v0.4.4

What's Changed

• fix(db): create the database file and its directory private by @fajarhide in #452
• fix(server): require an org-scoped automation id on the internal run endpoint by @cakobob in #438
• fix(server): stop POST /v1/automations answering with a raw TypeError by @fajarhide in #451
• refactor(error-tracking): drop the config cache and handler dedupe by @ahmadrosid in #453
• Review asserts: remove meaningless, add meaningful by @ahmadrosid in #455
• fix(whatsapp): stay silent when the account is not linked by @ahmadrosid in #459
• test: remove low-value tests by @ahmadrosid in #458
• fix(settings): stop the provider and timezone routes answering with a TypeError by @fajarhide in #457
• fix(chat): allow agent turns to run for 24 hours by @ahmadrosid in #462
• refactor(core): derive AgentChannel from a single AGENT_CHANNELS array by @vianbas in #463
• feat(web): batch add provider models by @ahmadrosid in #465
• feat(error-tracking): deliver errors to a Sentry-compatible DSN by @fajarhide in #442
• feat(error-tracking): install the handlers in the server and the workers by @fajarhide in #443
• fix(chat): keep the model picker scoped to the current session by @ahmadrosid in #466
• chore: ponytail audit — shrink providers and drop unused deps by @ahmadrosid in #467
• feat(web): render CSV/TSV artifacts as spreadsheet tables by @ahmadrosid in #468
• feat(server): retry custom tool failures at most twice with backoff by @puspoaditya in #454
• fix(server): clean up custom tool retry seam after #454 by @ahmadrosid in #470
• fix(whatsapp): secure auth state permissions by @mamenesia in #460
• refactor(whatsapp): shrink auth-state after ponytail review by @ahmadrosid in #471
• feat(whatsapp): channel artifact share links and documents by @ahmadrosid in #473
• fix(whatsapp): silence nonfatal init query timeouts by @ahmadrosid in #476
• fix(server): reject MCP server creation with 4xx when initial connect fails by @itw-code in #633
• feat(profiles): export and import a single profile as a zip by @ahmadrosid in #475

New Contributors

• @cakobob made their first contribution in #438
• @itw-code made their first contribution in #633

Full Changelog: v0.4.3...v0.4.4

v0.4.3

What's Changed

• fix(web): link image-parsing errors to Settings by @ahmadrosid in #436
• feat(skills): optional LLM skill curator consolidate by @ahmadrosid in #437
• chore(github): add issue forms for bug, enhancement, and new feature by @fajarhide in #446
• feat(whatsapp): handle group chats by @ahmadrosid in #450

Full Changelog: v0.4.2...v0.4.3

v0.4.2

What's Changed

• chore(cli): drop unreachable prompt stack and dead screen buffer by @ahmadrosid in #432
• fix(providers): keep OpenAI model picks off OpenCode Zen by @ahmadrosid in #431

