v1.25.0

Summary

• Multi-agent Webchat — Bring several agents into one conversation, with shared context and replies attributed to each participant.
• Organization Knowledge & Skills — A shared Knowledge library brings approved knowledge and reusable skills together, with revision history and per-agent skill selection.
• Linux Sandboxing — Run agents with a private home and restricted filesystem writes, with added protection for Codex credentials from model tools.
• Improved Webchat — Use remote MCP servers and manage agent permissions from the conversation.

Behavior change: Dream execution and staged-content review are temporarily paused while their credential and adoption protections are completed.

Features

• add organization knowledge and managed skills (#322) (5ecb219)
• agent: add Codex Auto-review setting (#407) (022d629)
• agents: add force daemon reassignment (#389) (b151fc9)
• auth: pick the ownership-transfer recipient by org tenure, and show it first (#314) (0c8b112)
• cli: launch the service daemon through the user's login shell (#373) (cebc120)
• collab: authorize agent discovery and A2A by call policy, not channel (#186) (e471f6c), closes #854
• daemon: adopt Linux sandbox runtime (#315) (1d67b93)
• daemon: deliver the trigger message with its sender identity (#305) (2a960b6)
• daemon: enable Claude inner sandbox (#358) (724daba)
• daemon: enable turn-final context refresh by default (#372) (61d6613)
• daemon: harden sandbox reads and shared login (#321) (e055067)
• daemon: implement turn-final context refresh (#359) (8d3318f)
• daemon: make Slack DM target explicit (#331) (d1b8ee1)
• daemon: make Slack status bar configurable (#337) (7b9c72c)
• daemon: mention multiple users with sendMessage (#352) (d1a0e39)
• daemon: tell an agent when its root post forked the conversation (#301) (b776d57)
• daemon: use AgentConnect Codex ACP build (#401) (30045ec)
• enable isolated AgentConnect admin MCP for preset webchat (#290) (b1f5f5a)
• github: link profile after app install (#429) (c9ea069)
• github: name the review entry point on gated Checks (#353) (ffa3089)
• integrations: leave a conversation, or stop listing it, from the console (#330) (c8e4b7a)
• integrations: let any agent switch a channel off (#318) (262dfcd)
• memory: drive Dream from materialized input files (secure Dream A1) (#411) (f2eed7f), closes #36
• sandbox: protect Codex credentials from model tools (#423) (a7e592a)
• session: add Auto to permission controls (#413) (5ca7b19)
• sessions: add GitHub session access UI (#342) (38fad1e)
• sessions: match the viewer's linked Slack identity in session visibility (#299) (abe5a49)
• sessions: sync GitHub repository visibility (#339) (8f10eed)
• sessions: sync Slack conversation access (#320) (3e6eca1)
• skills: unify local and Git installation (#385) (a04c07d)
• web: add related session tree to detail rail (#394) (0ed2d85)
• web: agent filter above the session rail's list (#422) (41e0038)
• web: center the Home greeting and fit the page to one viewport (#361) (3f1fe2e)
• webchat: enable remote MCP via daemon capabilities (#348) (22ba255)
• webchat: membership is a standing mention — all participants respond (#409) (c5cf86b)
• webchat: multi-agent conversations — design + M0/M1 implementation (#402) (217846c)
• webchat: turn-final context refresh for multi-agent conversations (#405) (688ff8d)
• web: install skills from the skills.sh registry (#375) (a4c9181)
• web: merge Auto-review into permission modes (#410) (aff79e4)
• web: move memory into knowledge (#328) (e375c29)
• web: rebuild the console shell as a pure left/right split (#386) (945eb84)
• web: remember organization selection per user (#381) (4e85f4a)
• web: reuse one ownership proof across consecutive links (#313) (a61ed80)

