Features
- Update opencode image from 1.19.4 to 1.19.5 (#1857, @app/kelos-bot)
- The Console now supports optional Web Push notifications for Session completion, failures, and input requests while the web app is closed or suspended. Enable consoleServer.webPush with a dedicated subscription-storage namespace, a persistent VAPID key Secret, and an operator contact URL, then reopen the Console with browser notifications enabled to register the device. On iPhone and iPad, use the installed Home Screen web app. (#1865, @gjkim42)
- Update claude-code image from 2.1.314 to 2.1.316 (#1864, @app/kelos-bot)
- Update claude-code image from 2.1.312 to 2.1.314 (#1862, @app/kelos-bot)
- Update codex image from 0.165.0 to 0.166.0 (#1863, @app/kelos-bot)
- Bundled agent images include passwordless sudo by default, allowing agents and workspace setup commands to install system packages when Pod security settings permit it. Agents continue to start as UID 61100. (#1861, @gjkim42)
- Update gemini image from 0.65.0 to 0.66.0 (#1850, @app/kelos-bot)
- Update codex image from 0.164.0 to 0.165.0 (#1849, @app/kelos-bot)
- Update claude-code image from 2.1.311 to 2.1.312 (#1848, @app/kelos-bot)
- The Console now supports suspending and resuming automatic task creation from TaskSpawner details. Existing Tasks continue running, and manual task runs remain available while a TaskSpawner is suspended. (#1847, @gjkim42)
- Update claude-code image from 2.1.310 to 2.1.311 (#1846, @app/kelos-bot)
Bug Fixes
- When Console Web Push is enabled, kelos install now creates its storage namespace and persistent VAPID signing Secret, validates existing keys, and preserves them across upgrades. The development Console enables Web Push for background Session notifications; reopen the installed Home Screen app after deployment to register. (#1866, @gjkim42)
- The console displays readable turn finish times, including in retained history. Live turn separators show finish times before their durations. Full timestamps are accessible on hover, keyboard focus, or tap, and failed and interrupted turns are labeled explicitly. (#1858, @gjkim42)
- The Helm chart now installs the controller manager, its webhook Service, Certificate, Issuer, leader-election RBAC, and the telemetry CronJob into the Helm release namespace instead of always using
kelos-system. The chart rendersNamespace/kelos-systemonly when the release namespace iskelos-system; other release namespaces must already exist or be created with--create-namespace. Releases installed intokelos-systemandkelos installare unaffected. (#1823, @gjkim42) - Action required for releases installed into a namespace other than
kelos-system: the upgrade moves these resources into the release namespace and deletes thekelos-systemnamespace, including anything else in it, unless you first runkubectl annotate namespace kelos-system helm.sh/resource-policy=keep. The telemetry installation ID is regenerated. Upgrade in one step with--set crds.install=trueinstead of the two-phase flow; if the CRDs are managed outside Helm, adopt them into the release first. Withcrds.install=false, installs and upgrades now fail when the existingtasks.kelos.devCRD sends conversion requests to a namespace other than the release namespace. See "Release Namespace" in the chart README. (#1823, @gjkim42)