v0.116.1: ungate /debug + /api/debug from logging.level — the viewer must exist wherever the ring does

Live validation at logging.level=info 404'd the whole debug surface (the
motivating incident's blind spot). Auth unchanged (RequireAuth + CSRF).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6
This commit is contained in:
2026-07-11 17:12:20 +02:00
parent 26a43708b7
commit 458d7e1ebc
4 changed files with 16 additions and 10 deletions
+8
View File
@@ -1,5 +1,13 @@
## Changelog
### v0.116.1 — debug surface ungated from logging.level (2026-07-11) — MinAgent: 0.81.0
Live validation of v0.116.0 caught the last blind spot: `/debug` + `/api/debug/*` (and the nav
item) 404'd/hid unless `logging.level=debug` — the EXACT failure mode of the motivating incident,
still standing in front of the new always-on ring. The debug surface is now available at ANY
logging level (still session-authed via RequireAuth + CSRF); the nav link always renders.
`isDebug()` keeps gating only legacy log EMISSION sites, as designed.
### v0.116.0 — observability pass: always-on debug ring + leveled sweep + agent tab + self-log pull (2026-07-11) — MinAgent: 0.81.0
Controller half of the cross-repo observability task (agent v0.83.0 + hub v0.46.0). Motivating