v0.1.2-insider.4

What's Changed

• refactor: extract shared read_bounded_json + _persist_turn_row helpers (#490, #1086) by @iamwhatever in #1314
• feat(chat): rove the session list with ArrowUp / ArrowDown by @kyleseaman in #1315
• fix(chat): resolve the real context window on a model switch, not one turn later by @kyleseaman in #1313
• feat(metrics): time SQLite store operations by @kyleseaman in #1221
• feat(i18n): translate the label tables the ALL-CAPS gate exposed by @dwu96 in #1209
• chore: strip task-log noise and redundant comments; codify comment style by @bolichen97 in #1278
• feat(connections): M1 provider registry + OAuth return-address relay by @pepmach in #1287
• feat(connections): M1 Connections page (services gallery + MCP tab) by @pepmach in #1229
• fix(chat): default the pinned-prompt banner off and stop it double-painting by @iamwhatever in #1317
• fix(security): scope two self-protection deny rules to command structure by @NicholasRBowers in #905
• fix(issue-radar): make connected-repo authz gate provider-case-aware by @iamwhatever in #1320
• fix(ci): include registry.json in i18n-render base export by @buluoray in #1321
• feat(apps): auto-approve a builtin app's calls to its own MCP server by @buluoray in #1307
• fix(babysit): stop monitor loops and long turns dying silently by @NicholasRBowers in #1266
• fix(backend): attribute messaging channels in SEL + totalize MCP cron create (#815, #391) by @iamwhatever in #1311
• docs: rewrite Kiro Crew README by @kyleseaman in #82
• fix(deps): bump fast-uri to 3.1.5 (CVE-2026-18446) by @iamwhatever in #1336
• fix(deps): bump the fast-uri override past GHSA-7p8r-x3mc-p8w7 by @dwu96 in #1338
• fix(security): rename the standing auto-approve key and unify ad-hoc durations by @NicholasRBowers in #1084
• feat: theme the onboarding mascot border from its Figma layer by @michellemxm in #1333
• fix(markdown-panel): make its diff split toggle split, and light up correctly by @dwu96 in #1337
• feat(crew): per-crew triggers routing + select_crew orchestration by @iamwhatever in #1335
• fix: pool package-prefixed MCP-gateway agents + share profile slug constant (#925, #557) by @iamwhatever in #1312
• feat: chat header alignment, panel icons, sidebar collapse morph by @krishdhasmana in #1058
• fix(i18n): translate the zoom-level description in Settings → Display by @CrysisDeu in #1345
• fix(chat): keep tool-call labels in the active UI language by @xuejinT in #1342
• refactor(trust): share the trust-grant pattern helpers by @buluoray in #1347
• feat(crews): List view, clamped descriptions, modal editor by @CrysisDeu in #1331
• fix(link-preview): unfurl pages that exceed the read cap by @dwu96 in #1344
• ci: retire long-term Arbiter; fold one-way-door lens into Design Review by @iamwhatever in #1334
• fix(followup): demote disabled worktree button in unscoped sessions by @darko-mesaros in #1325
• docs(rfc): add a status-audited index and front matter to every RFC by @CrysisDeu in #1354
• feat(dashboard): session-first Artifacts panel by @xuejinT in #1343
• fix(settings): make the segmented control read as a group of choices by @CrysisDeu in #1357
• fix(dev-fleet): stop listing worktrees that no longer exist by @chenmingwei23 in #1352
• fix(papyrus): close four repo-config RCE paths and support Windows by @bolichen97 in #1316
• chore(cli): hide TUI command surface to avoid Kiro-CLI overlap by @iamwhatever in #1356
• fix(theme): stop Auto dark/light freezing in the desktop app by @CrysisDeu in #1358
• docs: show contributors as linked GitHub avatars in README by @bolichen97 in #1362
• fix(sandbox): stop denying link/linkat in the Linux seccomp filter by @iamwhatever in #1339
• test: make CI-flaky tests deterministic and halve suite runtime by @bolichen97 in #1353
• feat(memory): change the embedding model from the dashboard by @iamwhatever in #1149
• fix: keep subagent/workflow bars visible off their sidebar tab; project-picker path delimiter (#728, #1196) by @iamwhatever in #1319
• chore(themes): drop nine orphaned built-in-theme art assets by @bolichen97 in #1372
