ai/mission-control
Watch
1
0
Fork
You've already forked mission-control
 0
Code Issues 4 Pull requests 7 Projects Releases 91 Packages 2 Wiki Activity
91 releases 92 tags
  • v0.48.0 0a548350c0

    v0.48.0 Stable

    morten-olsen released this 2026-10-20 13:16:20 +02:00 | 110 commits to main since this release

    0.48.0

    Organization owners can create a user in Settings → Members → Create user while public registration stays closed. Creation adds the new account and its membership together and returns a password setup link. The recipient chooses their password, then signs in normally.

    Setup links expire after 24 hours. Opening a link does not consume it; successful password submission consumes it once. Owners can revoke or replace a link for a pending account created in their organization. Replacement immediately invalidates the previous link. Existing logins use the existing add-member flow; owners cannot reset their credentials. Members and agents cannot provision users.

    Validation

    • Feature PR #64, reviewed source 0a548350c0763d0b47af80f8f54728d31f29a7c5; preparation PR #65.
    • Main pipeline 448 and final PR pipelines passed, including 823 tests; six actual browser tests passed at 390×844 and 1440×900 with registration closed. Android export passed; physical Android clipboard/share, installation and sign-in remain unverified.
    • Security Engineer review found no blocking issues. The actual preparation image passed the isolated persisted-database/HTTP rollback check. The actual feature image also passed owner provisioning, replacement/revocation, concurrent single-use redemption and recipient sign-in against a disposable persisted fixture.

    The existing advisory dependency scan reports 8 HIGH and 2 CRITICAL JavaScript package occurrences; applicability is tracked separately as task 89f9f891-97d2-420f-a812-b71f746371b0. The dependency lockfile is unchanged from 0.47.0. No finding waiver is included.

    Deployment and rollback

    This release executes the approved additive migration 036. It preserves existing credentials and records activation state plus private password-setup verifiers. The single SQLite writer uses Recreate, so rollout briefly restarts Mission Control. Publishing triggers both image builds and the existing deployment updater, which pins the server/agent digest pair in Forgejo homelab/apps, then mirror and ArgoCD reconciliation.

    Stock server 0.47.0 cannot start after migration 036. The verified rollback server is:

    code.olsen.cloud/ai/mission-control:66dbca68@sha256:43866eea61b248a555abfef851d893285bedd2b6010c4035aa9721d64c79687c

    Pair it with the compatible prior agent:

    code.olsen.cloud/ai/mission-control-agent:0.47.0@sha256:2a16ffee0b147f6660b12645492c53c4571450da23db29e0b56abbd808c6eced

    Retain the additive schema and pending-user guards. No down migration, data deletion or restore is part of this release. Software Engineer owns image publication, deployment, live objects and original-flow verification after approved publication.

    Full changelog

    Downloads