v2.11.0

Summary

• Single Sign-On — Self-hosted deployments can sign in through their own identity provider over OIDC or SAML, without configuring a social provider. Setup Server guides you through creating the connector and entering the provider's details.
• Redesigned Webchat Turns — Agent answers read as prose under a single work line that shows what the agent is running and how long it took, and approvals appear inside the turn that asked for them. Coordinator task cards open the task expanded over the conversation.
• Agent Environment Variables — Agents can set their own plain environment variables through the admin MCP updateAgent tool.

This release also fixes Slack Code channel diffs, task replies landing in the wrong thread, coordinator tasks missing admin tools in webchat, and another agent's Slack posts showing as a raw bot ID.

Features

• setup: sign in through an enterprise OIDC or SAML SSO connector (#3625) (731056c), closes #3586
• web: a task card opens its task expanded over the coordinator (#3632) (d1712ed)
• web: agent turns read as prose under one work line, and their approvals sit in the turn that asked (#3601) (9d7822f)

Bug Fixes

• daemon: a console message to a channel coordinator opens its task in the message's thread (#3637) (61c5535)
• daemon: a console message to a channel coordinator posts at the channel's top level (#3635) (4fee839)
• daemon: a live conversation names the command a tool is running, not just "Terminal" (#3603) (b7899c2)
• daemon: a regenerated answer keeps the work it already did in a live conversation (#3605) (73fb078)
• daemon: accept blank coordinator sendMessage fields on every action (#3623) (11b99ed)
• daemon: diff a Code channel against the base branch, not the session's first turn (#3631) (23fa877), closes #3611
• daemon: ignore Slack notices from the own bot user (#3616) (c572baa), closes #3613
• daemon: preserve task reply destinations across asynchronous wakes (#3618) (b7be814), closes #3612 #3613 #3614
• daemon: route late join outcomes to the held Code channel (#3615) (775e815), closes #3612
• daemon: show exact agent mentions in conversation context (#3621) (fe141e0)
• mcp: updateAgent sets an agent's plain environment variables (#3619) (b120090)
• setup: an SSO connector needs an email domain before it can sign anyone in (#3628) (d387323), closes #3586
• setup: call OIDC and SAML sign-in "Single sign-on", not "Enterprise SSO" (#3634) (d5b87c5), closes #3586
• show another AgentConnect agent's Slack post as that agent (#3636) (6b651f6)
• web: a finished live turn reads its own duration instead of guessing from step times (#3608) (da47648), closes #3607
• web: a finished turn's time holds when the next prompt is sent or its answer is regenerated (#3606) (a340fda), closes #3604
• web: a live agent turn names the command it runs and keeps its time when it finishes (#3602) (c2a7205)
• web: a second agent's turn measures its time from the prompt it answers (#3607) (9807cc1), closes #3606
• web: a task thread expands the dock beside the conversation, as the design draws it (#3598) (6794bfc)
• web: a task's thread draws agent turns the way the session page does (#3620) (8b0bd94)
• web: a turn header fits the task thread's narrow column (#3622) (49f4cd1), closes #3620
• web: a webchat shows one connection notice and drops it once reconnected (#3626) (72a3d69)
• web: an approval reads after what the agent said before asking, and a turn's time no longer jumps (#3604) (25d7bd3)
• web: an expanded task is not covered by the side panel's drawer (#3633) (57fcb77), closes #3632
• web: an expired session returns to the page it expired on, so an OAuth consent request survives sign-in (#3600) (06d0653)
• web: an open webchat page offers Stop for a turn started elsewhere (#3617) (161bfb7)
• web: another agent in a task thread speaks as itself (#3599) (18289fd)
• web: call an agent's model credential choice Model sign-in (#3630) (fae3ca1)
• webchat: coordinator tasks get the admin MCP, not the coordinator (#3627) (cf46082), closes #3609
• web: recover expired sessions and failed organization loads (#3624) (4b24816)
• web: the OAuth consent screen shows where approving sends you (#3610) (16b6f14)

Internal

• control-plane: reserve the mobile org slug for a gateway-owned console prefix (#3597) (ffa2928)
• update agent-browser runtime pin to 0.41.2 (#3596) (1dabc9c)
• web: lead each GitHub App row with the App's own logo (#3629) (35e94d1)

Full Changelog: v2.10.0...v2.11.0