2.12.26

What's Changed

• fix(macos): write VM image metadata with sudo by @chocobar in #3318
• fix(embed): one send is one turn, and an instance's first question is shown by @binocarlos in #3320
• fix(hydra): stop capping every hosted web service request at 30s by @binocarlos in #3321
• feat(api): add generic secret intake and MCP handoff by @nessie993 in #3302
• fix(api): GET /quotas 500s without org_id or wallet by @philwinder in #3323
• fix(spec-task): land every step of a task on its selected base branch by @philwinder in #3324
• fix(agents): guide bot provider startup failures by @chocobar in #3326
• fix(deploy): avoid sandbox rebuild for routine Meta changes by @chocobar in #3332
• fix(frontend): hide the turn navigator in the minimal chat embed by @binocarlos in #3333
• fix(deploy): gate Meta on fresh sandbox heartbeat by @chocobar in #3334
• fix(orgs): persist invitations without email delivery by @chocobar in #3335
• fix(macos): follow successful desktop release for updates by @chocobar in #3325
• fix(specs): stop old session before resetting task by @chocobar in #3331
• fix(frontend): handle object API error responses by @chocobar in #3337

Full Changelog: 2.12.25...2.12.26