🆕 Perforce (P4) Support

New P4 nodes — p4-credentials, p4-sync, p4-print, p4-run — enable Perforce workflows directly from graphs. Includes a p4_connect e2e test against the public demo server, persistent P4 workspaces across graph execution, P4CLIENT/BUILD_REF propagation to agent subprocesses, and SSL-enabled p4 provider with static OpenSSL linking for cross-compiled Linux builds.

🆕 Remote Agent Subsystem

New agent package and CLI command allow remote job execution. Agents register via persistent UUID slots, heartbeat to the orchestrator, and stream logs back with job status. New artifact and workspace nodes integrate with orchestrator-driven uploads and downloads. New --labels flag lets agents advertise capabilities.

🆕 Debug Command & Welcome Menu

New debug subcommand and an interactive welcome menu make first-run and debugging flows more discoverable.

🆕 Repo Download & Pipeline-Only Fetch

workspace-download renamed to repo-download with a backwards-compatible artifact alias. VCS checkout now fetches only the pipeline file instead of the full repo, using go-git as the Git provider.

🆕 Docker Multi-Arch Images

Docker images now build and publish for x64 and arm64 on Linux tag pushes and workflow_dispatch, with multi-arch manifests and native ARM64 runners. Base image switched from Alpine to Ubuntu 24.04 with pwsh preinstalled.

✨ Windows Metrics

Agents on Windows now collect CPU, memory, and network stats.

✨ Schema

locked_by property added to the actfile schema.

🐛 Bug Fixes

• Path Traversal / Goroutine Leak / Data Race — hardened the agent subsystem against path traversal, a goroutine leak, and a data race.
• Lock File Handling — acquireAgentSlot now handles lock file closure errors gracefully.
• Artifact Upload — improved error handling and response body logging; removed upload time limit.
• Slot Acquisition — fixed agent slot acquisition edge case.
• Schema — fixed p4_connect.act schema.

📦 Upgrade Notes

This release is backwards compatible. No modifications to existing graphs are required.