Release v2.40.0

What's Changed

• docs: stop telling users to click "Create ngrok tunnel" by @chelojimenez in #4037
• ops(alerts): enable M2 — MCPJam-fault error monitor (WARN, bake tier) by @chelojimenez in #4031
• ops(alerts): M2 pages from day one — drop the WARN bake by @chelojimenez in #4038
• Launch readiness: make /api/v1 failures visible (D1–D3) by @chelojimenez in #4032
• fix(telemetry): attribute the two routes M2 was blind to by @chelojimenez in #4039
• feat(user-testing): create scenarios through the environment substrate by @chelojimenez in #4030
• oauth: report the server's real reason when a token request fails by @ZeHuari in #4006
• fix(server-connections): the owner could not claim their own handoff link by @chelojimenez in #4040
• fix(nav): resolve unified-sessions-enabled so the Sessions item can appear by @chelojimenez in #4041
• chore(production-scoring): drop the worker flag — one switch, not two by @chelojimenez in #4042
• Evals: one versioned evaluation contract (Tranche 1) by @chelojimenez in #4044
• Launch guardrails: 429 transport + gateway limiter, and the OpenAPI A-chain by @chelojimenez in #4045
• Mirror the journeyRunsPerDay gate, and catch the next phantom path parameter by @chelojimenez in #4047
• search_sessions: one search operation, adapted per surface by @chelojimenez in #4049
• Evals Tranches 2–4: run comparison + comparative gates, hosted corpus lock, @mcpjam/vitest by @chelojimenez in #4048
• changesets by @ignaciojimenezr in #4051
• Rename chatbox to scenario by @chelojimenez in #4050
• json-tree: stop unbounded recursion past defaultExpandDepth by @ZeHuari in #3987
• Fix Not connected crash when a widget's tool call fails after teardown by @ignaciojimenezr in #4054
• Prevent translated server dialog teardown crash by @ignaciojimenezr in #4056
• Keep OAuth failure diagnostics visible by @ignaciojimenezr in #4053
• fix(github-checks): skip availability query for guests by @ignaciojimenezr in #4057
• Fix the false "This chat changed elsewhere" detach and the silent turn drops behind it by @chelojimenez in #4069
• fix(mcp-apps): report the declared CSP so Apps render in User Testing by @chelojimenez in #4070
• User Testing: one create flow, and an editable setup without Environments by @chelojimenez in #4067
• Stop silently dropping every message after a failed detach by @chelojimenez in #4072
• fix(chat): Stop no longer claims the reply could not be saved by @chelojimenez in #4073
• docs: update README banner image by @sophiemarinavo in #4074
• fix(evals): redact credentials at the eval reporting sinks by @chelojimenez in #4075
• Evals W0.1a: canonical contract types, a versioned suite-file schema, and declared case identity by @chelojimenez in #4076
• test(github-checks): pin the sandbox teardown guarantee, and fix a stale claim by @chelojimenez in #4077
• fix(billing): limit-wall upgrade path, rebased on main by @ignaciojimenezr in #4052

New Contributors

• @sophiemarinavo made their first contribution in #4074

Full Changelog: v2.39.0...v2.40.0