Promote v0.21.0 to production

.env.production.example

@@ -74,6 +74,10 @@ OPENROUTER_API_KEY=
 # MOONSHOT_API_KEY=
 # KIMI_API_KEY=
 # MINIMAX_API_KEY=
+# ZAI_API_KEY=
+# ZAI_REGION=global
+# ZAI_CODING_PLAN_API_KEY=
+# ZAI_CODING_PLAN_REGION=global
 # OPENCODE_API_KEY=
 
 # Compute provider. Use docker for a single-host deployment, or

.github/workflows/publish-ghcr.yml

@@ -469,7 +469,7 @@ jobs:
     name: Notify ops repository
     runs-on: ubuntu-latest
     needs: publish
-    if: ${{ github.event_name == 'push' && (github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/main') && vars.ROOMOTE_OPS_REPO != '' }}
+    if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' && vars.ROOMOTE_OPS_REPO != '' }}
     permissions:
       contents: read
     steps:
@@ -480,20 +480,8 @@ jobs:
         run: |
           set -euo pipefail
           : "${GH_TOKEN:?ROOMOTE_OPS_DISPATCH_TOKEN is required}"
-          case "$GITHUB_REF" in
-            refs/heads/develop)
-              event_type=roomote-develop-build
-              image_tag="develop-${GITHUB_SHA:0:8}"
-              ;;
-            refs/heads/main)
-              event_type=roomote-main-build
-              image_tag="main-${GITHUB_SHA:0:8}"
-              ;;
-            *)
-              echo "Unexpected ref for notify-ops: $GITHUB_REF" >&2
-              exit 1
-              ;;
-          esac
+          event_type=roomote-main-build
+          image_tag="main-${GITHUB_SHA:0:8}"
           gh api "repos/${OPS_REPO}/dispatches" \
             -f "event_type=${event_type}" \
             -f "client_payload[image_tag]=${image_tag}" \

CHANGELOG.md

@@ -2,6 +2,28 @@
 
 This file tracks product releases for Roomote (single monorepo version). Automated release entries are prepended by `pnpm run version`.
 
+## 0.21.0 (2026-07-26)
+
+This release expands self-hosted deployment options and inference-provider choice, while making agent activity and automation more reliable and secure.
+
+### Highlights
+
+- Deploy self-hosted Roomote behind private networks and reverse tunnels with supported internal TLS.
+- Add Z.AI and Z.AI Coding Plan as inference providers, with International and China region selection. Thanks to @pridemusvaire for this contribution.
+- Keep task titles, routing, and summaries safely text-only when they process externally supplied input.
+- Inspect the latest response from a subagent while it runs and after it completes.
+
+### Minor changes
+
+- Support internal TLS for self-hosted deployments behind reverse tunnels and private networks, without requiring public DNS or a custom Caddyfile.
+- Add Z.AI and Z.AI Coding Plan as inference providers with International or China region on connect.
+
+### Patch changes
+
+- Restrict non-task OpenCode sessions to text-only output so task titles, routing, and summaries cannot act on instruction-like input.
+- Keep Discord event handling and public-fork pull-request reviews reliable, while allowing self-hosted Docker environments to start on nftables-only hosts.
+- Show the latest response from running and completed subagents, and give Dependabot automation clearer impact analysis and completion reporting.
+
 ## 0.20.1 (2026-07-25)
 
 This release makes chat-driven automation more reliable, keeping Discord tasks moving and report-thread replies connected to their work.

README.md

@@ -84,7 +84,7 @@ cleans up after itself.
 2. **API keys (BYOK).** Paste a key from OpenRouter, Anthropic, OpenAI, xAI,
    Google Gemini, Amazon Bedrock, Vercel AI Gateway,
    Baseten, Together AI, Moonshot AI (Kimi), Kimi for Coding, MiniMax,
-   OpenCode Zen / Go, or GitHub Copilot.
+   Z.AI (including Coding Plan), OpenCode Zen / Go, or GitHub Copilot.
 
 **Sandbox compute:** Modal, E2B, Daytona, Blaxel, and Local Docker.
 
@@ -231,8 +231,8 @@ it runs.
 Two options. Connect your ChatGPT Plus or Pro subscription directly (no API key
 needed), or paste an API key from OpenRouter, Anthropic, OpenAI, xAI, Google
 Gemini, Amazon Bedrock, Vercel AI Gateway, Baseten,
-Together AI, Moonshot AI (Kimi), Kimi for Coding, MiniMax, OpenCode Zen / Go,
-or GitHub Copilot.
+Together AI, Moonshot AI (Kimi), Kimi for Coding, MiniMax, Z.AI (including
+Coding Plan), OpenCode Zen / Go, or GitHub Copilot.
 
