2.12.23

What's Changed

• feat(org): untrusted bot instances with a gateway entry by @nessie993 in #3294
• fix(api): restart a stopped sandbox before a chat file upload by @nessie993 in #3289
• feat(org): bot instances — untrusted minimal sandboxes with a gateway entry by @nessie993 in #3293
• ci(meta): deploy stack after main builds by @chocobar in #3297
• perf(meta): skip unchanged Zed and sandbox builds by @chocobar in #3299
• feat(cli): build, drive, debug and evaluate org bots from the CLI by @nessie993 in #3298
• feat: per-session LLM usage — Usage tab and GET /sessions/{id}/usage by @nessie993 in #3300
• chore: worktree hygiene script; headless Chrome sends a regular user agent by @nessie993 in #3301
• fix(org): destroy a deleted bot's sandboxes, workspaces, and running work by @nessie993 in #3303
• fix(security): isolate org bot instances by @nessie993 in #3304
• fix(stack): publish desktops before restarting the sandbox by @nessie993 in #3305
• fix(desktop): close the rootfs only when the home is a mount by @nessie993 in #3306
• fix(frontend): stop router5 rewriting %20 to a plus in embed params by @lukemarsden in #3308
• fix(git): target task base branch and dedupe pull requests by @chocobar in #3307
• test(ci): pin content-based Zed streaming check by @chocobar in #3309
• fix(api): report unavailable sandbox runners directly by @chocobar in #3310
• fix(api): preserve desktop state when teardown fails by @chocobar in #3311

Full Changelog: 2.12.22...2.12.23