- apply ruff format to changed files ([e9967d8](https://github.com/BlazeUp-AI/Observal/commit/e9967d83d484a0c47a3900885352988069fc3dc7))
+- move eval services and tests into subpackages (**eval**) ([82b935a](https://github.com/BlazeUp-AI/Observal/commit/82b935aaaab5ff345fb63f8b528d74477ebcdcdf))
 ### Documentation
+- update quick start with curl-install and move license to bottom ([d1b4dfa](https://github.com/BlazeUp-AI/Observal/commit/d1b4dfa2f07f645111086d5b957d9b8ed3e1a9d3))
+- fix support bundle docs to match implementation ([5ace152](https://github.com/BlazeUp-AI/Observal/commit/5ace1528505828edd2b5d75116fe1c6222d33996))
+- add CLI reference for support bundle commands ([59c661e](https://github.com/BlazeUp-AI/Observal/commit/59c661e206b75acac76d2fde576606e97ee45081))
+- move AnkiDroid callout before ToC and expand attribution note ([0c890be](https://github.com/BlazeUp-AI/Observal/commit/0c890be4f1f419b0c21e69f22a711f48a9a69e70))
+- add CLA and update CONTRIBUTING.md ([b9e7ae8](https://github.com/BlazeUp-AI/Observal/commit/b9e7ae8934a98f3157d88b842ee8671f4eaf20aa))
+- update docs link, CLI examples, and fix self-hosting diagram ([c9dcb78](https://github.com/BlazeUp-AI/Observal/commit/c9dcb78526a80032b29e37e3e74d747d8c856992))
+- add CLI reference for observal migrate commands ([ad9c1c2](https://github.com/BlazeUp-AI/Observal/commit/ad9c1c2f4a3f2efa9f85d11e555314ff9c31e440))
+- overhaul README, SETUP, AGENTS, add screenshots, drop e2e artifacts ([ca435f5](https://github.com/BlazeUp-AI/Observal/commit/ca435f5df8eb061899c2c4c31727a2bc1e25bb5a))
+- add Insights V2 roadmap tracking progress across 5 phases ([fe037d5](https://github.com/BlazeUp-AI/Observal/commit/fe037d5c616e7215a135aa2fe4d148e2b93ab6a1))
+- update AGENTS.md with new routes, services, and components ([dc5f1aa](https://github.com/BlazeUp-AI/Observal/commit/dc5f1aa1a48cc705d18b91e3159bc2a3de2be7a2))
+- update e2e checklist with versioning, editing, and trace toggle tests ([c72c9d3](https://github.com/BlazeUp-AI/Observal/commit/c72c9d31312f70d70970611c8bc86e6c25f81479))
+- add screenshots for agent edit form PR ([7860394](https://github.com/BlazeUp-AI/Observal/commit/786039462ee8ffa626c461040e2066967869df6b))
+- update stale docstring references to claude_code_spec ([e00e193](https://github.com/BlazeUp-AI/Observal/commit/e00e1930240eddabf2a9e583e59c0eda3f378434))
+- update for single-endpoint architecture ([861a3cf](https://github.com/BlazeUp-AI/Observal/commit/861a3cf6fc1cf060e1c92a69c8ea08ded3295ef4))
+- add copilot-cli integration guide ([c459254](https://github.com/BlazeUp-AI/Observal/commit/c459254ee837e396e9d8dc3a9fc8b3c40d7c4cb6))
 - update integration docs for hook bridge (**gemini**) ([a2d7d9a](https://github.com/BlazeUp-AI/Observal/commit/a2d7d9a6b5a84bd2bedebcdefe6e60e866fc6be6))
 - add enterprise E2E test checklist ([4ba96ba](https://github.com/BlazeUp-AI/Observal/commit/4ba96ba0bd297e8dfbd0742c8bdcec7855c1b51b))
 - switch Docker callouts from [!IMPORTANT] to [!NOTE] ([087f66c](https://github.com/BlazeUp-AI/Observal/commit/087f66cffc4f473c56c9cdadca364ee1529c3110))
@@ -1242,9 +970,238 @@ All notable changes to this project will be documented in this file.
 - update CLI reference, README, and changelog for multi-IDE support ([27343ac](https://github.com/BlazeUp-AI/Observal/commit/27343acbb5d1593be2aefb78d92b301c70dc62d1))
 - add screenshots for review queue features (#449) ([995eef4](https://github.com/BlazeUp-AI/Observal/commit/995eef4dd94c14f7e3aa602d0bce9d5a05c61430))
 - add self-observability documentation ([fd6413c](https://github.com/BlazeUp-AI/Observal/commit/fd6413c6b25a523730ec6bc78d32fbcb5c3b4818))
+- add design spec for agent unarchive feature (#396) ([4cf0bf1](https://github.com/BlazeUp-AI/Observal/commit/4cf0bf1ae5c2d1db21782f683b8310f1e4c07ce3))
+- add IDE support tiers, remove telemetry hook refs from docs ([fdb3b41](https://github.com/BlazeUp-AI/Observal/commit/fdb3b413fb4556a0cbb0ff8f4e48864dc7f9f570))
+- add IDE support tiers, remove hook references from docs ([336018f](https://github.com/BlazeUp-AI/Observal/commit/336018f733ba464250d56bea84b6fe95c96fa0c7))
+- add eval subsystem reference (docs/eval.md) ([739fe03](https://github.com/BlazeUp-AI/Observal/commit/739fe03fb2f979e24bdd12e359f0e4cf3c2cdbcd))
+- add READMEs for observal-server, ee, tests, and observal_cli ([9c39e49](https://github.com/BlazeUp-AI/Observal/commit/9c39e491bf6de42cca00d7a41730ec52902811e7))
+- replace boilerplate README with frontend reference (**web**) ([31eed93](https://github.com/BlazeUp-AI/Observal/commit/31eed93a2c55e4e4cd6cbab3efe2476d0bf6bc90))
 ### Fixed
+- correct sentinel timestamp causing broken duration/started columns (**traces**) ([56733af](https://github.com/BlazeUp-AI/Observal/commit/56733af5d0ed0361eea48baa7273158625c521e1))
+- stub page and hide from sidebar pending rework (**errors**) ([7ccf37b](https://github.com/BlazeUp-AI/Observal/commit/7ccf37b57d84e05a2efac59cf9b52d99345f142d))
+- replace import-based detection with INSIGHTS_AVAILABLE env flag (**insights**) ([d822993](https://github.com/BlazeUp-AI/Observal/commit/d82299371690c6cec3d214cbef09da6fb14fbc34))
+- resolve pre-commit and pre-push hook failures ([236f9c1](https://github.com/BlazeUp-AI/Observal/commit/236f9c1081d337fd7b5a2de16d6d74ecbbbefea8))
+- wire token counts and correct duration in session list ([7719683](https://github.com/BlazeUp-AI/Observal/commit/7719683887a0d2573ee0783f46a9b3860671f1c1))
+- use sessionStorage for access token in loginToWebUI helper (**e2e**) ([4d39d12](https://github.com/BlazeUp-AI/Observal/commit/4d39d12148611f478ba7108ee76e9487bbe98588))
+- replace nonexistent observal-hook.sh with session_push.py (**hooks**) ([77014e6](https://github.com/BlazeUp-AI/Observal/commit/77014e61ddf3207400ed1305bd5e88b2ace5a1e3))
+- stop enterprise compose file from overriding DEPLOYMENT_MODE ([08e317d](https://github.com/BlazeUp-AI/Observal/commit/08e317d00bb73c6166faaf754b5bae5050e890bc))
+- login page respects ?next= param after authentication ([0acca4b](https://github.com/BlazeUp-AI/Observal/commit/0acca4b2aef48136b845d240b1015d7c8f3d995c))
+- migrate JWT signing from HS256 to ES256 (**security**) ([e562524](https://github.com/BlazeUp-AI/Observal/commit/e56252495d9e6297ca29dfc3064032ad77f0d93d))
+- user-level token revocation and Redis fail-closed auth (**security**) ([899fa0c](https://github.com/BlazeUp-AI/Observal/commit/899fa0c910086f93754c8e69dac4f098ef4c476a))
+- update remaining localStorage reads to sessionStorage for access token ([71feea2](https://github.com/BlazeUp-AI/Observal/commit/71feea2e2ff2fe3f082dd9060088792f39760d31))
+- enforce org ownership on component source routes (**security**) ([2f9dbcb](https://github.com/BlazeUp-AI/Observal/commit/2f9dbcb97c7c50e7bf51b0fa819b1a1334c01323))
+- scope admin dashboard and telemetry queries to requesting user's org (**security**) ([afe13b1](https://github.com/BlazeUp-AI/Observal/commit/afe13b16a3760c851fe24aeb9b7cd8e951e67c5d))
+- private agents not visible to anonymous callers in local mode (**security**) ([78d465f](https://github.com/BlazeUp-AI/Observal/commit/78d465f52c0dc2c137628de0497301af14b9f7b9))
+- scope private registry listings to owner org (**security**) ([af993b0](https://github.com/BlazeUp-AI/Observal/commit/af993b04dca6db3fe8e60b21165bdf10e5dc1021))
+- require authentication on GraphQL telemetry endpoint (**security**) ([ed65c9e](https://github.com/BlazeUp-AI/Observal/commit/ed65c9eda6d4dbe188747123f4a6b78354c1c72c))
+- block startup with weak SECRET_KEY, warn on insecure defaults in settings (**security**) ([a22ec35](https://github.com/BlazeUp-AI/Observal/commit/a22ec35d325082bb1966d6f367624003448515f6))
+- enforce password strength on account creation and change (OBSV-SEC-006) (**security**) ([cc65f9f](https://github.com/BlazeUp-AI/Observal/commit/cc65f9f0f33e73664672c61820071b96b256da71))
+- add 'unsafe-inline' to CSP script-src for Next.js hydration ([15dcaf8](https://github.com/BlazeUp-AI/Observal/commit/15dcaf8e183c7c4a5d68523864c6d23ec1c3082f))
+- hide OpenAPI docs and metrics endpoints by default (OBSV-SEC-015) (**security**) ([c338b88](https://github.com/BlazeUp-AI/Observal/commit/c338b88f8e43cbdc91de07f846f06710496d3c80))
+- require approved status for agent install, validate MCP commands (OBSV-SEC-027) (**security**) ([5b6a3a0](https://github.com/BlazeUp-AI/Observal/commit/5b6a3a0852c277dc5eeb9dc4838203b2e40a9247))
+- block password lifecycle routes in SSO-only mode (OBSV-SEC-028) (**security**) ([298cc09](https://github.com/BlazeUp-AI/Observal/commit/298cc090c60a11bd9a97f5b1b9428760f51e2265))
+- rate limiting only trusts XFF from configured trusted proxies (OBSV-SEC-003) (**security**) ([1b9f087](https://github.com/BlazeUp-AI/Observal/commit/1b9f08741256a98dca7499a3ca3fad1e79b750c9))
+- address PR review feedback ([007e05c](https://github.com/BlazeUp-AI/Observal/commit/007e05cc626c46c8bd0d16542487d5635178eca4))
+- add SPDX header and suppress bandit false positive (**ci**) ([a2efe47](https://github.com/BlazeUp-AI/Observal/commit/a2efe476cb1b8f837f10a7ac03ac4b543657da41))
+- renumber insight migration 0004 -> 0005 (**alembic**) ([050a8c2](https://github.com/BlazeUp-AI/Observal/commit/050a8c24ee63c3b5e8b80088bb13287fafcd4dc2))
+- CSP middleware and access token in sessionStorage (OBSV-SEC-025) (**security**) ([1040029](https://github.com/BlazeUp-AI/Observal/commit/10400295015f6a398e60901bb98bf2e7d34dbaa4))
+- harden EC2 bootstrap script (OBSV-SEC-020) (**security**) ([d230bf0](https://github.com/BlazeUp-AI/Observal/commit/d230bf081b281be00e506d1c0629d47369968915))
