diff --git a/CHECKLIST.md b/CHECKLIST.md
index 2f2b009..e0de2eb 100644
--- a/CHECKLIST.md
+++ b/CHECKLIST.md
@@ -5,7 +5,7 @@
 ## Работает сейчас
 
 - [x] Go server, SQLite/WAL, Docker/Compose и `/healthz`.
-- [x] Go agent 0.6.6, heartbeat, команды, backoff и OpenWrt init integration.
+- [x] Go agent 0.6.7, heartbeat, команды, backoff и OpenWrt init integration.
 - [x] APK/IPK и LuCI-пакет: OpenWrt 24.10/25.12 в основном релизе,
   OpenWrt 21.02/22.03/23.05 в ручном legacy workflow.
 - [x] Multi-user, роли admin/user, владение и передача роутеров.
diff --git a/RELEASES.md b/RELEASES.md
index 2fdc1ec..9016f3d 100644
--- a/RELEASES.md
+++ b/RELEASES.md
@@ -29,7 +29,7 @@ production upgrade even when the release is marked compatible.
 
 ## Agent releases
 
-Tags use `agent-vMAJOR.MINOR.PATCH`, for example `agent-v0.6.6`.
+Tags use `agent-vMAJOR.MINOR.PATCH`, for example `agent-v0.6.7`.
 
 An agent release contains the Go runtime, LuCI application and OpenWrt IPK/APK packages.
 Before tagging, the tag version must match `agentVersion` in the Go source and
@@ -40,7 +40,7 @@ OpenWrt 21.02, 22.03 and 23.05 are a manual legacy tier that extends an existing
 release without blocking current packages. Run it after the tagged workflow completes:
 
 ```sh
-gh workflow run build-legacy.yml -f agent_tag=agent-v0.6.6
+gh workflow run build-legacy.yml -f agent_tag=agent-v0.6.7
 ```
 
 The LuCI application is shipped as part of the router bundle. It can retain its own package
@@ -66,8 +66,8 @@ transition period; it should not silently reuse `v1`.
 git tag -a server-v0.8.1 -m "OpenWrt RMM Server 0.8.1"
 git push origin server-v0.8.1
 
