chore(release): cut 0.1.27

[jrob5756]

Release 0.1.27

Prepares the v0.1.27 release. Previous tag: v0.1.26 (2026-07-27).

Commit audit

All 19 commits in v0.1.26..main were audited and given an explicit disposition — no subset, no silent omissions.

Commit	Subject	Disposition
d7f3151	docs(readme): mention the ACA provider (#341)	Internal (docs)
ff7ed5a	fix(executor): validate nested array item output schemas recursively (#337)	Fixed — entry added
f6b227a	feat(claude-agent-sdk): support workflow MCP servers (#335)	Added — already present
67e42a8	fix(providers): recover from schema-shape failures (#343)	Added/Fixed — already present (5 entries)
774deaf	chore(deps): bump postcss (#339)	Internal (deps)
b24d4ed	feat: skills — opt-in knowledge bases (#180)	Added — entry added (base feature was undocumented)
c8fad5c	fix(skills): enforce capabilities.skills in validate (#351)	Folded into the base skills entry (gap never shipped)
f39bd63	feat(claude-agent-sdk): honor working_dir (#348)	Added — already present
96bdf6b	fix(claude-agent-sdk): native skills, no ambient inherit (#352)	Changed/Fixed — already present
8f95a8f	fix(mcp): keep connection cleanup in owner tasks (#353)	Fixed — entry added
e65d845	fix(engine): ensure_ascii=False in grader prompts (#356)	Fixed — entry added
3c5df57	feat(web): sub-workflow nodes expandable before they run (#360)	Added — entry added
5dc2002	fix(web): inline sub-workflow resolves to newest invocation (#361)	Fixed — entry added
08bf892	refactor(providers): run Claude through Pydantic AI (#355)	Changed — entry added
c9c20ed	chore(deps): bump cryptography 48.0.1 → 50.0.0 (#366)	Internal (deps)
88a3e34	feat(skills): paths, SKILL.md validation, injection bounds (#350)	Added/Fixed — already present
d2bbe3b	fix(dashboard): navigate to any historical sub-workflow iteration (#365)	Fixed — entry added
7a29b8b	fix(engine): drop tracebacks from fail-open warning logs (#357)	Fixed — entry added
d5362d3	feat(skills): discover installed user/project/plugin skills (#362)	Added — already present

9 new changelog entries were written; the pre-existing [Unreleased] entries were reviewed and kept as-is.

The most significant gap: #215 landed the base skills: feature (runtime.skills, per-agent skills:, the bundled conductor skill, capabilities.skills) with no changelog entry at all. Every existing skills entry — discovery, path entries, injection bounds, native loading — described refinements of a feature that had never been announced. That entry now leads the Added section.

Changelog summary

Added — the skills: feature and its bundled conductor knowledge base; skill discovery from installed personal/project/plugin locations; filesystem paths in skills:; runtime.skill_injection budgets; claude-agent-sdk MCP-server and working_dir support; conservative scalar-wrapper unwrapping, recoverable non-object JSON, and the agent_parse_recovery event; dashboard sub-workflow nodes expandable before they run.

Fixed — nested array item schemas now enforced in output:; MCP connections closed by their owning task; non-ASCII output no longer over-truncated before semantic validation; inline sub-workflow expansion follows the live run across loop-backs; every historical sub-workflow iteration reachable from the dashboard; no more tracebacks on handled fail-open paths; malformed SKILL.md no longer fails silently; several parse-recovery fixes.

Changed — the claude provider now runs through Pydantic AI (adds a required pydantic-ai>=1.44.0 dependency, and claude now streams); claude-agent-sdk loads skills natively and no longer inherits ambient MCP config; claude-agent-sdk>=0.2.82 floor.

Two entries carry explicit behavior-change callouts: nested array validation now fails workflows that were silently violating their own declared schema, and claude-agent-sdk agents stop inheriting ambient CLAUDE.md / settings / hooks.

Validation

Gate	Result
make check (ruff check + format + ty)	✅ clean
make test	✅ 4871 passed, 29 skipped, 8 deselected
make validate-examples	✅ 39/39 successful, exit 0

Lockfile note

uv lock re-resolution normalized away a redundant marker on secretstorage's own dependency edges (cryptography / jeepney lost sys_platform != 'win32'). This is a no-op for the resolved install set: secretstorage is only reachable via keyring under marker = "sys_platform == 'linux'", where != 'win32' is always true. Verified that uv lock on unmodified main is a no-op, so this surfaces only on re-resolution and is not a dependency change. Otherwise uv.lock contains only the project-version bump.

Diff scope

Only CHANGELOG.md, pyproject.toml, and uv.lock.

Next step

Merging this PR will be followed by tagging the merge commit v0.1.27 and pushing it, which triggers .github/workflows/release.yml to build and publish the GitHub Release.