+- block operational paths at ALB by default (OBSV-SEC-018) (**security**) ([0b35ccf](https://github.com/BlazeUp-AI/Observal/commit/0b35ccfae02fbc7b94dc4a0c30a6411e2b92b455))
+- block operational metadata paths in nginx (OBSV-SEC-017) (**security**) ([4a430ab](https://github.com/BlazeUp-AI/Observal/commit/4a430ab80e2a0f24b228b6636d95a3dce70b7baf))
+- centralise SSRF guard for webhooks, git clone, MCP analysis (OBSV-SEC-012/013/014) (**security**) ([b78dc96](https://github.com/BlazeUp-AI/Observal/commit/b78dc96b4fc11b0260445c82081567497c87100a))
+- allow MCP config fields in version extras validation (**api**) ([831a0d1](https://github.com/BlazeUp-AI/Observal/commit/831a0d14624545a14dbb2bc4bc9b6686f8039662))
+- emit JSON-RPC error notification on MCP startup failure (**shim**) ([4b64b5e](https://github.com/BlazeUp-AI/Observal/commit/4b64b5e18eff18627f24049657fec040ddea757c))
+- bind stateful services to loopback in Docker Compose (OBSV-SEC-016) (**security**) ([6dbcfac](https://github.com/BlazeUp-AI/Observal/commit/6dbcfac2ad69af80ec69e3c4ea32c9ee0d69c694))
+- include auth identity in cache key to prevent cross-user hits (OBSV-SEC-023) (**security**) ([cd3acf6](https://github.com/BlazeUp-AI/Observal/commit/cd3acf6a8e131f9e9f5fb06d213ce0adf6e8c5b6))
+- redact secrets from support log collector output (OBSV-SEC-022) (**security**) ([7a27288](https://github.com/BlazeUp-AI/Observal/commit/7a27288102be0fe34be25418d4329257467f8abc))
+- redact secrets before sending content to LLM providers (OBSV-SEC-021) (**security**) ([19ac039](https://github.com/BlazeUp-AI/Observal/commit/19ac0397d2c222ab760329b01eefdddac6c712c2))
+- require auth on telemetry reconcile endpoint (OBSV-SEC-011) (**security**) ([9f275df](https://github.com/BlazeUp-AI/Observal/commit/9f275df2cc66224b2560e26fa4b5ab5972f3adab))
+- restrict support diagnostics to admin role (OBSV-SEC-008) (**security**) ([4ed0883](https://github.com/BlazeUp-AI/Observal/commit/4ed08833c822aad9c97c6a1e5a2349328f73effd))
+- apply execution time floor to every ClickHouse query (OBSV-SEC-026) (**security**) ([b1d80bd](https://github.com/BlazeUp-AI/Observal/commit/b1d80bd657b16f1a80850380d2168e20ec910d37))
+- validate session IDs before SQL interpolation in shim enrichment (**security**) ([66ca3d0](https://github.com/BlazeUp-AI/Observal/commit/66ca3d02439e845d028d59c4e7d5d5799babed6d))
+- use FINAL instead of GROUP BY for session_stats_agg (**server**) ([ce8069b](https://github.com/BlazeUp-AI/Observal/commit/ce8069bea89238b2471e6018c1dbe13fa0aece65))
+- default to ~/.observal on macOS for Docker compatibility (**deploy**) ([119aed3](https://github.com/BlazeUp-AI/Observal/commit/119aed3127ee4847ce146785816386656feb87ee))
+- add OBSERVAL_FORCE=1 to skip overwrite prompt (**deploy**) ([9910a94](https://github.com/BlazeUp-AI/Observal/commit/9910a94a353a2ecdf654f6842cb5478eb5d99563))
+- read from /dev/tty so curl|bash works interactively (**deploy**) ([4bc203b](https://github.com/BlazeUp-AI/Observal/commit/4bc203bbaf4b0b16f46078700e0783098ae2b103))
+- preserve SPDX headers in generated changelog (**compliance**) ([636a359](https://github.com/BlazeUp-AI/Observal/commit/636a359b3fafb4d4cd17223f3bc8220937f10a1d))
+- improve setup.sh post-install output (**deploy**) ([6884923](https://github.com/BlazeUp-AI/Observal/commit/6884923078e1647b0f12735f2e43b291c41c8270))
+- add SPDX copyright headers to support.md (**compliance**) ([6c358bd](https://github.com/BlazeUp-AI/Observal/commit/6c358bdb58654f9f8b179fa27ffed8e062e79fe0))
+- resolve CircularDependencyError in review approve endpoint ([a17b435](https://github.com/BlazeUp-AI/Observal/commit/a17b435a5aa42a08da8681747e3da47f1ef0deb6))
+- wrap SPDX string in REUSE-Ignore to fix reuse-lint (**ci**) ([cef600f](https://github.com/BlazeUp-AI/Observal/commit/cef600ffaec97a10b82ca22bbcb3faa13a513d26))
+- move coverage config to observal-server/pyproject.toml (**ci**) ([9ef4f1c](https://github.com/BlazeUp-AI/Observal/commit/9ef4f1cf985c21c17b86c57c30209ec512732b9e))
+- add version tables to INSERT_ORDER and disable FK checks during import ([9943142](https://github.com/BlazeUp-AI/Observal/commit/9943142224970e0b196c2b3c1c77b36070faab91))
+- remove unused import and fix license-policy formatting (**ci**) ([b76831d](https://github.com/BlazeUp-AI/Observal/commit/b76831dbccf075d29f2682cb86a9e569066e36e5))
+- replace magic values with named constants in deps.py (**lint**) ([f7ff034](https://github.com/BlazeUp-AI/Observal/commit/f7ff0349ad726a221702218271c43837ff2537f5))
+- resolve SimpleAggregateFunction query errors in session_stats_agg (**clickhouse**) ([b6bdd99](https://github.com/BlazeUp-AI/Observal/commit/b6bdd99fc907157ea1841c368996de3087f71ddf))
+- update postgres volume mount for v18 compatibility (**docker**) ([93c0600](https://github.com/BlazeUp-AI/Observal/commit/93c060078f3eb3234b21d24278f807ce9619a2ff))
+- trigger EC2 deploy on push to main instead of tags (**deploy**) ([6cda8b1](https://github.com/BlazeUp-AI/Observal/commit/6cda8b18250a3b8eb719c2f64d73a847f19fc2da))
+- trigger EC2 deploy on push to main instead of tags (**deploy**) ([cb7bae4](https://github.com/BlazeUp-AI/Observal/commit/cb7bae4963ea3b3654417c62f666447225213679))
+- replace all Apache 2.0 references with AGPL-3.0 ([66abe34](https://github.com/BlazeUp-AI/Observal/commit/66abe34ddb19d779eeb75174aa7038192f60105b))
+- update redis image assertion to 8-alpine (**tests**) ([7da9551](https://github.com/BlazeUp-AI/Observal/commit/7da955197387f74d2fbedc3fcdf57f24c844eabc))
+- capture post-Stop tail lines via delayed flush subprocess (**cli**) ([357fdee](https://github.com/BlazeUp-AI/Observal/commit/357fdeeb356784242097f95b6b3713cf4d99f64c))
+- exclude subagent sessions from top-level list (**sessions**) ([ac0052c](https://github.com/BlazeUp-AI/Observal/commit/ac0052c8d3b54ed4b90bee2ab7d823eace3469f3))
+- auto-refresh expired tokens in session_push hook (**cli**) ([6ba62cd](https://github.com/BlazeUp-AI/Observal/commit/6ba62cdb6e214166c9b86fa7d9c6e727beae23a7))
+- resolve ClickHouse ILLEGAL_AGGREGATION in session query (**insights**) ([d9e72aa](https://github.com/BlazeUp-AI/Observal/commit/d9e72aa466684fde340e0dfa50c9dfa974ea0fec))
+- ruff fixes in ee/observal_insights (**lint**) ([39da878](https://github.com/BlazeUp-AI/Observal/commit/39da8782b4f5f3ed3b03f68ad51be65118ee1825))
+- use cursor offset not ctime for pulled_at guard (**attribution**) ([afcfccc](https://github.com/BlazeUp-AI/Observal/commit/afcfcccce06c29469780b4e1b2d5b52c890a7964))
+- remove unused imports, use datetime.UTC alias (**lint**) ([05db9db](https://github.com/BlazeUp-AI/Observal/commit/05db9db96e228bb73fbbcc3658c89f8b1603a10c))
+- renumber meta_cache migration to 0003 (**migration**) ([2dd2e2a](https://github.com/BlazeUp-AI/Observal/commit/2dd2e2a182b4d22987d7ca1c89c5e4e736db0459))
+- prevent session leak via pulled_at timestamp (**attribution**) ([77e7ce8](https://github.com/BlazeUp-AI/Observal/commit/77e7ce89569f0872e73e86932acab824b9c483e3))
+- update web frontend (minor/patch) (#779) (**deps**) ([a9b3722](https://github.com/BlazeUp-AI/Observal/commit/a9b37224e053836b86bf8f480b429f0e782ec5f3))
+- include per-IDE model overrides in agent snapshot and pull flow ([a048910](https://github.com/BlazeUp-AI/Observal/commit/a048910ee18d8998b68e2a19e4db321e91a7628a))
+- use 2099 sentinel timestamp for kiro_credits row (**kiro**) ([5804c15](https://github.com/BlazeUp-AI/Observal/commit/5804c1500250771cbf793d757a3d6be075c88e57))
+- proper Callable type for _EXTRA_ROWS_HANDLERS (**types**) ([959ca3b](https://github.com/BlazeUp-AI/Observal/commit/959ca3be3789dc0a2293c27a6f9d6fbdefa7edbd))
+- store credits even when Stop has no new JSONL lines (**kiro**) ([b9d8284](https://github.com/BlazeUp-AI/Observal/commit/b9d8284bc6edd3636bfd8d5117ba7822028db949))
+- fix credits not being sent on Stop hook (**kiro**) ([75597f0](https://github.com/BlazeUp-AI/Observal/commit/75597f0af0ccb0003a7bc94ea50f37b216f1bf1a))
+- remove stale CLI usage docstring (**reconcile**) ([27bbd66](https://github.com/BlazeUp-AI/Observal/commit/27bbd66d9734a2cab66fefd777cdcfa424505b33))
+- restore --hook/--shim/--all flags and shim helpers (**doctor**) ([fdfc0b8](https://github.com/BlazeUp-AI/Observal/commit/fdfc0b89738486f475275c040453772890a3874e))
+- replace --all with --hook in doctor patch calls (**auth**) ([3ba67dd](https://github.com/BlazeUp-AI/Observal/commit/3ba67dde79e44f5b2a69c063a162bd978299fab2))
+- fix ruff unused imports, remove stale telemetry tests (**lint+tests**) ([34e4b16](https://github.com/BlazeUp-AI/Observal/commit/34e4b1617c1c49cf9c1dad92666c4659d394f723))
+- remove Active Hooks section + sentinel-safe stats (**traces**) ([f1341ff](https://github.com/BlazeUp-AI/Observal/commit/f1341ff0ef83463c6e9de8c33b01c00df485ac02))
+- sentinel-safe first timestamp in trace title/breadcrumb (**ui**) ([1067087](https://github.com/BlazeUp-AI/Observal/commit/10670878041545087a3bd380adcc3174b2256456))
+- filter kiro_credits events + unify token accumulation (**traces**) ([5f0fc42](https://github.com/BlazeUp-AI/Observal/commit/5f0fc427dd612c9c520f8fa7a6a2ef670e6cec5a))
+- add session_parser key to CLI ide_registry mirror (**ingest**) ([e07a4ba](https://github.com/BlazeUp-AI/Observal/commit/e07a4ba93abcec5bb4b7050f05ab2c39f34405c6))
+- apply ruff formatting to hook submit (**cli**) ([ebe53f1](https://github.com/BlazeUp-AI/Observal/commit/ebe53f108b097d703bcb8487049bc38ee009df33))
+- handle invalid JSON in `hook submit` handler config prompt (**cli**) ([7b2469e](https://github.com/BlazeUp-AI/Observal/commit/7b2469eb2b8c5f88ad38c3944f8165762682576e))
