v2.2.8

What's Changed

Aivory 2.2.8 expands conversation document handling, knowledge retrieval, context compaction, MCP tooling, private workspaces, feedback workflows, and mobile usability. It also hardens provider streaming, document ingestion, sandbox recovery, and model-specific history replay.

Conversation Files and Retrieval

• Added a single document-routing decision for over-budget conversations. The task model receives only the current question and trusted metadata for every conversation document; recent conversation text and document previews are excluded from this latency-sensitive request.
• Preserved the fast path when all conversation documents fit the configured full-text threshold: routing is skipped and every document is injected in full.
• Added structured full_doc routing with validated document IDs. Selected documents are injected directly when they fit, or processed with complete-document map-reduce summarization when they exceed the context budget.
• Made targeted retrieval search the complete conversation file scope while continuing to inject small, intentionally unembedded conversation documents in full.
• Prevented an earlier pinned file from replacing the current upload when individually small files exceed the cumulative conversation threshold.
• Added document-level vector filters and regression coverage for current-file selection, multi-document overflow, full-document summaries, vector outages, and relational fallbacks.

Knowledge Bases and Document Processing

• Added lightweight iterative retrieval with evidence-sufficiency checks, follow-up query expansion, bounded candidate merging, and explicit found, partial, no-hit, and error states.
• Added scoped knowledge retrieval controls, localized UI, knowledge-base mentions, and per-message knowledge-base snapshots.
• Added retryable ingestion workflows and clearer document failure states without exposing embedding implementation details to end users.
• Improved complete-document context preservation, cumulative pinned-document budgets, hybrid retrieval, CJK tokenization, neighboring chunk windows, spreadsheet ingestion, and multi-knowledge-base retrieval.
• Added project-library isolation and compatibility checks for conversation, project, and knowledge-base scopes.

Context Compaction

• Expanded configurable automatic compaction with token triggers, retention targets, recent-round preservation, summary budgets, and dedicated compaction model selection.
• Added the /compact command for explicit conversation compaction and hardened its concurrency, billing, model fallback, branch, and lifecycle behavior.
• Improved summary merging and context accounting so long conversations retain durable state without silently dropping current attachments or tool history.

MCP and Tool Routing

• Added administrator-managed MCP servers and tools, including connection testing, transport handling, configuration, model exposure, runtime invocation, and regression coverage.
• Unified automatic tool routing across built-in, official, MCP, search, file, spreadsheet, memory, image, and skill capabilities.
• Added scoped retrieval controls and stronger allowlist enforcement while preserving model-specific tool configuration.
• Improved frontend asset caching and request activity handling for faster repeated navigation and tool configuration.

Workspaces, Feedback, and Administration

• Added private workspace conversations with workspace-aware creation, listing, sharing, forking, deletion, generation, storage, and teardown behavior.
• Added user issue feedback with screenshots and diagnostics, plus expanded administrator feedback and activity views.
• Added administrator credit adjustments with durable user notifications and clearer permanent-credit accounting.
• Added required announcement reading, localized announcement behavior, rotating home prompts, and refined mobile chat and payment-history layouts.
• Added MCP administration and broader operational visibility across channels, tools, files, users, usage, and feedback.

Provider and Runtime Reliability

• Preserved complete Gemini and Anthropic streaming responses across partial frames and provider-specific event boundaries.
• Prevented OpenAI Responses native history from replaying across incompatible models.
• Required versioned OpenAI-compatible base URLs to avoid ambiguous endpoint construction.
• Rebuilt expired sandbox sessions when the first input reset returns session not found or not running, then restored and restaged conversation inputs before retrying execution.
• Improved interrupted generation, fallback attribution, task-model retries, complete provider request capture, and conversation update signaling.

Upgrade Notes

• Database migrations run automatically; no manual SQL migration is required.
• Conversation file routing uses the existing RAG full-text threshold and task-model configuration.
• When all conversation documents fit together, they are still injected directly without an additional router request.
• Over-budget full_doc requests now require the task model to return valid document IDs; invalid IDs are rejected and safely fall back to current-turn attachments or the authorized conversation scope.
• Existing knowledge bases and conversation uploads are re-used; no manual re-upload is required.
• For Docker deployments, set IMAGE_TAG=2.2.8 and leave SANDBOX_IMAGE_TAG unset so application and sandbox images resolve to the same release tag once both workflows complete.

Release Boundary

• This release is built from commit 3dc70ff97f17333c1ac134a2f0c4e177c4336fc8.
• Commits after 3dc70ff are intentionally excluded from the v2.2.8 tag and source archives.

Full Changelog: v2.2.7...v2.2.8