[devswha]

Bumps package.json and herdr-plugin.toml to 0.3.48, moves the Unreleased notes under [0.3.48] - 2026-10-04 (with the PR links #403, #405 and #406 lacked), and adds the compare link. Raises the remote PC bundle to 15 (the bridge starts herdr on a stale socket, #405; /api/worktree/create takes agent, #401): push the remote-v15 tag and let the bundle workflow publish before running release.yml.

Carries #393, #376, #403, #405, #402, #400, #397, #406, #401, #407, #408.

🤖 Generated with Claude Code

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

🧰 Additional context used

📚 Code guidelines (2)

.github/REVIEW.md — configured
CONTRIBUTING.md — configured

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Repository: devswha/herdr-web-ui/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: c37fde21-6e66-41e5-926c-fa7cf5d1bd4b

📥 Commits

Reviewing files that changed from the base of the PR and between 4bd041a and ff586be.

📒 Files selected for processing (4)

• CHANGELOG.md
• herdr-plugin.toml
• package.json
• shared/machines.ts

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 5 remain after this review.

---

📝 Summary

Summary by CodeRabbit

• New Features
  • Added a worktree agent picker.
  • Release notices now let you start installation, track progress, and access failure actions.
  • Plan-meter limits can be selected.
• Updates
  • Removed sidebar placement controls.
  • Narrowed phone alerts.
• Bug Fixes
  • Improved recovery from stale bridge sockets on Linux and macOS.
  • Added a retry for failed Windows installer downloads.

Walkthrough

The package and plugin versions change to 0.3.48, and the remote bundle version changes from 14 to 15. The changelog adds the 0.3.48 release entry and updates its comparison links.

Changes

0.3.48 Release

Layer / File(s)	Summary
Release metadata and notes package.json, herdr-plugin.toml, shared/machines.ts, CHANGELOG.md	The package and plugin versions change to 0.3.48. REMOTE_BUNDLE_VERSION changes to 15. The changelog records the release, updates comparison links, and includes release-entry references and the Windows installer retry entry.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: jjliebig, kinetic27

Merge Risk: ⚪ Minimal · up to ff586

The 0.3.48 release metadata and notes are aligned, and bundle version 15 is used in both generated manifests and bridge identity. No concrete release or compatibility risk remains from this change.

Security Architecture Review

Security architecture risk: 🔵 Low · up to ff586

The version bump preserves the inspected authentication, integrity, and bridge-ownership checks. No introduced security bypass was identified. The release still depends on publishing matching remote bundles first; publication success and interrupted-upgrade recovery were not verified.

Retained concerns
No architecture-level concerns identified.

Security review details

Security Blast Radius

• inferred — The compatibility change affects servers selecting remote bundles and remote PCs whose bridges must be updated. Installation remains scoped to the connected SSH account's runtime directories; the inspected change does not add a privileged installation target or new authority grant.

Trust Boundaries and Controls

• observed — Bridge metadata is returned behind the existing access and bridge-token checks. Remote verification sends the descriptor token through an SSH-forwarded endpoint and checks protocol, bundle version, and expected socket identity before accepting the connection.
• observed — Bundle consumers reject mismatched versions and invalid checksums, constrain local asset paths, and verify downloaded bytes against the manifest hash. These checks establish integrity relative to the selected manifest; they do not independently establish the provenance of a published release.

Resilience and Maintainability Implications

• inferred — Version and identity mismatches lead to rejection or an explicit update request rather than accepting an incompatible bridge. This preserves the inspected connection boundary, although recovery from interrupted activation and ownership of retained older runtimes remain operational evidence gaps.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely identifies the release preparation for v0.3.48, which matches the main changes.
Description check	✅ Passed	The description explains the release changes and bundle workflow. It omits the required Validation section and any check results, but the change information is otherwise clear and mostly complete.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 1…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}