+- auto-populate Owner field in all submit forms (**registry**) ([1700c63](https://github.com/BlazeUp-AI/Observal/commit/1700c63f3790c9229954a2a95af488508c21057c))
+- display rate limit error properly on login page (**web**) ([c632ad6](https://github.com/BlazeUp-AI/Observal/commit/c632ad67ba7db05c7342dfdf786adb7ce9f71e3c))
+- remove session ID from all user-facing views (**ui**) ([38ab52b](https://github.com/BlazeUp-AI/Observal/commit/38ab52bd8cba0b1445837955d73e7eea00a9af87))
+- full screen utilization and flex wrap issues (**insights**) ([caae785](https://github.com/BlazeUp-AI/Observal/commit/caae7858ae042d6e4f1e51b906804f335d7c368b))
+- remove dead metrics endpoints and legacy telemetry tables (**dashboard**) ([27cb6a8](https://github.com/BlazeUp-AI/Observal/commit/27cb6a8bd6793220278427d2da4ba496ae52e081))
+- pin pnpm@10 to fix ERR_PNPM_IGNORED_BUILDS in CI (**docker**) ([2313e19](https://github.com/BlazeUp-AI/Observal/commit/2313e19565a1d48bf191a7282f4eba3c0261183d))
+- resolve lint, import-boundary, and docker-build failures (**ci**) ([1850779](https://github.com/BlazeUp-AI/Observal/commit/1850779482589b1debe4c180b166a2fef0bc1af4))
+- align session_cache and facets with actual DB schema (**insights**) ([eeef3fa](https://github.com/BlazeUp-AI/Observal/commit/eeef3faa1ed86d6aa43f99ab4a0e8a3ce5dfc86c))
+- add TTL retention for system logs to prevent OOM (**clickhouse**) ([2224992](https://github.com/BlazeUp-AI/Observal/commit/22249920659e416b91a854283b5fc7bf89bd08e8))
+- docs & add bootstrap ([5feb50e](https://github.com/BlazeUp-AI/Observal/commit/5feb50e225d575a388efea49f70f0661ca7f0a31))
+- remove unused locals flagged by tflint (**infra**) ([11239fa](https://github.com/BlazeUp-AI/Observal/commit/11239fa7c377a65d0a8cc4ba695364334f189821))
+- resolve lint, format, and test failures (**ci**) ([dc0a89e](https://github.com/BlazeUp-AI/Observal/commit/dc0a89ed3e5e9c642a951b8a2c5360fc13256d45))
+- restore trace_dedup module needed for session detail view (**sessions**) ([28095bc](https://github.com/BlazeUp-AI/Observal/commit/28095bcfa6b4db739aa2ac800410be491b56dad2))
+- call configure_insights() on worker startup (**worker**) ([8a59c3d](https://github.com/BlazeUp-AI/Observal/commit/8a59c3d189e84ace7eeaf1c5e8268558627b0315))
+- strip insights source post-install instead of pre-build (**docker**) ([b47578b](https://github.com/BlazeUp-AI/Observal/commit/b47578b1db05d5b42747591d73ee162e4e0a176b))
+- sum credits in sessions list instead of picking arbitrary value ([8df012d](https://github.com/BlazeUp-AI/Observal/commit/8df012d0786672a91788645f5d4ba9c87ce12fb3))
+- read credits from Kiro session files instead of SQLite ([fbd6678](https://github.com/BlazeUp-AI/Observal/commit/fbd6678bfff0d2bb32f2a9e809fbfe50e47a8a34))
+- use absolute Python path in Kiro hook commands ([38ef120](https://github.com/BlazeUp-AI/Observal/commit/38ef1202ac4500cff0475b4df0b2f6ccda57a8ea))
+- show prompt count fallback and rewrite hook python paths (**kiro**) ([e32c48e](https://github.com/BlazeUp-AI/Observal/commit/e32c48e4227ef08757c1d4e58250eba732cdeadb))
+- persist session_id between Kiro hooks and add debug logging (**hooks**) ([f9c1c28](https://github.com/BlazeUp-AI/Observal/commit/f9c1c284e1a5b5c7c1ba5ff75781cbb84c09fdc9))
+- allow super_admin to manage agents regardless of org_id (**agents**) ([0be9d76](https://github.com/BlazeUp-AI/Observal/commit/0be9d76196fe20d2693790654e935081191f4ec6))
+- set owner_org_id and public visibility on bulk-create (**agents**) ([29222c9](https://github.com/BlazeUp-AI/Observal/commit/29222c9b96d75649948a958a14dc3e85888b6eb4))
+- correct setup steps — use doctor patch, remove local server section (**docs**) ([9de5581](https://github.com/BlazeUp-AI/Observal/commit/9de55819751e3169dc26ab99463a393d4c1c0182))
+- use short summary in skill file YAML frontmatter (**skills**) ([3819631](https://github.com/BlazeUp-AI/Observal/commit/38196310bcde75ec22d7f18c2432327f0bab02a6))
+- remove AWS env var overrides that clobber .env credentials (**docker**) ([17f3fbb](https://github.com/BlazeUp-AI/Observal/commit/17f3fbb01178f0e0006ce07b7196c41346a31a87))
+- derive component downloads from agent installs (#736) (**leaderboard**) ([823dd77](https://github.com/BlazeUp-AI/Observal/commit/823dd77e0c4ba8586cc05d81a5226038da0cf12c))
+- hide notifications stub from account settings (**web**) ([2a11947](https://github.com/BlazeUp-AI/Observal/commit/2a119473220919bb9fa9558757bb160170bb44a3))
+- flush version changes before updating latest_version_id (**review**) ([0a7253d](https://github.com/BlazeUp-AI/Observal/commit/0a7253dc81fe2d31e5f000568fe5596f21726a40))
+- update web frontend (minor/patch) (#576) (**deps**) ([ce578e4](https://github.com/BlazeUp-AI/Observal/commit/ce578e410bb549f12f816316b205b3327d83a251))
+- use persistent SSL config so merges stop breaking HTTPS (**deploy**) ([9f50890](https://github.com/BlazeUp-AI/Observal/commit/9f5089049bde8e0ee2840edaf2246dd7eb393840))
+- version-aware component review queue, detail, and actions (**review**) ([a4aef71](https://github.com/BlazeUp-AI/Observal/commit/a4aef7174a9975b6a4ad6a726cab83ab86d298fa))
+- inject prompt component templates into generated rules files (**agent-install**) ([c5114b8](https://github.com/BlazeUp-AI/Observal/commit/c5114b8e5155173c5912622dbb05e96da28c6ff0))
+- only infer frontend URL behind TLS proxy, not local nginx (**api**) ([e82be65](https://github.com/BlazeUp-AI/Observal/commit/e82be65634c34e67ac5d13d31a3b26a983a8190f))
+- only owners and co-maintainers can edit their agents (**agent-edit**) ([45fbf1a](https://github.com/BlazeUp-AI/Observal/commit/45fbf1ab1e56e2afe0764ab0505617d4f36dd33d))
+- allow admins to release versions, save draft as new version (**agent-edit**) ([78d2878](https://github.com/BlazeUp-AI/Observal/commit/78d28789d4b2166199a6a07b9b0c207f310f6c0d))
+- derive device auth verification URL from request headers (**api**) ([2d7373a](https://github.com/BlazeUp-AI/Observal/commit/2d7373a2b9415887ea0a942fa1a6388dd1dbcb66))
+- fix empty component board, TS build, sandbox type (**leaderboard+feedback**) ([1c7a719](https://github.com/BlazeUp-AI/Observal/commit/1c7a71910cba612b6697b625049f72cf5432b89c))
+- remove f-string without placeholder, use ternary (**lint**) ([31c5898](https://github.com/BlazeUp-AI/Observal/commit/31c5898234519e9d7a6f6e9532f9f1c01996d299))
+- materialize hook components into Kiro agent configs (**hooks**) ([8d3508e](https://github.com/BlazeUp-AI/Observal/commit/8d3508e3585dcbe30dd073697f683e419a4b6799))
+- allow regular users to unarchive their own agents (**agents**) ([04adb4e](https://github.com/BlazeUp-AI/Observal/commit/04adb4e1d31e3833cc33ecea34ee6302fe11e9c6))
+- allow unarchive/delete to find non-approved agents (**agents**) ([4915a9c](https://github.com/BlazeUp-AI/Observal/commit/4915a9c1175ea1a4c23ac269019b831acd4252da))
+- write skill files to disk during agent pull (**cli**) ([f848842](https://github.com/BlazeUp-AI/Observal/commit/f84884288462d3c5319b5ecabad0023980f3b131))
+- grant same-org users view access to all org agents (**agents**) ([0c6e808](https://github.com/BlazeUp-AI/Observal/commit/0c6e808df9b58da305cf5a6b9a28f88d90212fb9))
+- allow same-org users to see all org agents (**agents**) ([43b5132](https://github.com/BlazeUp-AI/Observal/commit/43b51329e0a731e48f4068cbee0c582fffa24862))
+- wire hook components into agent config generation (**agents**) ([a738e39](https://github.com/BlazeUp-AI/Observal/commit/a738e39d0af6a3a5eb817e4d5c695bc15bb94b6c))
+- use posix paths for hook scripts on Windows (**cli**) ([13f5228](https://github.com/BlazeUp-AI/Observal/commit/13f5228f8de72ccf58aad80294e75a0591413ede))
+- rename "My Submissions" to "Drafts" on agents page (**web**) ([7b69959](https://github.com/BlazeUp-AI/Observal/commit/7b699599ac9c3d12e40ee52ba4e3fdd47b0625f6))
+- prevent archiving non-approved agents, show archived in my agents (**agents**) ([6fd60fd](https://github.com/BlazeUp-AI/Observal/commit/6fd60fdaafd0dfa54439de5fc2c60f823aeaa1b8))
+- allow null git_url in manifest export (**agents**) ([8c97332](https://github.com/BlazeUp-AI/Observal/commit/8c97332830ef9e94596705d631f6ad46a9a165b9))
+- exclude archived agents from pending review count (**web**) ([228f6ad](https://github.com/BlazeUp-AI/Observal/commit/228f6ad25aaef54a0dedb0573e0ee1f2608ba970))
+- resolve_listing status filter joins through version table (**registry**) ([8ad9f4d](https://github.com/BlazeUp-AI/Observal/commit/8ad9f4d810dfb50f8d643abd60a5b78fe8e66f19))
+- handle Unicode output on Windows cp1252 consoles (**cli**) ([05181f6](https://github.com/BlazeUp-AI/Observal/commit/05181f6d2176c28abbfb1c210dc0aa709108184a))
+- use explicit SQL update for archive/unarchive status (**agents**) ([198ad36](https://github.com/BlazeUp-AI/Observal/commit/198ad36cc0dcbe465d4d466c6dcb634fa4c02544))
+- default visibility to public in local deployment mode (**agents**) ([e380f2c](https://github.com/BlazeUp-AI/Observal/commit/e380f2c52a4e8591819d43ea5381674f905c9537))
+- resolve duplicate Alembic revision 0023 causing deploy failure (**db**) ([d99ec31](https://github.com/BlazeUp-AI/Observal/commit/d99ec31fca620e314b53af9888fb568444f25aac))
+- remove max-width constraint and add min-w-0 for flex scaling (**web**) ([b7c4ef3](https://github.com/BlazeUp-AI/Observal/commit/b7c4ef3c8131d3d061f314a0378226a121b35f59))
+- set edit-lock fields on agent mock to prevent TypeError (**tests**) ([22a2a93](https://github.com/BlazeUp-AI/Observal/commit/22a2a930d8ad8d678b3d79d172b5664a4581fc25))
+- harden edit lock concurrency and review correctness (**api,cli,web**) ([eb9cd6a](https://github.com/BlazeUp-AI/Observal/commit/eb9cd6a3512eee3cea1186aabb6fadd96fb5d57c))
