From 8bf1a163e40499890d1e07edd7602e0074074d00 Mon Sep 17 00:00:00 2001 From: Kishore Kumar Date: Wed, 14 Oct 2026 06:56:48 +0530 Subject: [PATCH 1/3] docs(changelog): the Oct 13 pickup bullet names the doorbell, not a directory Correction of a claim that never shipped: the readiness directory the Oct 13 entry described was replaced in agentsfleet#750 before that pull request merged. A mark now signals every daemon which partition it sits in, one channel per partition, and the next lease poll looks there. Edited in place at Indy's call rather than appended, since no deployment ever ran the directory. Co-Authored-By: Claude Opus 5.5 --- changelog.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/changelog.mdx b/changelog.mdx index efc7e8f..3eb1743 100644 --- a/changelog.mdx +++ b/changelog.mdx @@ -25,7 +25,7 @@ description: "Stay up to date with the latest agentsfleet product updates, new f ## What's new - - **Fresh work is found on the next poll** — marking a fleet ready also names its partition in one readiness directory, which every lease poll reads first. The poll still visits the sixteen partitions in turn, so a lost directory entry costs the old wait and never the work. + - **Fresh work is found on the next poll** — marking a fleet ready also signals every daemon which partition it sits in, and each daemon's next lease poll looks there beside the partition it was due to visit. The poll still visits the sixteen partitions in turn, so a lost signal costs the old wait and never the work. - **The live tail shows its first line at once** — a run's first activity frame, and its first answer chunk, post without waiting for the 250 ms batch. - **Runner workers poll a quarter second apart** — four workers on the one-second idle interval no longer poll at the same instant. - **Each lease logs where its time went** — `lease_completed` and `lease_failed` in the runner journal carry `wall_ms`, `bundle_ms`, `memory_ms`, `sandbox_ms`, `model_ms`, `tools_ms`, `report_ms`, and `first_token_ms`. A segment the lease never reached is left off the line. From f70504fbac07cf8605a793e2b96b074bfdfa9de4 Mon Sep 17 00:00:00 2001 From: Kishore Kumar Date: Wed, 14 Oct 2026 12:10:13 +0530 Subject: [PATCH 2/3] docs: logout reaches DELETE /v1/auth/sessions, and an unsafe identity base refuses boot Pairs with agentsfleet#750; the nav entry and the openapi drift check match that branch's public/openapi.json, so merge this after #750. Co-Authored-By: Claude Opus 5.5 --- changelog.mdx | 10 ++++++++++ docs.json | 2 +- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/changelog.mdx b/changelog.mdx index 3eb1743..88257a7 100644 --- a/changelog.mdx +++ b/changelog.mdx @@ -7,6 +7,16 @@ description: "Stay up to date with the latest agentsfleet product updates, new f agentsfleet is in **stealth-mode testing** and pre-production. APIs and agent behavior may change between releases without long deprecation windows. Email [agentsfleet@agentmail.to](mailto:agentsfleet@agentmail.to) if you want a hand calibrating an agent or to join as a design partner. + + ## Logout ends its own unfinished sign-ins, and the daemon refuses an unsafe identity base + + The endpoint that aborts a person's unfinished sign-ins has a path that says whose they are, `agentsfleet logout` can now reach it, and the daemon refuses to start with an identity provider base its secret key cannot safely travel to. + + - **Aborting your unfinished sign-ins is `DELETE /v1/auth/sessions`** — the route that ends sign-ins you approved in the browser and never finished in a terminal moved from `/v1/auth/sessions/all`, which read as every session, to the collection itself. It only ever touches your own sign-ins. The old path is gone. + - **`agentsfleet logout` aborts your unfinished sign-ins** — the route now accepts your own command-line credential as well as a browser session, so logout's abort no longer fails with `401`. A tenant API key is still refused. + - **The daemon refuses an unsafe `CLERK_API_BASE`** — every capability read sends the identity provider's secret key to this base, so the daemon now starts only when it is `https`, or `http` on a loopback host for local work. + + ## Lease timings measure pickup, and model tables read providers by name diff --git a/docs.json b/docs.json index 9e16601..24a0ed3 100644 --- a/docs.json +++ b/docs.json @@ -134,7 +134,7 @@ "PATCH /v1/auth/sessions/{session_id}/approve", "POST /v1/auth/sessions/{session_id}/verify", "DELETE /v1/auth/sessions/{session_id}", - "DELETE /v1/auth/sessions/all", + "DELETE /v1/auth/sessions", "POST /v1/auth/identity-events/clerk", "POST /v1/cli-credentials", "DELETE /v1/cli-credentials/{id}" From 93d37937687461106c9096061a985984f5e171fb Mon Sep 17 00:00:00 2001 From: Kishore Kumar Date: Thu, 15 Oct 2026 12:51:05 +0530 Subject: [PATCH 3/3] docs(changelog): the wake-failure metric bullet names the doorbell The Oct 13 entry named `agentsfleet_fleet_ready_hint_failures_total` and described readiness-directory commands. The daemon exports `agentsfleet_fleet_ready_wake_failures_total`, counting doorbell rings and peeks past their 100 ms deadline and gaps a replica missed, labelled `ring`, `peek` or `gap` (afd_observability metrics/declared/fleet.rs). Co-Authored-By: Claude Opus 5.5 --- changelog.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/changelog.mdx b/changelog.mdx index 88257a7..815d2a1 100644 --- a/changelog.mdx +++ b/changelog.mdx @@ -40,7 +40,7 @@ description: "Stay up to date with the latest agentsfleet product updates, new f - **Runner workers poll a quarter second apart** — four workers on the one-second idle interval no longer poll at the same instant. - **Each lease logs where its time went** — `lease_completed` and `lease_failed` in the runner journal carry `wall_ms`, `bundle_ms`, `memory_ms`, `sandbox_ms`, `model_ms`, `tools_ms`, `report_ms`, and `first_token_ms`. A segment the lease never reached is left off the line. - **The daemon logs how long an event waited** — `runner_lease_issued` carries `queue_wait_ms`, from the event's admission to its lease on the daemon clock. - - **Two new metrics** — `agentsfleet_lease_poll_dragonfly_commands_total` counts Dragonfly commands per lease poll, two when idle. `agentsfleet_fleet_ready_hint_failures_total` counts readiness-directory commands that failed or passed their 100 ms deadline, by `kind`. + - **Two new metrics** — `agentsfleet_lease_poll_dragonfly_commands_total` counts Dragonfly commands per lease poll, two when idle. `agentsfleet_fleet_ready_wake_failures_total` counts doorbell rings and peeks that failed or passed their 100 ms deadline, and gaps where a daemon missed rings, by `kind`: `ring`, `peek`, or `gap`. - **A refused write tells the agent not to retry it** — the refusal for a request no rule admits, and for a secret the fleet does not have, now says the run's rules are fixed, so another path, API, or credential will be refused the same way. - **Provider names read the way vendors write them** — `Fireworks`, `OpenRouter`, `NEAR AI`, and `Atlas Cloud` in the model picker and in both model tables, in one badge style. - **Fleet library tables end at their last row** — the pagination bar sits under the rows, as it does on the Models table.