Changeset 0.28.6 (#192)

docs/ROADMAP.md

@@ -30,9 +30,9 @@ v0.9.x–v0.27.5  Foundation → Extensions → Surfaces → Auth     ✅
                   ├─ v0.28.5  Frontend SDK + Pipes      ✅
                   │   (switchboard-sdk.js, pipe/filter
                   │    pipeline, component mounting)
-                  ├─ v0.28.6  Infrastructure
-                  │   (virtual scroll, Helm, task webhook
-                  │    UI, system tasks, model prefs)
+                  ├─ v0.28.6  Infrastructure            ✅
+                  │   (virtual scroll, Helm, system tasks,
+                  │    broadcast, git keygen, model prefs)
                   └─ v0.28.7  Unified Packaging + Task RBAC
                       (.pkg archive, manifest.type,
                        task permission gate pre-Starlark)
@@ -295,27 +295,24 @@ Pipeline wires filters in priority order; any filter can halt the chain.
 - [x] Pipe filter tests: priority ordering, halt semantics, error isolation,
       scoped/unscoped execution
 
-### v0.28.6 — Infrastructure
-- [ ] Virtual scroll for long conversations (prerequisite for heavy task output channels)
-- [ ] KB auto-injection: platform-registered pre-send pipe filter (`_kb-auto-inject`,
-  priority 5), top-K chunk prepend to `ctx.metadata.kb_context`, context budget aware,
-  per-channel toggle. First real validation of the v0.28.5 pipeline architecture.
-- [ ] Helm chart (replaces raw k8s manifests, `helm install switchboard ./chart`)
-- [ ] Per-provider model preferences — finalize: make `provider_config_id` required on
+### v0.28.6 — Infrastructure ✅
+- [x] Virtual scroll for long conversations (prerequisite for heavy task output channels)
+- [x] Helm chart (replaces raw k8s manifests, `helm install switchboard ./chart`)
+- [x] Per-provider model preferences — finalize: make `provider_config_id` required on
   `PUT /models/preferences` (fixes NULL-in-UNIQUE dedup bug), migrate `/models/enabled`
   and `/models/preferences` to `{"data": [...]}` envelope, add integration test coverage
-- [ ] Git credentials settings UI: vault-encrypted per-user credentials, SSH key
-  management, per-workspace remote config. Table exists (`git_credentials`), vault
-  pattern exists — needs settings section and CRUD handler.
-- [ ] `system.announcement` notification type: admin broadcast endpoint
+- [x] Git credentials settings UI: server-side ED25519 key generation (private key
+  vault-encrypted, public key exposed for git host), optional persona binding for
+  commit attribution, settings section with generate/list/copy/delete
+- [x] `system.announcement` notification type: admin broadcast endpoint
   (`POST /admin/notifications/broadcast`), fan-out to all active users via
   `NotifyMany`, admin UI for composing announcements
-- [ ] Task webhook trigger UI: schedule selector gains `webhook` option,
+- [x] Task webhook trigger UI: schedule selector gains `webhook` option,
   trigger URL displayed + copy button, outbound `webhook_url` + `webhook_secret`
   fields in create/edit form, task-to-task chaining documentation in admin UI.
   Backend fully implemented — this is pure admin UI work.
-- [ ] System task type: `task_type: "system"` — built-in Go function registry
-  (`retention_sweep`, `memory_compact`, `session_cleanup`, `staleness_check`).
+- [x] System task type: `task_type: "system"` — built-in Go function registry
+  (`retention_sweep`, `health_prune`, `session_cleanup`, `staleness_check`).
   Admin creates task, picks function from dropdown, sets cron schedule. Executor
   calls registered Go function instead of LLM completion. Replaces the current
   goroutine-based background jobs with visible, configurable, auditable tasks.
@@ -323,6 +320,9 @@ Pipeline wires filters in priority order; any filter can halt the chain.
   **Permanent track** — Go registry is not replaced by Starlark (v0.29.0).
   Core platform ops must not break from bad user code. Admin-only by design
   (no RBAC needed — hardcoded to admin role).
+- KB auto-injection moved to v0.29.0 — built as the reference Go implementation
+  of the server-side filter model alongside Starlark. Ensures the filter
+  architecture is right and performant before user code runs in it.
 
 ### v0.28.7 — Unified Packaging + Task RBAC
 Single `.pkg` archive format for both surfaces and extensions. Manifest
@@ -453,6 +453,12 @@ extension infrastructure (v0.11.0).
         data quality checks, integration sync, cleanup scripts. Editable,
         versionable, sandbox-isolated, permission-gated.
 
+- [ ] KB auto-injection: server-side pre-completion filter (Go built-in,
+      not Starlark). Top-K chunk prepend from channel-bound KBs, context
+      budget aware, per-channel toggle. Reference implementation of the
+      server-side filter model that Starlark filters will mirror. Moved
+      from v0.28.6 to validate alongside the Starlark filter architecture.
+
 ---
 
 ## v0.29.1 — API Extensions