+- resolve lint errors and test failures from edit lock feature (**api**) ([f335927](https://github.com/BlazeUp-AI/Observal/commit/f335927afec215098deccfbb462292fc3961d826))
+- harden edit lock, review approve/reject, and error handling (#663) (**api,web**) ([3b80fae](https://github.com/BlazeUp-AI/Observal/commit/3b80faeef04283c57852960ccd7e4a1ff691c5f2))
+- harden component version validation (**api**) ([3412812](https://github.com/BlazeUp-AI/Observal/commit/341281257781b666ac93c1f2cdaa96d2a4eca303))
+- update e2e assertions for new hook_bridge features and agent paths (**tests**) ([e0ff08e](https://github.com/BlazeUp-AI/Observal/commit/e0ff08ed6d671c75fd2f2a04fef6d489cf093668))
+- cache race condition, unbounded memory, and repeated HTTP calls ([4fc41f0](https://github.com/BlazeUp-AI/Observal/commit/4fc41f00861f240890dc0be9f941040b0375ccb8))
+- update copilot rules_file path assertion (**tests**) ([12a342a](https://github.com/BlazeUp-AI/Observal/commit/12a342abe64d37bdbe4b96b2d35f944be778e4a5))
+- resolve hook paths for all IDEs, not a hardcoded subset (**cli**) ([86a75ee](https://github.com/BlazeUp-AI/Observal/commit/86a75ee323f68cc6db3991d476efaa7524d883c2))
+- raise 401 for expired tokens in optional_current_user (**auth**) ([ed2862c](https://github.com/BlazeUp-AI/Observal/commit/ed2862cad4bb784f617ed0254c105817d1802d08))
+- add trim() to /take and /drop to handle trailing whitespace (**ci**) ([7e4b180](https://github.com/BlazeUp-AI/Observal/commit/7e4b180ac9ea54d7a9bc50b9adc2020ae0504126))
+- resolve agent version approve CircularDependencyError (**api**) ([9bc3ce2](https://github.com/BlazeUp-AI/Observal/commit/9bc3ce20cd9eb0c488d755104979a5e25c66d813))
+- flush version status before promoting latest_version_id (**review**) ([4471a7d](https://github.com/BlazeUp-AI/Observal/commit/4471a7d574e4c628843f2b4a38e5b3050c656329))
+- use short model names in frontmatter instead of stripped IDs (**config**) ([5147d33](https://github.com/BlazeUp-AI/Observal/commit/5147d33b2cda99a0e6f3bf2d57b827cf799b9215))
+- approve/reject agent by pending version, not latest_version (**review**) ([b868453](https://github.com/BlazeUp-AI/Observal/commit/b868453e4add9d8ccc5aeabd9408ca100ea23688))
+- migrate update_draft to version-scoped component columns (**agent**) ([e9875cf](https://github.com/BlazeUp-AI/Observal/commit/e9875cf566ce4bd304f9a41ddb0f4c315781c996))
+- pass full model ID instead of short name in frontmatter (**config**) ([bee95bd](https://github.com/BlazeUp-AI/Observal/commit/bee95bd0738c9bbdeffe98a0c17f4614222123d2))
+- use agent's stored model_name as fallback in config generator (**config**) ([3ffb739](https://github.com/BlazeUp-AI/Observal/commit/3ffb7396dd122e13fed2af8cf31f285f3fa32719))
+- handle cross-version import and include all ClickHouse tables in deep copy (#681) (**migrate**) ([832166a](https://github.com/BlazeUp-AI/Observal/commit/832166a3423b9a1db4bcc81a10c568cde63b2e47))
+- stop traces after logout by revoking tokens server-side (#668) (**auth**) ([e1c6a50](https://github.com/BlazeUp-AI/Observal/commit/e1c6a50395d599d56ffc3170ca1ac6174de9e812))
+- resolve agent names via server instead of stale local cache (#684) ([228c656](https://github.com/BlazeUp-AI/Observal/commit/228c65615542424787e9fb3272e8bcfa0bedb451))
+- resolve agent update 500 error (missing property setters) (**api**) ([a91878a](https://github.com/BlazeUp-AI/Observal/commit/a91878a4502d470f88d9fd5367234450617085d8))
+- fix agent edit form Playwright tests (**e2e**) ([7d8c2d5](https://github.com/BlazeUp-AI/Observal/commit/7d8c2d59158db1d1434470f8e346cb00fdc3f7c0))
+- resolve component delete 500 errors (#677, #678) (**api**) ([ca33351](https://github.com/BlazeUp-AI/Observal/commit/ca333511348e291dff76ef5fce9b3e44407d8595))
+- correct version lookup and sync lockfile (**cli**) ([9c474dc](https://github.com/BlazeUp-AI/Observal/commit/9c474dc26757155aa35a2eada68784e35836da22))
+- detect and block conflicting `observal` package (#671) (**cli**) ([d6e6616](https://github.com/BlazeUp-AI/Observal/commit/d6e661672b05c653ddae50e30ef379578418f87c))
+- move pull command from root to `observal agent pull` (#673) (**cli**) ([f092894](https://github.com/BlazeUp-AI/Observal/commit/f092894c93f077a514aeb007b29bfcb69685a796))
+- add latest_approved_version to response and fix agent pull (#667) (**api**) ([9f1256a](https://github.com/BlazeUp-AI/Observal/commit/9f1256a69bdc6eb3628e8d01f71e348048c6bb0b))
+- resolve agent deletion 500 errors (**api**) ([e19c67c](https://github.com/BlazeUp-AI/Observal/commit/e19c67ca7ecb14af4a2f24089b1c4ef21c715312))
+- review queue queries pending versions directly (**api**) ([2c989b3](https://github.com/BlazeUp-AI/Observal/commit/2c989b3540f9f929a8030be0566c324bd35d1317))
+- address 5 correctness bugs in agent edit form (**web**) ([c3429c9](https://github.com/BlazeUp-AI/Observal/commit/c3429c991411beb3df25858582ae51dd3e094102))
+- use canonical IDE list from ide_registry.py in edit form (**web**) ([48330d1](https://github.com/BlazeUp-AI/Observal/commit/48330d1ae7981d6eced1a4db897bb4f873b47adb))
+- resolve entrypoint migration incompatibility on fresh DB (**docker**) ([59fddfd](https://github.com/BlazeUp-AI/Observal/commit/59fddfd3491656ae5314b8dce87664975b0e4170))
+- wire version dropdown to fetch and display version-specific data (**web**) ([9aec74d](https://github.com/BlazeUp-AI/Observal/commit/9aec74dc3f256f8ff91e4b04be7c507bd7e3c0ed))
+- address 3 bugs in agent release/pull commands (**cli**) ([610c5fc](https://github.com/BlazeUp-AI/Observal/commit/610c5fc05e76fb661bd876612eb33f14bc375a7a))
+- complete agent versioning spec compliance (#622) (**api**) ([9a2c78c](https://github.com/BlazeUp-AI/Observal/commit/9a2c78c7d6ab4d34ceccef724fecc869b7d64970))
+- address RBAC review feedback (**server**) ([b705660](https://github.com/BlazeUp-AI/Observal/commit/b7056609fb885b4e5726aa87db97ef61f66abf3d))
+- apply ruff format to RBAC files (**server**) ([3af617a](https://github.com/BlazeUp-AI/Observal/commit/3af617a28afdf449301e54ade1b0c6b530711409))
+- fix import sorting in alembic migration (**server**) ([99a7b81](https://github.com/BlazeUp-AI/Observal/commit/99a7b819ce48341af7feb6aa29da7be5029e1045))
+- fixed the linting issues (**server**) ([b5eb5a0](https://github.com/BlazeUp-AI/Observal/commit/b5eb5a0a98ecc2fcbb427d45c45566fb3c1a8988))
+- update IDE paths and add skill support per official docs (**registry**) ([1904f94](https://github.com/BlazeUp-AI/Observal/commit/1904f94c15a9ab980d73ff8818fd76fa6bd0a49b))
+- correct VS Code mcp_servers_key and Claude Code home_mcp_config (**registry**) ([1693b40](https://github.com/BlazeUp-AI/Observal/commit/1693b404923b70543ab735c7e5084ab196b3ea0a))
+- make session DAG visualization theme-aware (**web**) ([9f5f542](https://github.com/BlazeUp-AI/Observal/commit/9f5f542a5e7ce10a87d8273dcd9d7897c80eedcd))
+- replace hardcoded colors with semantic theme tokens (**web**) ([ae3b5c4](https://github.com/BlazeUp-AI/Observal/commit/ae3b5c4fecc0ed619aab1316ec8ee4ee9663d022))
+- hide enterprise-only sidebar items in local mode, fix collapsed logo (**web**) ([aad850f](https://github.com/BlazeUp-AI/Observal/commit/aad850f7cd000cbe5ca4720f6195ad128670014d))
+- prevent duplicate Observal hooks in Kiro agent configs ([6256a56](https://github.com/BlazeUp-AI/Observal/commit/6256a569b3f86c1571c81811e0d623429b340486))
+- use sys.executable and python detection for cross-platform hook injection (**hooks**) ([7ee202a](https://github.com/BlazeUp-AI/Observal/commit/7ee202a1375cf29f349d0c88738202500476255f))
+- use sys.executable for hook commands, not hardcoded python3 (**cli**) ([1ddcc81](https://github.com/BlazeUp-AI/Observal/commit/1ddcc8140e982caaf6eadb1af4965e589108a0c6))
+- update crypto public-key URL and e2e test paths (**cli**) ([f01e635](https://github.com/BlazeUp-AI/Observal/commit/f01e6359406b857e03cec640ca02edddb210cb85))
+- update copilot CLI hook test to use module invocation format (**test**) ([d526a4b](https://github.com/BlazeUp-AI/Observal/commit/d526a4b52de380b4f0b9e27a1d874fc940d48363))
+- doctor cleanup should also clean kiro_default.json (**cli**) ([5f7a755](https://github.com/BlazeUp-AI/Observal/commit/5f7a75528263fc0101b1e4b917f29412f58dbae1))
+- use module invocation for hook injection, not cat|python3 pipes (**cli**) ([50af818](https://github.com/BlazeUp-AI/Observal/commit/50af81803f3d3eedbfc6f9fbe0ea5978ba82f314))
+- write native OTLP logs to otel_logs table (**telemetry**) ([4381188](https://github.com/BlazeUp-AI/Observal/commit/4381188f5b0c85f8049e12cc3824d59b3fd9b739))
+- update copilot CLI hooks and remaining otel/hooks references (**cli**) ([be5c960](https://github.com/BlazeUp-AI/Observal/commit/be5c960f0532a5b27f9eccc4ea0fed4977198eca))
+- normalize all IDE ServiceName values in SQL query (**sessions**) ([4e86302](https://github.com/BlazeUp-AI/Observal/commit/4e863026c55c27c4ad29b529d5989652c32640ec))
+- remove exception detail leaks in eval kernel (**security**) ([9d56b6c](https://github.com/BlazeUp-AI/Observal/commit/9d56b6c4770d784912af702a60f580eb0c68e178))
+- address CodeQL findings (**security**) ([ef08221](https://github.com/BlazeUp-AI/Observal/commit/ef08221f2028a04171073d7c03f6b10e7c8c337e))
+- update test expectations and fix eslint warnings (**ci**) ([723a29c](https://github.com/BlazeUp-AI/Observal/commit/723a29cfe32099ead233eaaaddbe9c3245e3d836))
+- seed Kiro hooks with telemetry commands (**agent-builder**) ([14bea3d](https://github.com/BlazeUp-AI/Observal/commit/14bea3d1170e97927e43eeb67792525212cbb781))