Full Changelog: v0.4.1...v0.4.2

v0.4.1

What's Changed

• test: remove low-value tests by @ahmadrosid in #325
• Review asserts: remove meaningless, add meaningful by @ahmadrosid in #323
• fix(server): drop the unawaited session delete that can end the process by @fajarhide in #328
• docs: point local dev dashboard URL to port 3003 by @vianbas in #334
• chore: add knip unused-code CI gate by @ahmadrosid in #336
• fix(server): kill a SIGTERM-proof harness after the version probe times out by @fajarhide in #339
• fix(profiles): put add and assign MCP in one dialog by @ahmadrosid in #343
• feat(composio): connect, auto-assign and a shorter app list on Integrations by @fajarhide in #337
• docs(composio): drop two dead setup steps and rewrite for a first-time reader by @fajarhide in #335
• fix(anthropic): replay the streamed tool input instead of an empty object by @vianbas in #345
• fix(openai): replay assistant text once when the turn also calls a tool by @vianbas in #344
• perf(web): lazy-load Mermaid renderer by @mamenesia in #347
• Review asserts: remove meaningless, add meaningful by @ahmadrosid in #348
• test: remove low-value tests by @ahmadrosid in #349
• feat(providers): direct MiniMax integration with dynamic model discovery (#380) by @vincentri in #392
• feat(tools): add custom Python tool handler (#331) by @vincentri in #352
• fix(core): isolate discovery-provider helper from node-only modules by @ahmadrosid in #395
• feat(orgs): let platform admins archive an organization by @ahmadrosid in #393
• docs(agents): prefer REST over GraphQL for gh by @ahmadrosid in #399
• fix(web): keep live OpenRouter stealth models visible by @ahmadrosid in #404
• fix(auth): require platform admin to rotate local auth token (#370) by @akmalsyrf in #400
• fix(web): show model catalog after API key, not a blank row by @ahmadrosid in #409
• chore(agent): drop unused LLM org-memory merge by @ahmadrosid in #410
• docs: add ADHD PR description skill as default by @ahmadrosid in #411
• feat(agent-browser): optional CloakBrowser stealth Chromium by @akmalsyrf in #314
• refactor(core): shrink web_fetch SSRF checks by @ahmadrosid in #416
• refactor(core): delete dead aliases and thin wrappers by @ahmadrosid in #418
• refactor(core): share telegram/discord/whatsapp config pairing helpers by @ahmadrosid in #417
• refactor(core): share worker heartbeat store across channels by @ahmadrosid in #419
• fix(agent): scale pruneToolOutputs thresholds off the model context window (#342) by @vincentri in #350
• feat(providers): direct xAI Grok integration with dynamic model discovery (#383) by @vincentri in #408
• feat(providers): direct Zhipu GLM integration with dynamic model discovery (#381) by @vincentri in #394
• refactor(providers): fall through discovery OpenAI-compatible create arms by @ahmadrosid in #421
• test(providers): shrink xAI wiring tests after #408 by @ahmadrosid in #420
• feat(tools): let Super Bot author Python custom tools (#397) by @akmalsyrf in #403
• chore(tools): shrink Python create_tool harness checks by @ahmadrosid in #422
• fix(auth): revoke all browser sessions on password change (#355) by @akmalsyrf in #402
• fix(rbac): block viewers from session mutations and paid provider routes (#356) by @akmalsyrf in #401
• chore(rbac): shrink viewer guard follow-up from #401 by @ahmadrosid in #423
• feat(tools): read another profile's sessions from within the same org by @vianbas in #351
• fix(server): bound the agent-browser version probe with a timeout by @rioaguspermana in #330
• fix(server): SIGKILL agent-browser version probes that trap SIGTERM by @ahmadrosid in #424
• chore(server): shrink services after ponytail audit by @ahmadrosid in #425
• chore(server): bump @composio/core to 0.17.0 by @ahmadrosid in #426
• chore(discord): shrink bridge after ponytail audit by @ahmadrosid in #427

New Contributors

• @vianbas made their first contribution in #334
• @vincentri made their first contribution in #392
• @rioaguspermana made their first contribution in #330

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• fix(telegram,whatsapp): stop endless typing indicator after agent finishes by @fajarhide in #258
• test(discord): wait for concurrent turns instead of sleeping a fixed 20ms by @fajarhide in #260
• chore(omni): bump the pinned optimiser to 0.7.5 and guard the two pins by @fajarhide in #263
• fix: keep long automation fetches alive through Bun idle timeouts by @ahmadrosid in #265
• Review asserts: remove meaningless, add meaningful by @ahmadrosid in #266
• chore(web): drop eight unused CSS rules from index.css by @fajarhide in #267
• fix(server): bound the coding agent version probe with a timeout by @fajarhide in #268
• fix(server): prune coding-agent run logs to the newest 10 by @ahmadrosid in #270
• feat(web): tell narrow viewports the console needs a wider window by @fajarhide in #269
• fix(web): show the console on tablet-width viewports by @ahmadrosid in #272
• fix(server): stop a SIGTERM-proof child from outliving its timeout by @fajarhide in #275
• feat(web): Cmd+K palette to jump to any page the sidebar offers by @fajarhide in #279
• fix(web): raise the text floor to 11px and drop unreadable muted text by @fajarhide in #276
• feat(profiles): clone a profile by @fajarhide in #281
• test: remove low-value tests by @ahmadrosid in #282
• feat(automations): deliver run results to Discord by @ahmadrosid in #273
• test: remove low-value tests by @ahmadrosid in #283
• feat(skills): install a public GitHub SKILL.md onto a profile by @akmalsyrf in #280
• fix(web): raise light-mode primary and muted-foreground to AA by @fajarhide in #285
• docs: private access to a self-hosted instance over Tailscale by @fajarhide in #290
• fix(skills): scope skill name lookups to the owning org by @fajarhide in #288
• Review asserts: remove meaningless, add meaningful by @ahmadrosid in #286
• fix(db): restore install-wide tool and MCP name uniqueness by @fajarhide in #291
• fix(gemini): sanitize tool schemas that reject exclusiveMinimum by @akmalsyrf in #293
• Review asserts: remove meaningless, add meaningful by @ahmadrosid in #295
• feat(skills): add /learn to distill reusable skills from sources by @akmalsyrf in #284
• docs: add CHANGELOG.md covering every release by @fajarhide in #301
• feat(web): edit markdown artifacts by hand by @fajarhide in #299
• feat(web): table of contents for markdown artifacts by @fajarhide in #298
• docs: point local web dashboard URL to port 3003 by @ahmadrosid in #306
• docs(changelog): sync Unreleased with what merged by @fajarhide in #302
• docs(contributing): claim an issue before building it by @fajarhide in #313
• feat: skill curator — archive unused profile skills by @ahmadrosid in #274
• perf(web): lazy-load route pages by @mamenesia in #310
• fix(web): keep chat mounted when the session URL updates by @ahmadrosid in #317
• docs: pages for artifacts, automations, image generation, and the token optimiser by @fajarhide in #303
• feat(server): add Cloudflare Workers AI as an LLM provider option by @puspoaditya in #312
• fix(providers): persist Cloudflare account ID in config.ini by @ahmadrosid in #318
• fix(server): require an admin for workspace-global settings writes by @fajarhide in #305
• fix(server): use official Cloudflare Llama 3.1 8B model ids by @ahmadrosid in #319
• feat(coding-agent): optional harness-native vendor login by @akmalsyrf in #311
• feat(web): group nested artifacts into folders by @ahmadrosid in #320
• fix(server): require orgId on by-id session operations by @ahmadrosid in #321

