Promote v1.15.1 to production

AGENTS.md

@@ -63,6 +63,7 @@ This repository is open source. Treat GitHub and other public surfaces as fully
 - Keep equivalent functionality in sync across supported source-control, communication, and sandbox providers whenever applicable. Do not intentionally make provider-specific exceptions unless the user explicitly requests one.
 - When adding or changing a built-in automation, explicitly evaluate whether it needs text-based Additional rules for repository scope, per-repository communication-output routing, and residual workflow/report guidance. Opt in when its output goes to a communication provider and can contain material relevant to different people or teams; exclude inherently global, triage-oriented (except CI Failure Triage), and non-communication-output automations. Keep the eligibility metadata, settings UI, save-time compilation and validation, persisted automation settings, runtime scope/routing enforcement, and prompt propagation aligned.
 - **Schema N-1 rollback guarantee:** Roomote must always be able to roll application code back one release against the current database. Do not drop tables or columns that the previous release still reads or writes in the same release that removes the feature. Stop using the columns in app code first, keep them in `packages/db` with an explicit N-1 comment, and drop them only after the next release is the supported rollback target. See `packages/db/AGENTS.md` for the package-local rules.
+- **Model roles:** `TASK_MODEL_ROLE_DESCRIPTORS` in `packages/types/src/model-provider-config.ts` is the single source of truth for model roles. When adding a role, define its fallback model and reasoning env vars and its fallback runtimes; wire those runtimes through the shared fallback classifier and application path; map subagents in `MODEL_FALLBACK_AGENT_ROLES`; and update the role fallback contract test and `apps/docs/models.mdx`. Do not hard-code role env lists or confuse provider-error fallback with `modelFallback`, which means **Same as coding model** inheritance.
 
 ## Slack message formatting
 

CHANGELOG.md

@@ -2,6 +2,26 @@
 
 This file tracks product releases for Roomote (single monorepo version). Automated release entries are prepended by `pnpm run version`.
 
+## 1.15.1 (2026-10-02)
+
+Roomote 1.15.1 adds resilient model fallbacks, reduces Auto approval prompts, and fixes approval, sessions board, and task-detail edge cases.
+
+### Highlights
+
+- Configure per-role model fallbacks that keep work moving through eligible provider failures and make each switch visible to users.
+- Fewer unnecessary Auto approval prompts.
+- Review the correct arguments when an agent calls the same integration tool several times at once.
+- Keep manually active sessions and human command-style prompts visible in the views where users expect them.
+
+### Patch changes
+
+- Fix tool approvals showing and checking the wrong arguments when an agent calls the same tool several times at once.
+- Add configurable per-role model fallbacks with sticky runtime switching, provider-error retry classification, user-visible notices, notifications, and anonymous telemetry.
+- Keep manually active sessions visible in the sessions board's Active lane.
+- Keep human prompts that begin with commands visible in task details while continuing to hide generated setup and automation prompts.
+- Reduce unnecessary Auto approval prompts for harmless actions and for steps a session's owner already approved.
+- Apply model fallbacks to subagents that use the "Same as coding" model.
+
 ## 1.15.0 (2026-09-30)
 
 Roomote 1.15 makes sessions and automation runs easier to follow while adding opt-in Judgement repository rules, prompt history, and more reliable approval and resume flows.

apps/api/src/handlers/discord/callback-actions.ts

@@ -377,6 +377,7 @@ async function launchClaimedDiscordSuggestion(input: {
               input.triggerId,
             ),
             createAnchoredThread: false,
+            visibleInTranscript: false,
           });
           return fastStart.accepted
             ? {
@@ -468,6 +469,7 @@ async function launchClaimedDiscordSuggestion(input: {
               applicationId: input.applicationId,
               requesterDiscordUserId: input.sender.id,
               launchOwnerUserId: input.senderUserId,
+              visibleInTranscript: false,
               queuedMessage,
               metadata,
               channel: launchChannel,

apps/api/src/handlers/discord/channel-auto-start.ts

@@ -393,6 +393,7 @@ export async function maybeHandleDiscordChannelAutoStart(input: {
         await processDiscordFastAgentMessage({
           ...fastEntry,
           senderUserId: launchOwnerUserId!,
+          visibleInTranscript: true,
         });
         return;
       }
@@ -417,6 +418,7 @@ export async function maybeHandleDiscordChannelAutoStart(input: {
         ...fastEntry,
         senderUserId: automationLaunchUserId,
         delegatedTaskInitiator: initiator,
+        visibleInTranscript: false,
       });
       if (fastStart.accepted) {
         apiLogger.info(

