Release v2.23.0

What's Changed

• fix(harness): Claude Code turns 400 against the AI Gateway by @chelojimenez in #2992
• feat(harness): thread resolved harness through chat/eval/session-sim + tag traces by @chelojimenez in #2993
• duplicate servers in incorrect orgs by @ignaciojimenezr in #2995
• feat(harness): route harness MCP through MCPJam (proxy, both planes) — port to main by @chelojimenez in #2996
• exposing MCP tool-returned images to the model by @ignaciojimenezr in #2923
• fix(security): harden harness proxy + computer upload (4 findings from #2996 review) by @chelojimenez in #2998
• feat(harness): surface harness MCP traffic in the Playground Logs panel by @chelojimenez in #3000
• webmcp: expose inspector UI tools to the chat agents by @chelojimenez in #2642
• canniuse.dev pollish by @ignaciojimenezr in #3001
• feat(hosts): default Host Compare to Codex + Claude Code by @IgnacioC44 in #3004
• Remove Default Host Config section from project settings by @ignaciojimenezr in #3012
• feat(models): add Claude Sonnet 5 by @olartgabo in #3015
• feat(org): let members leave from the access restricted screen by @IgnacioC44 in #3018
• Gate Cross-App Access (XAA) auth option behind the xaa flag by @chelojimenez in #3020
• fix(guest-auth): avoid npx.cmd EINVAL on Windows when provisioning Convex env by @olartgabo in #2985
• fix(sidebar): keep notifications popover open when opened from account menu by @olartgabo in #3022
• eval iterations bar by @ignaciojimenezr in #3021
• feat(sidebar): World Cup soccer ball next to the logo by @IgnacioC44 in #3028
• fix(harness): provider-aware dispatch, fail-closed chatbox config, cloud-skills gate by @chelojimenez in #3003
• feat(harness): thread executionScope through the guest Claude Code harness path by @chelojimenez in #2991
• fix: stop autofill clobbering oauth scope fields by @DaleSeo in #3032
• fix(hosts): explain why the Save host button is disabled by @olartgabo in #3026
• fix(oauth-debugger): send configured client_secret in token exchange by @chelojimenez in #3033
• ci(pr-preview): pin workos CLI to 0.17.1 by @chelojimenez in #3035
• Fix OAuth Debugger dropping client_secret for pre-registered clients … by @ignaciojimenezr in #3030
• webmcp: keep the agent conversation alive when a UI tool navigates by @chelojimenez in #3005
• webmcp: approval gating for UI tools (default off, user-toggleable) by @chelojimenez in #3008
• webmcp: catalog polish (prefill-vs-execute wording, deviceType 'fill', policy docs) by @chelojimenez in #3009
• webmcp: SDK-ordering canary + approval resume coverage by @chelojimenez in #3010
• fix(sdk/oauth): honor client_secret_basic with an Authorization header by @chelojimenez in #3037

New Contributors

• @DaleSeo made their first contribution in #3032

Full Changelog: v2.22.1...v2.23.0