## GoogleCloudPlatform/scion — nightly-20261004…nightly-20261005

_43 commits._

### Features
- **feat(harness): migrate codex and antigravity to the config.yaml thinking map (#2384)** (e2a21e6)
- **feat: auto-expose ports canonical env source on config PATCH and web UI (#2430)** (b867779)
- **feat(web): add a shared agent store and move the chat palette onto it (#2439)** (972932e)
- **feat: record agent run intent on lifecycle paths (#2422)** (f3aaa6c)
- **feat(k8s): NFS per-agent workspaces for empty-per-agent projects (#2703 P3) (#2419)** (ddc9b33)
- **feat: auto-expose ports resolve from one canonical env source (create path) (#2345)** (5652078)

### Fixes
- **fix(cli): hub-mode correctness and messages bundle (#2445)** (6d22d2d)
- **fix(broker): keep the broker available when agent listing or pings stall (#2450)** (3113bde)
- **fix(sciontool): recover transport source when dispatch-time mint failed (#2454)** (6e61f97)
- **fix(web,hub): web UI correctness bundle (ptone/scion#2855) (#2453)** (4e629ee)
- **fix(hub): allow applied-config-tz-cleanup to re-run as documented (tz-refactor task 18b) (#2444)** (d9cfa5a)
- **fix(web): format scan with no allowlist; chat ages via formatRelative (tz-refactor task 21b) (#2432)** (d5c1f73)
- **agent: fix buildAgentEnv call arity in run_test.go (main build break) (#2431)** (833426e)
- **fix(hub): clear errors when Empty directory per agent can't run on a broker (#2418)** (413a6fb)
- **fix(broker): route existing-agent operations to the agent's recorded runtime (#2423)** (f21eca4)

### Backend
- **messages: remove raw message delivery and keep rejecting tombstones (#2434)** (0bc54fd)
- **hub/store: only the ownership writer changes Project.OwnerID (#2435)** (a985004)
- **keys: honour the agent name filter in the local on-disk agent scan (#2349)** (f8af776)
- **apiclient: rewind the request body before each retry (#2442)** (8eb0a7c)
- **Workspace storage: path guards, subpath_root validation, k8s NFS provisioning state (#2456)** (911d27e)
- **web: project members editor follow-ups (description, source column, role reasons, members group owner) (#2449)** (6ed6d1f)
- **store: unify project members group marker key and migrate legacy markers (#2437)** (819767a)
- **agent delete: per-run run_id, Docker end to end, delete only (#2415)** (8d09ea6)
- **web: render backend-driven agent delete (deleting/failed badges, 202 handling) (#2446)** (d15447c)
- **auth: apply the user access token boundary to lists, delegation and messages (#2436)** (b0ac40a)
- **hub: deny deleting a project's last owner and cascade the user's role bindings (#2414)** (3928c61)
- **conduit: Ed25519 stream grants and authorization mapping (#2410)** (55d2d02)
- **web: stop the mobile chat view bouncing back after send and swipe (#2358)** (0c1ae9b)
- **web: fit the chat app to notched phones and the iOS keyboard (#2348)** (8589de5)
- **cli: opt in to async Hub launch and wait for the agent to start (#2360)** (599449c)
- **T1 async agent create: hub dispatch paths (P1b-3) (#2420)** (4a8268a)
- **runtime: memory dir, env paths and link-mode checks for NFS-home pods (inert) (#2417)** (14e4085)

### Tests
- **test(a2a-bridge): deflake TestCrossReplicaStreamCursor (#2447)** (b54e219)
- **test(cmd): clear ambient SCION_* env in TestMain (#2433)** (ac16e63)
- **test(web): set slow-suite vitest timeouts on the suite, not via vi.setConfig (#2440)** (925df3a)
- **test(hub): real-binary timestamp contract test (SQLite and Postgres) (#2398)** (f9492e2)

### Docs
- **docs: times and timezones reference (tz-refactor task 23) (#2458)** (51be5c7)
- **docs(store,hub): make sorted-list comments self-contained (#2416)** (92c805c)

### Chore
- **ci(docs): install pinned D2 release with checksum instead of install.sh (#2459)** (f02e0b2)
- **ci: bundle E: CI gates and check wiring (#2443)** (0d21570)
- **refactor(hub): retire the runtime-profile timezone (tz-refactor task 13) (#2400)** (c76c6a4)
- **ci: raise pkg/hub SQLite test timeout to 40m (#2378)** (4803ebd)
- **chore: update LATEST.json for nightly-20261004 (#2424)** (c38046d)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/GoogleCloudPlatform/scion?utm_source=github-action)._