+- move /traces /errors /stats above /{session_id} catch-all (**sessions**) ([39d9a60](https://github.com/BlazeUp-AI/Observal/commit/39d9a60b15bd4e9dc4c8a3581f8bbc583a1fdd2d))
+- remove duplicate /sessions prefix from route paths (**sessions**) ([606a00d](https://github.com/BlazeUp-AI/Observal/commit/606a00d16d1e67ca6d5516d988681a48910e5cda))
+- replace structlog with stdlib logging (**sessions**) ([106d489](https://github.com/BlazeUp-AI/Observal/commit/106d4898e6cf1799d1248351456a4fa11b6a84d7))
+- fix remaining OtelSession type reference (**web**) ([c6983a8](https://github.com/BlazeUp-AI/Observal/commit/c6983a86ab148d31266dd637787f57a8e8235f3e))
+- add otel_logs DDL to init_clickhouse (**clickhouse**) ([17fd514](https://github.com/BlazeUp-AI/Observal/commit/17fd514a87d6ac0a1e7cf20d6640dd724adc1b07))
+- add missing event name mappings for prompt counting (**copilot**) ([0a3acf7](https://github.com/BlazeUp-AI/Observal/commit/0a3acf7c0f135e79291915a9d5081996a7d54762))
+- auto-shim copilot/opencode MCP servers during login (**auth**) ([3d12220](https://github.com/BlazeUp-AI/Observal/commit/3d1222013fd0c2907ae82f5b346949c4bf673795))
+- match native agent config schema and fix prompt injection (**kiro**) ([cb773cc](https://github.com/BlazeUp-AI/Observal/commit/cb773cc090540150bc1284063d06b6b243c5e5fc))
+- replace fragile cat|sed|curl Unix pipelines with Python hook scripts (**kiro**) ([c304172](https://github.com/BlazeUp-AI/Observal/commit/c304172d8a96ed48e56b9f92d73fa5f876effe29))
+- use LB URL as Dockerfile build-time default for API rewrites (**docker**) ([af54ebd](https://github.com/BlazeUp-AI/Observal/commit/af54ebd826ea4789b88894d51136644c25a4e683))
+- preserve URL scheme in endpoint derivation and fix port issues (**config**) ([ef28cfe](https://github.com/BlazeUp-AI/Observal/commit/ef28cfe33e801c816ce529d6b827d84e14979340))
+- reformat test_ide_config_e2e.py to satisfy ruff (**lint**) ([4c065ba](https://github.com/BlazeUp-AI/Observal/commit/4c065ba732c07dd43326eb3d84bbe12be2b040d8))
+- rename camelCase test function to satisfy ruff N802 (**test**) ([77a57d4](https://github.com/BlazeUp-AI/Observal/commit/77a57d47a276495b8898dd2706fd6321cfda02ae))
+- add Copilot CLI platform detection and hide unsupported fields (**web**) ([2259794](https://github.com/BlazeUp-AI/Observal/commit/22597942a864c521e61d3d3f0d5fbf2cf97552c1))
+- add JSONC parsing and per-event hook names for Copilot CLI (**cli**) ([096fd3c](https://github.com/BlazeUp-AI/Observal/commit/096fd3c5092d0fa0e4d6e439d0e7c86ad85540a3))
+- normalize Copilot CLI payloads and inject event names (**hooks**) ([a9d47fa](https://github.com/BlazeUp-AI/Observal/commit/a9d47faa3e327c64bb8ba5cb7be34c9c212ae50e))
+- respect --ide filter in fallback home scan (**scan**) ([cf379dd](https://github.com/BlazeUp-AI/Observal/commit/cf379ddeaca9b24ab6b2f158e3711da433903520))
+- only trace registered Kiro agents, skip kiro_default (**scan**) ([db39514](https://github.com/BlazeUp-AI/Observal/commit/db3951494f61f3e724c6dfc3fb659badd6e916ba))
+- only trace registered Kiro agents, skip kiro_default (**scan**) ([63d2b5d](https://github.com/BlazeUp-AI/Observal/commit/63d2b5dc21b608e7039ddfbd8794afff5de58943))
+- only trace registered Kiro agents, skip kiro_default (**scan**) ([9cdc9c5](https://github.com/BlazeUp-AI/Observal/commit/9cdc9c5cd7b451c968696fd0dda288c7db8f97d1))
+- preserve host port in proxy headers to fix Kiro agent tracing (**nginx**) ([60dcda9](https://github.com/BlazeUp-AI/Observal/commit/60dcda95124b5e0e06307c66a43db2fde8056907))
+- filter release artifact download to skip Docker metadata (**ci**) ([dbd6a1b](https://github.com/BlazeUp-AI/Observal/commit/dbd6a1b66ec1dd3a6db067ecc9bc41a17174a329))
 - rename package to observal-cli to match PyPI project (**pypi**) ([9e27f7a](https://github.com/BlazeUp-AI/Observal/commit/9e27f7a4645022356f9fcf02358449664f38c250))
 - disable provenance on per-arch Docker builds (**ci**) ([50a8853](https://github.com/BlazeUp-AI/Observal/commit/50a88535f84b488b87afad4749f908d6d9cf2c9c))
 - native multi-arch Docker builds, drop deprecated macos-13 (**ci**) ([d8232c8](https://github.com/BlazeUp-AI/Observal/commit/d8232c85bdc1a43fb524858ac7ded001ed3a5544))
@@ -1327,116 +1284,6 @@ All notable changes to this project will be documented in this file.
 - reduce batch size and ensure async insert durability (**otel**) ([e289ced](https://github.com/BlazeUp-AI/Observal/commit/e289ced397d7b031108c1cd52adaa185cb29415b))
 - make ClickHouse and OTEL memory limits configurable (**docker**) ([2c317eb](https://github.com/BlazeUp-AI/Observal/commit/2c317eb4c6aa5c2a6878d76cbeeecf72eecc14d5))
 - add ClickHouse memory config to prevent OOM on low-RAM hosts (**docker**) ([ede9da9](https://github.com/BlazeUp-AI/Observal/commit/ede9da95ef39a88a730ba09d65e1608b8faf8154))
-### Other
-- remove volumes in rebuild-clean target ([c36996f](https://github.com/BlazeUp-AI/Observal/commit/c36996fd65e8b11c83f35576f16dfd2b66bec7f5))
-- semvar fix (**pre-bump**) ([f7179ff](https://github.com/BlazeUp-AI/Observal/commit/f7179ff33347614def431e430a0ca0186d6c1790))
-- remove registration endpoint and CLI command (**auth**) ([28fc0f1](https://github.com/BlazeUp-AI/Observal/commit/28fc0f1277a5f632710446f7e18934a8a28d2096))
-- gitignore AI agent and IDE config directories ([2454408](https://github.com/BlazeUp-AI/Observal/commit/245440842607985380a21e2798d834b95fdfb3e4))
-- remove magic-agent.json and docs/superpowers/ ([3ddeed5](https://github.com/BlazeUp-AI/Observal/commit/3ddeed50d0335d9c2b0e18ab0a597ba38f94a7c3))
-- ignore playwright and e2e screenshot artifacts ([9dd9f20](https://github.com/BlazeUp-AI/Observal/commit/9dd9f20664572215d0e07e99fcc8c32e8627e1d9))
-- add pre-push DCO sign-off check ([04c0ac5](https://github.com/BlazeUp-AI/Observal/commit/04c0ac54a237264a158dea5b2d55a409ac27f460))
-- add pre-commit secrets guard to block .env and API key leaks ([e3cf243](https://github.com/BlazeUp-AI/Observal/commit/e3cf2433112203096a4d1e6892e4f0b067691f37))
-- add .worktrees/ to .gitignore ([5f651bf](https://github.com/BlazeUp-AI/Observal/commit/5f651bf8d29c960fe7b341beadc3fa1e9f302451))
-- enable gitbooks for docs ([2e4eef2](https://github.com/BlazeUp-AI/Observal/commit/2e4eef2e10227192a42462277a82f1c242d7e39a))
-### Performance
-- resolve trace_privacy at auth time, eliminate extra DB calls ([6f3602c](https://github.com/BlazeUp-AI/Observal/commit/6f3602c636a2b147a5622c2856931383bce091b4))
-### Testing
-- update e2e tests for hook bridge and disabled OTLP (**gemini**) ([9655b26](https://github.com/BlazeUp-AI/Observal/commit/9655b26b3df6f6c34cdb7e7ddfa3c4be0ae46ec9))
-- add comprehensive tests for Auth 2.0 security features (**auth**) ([adeafd3](https://github.com/BlazeUp-AI/Observal/commit/adeafd3570613f748a2872bb580e64bc1df99be1))
-- update enterprise tests for real SAML/SCIM behavior (**ee**) ([5568201](https://github.com/BlazeUp-AI/Observal/commit/55682010cd05bfef16701be79b388a62b7487ee9))
-- add tests for dollar-var placeholder display ([c352100](https://github.com/BlazeUp-AI/Observal/commit/c3521008b775688174e1619e1f7904582c93e6c2))
-- add edge case tests for ClickHouse resource tuning ([31bd3f7](https://github.com/BlazeUp-AI/Observal/commit/31bd3f7adb39c55c3ff72817db42d339ce7911f4))
-## [0.2.0] - 2026-04-21
-### Added
-- redesign traces page with unified Kiro and Claude Code view (**web**) ([e648ad5](https://github.com/BlazeUp-AI/Observal/commit/e648ad535a0766fcea6bb42a3df7bd3fbb390baf))
-- extend session types, API layer, and hooks for v4 traces (**web**) ([5575ac4](https://github.com/BlazeUp-AI/Observal/commit/5575ac404506fe3242261230c91c8f58c296b39f))
-- add user resolution, platform/time filters, and summary endpoint (**server**) ([2befd44](https://github.com/BlazeUp-AI/Observal/commit/2befd44097c3b3b799578a237b16473842b98ff5))
-- propagate username through hooks and env vars (**cli**) ([f41ff37](https://github.com/BlazeUp-AI/Observal/commit/f41ff37201574e1b44dea3be7f8d48c5a97a79df))
-- show IDE compatibility badges on agent cards and detail pages (**web**) ([151e55b](https://github.com/BlazeUp-AI/Observal/commit/151e55be229f64a878182dbc100aba69e33e1bed))
-- auto-infer IDE compatibility on agent create/update and warn at install (**server**) ([e1e39ae](https://github.com/BlazeUp-AI/Observal/commit/e1e39ae3ca9e03796dffb19f518f6d0d74889424))
-- add required_ide_features and inferred_supported_ides to agent model (**server**) ([1214bc3](https://github.com/BlazeUp-AI/Observal/commit/1214bc3ac76932759951658688dd091abcd86b22))
-- add IDE feature inference service (**server**) ([82b897e](https://github.com/BlazeUp-AI/Observal/commit/82b897e66a47f4c2926f6a9a5703852f3a77a4ff))
-- add IDE feature capability matrix to constants (**server**) ([f259125](https://github.com/BlazeUp-AI/Observal/commit/f25912560f3807a1a0cdf629391fda4f747d0fc2))
-- detect dollar-sign input vars in git-URL submit path (**cli**) ([a22c37e](https://github.com/BlazeUp-AI/Observal/commit/a22c37e29a83f852d6a49a3b99a901dc7ea7af6f))
-- substitute $VAR placeholders in stored args at install time (**server**) ([a415036](https://github.com/BlazeUp-AI/Observal/commit/a415036096c927a22b8389b5270d686d43f84a58))
-- detect dollar-sign input variables in mcp submit --config (**cli**) ([0705ee0](https://github.com/BlazeUp-AI/Observal/commit/0705ee00b0ff0d2c00f110f10a15de5df8bb2210))
-- add ASCII welcome banner on auth login (#202) ([043147f](https://github.com/BlazeUp-AI/Observal/commit/043147fde13efc05c3fb1da7e539d160b00c91bd))
-- add Redis-backed caching and gzip compression ([1803470](https://github.com/BlazeUp-AI/Observal/commit/18034709d7d1cccafd490bfe06558e53156d3547))
