v0.4.0

Highlights

• Quest Tables: you can now keep structured tables in Quest. Make them, filter them, edit the columns, and look back through their history. The agent can read and change them too, and asks you first before it writes.
• Memory suggestions: Quest now suggests memories on its own while you chat. You look each one over before it's saved, and if it changes an older memory you can see exactly what's different. Suggestions from all your chats wait for you in the Inbox. Projects can also keep their own memories now.
• Models: you can plug in your own Anthropic, OpenAI or Gemini API key, and a setup card helps you pick models the first time you run Quest. You can also set how hard the model thinks, per conversation.

Smaller updates

• Public projects: the agent can now browse the web, and it can propose doc and table changes there. Routines work in public projects for everyone.
• Connecting services: when the agent needs a service you haven't hooked up yet, it can show a connect button right in the chat.
• Gmail: the agent can forward an email for you, with your approval, and the original message stays intact.
• Google Drive and Sheets: big downloads are safer, shortcuts work, and a Sheets cell can now hold up to 50,000 characters.
• New data sources: Google Cloud Billing, GitHub repo Insights, and a new vulnerabilities plugin (OSV, CISA KEV and EPSS).
• Docs and projects: chats that aren't in a project can read docs and tables from all your projects. Links to workspace files in chat open in the viewer. Docs are now revised in place, since history is built in.
• Security: sessions expire on the server and can be revoked. Admins impersonating a user can't touch that user's credentials. Changes to who can sign in take effect right away. Subagents running in another user's account really are read-only now.
• System Reports: new sections for Docs, Tables, Memories, Skills and Tool Calls.
• Everything else: an upload progress bar, search hides routine runs unless you ask for them, admins can set the upload size limit, and the app loads faster.

