platform: v1.2.82

1.2.82 (2026-07-03)

Features

• auth: developer-only auto-authenticate env var (#6250) (f81100f)
• files: show upload spinner while dropped files upload (#6252) (bc3a59c)
• mcp-gateway: name every searchable MCP server in the search_tools description (#6267) (13b124c)
• mcp-inspector: static-height tools sidebar with search (#6274) (4f0ae92)
• oauth-clients: team-based visibility scoping for MCP gateway & LLM proxy OAuth clients (#6239) (6034165)

Bug Fixes

• a2a: strip inline <thinking> blocks from A2A output (#6263) (efe45d8)
• add user password reset workaround (admin cli utility) (#6246) (c32dddf)
• always seed the app-opened chat greeting and simplify its copy (#6279) (cbdc976)
• apps: guard app data-store writes on the last-seen revision by default (#6254) (c35464c)
• apps: keep tool-call details (and show an empty state) when an app renders blank (#6260) (618f903)
• apps: make owned Apps assignable to chat agents and profiles in Custom-tools mode (#6244) (29afcdd)
• apps: pass through browser permissions (#6211) (2b11fc9)
• auth: configurable cookie prefix so parallel local stacks don't clobber sessions (#6270) (77df5ae)
• build missing NAPI addons in dev-stack up (#6264) (2946a4e)
• cache: LRU has() no longer promotes recency; drop dead wrap option (#6228) (f85b832)
• chat header selector border and stuck tab highlight (#6282) (c01b7e7)
• chat/proxy: give untyped MCP tool schema nodes an explicit type for Gemini/Vertex (#6220) (09f55aa)
• chat: prepend a leading user turn for Gemini so owned-app chats don't 400 (#6258) (78ad0ef)
• clear raced timeout timers once the winning promise settles (#6226) (fb769a8)
• clearly communicate mcp servers and tools to be installed on the… (#6253) (2768297)
• clearly communicate policy violation errors from security engine (#6261) (3c8f32b)
• frontend: clarify the virtual key owner picker and fix its width (#6269) (9b85644)
• frontend: remove unreachable "Enable and create a new skill" button (#6265) (9f5549f)
• frontend: return to the originating page after OAuth completes (#6259) (81b6468)
• llm: surface streaming LLM failures in session history + recover from OpenRouter-style context-length errors (#6223) (bfe1de2)
• mcp: close the client when tool discovery fails in connectAndGetTools (#6229) (ce4a6a4)
• mcp: make multi-install external apps interactive in chat (#6249) (a443293)
• oauth: surface initiate errors to users and logs (#6266) (0de7b86)
• skills: stop build-app skill from creating duplicate app entities (#6257) (3fab68e)

Performance Improvements

• db: stop fetching rows that are only counted or discarded (#6227) (0232c14)
• run independent queries concurrently on hot paths (#6225) (0a45629)
• task-queue: fold attempt decrement into releaseToQueue bulk update (#6224) (b6303da)