-- add post-auth onboarding with IDE detection and component upload ([8660f3e](https://github.com/BlazeUp-AI/Observal/commit/8660f3e8fdc2ce0fe91faadf49bc6f1c4257a78b))
-- allow users to view their own traces (#431) (**traces**) ([3be2c5c](https://github.com/BlazeUp-AI/Observal/commit/3be2c5c69d95f2f9b6df9cdeeb442586144050d1))
-- generate IDE-specific skill files on agent install (#431) (**skills**) ([b276718](https://github.com/BlazeUp-AI/Observal/commit/b276718d29427a5ab30a5db0e35d12f4440db339))
-- add structured security event logging for SIEM integration (#233) (**sec**) ([5d61282](https://github.com/BlazeUp-AI/Observal/commit/5d61282f9003c7001d4b19226362a92971982c99))
-- add escape_like() utility and tests (**sec**) ([2c9ee56](https://github.com/BlazeUp-AI/Observal/commit/2c9ee561d4fc4e01e8b6da0d858376452a6843f1))
-- add shim badge on trace events with merged shim data (**ui**) ([929cb47](https://github.com/BlazeUp-AI/Observal/commit/929cb47023c810f9db9861d9c6a79ec7615e1179))
-- add unarchive action for archived agents ([9a9e352](https://github.com/BlazeUp-AI/Observal/commit/9a9e352c283f88e6b73697d3cfe1fdbb0f8908c0))
-- add delete/withdraw action for pending items in review queue ([71e4250](https://github.com/BlazeUp-AI/Observal/commit/71e4250702288ed2be517f1cff06a6191005110b))
-- add draft workflow and submission forms for all component types ([2f52f02](https://github.com/BlazeUp-AI/Observal/commit/2f52f02ceeb4ed3471bde8a98c60f90cbc6dde5f))
-- add custom inline prompt input to agent builder Prompts tab (**web**) ([6029763](https://github.com/BlazeUp-AI/Observal/commit/60297638de8be62e05c3f30cd7676d75f7fb4b93))
-- unwrap mcpServers wrappers and extract server name from pasted configs (**cli**) ([1ddc49b](https://github.com/BlazeUp-AI/Observal/commit/1ddc49bdde6e46458aa4505282a535456a0a806c))
-- add header prompting at install time for SSE/HTTP servers (**cli**) ([b4dd457](https://github.com/BlazeUp-AI/Observal/commit/b4dd457f445a148319c7504828b267e6e1b3916d))
-- revamp submit UX with config preview and direct JSON config support (**cli**) ([0a3ff6f](https://github.com/BlazeUp-AI/Observal/commit/0a3ff6f4ca8a5485fab5510e6ac3822100a41d61))
-- support three transport types — stdio, SSE, HTTP proxy (**config**) ([522f270](https://github.com/BlazeUp-AI/Observal/commit/522f27081b5066e8be3f815d2bd6054acad477e8))
-- store command/args/url/headers on submit, pass headers on install (**routes**) ([9b38fff](https://github.com/BlazeUp-AI/Observal/commit/9b38fffd7f094b938b3434c88bbd9fc8a23330d2))
-- auto-detect docker images and infer command/args from repos (**validator**) ([1b6b34c](https://github.com/BlazeUp-AI/Observal/commit/1b6b34c7e40ce2095ca44ce504fdc61fa5facef8))
-- add transport/SSE/header fields to MCP schemas (**schemas**) ([daa2d5d](https://github.com/BlazeUp-AI/Observal/commit/daa2d5d624218b44502dba5878126325a834f2fb))
-- add command, args, url, headers, auto_approve columns to mcp_listings (**db**) ([a7f184c](https://github.com/BlazeUp-AI/Observal/commit/a7f184c4f5aa78e4fe66e4958fe69f22aa188c38))
-- org-scope agent endpoints and stamp owner_org_id on all listings (**multi-tenancy**) ([aff0883](https://github.com/BlazeUp-AI/Observal/commit/aff088355fce90806e720181baeb679ae745b011))
-- org-scoped project_id and route filtering (**multi-tenancy**) ([10c41e4](https://github.com/BlazeUp-AI/Observal/commit/10c41e4a82606caa6cab5e5156a122fbee34c527))
-- scope user management to org and assign org_id on creation (**admin**) ([2bdf1ea](https://github.com/BlazeUp-AI/Observal/commit/2bdf1eafd4a4bce56da6223b978c8291122d9901))
-- add org-aware dependencies and auto-assign default org (**auth**) ([0d25bd2](https://github.com/BlazeUp-AI/Observal/commit/0d25bd2a0fa7a2faee1fcdd6096ec6e8773e7b63))
-- add version bump dialog to agent builder (**web**) ([5875985](https://github.com/BlazeUp-AI/Observal/commit/5875985c550d3476a5bc548b134b424268c6d66c))
-- add draft workflow with localStorage auto-save (**web**) ([837e3dc](https://github.com/BlazeUp-AI/Observal/commit/837e3dc6a9eb93e35e99e5b868dca7427779a57e))
-- add agents tab with component readiness to review page (**web**) ([a20cd85](https://github.com/BlazeUp-AI/Observal/commit/a20cd8549677e1bcb10204025c14648308290006))
-- add agent bulk-create command (**cli**) ([d2d360b](https://github.com/BlazeUp-AI/Observal/commit/d2d360bedd7ec543e60d29bb371fdeab978d3af9))
-- add user filter and component tabs to leaderboard (**web**) ([cb52a55](https://github.com/BlazeUp-AI/Observal/commit/cb52a55b62d288ea4da10c5d229146b860ff63d4))
-- add archive action to agent pages (**web**) ([ddc8e9c](https://github.com/BlazeUp-AI/Observal/commit/ddc8e9c1291166754c3126c507f9d5b490505b75))
-- add API hooks for review, archive, draft, version, leaderboard, bulk (**web**) ([7e2fe92](https://github.com/BlazeUp-AI/Observal/commit/7e2fe92969b4962a789f8939c80b3068ede93653))
-- add bulk agent upload endpoint and schemas (**server**) ([1295e58](https://github.com/BlazeUp-AI/Observal/commit/1295e58317932d5852b95fabd7598152bc6b04e1))
-- add archived variant to StatusBadge (**web**) ([7bf035d](https://github.com/BlazeUp-AI/Observal/commit/7bf035dfa936b03180f1ea4ccc0f38e80286a421))
-- add dismissible GitHub star banner to page header ([11d3d09](https://github.com/BlazeUp-AI/Observal/commit/11d3d0927e84927d33d2a1c3d77803aebcfb251b))
-- add username field to User model (#339) (**auth**) ([c001b1b](https://github.com/BlazeUp-AI/Observal/commit/c001b1b3f29ff66a87ce3e96e3fa91a6598e6a80))
-- add delete agent functionality to frontend (**web**) ([4204176](https://github.com/BlazeUp-AI/Observal/commit/42041769d2a52f6f6a9d5d4c920cbce856a52a3a))
-- add review queue, versioning, bundles, archive, and draft workflow (**agent**) ([27f1f6a](https://github.com/BlazeUp-AI/Observal/commit/27f1f6a81f4258d63c3814464b684cde072d4385))
-- add observal agents cli cmds (**agent**) ([7e6a206](https://github.com/BlazeUp-AI/Observal/commit/7e6a2069817aa13777891f847c8843c3ff93431a))
-- robust multi-language env var detection and config generation fixes ([5d633c5](https://github.com/BlazeUp-AI/Observal/commit/5d633c555d350895b461859d6c818c67466564f0))
-- unify telemetry — merge hooks, shims, and OTLP into one event stream ([1dce747](https://github.com/BlazeUp-AI/Observal/commit/1dce7472b2a3706fbf92cd4dbbd01d6cf105bc8f))
-- add live session updates via GraphQL subscriptions ([9cc5bd1](https://github.com/BlazeUp-AI/Observal/commit/9cc5bd188617dbbfd51005336cdd9d24e34665e5))
-### CI
-- add asyncpg and hypothesis to test runner ([abff6ad](https://github.com/BlazeUp-AI/Observal/commit/abff6ad95887a6414636b4cd8b64100b450037e5))
-- add auto-deploy workflow for EC2 server ([c6d3fc8](https://github.com/BlazeUp-AI/Observal/commit/c6d3fc886422702b880f8ddfea4bbfab64d44ed4))
-### Changed
-- fix ruff lint and formatting in client.py (**cli**) ([ab5935c](https://github.com/BlazeUp-AI/Observal/commit/ab5935c0e6240103527df084394ff80dae82fd01))
-- format review.py for ruff ([f2c68fe](https://github.com/BlazeUp-AI/Observal/commit/f2c68fe4ac0fa704871098f5de093435c99179e7))
-- fix ruff formatting in route and CLI files ([55b5f2b](https://github.com/BlazeUp-AI/Observal/commit/55b5f2baf96dbcd52a1789496818bcceab25e436))
-- format test_docker_detection.py for ruff ([e6f5d11](https://github.com/BlazeUp-AI/Observal/commit/e6f5d1106361475c25271bd51715b68d02770e99))
-- fix ruff format violations in agent_config_generator and cmd_pull ([7128f79](https://github.com/BlazeUp-AI/Observal/commit/7128f79625f5339dd568a4cdfbd6ab956cf47b90))
-- apply ruff format to test_eval_phase8.py ([edce7e6](https://github.com/BlazeUp-AI/Observal/commit/edce7e6957d49fded1238426e0ef3401cd2669af))
-- apply ruff format to changed files ([e9967d8](https://github.com/BlazeUp-AI/Observal/commit/e9967d83d484a0c47a3900885352988069fc3dc7))
-- move eval services and tests into subpackages (**eval**) ([82b935a](https://github.com/BlazeUp-AI/Observal/commit/82b935aaaab5ff345fb63f8b528d74477ebcdcdf))
-### Documentation
-- add design spec for agent unarchive feature (#396) ([4cf0bf1](https://github.com/BlazeUp-AI/Observal/commit/4cf0bf1ae5c2d1db21782f683b8310f1e4c07ce3))
-- add IDE support tiers, remove telemetry hook refs from docs ([fdb3b41](https://github.com/BlazeUp-AI/Observal/commit/fdb3b413fb4556a0cbb0ff8f4e48864dc7f9f570))
-- add IDE support tiers, remove hook references from docs ([336018f](https://github.com/BlazeUp-AI/Observal/commit/336018f733ba464250d56bea84b6fe95c96fa0c7))
-- add eval subsystem reference (docs/eval.md) ([739fe03](https://github.com/BlazeUp-AI/Observal/commit/739fe03fb2f979e24bdd12e359f0e4cf3c2cdbcd))
-- add READMEs for observal-server, ee, tests, and observal_cli ([9c39e49](https://github.com/BlazeUp-AI/Observal/commit/9c39e491bf6de42cca00d7a41730ec52902811e7))
-- replace boilerplate README with frontend reference (**web**) ([31eed93](https://github.com/BlazeUp-AI/Observal/commit/31eed93a2c55e4e4cd6cbab3efe2476d0bf6bc90))
-### Fixed
 - improve session query perf, push platform filter to ClickHouse (**server**) ([284c953](https://github.com/BlazeUp-AI/Observal/commit/284c953a35b21902e9761666f70e4fa01d9fa7d4))
 - skip IDE inference when components unchanged in update routes (**server**) ([5adc883](https://github.com/BlazeUp-AI/Observal/commit/5adc883b14f519fb95768687a9a3b04562208caf))
 - don't highlight Agents nav when on leaderboard or builder (**web**) ([b29af69](https://github.com/BlazeUp-AI/Observal/commit/b29af6918a0457dd4d723befa361993f7272f147))
@@ -1523,6 +1370,61 @@ All notable changes to this project will be documented in this file.