• chore(docs): Update security email contact address by @nadetastic in #1360
• fix(pptx-maker): require credential bodies so real rasters stop being blanked by @chenmingwei23 in #1365
• fix(telemetry): stamp the distribution channel at build time by @bolichen97 in #1384
• feat: move Privacy before Customize as its own mandatory chapter by @michellemxm in #1363
• feat(apps): add Mochi desktop companion as a builtin app by @buluoray in #1258
• test: stop fixtures leaking /tmp dirs and waiting out fixed budgets by @bolichen97 in #1382
• fix(scrub): remove 11 personal identifiers and close the vacuous alias gate by @chenmingwei23 in #1381
• fix(dev-fleet): declare the platforms the app actually runs on by @chenmingwei23 in #1376
• fix(agents): give installed-agent names full width in the list rows by @iamwhatever in #1370
• refactor(agents): drop dead routing-metadata editor, explain crew triggers by @iamwhatever in #1367
• feat(artifacts): reconcile the files and artifacts stacks in the chat side panel by @NicholasRBowers in #1083
• feat(routes): accept userless ssh:// registry urls (frontend/backend validation parity) by @tlobinger in #918
• feat(browser): native embedded browser panel with in-process CDP agent control by @iamwhatever in #1318
• fix(chat): preserve streamed-row identity across the chat_done transcript reload by @iamwhatever in #1369
• feat(i18n): render the surfaces the en-XA gate never visited by @dwu96 in #1294
• feat(shortcuts): make Search Everywhere activation configurable by @adlio in #1390
• fix(macos): stop File Explorer search tripping ~/Pictures & ~/Music TCC prompts by @adlio in #1389
• fix(prompt): stop the agent searching the entire home directory by @adlio in #1386
• fix(connections): hold the services gallery behind an opt-in flag by @pepmach in #1383
• feat(settings): tag Computer Use panel as macOS only by @iamwhatever in #1377
• fix(dashboard): stop a meta dict race aborting chat-history saves by @patrigao in #1322
• docs: restructure README Quick start into four install paths by @kyleseaman in #1392
• fix(scrub): replace four employee-alias workplace paths by @chenmingwei23 in #1395
• docs: add GOVERNANCE.md and MAINTAINERS.md by @kyleseaman in #1396
• docs: add contributor-facing sections to CONTRIBUTING.md by @kyleseaman in #1398
• fix(apps): derive a builtin app's identity from its agent for own-MCP auto-approve by @buluoray in #1399
• fix(pod-e2e): make the harness runnable on symlinked-HOME and BSD hosts by @chenmingwei23 in #1385
• refactor(sessions): make a channel conversation's dashboard tab that conversation by @NicholasRBowers in #1366
• feat: expose the public skill registry to the agent by @CrysisDeu in #1401
• fix(voice): call the TTS provider Amazon Polly, its actual name by @dwu96 in #1400
• feat(mcp-apps): opt-in rendering of MCP Apps in the right side panel by @iamwhatever in #1388
• fix(orchestrator): arm plan-review gate reliably and stop stage over-runs by @iamwhatever in #1387
• feat(apps): anonymous install receipt for official app installs by @pepmach in #1379
• feat(pod): macOS support via a launchd backend by @chenmingwei23 in #1391
• chore(apps): hide Crew Companion from the App Store by @iamwhatever in #1407
• feat(github): add issue forms for bug, feature, and docs reports by @kyleseaman in #1410
• docs: make GOVERNANCE.md and MAINTAINERS.md reachable by @kyleseaman in #1411
• docs: restore two README tables broken by #1392's column collapse by @kyleseaman in #1413
• feat(security): surface the third-party app execution gate in Settings by @CrysisDeu in #1414
• docs: add TENETS.md by @kyleseaman in #1419
• docs: use the two-word product name in prose by @kyleseaman in #1420
• feat(notes): add row actions, drag-to-file and a top-level new note by @michellemxm in #1323
• fix(issue-radar): finish the bulk-merge follow-ups and expire the label cache by @bolichen97 in #1402
• feat(apps): add the LaunchDarkly app to the curated registry by @CrysisDeu in #1425

New Contributors

• @nadetastic made their first contribution in #1360
• @adlio made their first contribution in #1390

Full Changelog: v0.1.2-insider.3...v0.1.2-insider.4