Bug Fixes

• collab: isolate agents by default (#327) (3234b7b)
• collab: keep agent visibility open by default (#333) (a019692)
• control-plane: refresh rc daemon releases sooner (#369) (6c03fe2)
• control-plane: resolve all external session scopes (#362) (b57716f)
• control-plane: serialize cross-instance writes with pg advisory locks (#377) (f9f584d)
• daemon: avoid false long-context cost estimates (#408) (13e291b)
• daemon: give a posted message one canonical thread key (#302) (c25b50b)
• daemon: harden sandbox Unix socket isolation (#392) (f2e8c99)
• daemon: harden workspace skill installation (#356) (b44ce10)
• daemon: limit Claude private home seeding (#384) (0edd899)
• daemon: name what a channel-root post costs in the sendMessage contract (#298) (06c30a9)
• daemon: preserve cached models after probe failure (#363) (1008088)
• daemon: preserve Slack app identity in shared threads (#382) (eb20561)
• daemon: repair sandboxed Claude and Qoder access (#326) (8887f63)
• daemon: respect Claude credential storage (#374) (8b426ef)
• daemon: restart host when sandbox mode changes (#365) (9fa7a68)
• daemon: restart host when skills change (#368) (69d1d6b)
• daemon: route Slack DMs through app conversations (#399) (66fb50c)
• daemon: seed only Claude model cache (#390) (170c332)
• daemon: shorten GitHub PR session titles (#354) (2103c53)
• github: keep public repositories visible (#424) (3d1820b)
• github: require maintainer authorization for triggers (#319) (0be4f45)
• github: scope installation sync to organization (#425) (7074e8b)
• knowledge: exclude archived records by default (#336) (9bae098)
• memory: pause unsafe Dream operations (#345) (fce100a)
• messages: never split a streamed reply mid-sentence (#323) (9cd821a)
• relay: scope Slack event dedup by app (#304) (ae80585)
• runtimes: stop leaking probe temp roots when a runtime outlives its adapter (#309) (fb8dac0)
• sessions: attribute GitHub participants to event actors (#387) (1e4f24b)
• sessions: converge playground startup state (#396) (a47444e)
• sessions: honor Slack public channel access (#341) (1adaf5c)
• sessions: load provider participant avatars (#403) (d5ad32c)
• sessions: preserve profile-link hints (#347) (f57071b)
• sessions: show participant identities (#311) (39a15d1)
• sessions: stop reporting ordinary access outcomes as faults (#351) (1381a21)
• sessions: suggest Slack profile linking (#329) (ef3119b)
• web: admit webchat stream lanes from early tagged frames (#418) (82d5064), closes output#0 #414 #414
• web: align the Home dashboard columns on a shared row height (#393) (2121ae4)
• webchat: make agentconnect-admin actually reachable (#357) (40693b2)
• webchat: stop initialize/tools-list losing the session-registration race (#360) (c084050)
• web: deduplicate daemon lifecycle status (#325) (3860bc8)
• web: don't default Home composer to a not-ready agentconnect preset (#300) (8b31837)
• web: don't redirect to onboarding until every request settled successfully (#306) (2e4dd99)
• web: hide unfinished agent API tab (#378) (f1e8d51)
• web: keep GitHub recovery actionable without auth (#426) (fa090dd)
• web: keep session rail navigation in place (#400) (08d284d)
• web: link bot agents to configuration (#391) (174ce1f)
• web: make a turn's work panel collapsible with no answer text (#317) (3423f40)
• web: merge agent visibility headings (#397) (f81c927)
• web: move approval requests above sessions (#307) (b3a5044)
• web: move managed skills into Skills library (#324) (50da4c1)
• web: move session status into the crumb and de-blink Getting started (#344) (f2ec1f1)
• web: multi-agent live view — work-lane supersession marker + per-participant attribution (#412) (2df7d63)
• web: one word, and one way out, per conversation row (#346) (561f5c4)
• web: only redirect to onboarding when no org of the user has a daemon (#303) (86ac431)
• web: prevent collapsed rail logo overlap (#370) (35f050b)
• web: promote default agent visibility setting (#395) (c519152)
• web: render peer agents on the left in session detail (#414) (0880749), closes post-#409
• web: separate memory from knowledge tabs (#332) (57115ef)
• web: show current user avatar in playground (#398) (b7b773e)
• web: show participant avatars on session hover (#421) (cb0a64c)
• web: show session details on hover (#406) (384c3e7)
• web: show tooltips only for collapsed navigation (#367) (aa78596)
• web: stabilize session participant count (#417) (f37bda3)

Internal

• daemon: remove delegated bwrap remnants (#343) (c9e6473)
• move webchat admin MCP to remote grants (#310) (d745682)

Full Changelog: v1.24.0...v1.25.0