 ### Other
+- remove hardcoded dev paths and stale internal docs ([6f39743](https://github.com/BlazeUp-AI/Observal/commit/6f39743cc3c2d6cec4c54be833a3410a6334b957))
+- ignore pi-lens cache directories ([b8d84e2](https://github.com/BlazeUp-AI/Observal/commit/b8d84e2d39a0f6daa0c2b6cca32d7814d293ec07))
+- update dependency authlib to v1.7.1 [security] (#923) (**deps**) ([6a00ce3](https://github.com/BlazeUp-AI/Observal/commit/6a00ce3e33f89ffdc05d42d2a563ef0633ac761e))
+- ignore and untrack Terraform plan files (OBSV-SEC-019) (**security**) ([c4873d4](https://github.com/BlazeUp-AI/Observal/commit/c4873d4469a5efdc6db470a82f156fec4763fa4c))
+- add SPDX license headers for REUSE compliance ([df9b065](https://github.com/BlazeUp-AI/Observal/commit/df9b0652949043dd53710d12f8bdf8ada5c9ced3))
+- add SPDX headers and fix pre-commit hook for new files ([4653ffa](https://github.com/BlazeUp-AI/Observal/commit/4653ffac901632e251cf7a791b82aec517688c20))
+- add Codecov for test coverage reporting (**ci**) ([016d312](https://github.com/BlazeUp-AI/Observal/commit/016d3121c992e15b7e4838696fe3307ac61d7df0))
+- add SPDX headers to all source files (REUSE 3.3 compliant) ([193d7c9](https://github.com/BlazeUp-AI/Observal/commit/193d7c94a1360cd7918617a47e84ef691a35a493))
+- remove DCO, CLA-assistant is the sole contributor agreement ([90635ca](https://github.com/BlazeUp-AI/Observal/commit/90635ca6a8afe6d8adb1ee66f7948372aeab233f))
+- update terraform-linters/setup-tflint action to v6 (**deps**) ([47e7736](https://github.com/BlazeUp-AI/Observal/commit/47e77365da31820a113860e5a094b9146a335fe9))
+- update pnpm/action-setup action to v6 (**deps**) ([cb1c7e1](https://github.com/BlazeUp-AI/Observal/commit/cb1c7e1c21245ee914df229cf3d65aab8207977b))
+- update redis docker tag to v8 (**deps**) ([c8a7592](https://github.com/BlazeUp-AI/Observal/commit/c8a75924d65c0339449957671ea1b2865a42e8c9))
+- update postgres docker tag to v18 (**deps**) ([0905772](https://github.com/BlazeUp-AI/Observal/commit/0905772b1d115eacee0e2cd19c19e50c894fc201))
+- update hashicorp/setup-terraform action to v4 (**deps**) ([bd36feb](https://github.com/BlazeUp-AI/Observal/commit/bd36feb5e63d1ba40f6ec31d3a4178aa192cb67b))
+- update github/codeql-action action to v4 (**deps**) ([1089756](https://github.com/BlazeUp-AI/Observal/commit/10897565ed1ff5d18cbc3f4b3d820721e5326c9e))
+- update actions/checkout action to v6 (**deps**) ([8be0707](https://github.com/BlazeUp-AI/Observal/commit/8be07072fd91e9f05b53088b027283170cb0914f))
+- update tflint plugin terraform-linters/tflint-ruleset-aws to v0.47.0 (#778) (**deps**) ([574d28f](https://github.com/BlazeUp-AI/Observal/commit/574d28fa3ea0fc22a7cca02d8e2402c291a7ce4b))
+- remove ops sync tombstone (**ops**) ([2917e1c](https://github.com/BlazeUp-AI/Observal/commit/2917e1ce93d3fd960ccc224951f6d43743b7d2f2))
+- update docker images (minor/patch) (#777) (**deps**) ([4d29e1f](https://github.com/BlazeUp-AI/Observal/commit/4d29e1f299fddfc77a37ccf16bf42ca7e1468fe0))
+- update dependency python-multipart to v0.0.27 [security] (#767) (**deps**) ([66db454](https://github.com/BlazeUp-AI/Observal/commit/66db4547aa49dbc0a56ad6824ea3319fb9a940f2))
+- update dependency mako to v1.3.12 [security] (#766) (**deps**) ([f1c6fd4](https://github.com/BlazeUp-AI/Observal/commit/f1c6fd4628545c261814d94888cdbeb259680871))
+- add pyrightconfig.json to observal-server ([4a02084](https://github.com/BlazeUp-AI/Observal/commit/4a0208466b66ce58c6e6125e8d9a3016969c71c5))
+- update github artifact actions (**deps**) ([af5e2db](https://github.com/BlazeUp-AI/Observal/commit/af5e2db8e345fc00b56e4d96549a8a5d195fd3a0))
+- update actions/stale action to v10 (**deps**) ([a11966a](https://github.com/BlazeUp-AI/Observal/commit/a11966ad46461c19bc7517252534d6981746c0b7))
+- update actions/github-script action to v9 (**deps**) ([3a2b92c](https://github.com/BlazeUp-AI/Observal/commit/3a2b92c5d9fb1c54b1f105bee15e5b12cab0850c))
+- update astral-sh/setup-uv action to v8 (**deps**) ([b7d0896](https://github.com/BlazeUp-AI/Observal/commit/b7d08965ead0f40fa17e0b46eda6752468bc5bdc))
+- update actions/setup-python action to v6 (**deps**) ([0002d7f](https://github.com/BlazeUp-AI/Observal/commit/0002d7f4ec49b92f8206eeb93851629109e1d992))
+- update actions/checkout action to v6 (**deps**) ([04db00c](https://github.com/BlazeUp-AI/Observal/commit/04db00c3addd189bcef7fa0455fe583060c2a882))
+- update actions/attest-build-provenance action to v4 (**deps**) ([2e23a47](https://github.com/BlazeUp-AI/Observal/commit/2e23a4758f1d6a195d0158e98c9e844f313b954f))
+- update dependency python to 3.14 (#577) (**deps**) ([5420a10](https://github.com/BlazeUp-AI/Observal/commit/5420a100006067355651befb83f1289413077f83))
+- update docker images (minor/patch) (#578) (**deps**) ([9a86d40](https://github.com/BlazeUp-AI/Observal/commit/9a86d40d82fd6b378758aa0ec2a607c48a12fb36))
+- automerge minor+patch Renovate PRs (**deps**) ([66cb1ba](https://github.com/BlazeUp-AI/Observal/commit/66cb1baf8d0b84760cb1564a6614eb98700581f2))
+- cleanup anti-patterns in registered-agents-only files ([3e0ee48](https://github.com/BlazeUp-AI/Observal/commit/3e0ee4810f2eae53990c1022c79e8a8557798729))
+- ruff format agent_config_generator ([742e0d7](https://github.com/BlazeUp-AI/Observal/commit/742e0d7816f5aa1d8526644bfe856794761ee2f6))
+- ruff format agent routes ([89c869f](https://github.com/BlazeUp-AI/Observal/commit/89c869f6d9aad692e381375968f4cc836fab5ee6))
+- ruff format agent routes ([a82308e](https://github.com/BlazeUp-AI/Observal/commit/a82308e3c876fc565d32ce2bf21ec6f220c7e589))
+- cleanup anti-patterns in review and api modules ([7bc87b4](https://github.com/BlazeUp-AI/Observal/commit/7bc87b487aefdcade8d1cb2f619ac7e9825787a9))
+- cleanup anti-patterns in CLI agent commands ([dd0a5aa](https://github.com/BlazeUp-AI/Observal/commit/dd0a5aa494e81ec54c6ba775c21b7ec266885efe))
+- cleanup mechanical anti-patterns in routes ([6e9732e](https://github.com/BlazeUp-AI/Observal/commit/6e9732e5988c9d42a7d27c58035be7abd5871031))
+- cleanup anti-patterns in agent RBAC implementation ([98e72db](https://github.com/BlazeUp-AI/Observal/commit/98e72db3d5d967f1b4e701afdd0965ef2bd80b10))
+- update docker/build-push-action action to v7 (**deps**) ([20f2626](https://github.com/BlazeUp-AI/Observal/commit/20f26263f09cfc4c9f95b52d6e5509f3d34af58a))
+- update docker/login-action action to v4 (**deps**) ([e5d87a9](https://github.com/BlazeUp-AI/Observal/commit/e5d87a9dd2fa1b06b384efae2dd87019fbc36d6c))
+- update docker/setup-buildx-action action to v4 (**deps**) ([5e5f3f8](https://github.com/BlazeUp-AI/Observal/commit/5e5f3f8f9b0749265cb28ae39912acd0f0d2c1fb))
+- sync observal-server uv.lock version to 0.3.4 ([eed7bdd](https://github.com/BlazeUp-AI/Observal/commit/eed7bdded2218e60d08aafb623cefa698223b7ff))
+- update dependency ruff to v0.15.12 (#575) (**deps**) ([a8a406d](https://github.com/BlazeUp-AI/Observal/commit/a8a406df83a1978b157c0c8d6aac359d70a2da7b))
+- remove volumes in rebuild-clean target ([c36996f](https://github.com/BlazeUp-AI/Observal/commit/c36996fd65e8b11c83f35576f16dfd2b66bec7f5))
+- semvar fix (**pre-bump**) ([f7179ff](https://github.com/BlazeUp-AI/Observal/commit/f7179ff33347614def431e430a0ca0186d6c1790))
+- remove registration endpoint and CLI command (**auth**) ([28fc0f1](https://github.com/BlazeUp-AI/Observal/commit/28fc0f1277a5f632710446f7e18934a8a28d2096))
+- gitignore AI agent and IDE config directories ([2454408](https://github.com/BlazeUp-AI/Observal/commit/245440842607985380a21e2798d834b95fdfb3e4))
