Agent Deck 1.16.39 adds assistant bots and unattended-deny controls
Agent Deck 1.16.39 can connect assistant bots over MCP or HTTP with scoped tokens, adds standing orders with an unattended permission-deny path and exposes read-only remote session ownership. It also rebuilds with Go 1.26.11 for a net/http advisory and repairs conductor delivery, session restart and MCP configuration paths.
Why it matters: Assistant-bot connections and standing orders expand unattended authority, while scoped tokens, denial behavior and ownership inspection define whether that authority remains bounded. Monotonic restart identifiers and delivery fixes help operators reconcile…