 **What sandboxes does it support?**
 Modal, E2B, Daytona, Blaxel, and Local Docker.

SELF_HOSTING.md

@@ -69,6 +69,26 @@ Point `<domain>`, `preview.<domain>`, and `*.preview.<domain>` A records at
 the server first; the installer waits briefly for DNS and Caddy retries
 certificates until the records are in place.
 
+### Private networks and tunnels
+
+When a reverse tunnel or private network terminates public TLS before traffic
+reaches Roomote, use Caddy's internal certificates instead of requesting
+Let's Encrypt certificates:
+
+```sh
+curl -fsSL https://get.roomote.dev | bash -s -- \
+  --domain roomote.internal \
+  --tls-mode internal
+```
+
+`--tls-mode internal` skips public-DNS verification and configures Caddy to
+issue local certificates; it requires `--domain`. Direct private-network
+clients must trust Caddy's local CA, while clients behind a tunnel use the
+tunnel's public certificate. Use `--skip-dns-check` with the default `acme`
+mode only when you know public DNS is not ready yet. The selected mode is
+retained in `/opt/roomote/.env`, so installer reruns and `roomote upgrade`
+preserve it.
+
 Useful flags and env vars: `--version <tag>` pins a release, and
 `--preview-domain <host>` overrides the preview root. Both published images
 are public, so pulls need no credentials. Re-running the installer is safe:
@@ -294,6 +314,9 @@ common provider keys into worker containers:
 - `MOONSHOT_API_KEY`
 - `KIMI_API_KEY` (Kimi for Coding, `kimi-for-coding/...` models)
 - `MINIMAX_API_KEY`
+- `ZAI_API_KEY` (with `ZAI_REGION`: `global` or `china`, defaults to `global`)
+- `ZAI_CODING_PLAN_API_KEY` (Z.AI Coding Plan, `zai-coding-plan/...` models,
+  with `ZAI_CODING_PLAN_REGION`)
 - `OPENCODE_API_KEY`
 
 If your provider uses another env var name, list it in
@@ -582,9 +605,9 @@ using Docker sandboxes. That overlay:
   and, under the default `internet` egress policy, blackholes private and
   cloud metadata ranges plus drops packets destined to the Docker bridge
   gateway (host hairpin) while still allowing public egress via that gateway
-  as next-hop. The gateway drop is installed with `iptables`, so the worker
-  image must ship an iptables binary the host kernel supports (the stock
-  image does); sandbox provisioning fails closed when it is unavailable;
+  as next-hop. The gateway drop automatically selects an nftables or legacy
+  `iptables` backend supported by the host kernel; sandbox provisioning fails
+  closed when neither backend is available;
 - points `DOCKER_WORKER_RELEASE_PATH` at the controller image's packaged worker
   release archive.
 

apps/api/package.json

@@ -18,7 +18,7 @@
   "dependencies": {
     "@aws-sdk/client-s3": "3.1000.0",
     "@aws-sdk/s3-request-presigner": "3.1000.0",
-    "@hono/node-server": "1.19.13",
+    "@hono/node-server": "2.0.5",
     "@hono/trpc-server": "^0.4.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@octokit/openapi-webhooks-types": "^12.1.0",

apps/api/src/handlers/discord/event-gate.ts

@@ -6,6 +6,10 @@ const DISCORD_API_EVENT_DEDUPE_PREFIX = 'discord:api:event:';
 const DISCORD_API_EVENT_DEDUPE_TTL_SECONDS = 7 * 24 * 60 * 60;
 const DISCORD_API_EVENT_PROCESSING_TTL_SECONDS = 5 * 60;
 
+export const discordApiEventLeaseRenewal = {
+  intervalMs: 60 * 1000,
+};
+
 const CLAIM_EVENT_SCRIPT = `
 local existing = redis.call('GET', KEYS[1])
 if existing == 'done' then
@@ -40,6 +44,13 @@ end
 return redis.call('DEL', KEYS[1])
 `;
 
+const RENEW_EVENT_SCRIPT = `
+if redis.call('GET', KEYS[1]) ~= ARGV[1] then
+  return false
+end
+return redis.call('EXPIRE', KEYS[1], ARGV[2])
+`;
+
 function eventKey(eventType: string, eventId: string): string {
   return `${DISCORD_API_EVENT_DEDUPE_PREFIX}${eventType}:${eventId}`;
 }
@@ -96,3 +107,19 @@ export async function releaseDiscordApiEvent(input: {
   );
   return result === 1;
 }
+
+/** Keep an owned lease from expiring while its handler is still running. */
+export async function renewDiscordApiEvent(input: {
+  eventType: string;
+  eventId: string;
+  token: string;
+}): Promise<boolean> {
+  const result = await getRedis().eval(
+    RENEW_EVENT_SCRIPT,
+    1,
+    eventKey(input.eventType, input.eventId),
+    input.token,
+    DISCORD_API_EVENT_PROCESSING_TTL_SECONDS.toString(),
+  );
+  return result === 1;
+}