Release v2.4.13

What's Changed

• improved ui for tool approval by @ignaciojimenezr in #2156
• copilot wasn't working on web by @ignaciojimenezr in #2159
• Consolidate widget renderers into a single MCP-Apps path by @chelojimenez in #2157
• Require auth on widget upload + restore debug-store widget state by @chelojimenez in #2161
• was sending stale projectId to db by @ignaciojimenezr in #2166
• Synthesize Raw view payload for rehydrated chat sessions by @chelojimenez in #2168
• no op when excali was saved already by @ignaciojimenezr in #2158
• local was sending guest token in request for sessions by @ignaciojimenezr in #2167
• Preserve multi-model column count across host switches by @chelojimenez in #2171
• Prefer live widget fetch over cached HTML on session revisit by @chelojimenez in #2172
• Gate widget render on host clientCapabilities by @chelojimenez in #2169
• Sandbox Debug Panel (replaces CSP Debug Panel) — MCP Apps first by @chelojimenez in #2179
• project-scoped server config: DTO mirror (P1) by @chelojimenez in #2180
• project-scoped server config: frontend UI swap (P5) by @chelojimenez in #2183
• feat(playground): multi-host storage primitives + state hook (Phase 1) by @chelojimenez in #2178
• feat(apps): gate window.openai injection on host config by @chelojimenez in #2165
• patch shared sessions by @ignaciojimenezr in #2173
• Speed up npm test: parallelize workspaces and split slow vitest file by @chelojimenez in #2186
• Route context switches to servers by @ignaciojimenezr in #2184
• error on fullscreen by @ignaciojimenezr in #2181
• fix(apps): Permissive toolbar toggle bypasses host-config CSP hardening by @chelojimenez in #2190
• gate project server queries on user readiness by @ignaciojimenezr in #2182
• serve hosted sandbox proxy from a distinct origin by @chelojimenez in #2164
• fix(apps): correct Copilot template containerDimensions + flag guesses by @chelojimenez in #2191
• Remove playground empty-state subtitle by @chelojimenez in #2193
• feat(playground): MultiHostPicker UI (Phase 2) by @chelojimenez in #2187
• refactor(playground): polymorphic compare card + provider lift (Phase 3) by @chelojimenez in #2194
• Guard stale playground history loads by @ignaciojimenezr in #2189
• fix(playground): align MultiHostPicker chrome with sibling pills by @chelojimenez in #2197
• fix inspector orphan process cleanup by @ignaciojimenezr in #2195
• fix(apps): stabilize widget iframe across first render and history reloads by @chelojimenez in #2199
• feat(playground): multi-host render path + hostSnapshot consolidation (Phase 4) by @chelojimenez in #2196
• byok vault hotfix + a bit more by @ignaciojimenezr in #2201
• feat(csp-workbench): replace sandbox debug panel with 3-tab workbench by @chelojimenez in #2202
• fix(servers): reset auto-connect attempts on project toggle by @chelojimenez in #2205
• feat(playground): PostHog instrumentation for launch by @chelojimenez in #2206
• fix(oauth): silently refresh OAuth servers after local-mode page reload by @chelojimenez in #2208
• feat(chat-v2): per-message sender avatars in shared sessions by @chelojimenez in #2203
• [codex] Gate MCP primitive loading on connection status by @chelojimenez in #2207
• [codex] fix playground auto-connect by @chelojimenez in #2211

Full Changelog: v2.4.12...v2.4.13