New Contributors

• @akmalsyrf made their first contribution in #280
• @mamenesia made their first contribution in #310
• @puspoaditya made their first contribution in #312

Full Changelog: v0.3.15...v0.4.0

v0.3.15

Chat attachments now accept Markdown (.md) files.

What's Changed

• feat(web): toggle rendered vs source in artifact preview by @ahmadrosid in #252
• tidy up by @ahmadrosid in #253
• tidy up by @ahmadrosid in #254
• Review asserts: remove meaningless, add meaningful by @ahmadrosid in #257
• fix: keep channel SSE streams alive through long agent turns by @ahmadrosid in #256

Full Changelog: v0.3.14...v0.3.15

v0.3.14

What's Changed

• Ship the token optimiser in the image, and fetch it on demand when it is missing by @fajarhide in #250
• fix(web): show generate_image previews instead of broken thumbnails by @ahmadrosid in #251

Full Changelog: v0.3.13...v0.3.14

v0.3.13

What's Changed

• test: run the web, db and client suites in CI by @fajarhide in #244
• fix(core): cap web_fetch content so one call cannot flood the context by @fajarhide in #242
• feat(server): env-gated first-boot seed so managed instances skip the setup wizard by @ahmadrosid in #238
• feat(mcp): preinstall Firecrawl keyless MCP by @ahmadrosid in #248
• feat: optional tool-output optimiser with a savings panel by @fajarhide in #245

Full Changelog: v0.3.12...v0.3.13

v0.3.12

What's Changed

• test(server): extract shared createMinimalHonoApp helper for route tests by @ahmadrosid in #226
• feat(web): image generation tool UI using AICSS Image Generation component by @ahmadrosid in #225
• fix(discord): usable artifact share publish (#220) by @ahmadrosid in #232
• fix(discord): stop endless typing indicator after agent finishes by @ahmadrosid in #239
• fix(web): order MCP tool parameters deterministically by @fajarhide in #240
• fix(server): stop a hung provider holding a session for 30 minutes by @fajarhide in #241

Full Changelog: v0.3.11...v0.3.12

v0.3.11

What's Changed

• fix: preserve path segments in public web URL and provider baseURL by @ahmadrosid in #210
• feat(discord): admin /allow slash command for allowed users by @ahmadrosid in #211
• feat(web): add list/grid toggle on the Files page by @ahmadrosid in #212
• fix(web): scrollable full-width markdown on public artifact share page by @ahmadrosid in #214
• docs: add contributing guide by @ahmadrosid in #218
• fix(server): run post-turn skill review for Discord and other interactive channels by @ahmadrosid in #224
• test(server): table-drive secure-cookie and smoke routes in app.test.ts by @ahmadrosid in #227
• test(core): deduplicate telegram/discord channel config test suites by @ahmadrosid in #228
• Move knowledge base management to the Files page by @ahmadrosid in #229
• fix(providers): round-trip DeepSeek reasoning_content on tool turns by @ahmadrosid in #230
• fix(web): restore artifacts infinite query type inference by @ahmadrosid in #235
• fix(server): release the session turn when the client cancels a stream by @ahmadrosid in #236

Full Changelog: v0.3.10...v0.3.11