chore(release): promote main → release (22 commits)

[M3gA-Mind]

Promote the current main into release — 22 commits ahead, no divergence (clean fast-forwardable merge, release carries nothing not already in main).

Cutting staging/prod builds from release after this picks up the accumulated fixes/features below.

Notable changes since the last release cut

• fix(voice): ship the voice domain in the desktop build (Voice transcription unavailable — 'Voice transcription is unavailable in this build' error on latest release #4901) (fix(voice): ship the voice domain in the desktop build (#4901) #4917)
• fix(theme): polish Matrix + HAL 9000 (and other dark) presets to WCAG AA (fix(theme): polish Matrix + HAL 9000 (and other dark) presets to WCAG AA #4897)
• chore(rust): enforce warning-free clippy (chore(rust): enforce warning-free clippy #4872)
• fix(flows): show "awaiting approval" state in runs lists when a run is halted at an approval gate (fix(flows): show "awaiting approval" state in runs lists when a run is halted at an approval gate #4932)
• feat(rewards): surface the Rewards page via a cloud-gated sidebar footer entry (feat(rewards): surface the Rewards page via a cloud-gated sidebar footer entry #4892)
• fix(flows): circuit-breaker counts validate/dry_run body-level ok:false failures (fix(flows): circuit-breaker counts validate/dry_run body-level ok:false failures #4911)
• fix(flows): canvas Accept persists the proposal (accept = review + save) (fix(flows): canvas Accept persists the proposal (accept = review + save) #4893)
• feat(core): compile-time media feature gate (media_generation + image) (feat(core): feature gate — media generation #4804) (feat(core): compile-time media feature gate (media_generation + image) (#4804) #4840)
• fix(flows): correct save_workflow + workflow_builder contract text (disarm/create accuracy) (fix(flows): correct save_workflow + workflow_builder contract text (disarm/create accuracy) #4904)
• fix(chat): don't wipe fresh streaming/tool-timeline on a completed hydrate snapshot (fix(chat): don't wipe fresh streaming/tool-timeline on a completed hydrate snapshot #4903)
• fix(flows): close stale-read race in flows_update disarm + actionable-node reachability (fix(flows): close stale-read race in flows_update disarm + actionable-node reachability #4891)
• fix(flows): exempt workflow proposal tools from tokenjuice compaction (canvas renders ≥4-node graphs) (fix(flows): exempt workflow proposal tools from tokenjuice compaction (canvas renders ≥4-node graphs) #4888)
• fix(flows): live-updating runs lists + row-action cleanup (enable toggle, delete in overflow) (fix(flows): live-updating runs lists + row-action cleanup (enable toggle, delete in overflow) #4890)
• fix(flows): copilot proposals reach the canvas — recognition, race-guard, title (fix(flows): copilot proposals reach the canvas — recognition, race-guard, title #4886)
• fix(flows): save-safety — no silent live-arming on update, flag empty runs, close resume_flow_run HITL bypass (fix(flows): save-safety — no silent live-arming on update, flag empty runs, close resume_flow_run HITL bypass #4889)
• fix(flows): guarantee a terminal state on every flows_build turn (no silent trail-off) (fix(flows): guarantee a terminal state on every flows_build turn (no silent trail-off) #4887)
• feat(flows): workflow-builder agent-friendliness plumbing — schema-aware sandbox, unified draft handles, reference gates (feat(flows): workflow-builder agent-friendliness plumbing — schema-aware sandbox, unified draft handles, reference gates #4881)
• fix(tinyflows): preserve explicit node timeouts, align discover timeout, log cap pins (fix(tinyflows): preserve explicit node timeouts, align discover timeout, log cap pins #4877)

Notes

• Release and main are both at app version 0.61.5; this brings the post-0.61.5 fix/feature work onto release.
• No merge conflicts (release is strictly behind main).
• Standard promotion is also available via the promote-main-to-release.yml workflow dispatch; opening this as a PR for review visibility per request.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: cb5d33b8-c812-4684-96b6-1a72a0813816

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4be17632f0

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Preserve the preview until Accept actually saves

If handleSave fails here (core/network error or validation race), the copilot panel intentionally keeps the proposal card visible for retry, but these lines have already overwritten draftGraph and cleared the preview base. In that failure state, clicking Reject only calls setPreview(null) and no longer restores the pre-proposal graph/title, so the user can reject the still-visible proposal while the canvas remains changed and later save changes they thought they discarded.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Keep outbound approval forced on accepted updates

When accepting a proposal onto an existing flow, this forwards proposal.requireApproval directly to flows_update; if the proposal JSON explicitly has require_approval: false and the graph contains outbound tool_call/http_request/code nodes, the update path honors that flag instead of applying the create-time side-effect floor, so Accept can silently turn off the human approval gate for a live workflow. This is limited to existing-flow Accepts because new draft creation goes through flows_create, which forces approval for outbound graphs.

Useful? React with 👍 / 👎.