What's Changed

• Releases: highlights first on every GitHub Release by @puntium in #107
• Cost reports: date-ranged price tables so history is repriced correctly by @altanapps in #108
• Memory suggestions: non-blocking suggest_memory tool + composer review panel by @cody-the-code-bot in #109
• Memories settings: compact table with inline filter by @cody-the-code-bot in #111
• Memory suggestions: word diff against the replaced memory in the review panel by @cody-the-code-bot in #112
• Memories: inject saved memories into the top-level system prompt by @cody-the-code-bot in #113
• Quest Tables phase A1: paths, migration, store, gate by @cody-the-code-bot in #115
• Project memories: project-scoped memory store + suggest_project_memory by @cody-the-code-bot in #114
• Quest Tables phase A2: schema model and canonicalization by @cody-the-code-bot in #117
• Serve /tail from the realtime replay buffer by @cody-the-code-bot in #121
• authed_get/authed_post: normalise request URLs before matching and sending by @cody-the-code-bot in #124
• Quest Tables phase A3: table file storage and change log by @cody-the-code-bot in #122
• Frontend: minify the production build and code-split heavy views by @cody-the-code-bot in #123
• Refuse credential and account routes to impersonation sessions; audit impersonated requests by @cody-the-code-bot in #119
• Sessions: server-side expiry, per-account revocation, Secure cookies on https by @cody-the-code-bot in #118
• System prompt: document only core tool_call tools inline, the rest behind their skill by @cody-the-code-bot in #125
• Wait handles: implement the expires_at expiry sweep by @cody-the-code-bot in #120
• Transcript appends off the event loop; SDK history saved per tool round, not per event by @cody-the-code-bot in #126
• Quest Tables phase A4: filter DSL to SQL by @cody-the-code-bot in #127
• Memory suggestions: dim the whole window behind the review panel by @cody-the-code-bot in #128
• Quest Tables phases A5-A7: schema changes, restore, access rule by @cody-the-code-bot in #129
• Model menu: per-conversation thinking effort, fixed per top-level slot by @cody-the-code-bot in #130
• Migration tests: run Alembic and the ORM read-back in-process by @cody-the-code-bot in #132
• CI: run the backend test suite in parallel with pytest-xdist by @cody-the-code-bot in #131
• Quest Tables phases A8-A10: service layer, read and write tools by @cody-the-code-bot in #135
• Tests: one shared isolated_db fixture instead of per-test module reloads by @cody-the-code-bot in #134
• Admin-configurable workspace upload limit (Settings > Limits) by @cody-the-code-bot in #133
• Ramp connector: label every user-visible surface "Ramp admins only" by @cody-the-code-bot in #137
• Quest Tables phases A11-A13: the three action-request types by @cody-the-code-bot in #136
• Quest Tables phases A14-A16: prompting and the HTTP API by @cody-the-code-bot in #138
• Inbox Memories tab: suggested memories across chats, counted in the badge and Slack reminders by @cody-the-code-bot in #139
• Google Cloud Billing: read-only billing accounts, pricing and budgets via authed_get by @cody-the-code-bot in #141
• Quest Tables phases B1-B4: client, lists, viewer, filter bar by @cody-the-code-bot in #140
• forward_gmail_message: approval-gated high-fidelity Gmail forward by @cody-the-code-bot in #143
• Quest Tables phases B5-B8: schema editor, history, card previews by @cody-the-code-bot in #144
• Show an upload progress strip while a send's queued files upload by @cody-the-code-bot in #145
• Model Selection preview: keep the "All models" chevron inside the menu by @cody-the-code-bot in #146
• Quest Tables: date column type by @cody-the-code-bot in #148
• Standalone conversations read the docs and tables of all the user's projects by @cody-the-code-bot in #150
• Tables: log creates, failed and slow reads, and file-layer refusals by @cody-the-code-bot in #151
• System Reports: Docs, Tables and Memories usage sections by @cody-the-code-bot in #152
• Project Settings: rename Docs Access to Project Access and cover tables by @cody-the-code-bot in #147
• Public projects: open the doc and table action requests to public conversations by @cody-the-code-bot in #157
• Add Playwright end-to-end coverage for core user flows by @altanapps in #155
• fix: bound and stream Google Drive downloads by @altanapps in #153
• Search: hide routine runs by default, with an "Include routine runs" checkbox by @cody-the-code-bot in #160
• Remove the public_project_routines feature gate: routines in public projects for everyone by @cody-the-code-bot in #159
• Direct Anthropic/OpenAI/Gemini API keys as provider kinds + first-run model setup card by @cody-the-code-bot in #161
• Inline connect card: model-offered service connection flow (request_service_connection) by @cody-the-code-bot in #162
• GitHub plugin: read repository Insights (stats, traffic, community, contributors) by @cody-the-code-bot in #163
• Raise the Sheets edit per-cell limit from 5,000 to 50,000 characters by @cody-the-code-bot in #165
• Browser for public projects: one headless Chromium sidecar per conversation by @cody-the-code-bot in #164
• NEAR AI quick setup: add GLM 5.3 Flash and Qwen3.8 27B as the default models by @cody-the-code-bot in #166
• fix: resolve Drive shortcuts and guide unsupported downloads by @altanapps in #156
• Retire the project database for projects without tables in it by @cody-the-code-bot in #168
• Scope sandbox-script doc and table reads to the launching conversation by @cody-the-code-bot in #169
• Chat: relative markdown links open the workspace file in the in-app viewer by @cody-the-code-bot in #173
• Fix the sandbox-token lease test that has been failing CI since #169 by @cody-the-code-bot in #174
• DuckDB analytics store: skill_loads ledger, skill_reads.json backfill and a System Reports "Skills" section by @cody-the-code-bot in #175
• Tool-call ledger (tool_calls) in the analytics store and a System Reports "Tool Calls" section by @cody-the-code-bot in #177
• Security bumps for this week's advisories; make sandbox images rebuild on pull by @cody-the-code-bot in #176
• Sandbox images: one multi-stage Dockerfile with a shared base stage by @cody-the-code-bot in #178
• fix: enforce read-only connector access for cross-user subagents by @altanapps in #179
• Quest Docs prompts: versions are built in, so revise docs in place by @cody-the-code-bot in #181
• Doc viewer: pin the header to the top while the doc scrolls by @cody-the-code-bot in #182
• Quest Docs: link an approved write_doc card's write to its conversation by @cody-the-code-bot in #183
• Add vulns plugin: OSV, CISA KEV and FIRST EPSS vulnerability tools by @cody-the-code-bot in #184
• fix: enforce admission changes for active sessions and sandbox leases by @altanapps in #180

Full Changelog: v0.3.0...v0.4.0