v1.40.0

1.40.0 (2026-08-07)

Features

• dream: default auto-adopt memories + mine skills (#653 follow-up) (#758) (b89c843)
• web: review session access policy step in getting-started (#760) (23ec0ab), closes settings#session-access

Bug Fixes

• cp: name the Slack error behind a degraded session-access check (#759) (e407b53)
• web: lead the session-access card with GitHub (#757) (3a112ac)

v1.39.0

1.39.0 (2026-08-07)

Features

• web: live-progress work toggle and hover copy buttons in session chat (#756) (b5a33c4)

Bug Fixes

• cp: stop serving a platform audience nobody is syncing any more (#755) (a331ca2)

Internal

• control-plane: squash the bot-metadata fold into the baseline (#754) (70758cc)

v1.38.0

1.38.0 (2026-08-07)

Features

• cp: name outbound client spans and trace Prisma queries (#750) (e4a140e)
• web: include console pages and settings in global search (#695) (e5f0ef8), closes #150 #684 vercel/next.js#69426

Bug Fixes

• improve child reply status guidance (#748) (c5d2fd3)
• web: align notification rail action (#745) (8de2e35)
• web: keep a merged conversation's delegation lineage visible (#743) (c901010), closes #738

Internal

• control-plane: retire the duplicated bot demux fence and a dead migration cursor (#752) (8ee9ad9)
• remove pre-release compatibility scaffolding and stale design docs (#749) (a5a9a59)

v1.37.1

1.37.1 (2026-08-07)

Internal

• control-plane: squash pre-release migrations (#736) (e89a08c)
• cp: consolidate the in-process caches onto lru-cache (#744) (ce5c337)

v1.37.0

1.37.0 (2026-08-06)

Features

• cp: destroy an organization's transit key when it is deleted (#731) (6699e0b)
• cp: per-org secret encryption (scope the SecretCipher seam) (#722) (26520ee)
• web: cut the settings visibility cards down to one line per row (#723) (2fdb549)

Bug Fixes

• oss: use bare localhost for local services (#719) (78d97a2)
• protocol: keep the slack-app-manifest subpath bundler-resolvable (#726) (90324f3)
• web: adapt getting-started checklist to local-mode deployments (#729) (48e571f)
• web: consolidate session access notifications (#735) (1d77928)
• web: drop magenta from agent transcript bubble tones (#728) (d8d651b)
• web: drop the session-access audience column, it restated the switch (#734) (ea940eb)
• web: drop the stale SessionAccessNotice reference (#740) (1c816f3), closes #738 #735 #735
• web: keep the session-access detail reachable without a mouse (#724) (962de32)
• web: stop reporting an unverifiable conversation as invisible (#738) (08e2cce)
• web: widen a session rail whose seeded agent filter collapsed (#733) (549a705)

Internal

• cp: retire the pre-scoping decrypt arm and harden the pass-through (#742) (a361f2b)
• daemon: retire the orchestration tools from the agent tool surface (#732) (09d7613)
• setup: rename tenant admin to setup server (#725) (7c3b27b)
• web: stop tracking the generated next-env.d.ts (#727) (f49cc98)
• write NUL key separators as escapes instead of raw bytes (#741) (c306290), closes #735

v1.36.0

1.36.0 (2026-08-06)

Features

• cp: org-fence the memory, github-installation and daemon-key data layers (#717) (d3a24bf)
• cp: org-fence the session and webchat-conversation data layers (#714) (2799d3c)
• fence relay ingress attribution by tenant (#720) (a2285ab)
• web: give integrations their own page and move Daemons to the rail's foot (#721) (4c6dbb4)

Bug Fixes

• web: move variables below session access (#716) (d4d3b6e)
• web: redirect localhost to canonical origin (#715) (961a4b4)

v1.35.0

1.35.0 (2026-08-06)

Features

• cp: org-fence the MCP, skill-source and knowledge data layers (#712) (0e3cac5)

Bug Fixes

• setup: support Logto Cloud bootstrap (#713) (5b9304b)

v1.34.0

1.34.0 (2026-08-06)

Features

• cp: org-fence the agent data layer (#699) (242a096)
• cp: org-fence the daemon and bot data layers (#704) (4023fe5)
• cp: org-fence the hook data layer (#709) (ad3176c)
• cp: org-fence the integration, channel, and cron data layers (#706) (d6f18bc)
• setup: make Tenant Admin the self-hosting setup surface (#639) (0d837ac)
• web: add notification system for daemon events and session retention (#700) (ec20408)

Bug Fixes

• config: allow internal HTTP Vault origins (#685) (6300ce0)
• cp: keep Logto management API opt-in (#707) (0ecf071)
• discord: isolate root affinity to native threads (#689) (461f591)
• github: link review checks to published results (#694) (3f18328)
• sessions: decouple access from agent visibility (#681) (19384bb)
• setup: adopt existing provider configuration (#690) (cfb9300)
• setup: audit Feishu and Lark apps (#698) (7b85c7b)
• setup: audit regional Logto OAuth connectors (#702) (5da7791)
• setup: correct Tenant Admin configuration audits (#693) (d360c9b)
• setup: derive Logto connector identities (#696) (446b2e4)
• setup: reconcile provider App configuration (#687) (81a4826)
• setup: remove unverifiable provider URL snapshots (#697) (b1b3a49)
• setup: use GitHub manifest email permission (#710) (f33e3ce)
• web: preserve deployment-owned public routes (#688) (d71f703)
• web: surface live webchat tool-call detail and retitles (#691) (1365800)
• web: unify workspace repository access (#703) (edc153d)

Internal

• discord: unify channel and thread coordinates (#683) (b22bb1f)
• setup: share provider app integrations (#684) (e11a40c)

v1.33.0

1.33.0 (2026-08-05)

Features

• evals: make Werewolf actions ordinary messages, and revert the daemon auto-allow widening (#679) (f98d6dc)

Bug Fixes

• daemon: preserve warm sandbox config mount (#680) (bf3a019)

v1.32.0

1.32.0 (2026-08-05)

Features

• daemon: auto-approve the evaluation tools this daemon serves on its own reserved MCP server (#664) (72afda1)
• web: render usage spend-over-time chart with recharts (#672) (106df10)

Bug Fixes

• agent: hard-cut over daemon moves (#677) (fe7a82e)
• feishu: stop session access quota churn (#670) (8376de9)
• report A2A sessions and replies (#676) (43429b3)
• web: compact the webchat MCP approval card and float it above the composer (#669) (fa42b1b)
• web: include related agents in session focus (#678) (27e6303)
• web: make create-org URL field click-through and validate on submit (#675) (9b751ab), closes #553