apps/api/src/handlers/discord/fast-agent.ts

@@ -142,6 +142,8 @@ export async function processDiscordFastAgentMessage(
      * turns pass their automation initiator so delegated work keeps automation
      * provenance instead of appearing installer-initiated. */
     delegatedTaskInitiator?: TaskInitiator;
+    /** Visibility comes from the entry surface, not the delegated task initiator. */
+    visibleInTranscript?: boolean;
     onAccepted?: (abort: () => Promise<void>) => void;
     onRejected?: () => void;
   } & DiscordFastAgentSource,
@@ -505,6 +507,9 @@ export async function processDiscordFastAgentMessage(
             applicationId: input.applicationId,
             requesterDiscordUserId: input.sender.id,
             launchOwnerUserId: input.senderUserId,
+            ...(input.visibleInTranscript !== undefined
+              ? { visibleInTranscript: input.visibleInTranscript }
+              : {}),
             ...(input.delegatedTaskInitiator
               ? { initiator: input.delegatedTaskInitiator }
               : {}),

apps/api/src/handlers/discord/index.ts

@@ -1074,6 +1074,7 @@ async function processDiscordGatewayEvent(
       createAnchoredThread: false,
       ...(fastInteraction ? { interaction: fastInteraction } : {}),
       directedAtRoomote: true,
+      visibleInTranscript: true,
     });
     return { ok: true, fastAnswered: true, fastStartedNew: true };
   }
@@ -1107,6 +1108,7 @@ async function processDiscordGatewayEvent(
           isDiscordBotMentioned(message, resolved.botUserId),
         addressedToRoomote: unmentionedReplyAddressedToRoomote,
         peerConversationsEnabled,
+        visibleInTranscript: true,
       });
       return { ok: true, fastAnswered: true, fastContinued: true };
     }
@@ -1172,6 +1174,7 @@ async function processDiscordGatewayEvent(
       ...(reactionTarget ? { anchorMessageId: reactionTarget.messageId } : {}),
       activeTasks: activeRun ? [{ taskId: activeRun.taskId }] : [],
       directedAtRoomote: true,
+      visibleInTranscript: true,
     });
     return { ok: true, fastAnswered: true, fastDefaulted: true };
   }

apps/api/src/handlers/discord/task-launch.ts

@@ -348,6 +348,8 @@ export async function launchDiscordTask(input: {
    * automation-owned launches for bot-authored messages.
    */
   initiator?: TaskInitiator;
+  /** Explicit visibility from the task-launch origin, independent of initiator. */
+  visibleInTranscript?: boolean;
   /**
    * Agent-facing prompt override (e.g. auto-respond channel instructions
    * prepended to the message); the queued message text stays the
@@ -473,6 +475,9 @@ export async function launchDiscordTask(input: {
                 : {}),
             }
           : {}),
+        ...(input.visibleInTranscript !== undefined
+          ? { visibleInTranscript: input.visibleInTranscript }
+          : {}),
       },
     };
 

apps/api/src/handlers/discord/task-orchestration.ts

@@ -77,6 +77,8 @@ export async function startNewDiscordTask(input: {
   launchOwnerUserId?: string;
   /** Attribution override; takes precedence over the default user initiator. */
   initiator?: TaskInitiator;
+  /** Explicit visibility from the task-launch origin, independent of initiator. */
+  visibleInTranscript?: boolean;
   queuedMessage: QueuedCommunicationMessage;
   metadata: DiscordEventCommunicationMetadata;
   channel: DiscordChannelContext;
@@ -245,6 +247,9 @@ export async function startNewDiscordTask(input: {
       provider: input.provider,
       launchOwnerUserId: input.launchOwnerUserId,
       ...(input.initiator ? { initiator: input.initiator } : {}),
+      ...(input.visibleInTranscript !== undefined
+        ? { visibleInTranscript: input.visibleInTranscript }
+        : {}),
       ...(agentPromptText ? { agentPromptText } : {}),
       queuedMessage: {
         ...input.queuedMessage,

apps/api/src/handlers/mcp/native-tool-approvals.ts

@@ -60,6 +60,7 @@ export async function resolveNativeToolApprovalGuard(input: {
     tokenType: input.auth.tokenType,
     resolveActingUserId: () => resolveTaskOrSessionUserIdOrNull(input.auth),
     resolveTaskId: () => resolveRunTokenTaskId(input.auth),
+    requestHeaders: input.requestHeaders,
   });
 
   const inert =

apps/api/src/handlers/mcp/proxy-utils.ts

@@ -1002,6 +1002,7 @@ export function createMcpProxy(config: McpProxyConfig) {
           tokenType: auth.tokenType,
           resolveActingUserId: () => resolveTaskOrSessionUserIdOrNull(auth),
           resolveTaskId: () => resolveRunTokenTaskId(auth),
+          requestHeaders: c.req.raw.headers,
         });
       } catch (error) {
         // Fail closed: an unreadable policy must not let a gated tool run.