Block a user
auth: CallerMiddleware header priority order is undocumented
auth: no audit logging of authentication failures
auth: JWKS cache refresh interval is hardcoded at 1 hour
auth: no rate limiting on authentication failures
auth: silent JWT degradation when Dex is unreachable
brain MCP: accept static Bearer without OAuth challenge for LAN/Tailscale CLI clients
feat: post-create init workflow
feat: post-create init workflow
feat(brain): hybrid BM25+vector search via Qdrant + nomic-embed-text
feat(brain): add Qwen3-Reranker to brain_answer for improved RAG quality
feat: add agent scaffold (context-sync, skills, context tasks)
feat: add agent scaffold (context-sync, skills, context tasks)