v0.4.1

What's Changed

• test: remove low-value tests by @ahmadrosid in #325
• Review asserts: remove meaningless, add meaningful by @ahmadrosid in #323
• fix(server): drop the unawaited session delete that can end the process by @fajarhide in #328
• docs: point local dev dashboard URL to port 3003 by @vianbas in #334
• chore: add knip unused-code CI gate by @ahmadrosid in #336
• fix(server): kill a SIGTERM-proof harness after the version probe times out by @fajarhide in #339
• fix(profiles): put add and assign MCP in one dialog by @ahmadrosid in #343
• feat(composio): connect, auto-assign and a shorter app list on Integrations by @fajarhide in #337
• docs(composio): drop two dead setup steps and rewrite for a first-time reader by @fajarhide in #335
• fix(anthropic): replay the streamed tool input instead of an empty object by @vianbas in #345
• fix(openai): replay assistant text once when the turn also calls a tool by @vianbas in #344
• perf(web): lazy-load Mermaid renderer by @mamenesia in #347
• Review asserts: remove meaningless, add meaningful by @ahmadrosid in #348
• test: remove low-value tests by @ahmadrosid in #349
• feat(providers): direct MiniMax integration with dynamic model discovery (#380) by @vincentri in #392
• feat(tools): add custom Python tool handler (#331) by @vincentri in #352
• fix(core): isolate discovery-provider helper from node-only modules by @ahmadrosid in #395
• feat(orgs): let platform admins archive an organization by @ahmadrosid in #393
• docs(agents): prefer REST over GraphQL for gh by @ahmadrosid in #399
• fix(web): keep live OpenRouter stealth models visible by @ahmadrosid in #404
• fix(auth): require platform admin to rotate local auth token (#370) by @akmalsyrf in #400
• fix(web): show model catalog after API key, not a blank row by @ahmadrosid in #409
• chore(agent): drop unused LLM org-memory merge by @ahmadrosid in #410
• docs: add ADHD PR description skill as default by @ahmadrosid in #411
• feat(agent-browser): optional CloakBrowser stealth Chromium by @akmalsyrf in #314
• refactor(core): shrink web_fetch SSRF checks by @ahmadrosid in #416
• refactor(core): delete dead aliases and thin wrappers by @ahmadrosid in #418
• refactor(core): share telegram/discord/whatsapp config pairing helpers by @ahmadrosid in #417
• refactor(core): share worker heartbeat store across channels by @ahmadrosid in #419
• fix(agent): scale pruneToolOutputs thresholds off the model context window (#342) by @vincentri in #350
• feat(providers): direct xAI Grok integration with dynamic model discovery (#383) by @vincentri in #408
• feat(providers): direct Zhipu GLM integration with dynamic model discovery (#381) by @vincentri in #394
• refactor(providers): fall through discovery OpenAI-compatible create arms by @ahmadrosid in #421
• test(providers): shrink xAI wiring tests after #408 by @ahmadrosid in #420
• feat(tools): let Super Bot author Python custom tools (#397) by @akmalsyrf in #403
• chore(tools): shrink Python create_tool harness checks by @ahmadrosid in #422
• fix(auth): revoke all browser sessions on password change (#355) by @akmalsyrf in #402
• fix(rbac): block viewers from session mutations and paid provider routes (#356) by @akmalsyrf in #401
• chore(rbac): shrink viewer guard follow-up from #401 by @ahmadrosid in #423
• feat(tools): read another profile's sessions from within the same org by @vianbas in #351
• fix(server): bound the agent-browser version probe with a timeout by @rioaguspermana in #330
• fix(server): SIGKILL agent-browser version probes that trap SIGTERM by @ahmadrosid in #424
• chore(server): shrink services after ponytail audit by @ahmadrosid in #425
• chore(server): bump @composio/core to 0.17.0 by @ahmadrosid in #426
• chore(discord): shrink bridge after ponytail audit by @ahmadrosid in #427

New Contributors

• @vianbas made their first contribution in #334
• @vincentri made their first contribution in #392
• @rioaguspermana made their first contribution in #330

Full Changelog: v0.4.0...v0.4.1