+- remove magic-agent.json and docs/superpowers/ ([3ddeed5](https://github.com/BlazeUp-AI/Observal/commit/3ddeed50d0335d9c2b0e18ab0a597ba38f94a7c3))
+- ignore playwright and e2e screenshot artifacts ([9dd9f20](https://github.com/BlazeUp-AI/Observal/commit/9dd9f20664572215d0e07e99fcc8c32e8627e1d9))
+- add pre-push DCO sign-off check ([04c0ac5](https://github.com/BlazeUp-AI/Observal/commit/04c0ac54a237264a158dea5b2d55a409ac27f460))
+- add pre-commit secrets guard to block .env and API key leaks ([e3cf243](https://github.com/BlazeUp-AI/Observal/commit/e3cf2433112203096a4d1e6892e4f0b067691f37))
+- add .worktrees/ to .gitignore ([5f651bf](https://github.com/BlazeUp-AI/Observal/commit/5f651bf8d29c960fe7b341beadc3fa1e9f302451))
+- enable gitbooks for docs ([2e4eef2](https://github.com/BlazeUp-AI/Observal/commit/2e4eef2e10227192a42462277a82f1c242d7e39a))
 - fix ruff formatting ([ebb1b99](https://github.com/BlazeUp-AI/Observal/commit/ebb1b9946d52c89ac4e572d72adc49753b003b59))
 - add migration chain validation and generator scripts ([f5b7550](https://github.com/BlazeUp-AI/Observal/commit/f5b7550edf536c2c8cf6bd3f7111d4739d459cd7))
 - update dependency eslint to v10 (**deps**) ([19640ad](https://github.com/BlazeUp-AI/Observal/commit/19640adcda3358b27775d143beef1a547101b7c4))
@@ -1538,8 +1440,43 @@ All notable changes to this project will be documented in this file.
 - add Renovate config for automated dependency updates ([acfadae](https://github.com/BlazeUp-AI/Observal/commit/acfadae9b5a1800321e34c7c78558d7fe8a9c1f9))
 - remove empty 26.0.1 file, move images to docs/images/ ([1eeecb9](https://github.com/BlazeUp-AI/Observal/commit/1eeecb9b43839aa414599e65121d58c5777f2122))
+### Performance
+- migrate _ev_session_details to session_stats_agg (**insights**) ([d3463ea](https://github.com/BlazeUp-AI/Observal/commit/d3463ea14e59aa8b65139553cabe96db317af521))
+- migrate _ev_per_session_tokens to session_stats_agg (**insights**) ([b6f6053](https://github.com/BlazeUp-AI/Observal/commit/b6f60534a81f8ed6b9602091c4721884cee17613))
+- migrate _ev_subagent_stats to session_stats_agg (**insights**) ([5844f3b](https://github.com/BlazeUp-AI/Observal/commit/5844f3bdad656e7b1215397f6a140910c7c702c3))
+- migrate _ev_duration_stats to session_stats_agg (**insights**) ([70006ad](https://github.com/BlazeUp-AI/Observal/commit/70006ad2285da64e0ad0c088cb71479648b8a5f1))
+- migrate _ev_credit_aggregates to session_stats_agg (**insights**) ([6626780](https://github.com/BlazeUp-AI/Observal/commit/66267805db095898607367cca44300dc7936abc1))
+- migrate _ev_token_aggregates to session_stats_agg (**insights**) ([3aaa7c2](https://github.com/BlazeUp-AI/Observal/commit/3aaa7c2ea11015ce124baadf87899ead2a73e7f5))
+- migrate _ev_session_overview to session_stats_agg (**insights**) ([ea867b4](https://github.com/BlazeUp-AI/Observal/commit/ea867b4d93e4ddb5e8a0d401914918e5d9080d2f))
+- migrate _count_sessions_in_events to session_stats_agg (**insights**) ([53db78e](https://github.com/BlazeUp-AI/Observal/commit/53db78eb7a9a1deaed00d6058faf3136270b57b9))
+- add proj_session_view projection on session_events (**clickhouse**) ([0100bb9](https://github.com/BlazeUp-AI/Observal/commit/0100bb9d500920ba34bd08bdbda91bcdc7349690))
+- replace parent_session_id bloom_filter with set(0) (**clickhouse**) ([4d38c70](https://github.com/BlazeUp-AI/Observal/commit/4d38c705e553694ef7b4820f38b0ae5b3803e70f))
+- replace event_type bloom_filter with set(20) skip index (**clickhouse**) ([b0f595a](https://github.com/BlazeUp-AI/Observal/commit/b0f595a3beb117e7f610087163c04d5b98f23f96))
+- drop FINAL from session existence check (**reconcile**) ([ce7733b](https://github.com/BlazeUp-AI/Observal/commit/ce7733bac026b74c667eb8e4bae91717c216e58a))
+- parallel FINAL scans + partition-scoped dedup in get_session (**sessions**) ([1152bc2](https://github.com/BlazeUp-AI/Observal/commit/1152bc2ebf32c8a55c305eb31359d307423c422a))
+- migrate stats endpoint to session_stats_agg (**sessions**) ([99db552](https://github.com/BlazeUp-AI/Observal/commit/99db552be788bbcaad5b24fc7982d721ba34a3bc))
+- migrate summary endpoint to session_stats_agg (**sessions**) ([11d7474](https://github.com/BlazeUp-AI/Observal/commit/11d7474df650a45fb25d2c919dd2f1939eca41dc))
+- rank top-50 sessions via session_stats_agg, drop FINAL scan (**insights**) ([b6e84b1](https://github.com/BlazeUp-AI/Observal/commit/b6e84b140a37a2036bf9f7492b5443558df731c8))
+- replace JSONExtract with materialized columns in metrics (**insights**) ([5a2e1bb](https://github.com/BlazeUp-AI/Observal/commit/5a2e1bb52c825d4c116efa5964210923111d1d5a))
+- add session_stats_agg AggregatingMergeTree MV (**clickhouse**) ([5d54f30](https://github.com/BlazeUp-AI/Observal/commit/5d54f30d2df1b2726606b8313b286544b15777ba))
+- multi-stage API build, expand dockerignore, add nginx gzip (**docker**) ([21fd2a4](https://github.com/BlazeUp-AI/Observal/commit/21fd2a461bd01709df7775655aedc91a07e608e6))
+- resolve trace_privacy at auth time, eliminate extra DB calls ([6f3602c](https://github.com/BlazeUp-AI/Observal/commit/6f3602c636a2b147a5622c2856931383bce091b4))
 ### Testing
+- add coverage for MCP config parser, shim errors, and edit/submit ([8896814](https://github.com/BlazeUp-AI/Observal/commit/889681403a06bca72120a7e4869b337f4d2b5f51))
+- cover IDE feature inference (**server**) ([49d341e](https://github.com/BlazeUp-AI/Observal/commit/49d341eb87e81318cfd384abcaf719a2c0790605))
+- add component edit form screenshot spec (**e2e**) ([6fd363b](https://github.com/BlazeUp-AI/Observal/commit/6fd363b2d6bf0323862b868ebdc2a0ed1d425a78))
+- add full edit → release → review Playwright flow (**e2e**) ([8672d9a](https://github.com/BlazeUp-AI/Observal/commit/8672d9ae8fdd62ecde89060ab1cdf6c85c7223a6))
+- update expectations for single-endpoint architecture ([3d271a6](https://github.com/BlazeUp-AI/Observal/commit/3d271a629adc4b5f4e380152b5f5e59f66aeea5c))
+- update assertions for new config format (**kiro**) ([550ade5](https://github.com/BlazeUp-AI/Observal/commit/550ade505fa9eb1658799bdce050cd140927a2d4))
+- add copilot-cli e2e tests ([dfabf02](https://github.com/BlazeUp-AI/Observal/commit/dfabf0215d6bdbb9bc1d0f0e2fb50e36dbe6f6d4))
+- update e2e tests for hook bridge and disabled OTLP (**gemini**) ([9655b26](https://github.com/BlazeUp-AI/Observal/commit/9655b26b3df6f6c34cdb7e7ddfa3c4be0ae46ec9))
+- add comprehensive tests for Auth 2.0 security features (**auth**) ([adeafd3](https://github.com/BlazeUp-AI/Observal/commit/adeafd3570613f748a2872bb580e64bc1df99be1))
+- update enterprise tests for real SAML/SCIM behavior (**ee**) ([5568201](https://github.com/BlazeUp-AI/Observal/commit/55682010cd05bfef16701be79b388a62b7487ee9))
+- add tests for dollar-var placeholder display ([c352100](https://github.com/BlazeUp-AI/Observal/commit/c3521008b775688174e1619e1f7904582c93e6c2))
+- add edge case tests for ClickHouse resource tuning ([31bd3f7](https://github.com/BlazeUp-AI/Observal/commit/31bd3f7adb39c55c3ff72817db42d339ce7911f4))
 - add tests for dollar-sign variable detection and substitution ([fc37b7a](https://github.com/BlazeUp-AI/Observal/commit/fc37b7ab821cd86b99c420d55d9f3052f3d3bf3b))
 - add docker detection, command inference, SSE config, and direct submit tests ([fb0f5b1](https://github.com/BlazeUp-AI/Observal/commit/fb0f5b101e43833d2786ba17d2071c7c68c1082d))
 - add 32-test org isolation suite (**multi-tenancy**) ([0b63188](https://github.com/BlazeUp-AI/Observal/commit/0b631884906af26dfd6ed42d8cd7107e4eab60f8))

observal-cli 1.4.2__tar.gz → 1.4.3__tar.gz

observal-cli 1.4.2tar.gz → 1.4.3tar.gz