-git tag -a agent-v0.6.6 -m "OpenWrt RMM Agent 0.6.6"
-git push origin agent-v0.6.6
+git tag -a agent-v0.6.7 -m "OpenWrt RMM Agent 0.6.7"
+git push origin agent-v0.6.7
 ```
 
 Pushing a server tag publishes the container image and creates a GitHub Release. Pushing
diff --git a/ROADMAP.md b/ROADMAP.md
index af92cfe..5d3adfc 100644
--- a/ROADMAP.md
+++ b/ROADMAP.md
@@ -1,6 +1,6 @@
 # OpenWrt RMM — актуальный roadmap
 
-Актуализировано: 2026-07-30. Текущая стабильная линия агента: `0.6.6`.
+Актуализировано: 2026-07-30. Текущая стабильная линия агента: `0.6.7`.
 
 ## Цель продукта
 
@@ -112,7 +112,7 @@ OpenWrt через исходящее соединение агента. Пол
 
 ## Ближайший приоритет
 
-1. Завершить и проверить `agent-v0.6.6`, при необходимости добавить legacy-пакеты,
+1. Завершить и проверить `agent-v0.6.7`, при необходимости добавить legacy-пакеты,
    развернуть server `0.8.1` и проверить свежие SSH/LuCI-сессии.
 2. Развернуть и проверить notification release на production.
 3. Добавить активное подтверждение проводных клиентов, webhook и quiet hours, затем
diff --git a/agent/README.md b/agent/README.md
index fef4284..5ae8bf3 100644
--- a/agent/README.md
+++ b/agent/README.md
@@ -1,6 +1,6 @@
 # OpenWrt RMM Agent
 
-Current stable Go agent: `0.6.6`. It reports runtime health, pending command results,
+Current stable Go agent: `0.6.7`. It reports runtime health, pending command results,
 and the last heartbeat transport error after connectivity is restored. Its OpenWrt
 dependency uses the virtual `ip` provider, so either `ip-tiny` or `ip-full` can satisfy it.
 Production package upgrades restart an already running agent so the new binary takes effect.
diff --git a/agent/go/cmd/rmm-agent/main.go b/agent/go/cmd/rmm-agent/main.go
index 0e9ba6e..0d2ca96 100644
--- a/agent/go/cmd/rmm-agent/main.go
+++ b/agent/go/cmd/rmm-agent/main.go
@@ -24,7 +24,7 @@ import (
 	"time"
 )
 
-const agentVersion = "0.6.6"
+const agentVersion = "0.6.7"
 
 type agentRuntimeHealth struct {
 	StartedAt            time.Time
diff --git a/agent/go/cmd/rmm-agent/main_test.go b/agent/go/cmd/rmm-agent/main_test.go
index b02b978..c4b63b2 100644
--- a/agent/go/cmd/rmm-agent/main_test.go
+++ b/agent/go/cmd/rmm-agent/main_test.go
@@ -12,7 +12,7 @@ import (
 )
 
 func TestAgentVersionIsStable(t *testing.T) {
-	if agentVersion != "0.6.6" {
+	if agentVersion != "0.6.7" {
 		t.Fatalf("unexpected agent version %q", agentVersion)
 	}
 }
diff --git a/agent/package/luci-app-rmm-agent/README.md b/agent/package/luci-app-rmm-agent/README.md
index 4dba03a..8c76d2c 100644
--- a/agent/package/luci-app-rmm-agent/README.md
+++ b/agent/package/luci-app-rmm-agent/README.md
@@ -67,7 +67,7 @@ application to the router. Do not copy or install the shell runtime at the same
 cd dist/rmm-openwrt-25.12.4-ramips-mt7621
 sha256sum -c SHA256SUMS
 scp \
-  rmm-agent-go-production-0.6.6-r1.apk \
+  rmm-agent-go-production-0.6.7-r1.apk \
   luci-app-rmm-agent-0.2.1-r2.apk \
   root@ROUTER_IP:/tmp/
 ```
@@ -76,7 +76,7 @@ Then install the locally built, unsigned packages over SSH:
 
 ```sh
 apk add --allow-untrusted \
-  /tmp/rmm-agent-go-production-0.6.6-r1.apk \
+  /tmp/rmm-agent-go-production-0.6.7-r1.apk \
   /tmp/luci-app-rmm-agent-0.2.1-r2.apk
 /etc/init.d/rpcd restart
 /etc/init.d/uhttpd restart
diff --git a/agent/package/rmm-agent-go-production/Makefile b/agent/package/rmm-agent-go-production/Makefile
index 978286d..4a42584 100644
--- a/agent/package/rmm-agent-go-production/Makefile
+++ b/agent/package/rmm-agent-go-production/Makefile
@@ -2,7 +2,7 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=rmm-agent-go-production
-PKG_VERSION:=0.6.6
+PKG_VERSION:=0.6.7
 PKG_RELEASE:=1
 
 PKG_MAINTAINER:=RMM OpenWrt
diff --git a/agent/package/rmm-agent-go/Makefile b/agent/package/rmm-agent-go/Makefile
index 2889a40..8326788 100644
--- a/agent/package/rmm-agent-go/Makefile
+++ b/agent/package/rmm-agent-go/Makefile
@@ -2,7 +2,7 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=rmm-agent-go
-PKG_VERSION:=0.6.6
+PKG_VERSION:=0.6.7
 PKG_RELEASE:=1
 
 PKG_MAINTAINER:=RMM OpenWrt
diff --git a/docs/package-repository.md b/docs/package-repository.md
index a5463d9..65ae4c9 100644
--- a/docs/package-repository.md
+++ b/docs/package-repository.md
@@ -75,11 +75,11 @@ versions.
 
 To extend the latest agent release with signed OpenWrt 21.02, 22.03 and 23.05 packages,
 run **Actions → Build legacy OpenWrt packages → Run workflow** from the default branch
-and enter its existing tag, for example `agent-v0.6.6`. The same operation is available
+and enter its existing tag, for example `agent-v0.6.7`. The same operation is available
 through GitHub CLI:
 
 ```sh
-gh workflow run build-legacy.yml -f agent_tag=agent-v0.6.6
+gh workflow run build-legacy.yml -f agent_tag=agent-v0.6.7
 ```
 
 Run it only after the main agent release has completed. The legacy workflow:
diff --git a/web/app.js b/web/app.js
index 1b68114..4a373e9 100644
--- a/web/app.js
+++ b/web/app.js
@@ -38,7 +38,7 @@ const state = {
 let eventSource = null;
 let liveRefreshTimer = null;
 
-const EXPECTED_AGENT_VERSION = "0.6.6";
+const EXPECTED_AGENT_VERSION = "0.6.7";
 
 const els = {
   loginView: document.querySelector("#loginView"),