v0.33.0

0.33.0 - 2026-10-27

Bug Fixes

• BREAKING: tools: Hold an organization's search and fetch endpoint to public addresses in #2590 by @daavoo (8cceb42)
• release: Create the tag when it does not exist yet in #2594 by @tbille (5174b37)
• inference: Scope a caller's end-user tag to their own identifier in #2592 by @daavoo (1e1ed6f)
• auth: Ignore workspace and service account ids in the token exchange in #2600 by @daavoo (fc32f67)
• web: Keep the caret in place when editing a search mid-text in #2599 by @jigjigjig (6f5d6ed)
• web: Let the model selector in the Use this model drawer be copied in #2596 by @jigjigjig (0522228)
• web: Keep the model catalog's search and filters when going back in #2597 by @jigjigjig (cc6c503)
• web: Keep the sidebar's band padding in Safari in #2598 by @jigjigjig (3949b0e)
• logging: Mask key- tokens, mixed-case prefixless keys, and uvicorn's own log lines in #2608 by @daavoo (f1b9ad3)
• billing: Charge gateway tools by whose account runs them in #2602 by @daavoo (910de2b)
• providers: Reject reserved names for hosted providers in #2620 by @tbille (8280637)
• config: Say an empty OTARI_SECRET_KEY reads as unset and name gen-secret-key in #2621 by @tbille (149cb51)
• pricing: Log a warning when require_pricing refuses a request in #2623 by @tbille (d45913b)
• logging: Stop masking an access log line that ends in api_token in #2626 by @tbille (cd73677)
• config: Warn about unknown config keys and undiscovered declared models in #2622 by @tbille (481678b)
• responses: Type the raw event dicts an upstream Otari streams in #2624 by @tbille (71ddc48)
• files: Start without a provider account pepper, with provider copies off in #2627 by @tbille (dfaee5b)
• deps: Override the packaging cap pinning virtualenv in #2613 by @peteski22 (18ec9a4)
• pricing: Bill a 1-hour cache write on chat completions at its own rate in #2636 by @daavoo (118aa1f)
• keys: Require the stored credential again to move a key to another api_base in #2637 by @daavoo (b28d6b1)
• hooks: Cap the guardrail versions a workspace keeps in #2643 by @daavoo (4c3e8a7)
• routing: Fall back across a catalog id's hosted offerings by @dpoulopoulos (6929c0e)
• keys: Make viewers read-only on keys and the Playground in #2650 by @daavoo (8c6b34b)
• keys: Serialize key writes with every membership change that switches keys off in #2659 by @daavoo (95a8118)

Features

• metrics: Report each upstream attempt and every coded refusal in #2420 by @daavoo (b729f72)
• gemini: Gemini parity for gateway-routed agents in #1587 by @daavoo (433e379)
• traces: Make a coding agent's session readable enough to debug in #2478 by @agpituk (d6432bc)
• traces: Chart the sessions active over time, in buckets a session can fill in #2479 by @agpituk (f42772c)
• traces: Price a coding agent's session, its turns and its tool calls in #2481 by @agpituk (90ee9f2)
• rate-limits: Count a rule per budget, and report a limit without enforcing it in #2421 by @daavoo (796344e)
• chat: Let a provider instance accept named extra request fields in #2459 by @daavoo (daf77ae)
• BREAKING: hosted-providers: One catalog update for prices and model lists in #2528 by @daavoo (830b420)
• inference: Look up the country a request comes from by @dpoulopoulos (3a2af83)
• routing: Skip providers a request's country may not reach by @dpoulopoulos (71ec162)
• files: Keep the image describe call within the country gate by @dpoulopoulos (aeaa663)
• inference: Apply the country gate to the other provider routes by @dpoulopoulos (3e20661)
• providers: Store the countries a hosted provider serves by @dpoulopoulos (0eb5bb3)
• providers: Refuse a request a hosted provider's countries leave out by @dpoulopoulos (602feef)
• batches: Hold a batch's later calls to the countries its provider serves by @dpoulopoulos (93cb050)
• web: Set the countries a hosted provider serves by @dpoulopoulos (cffcc48)
• web: Load a hosted provider's countries from a JSON file by @dpoulopoulos (39e8569)
• inference: Upload the country file to the database by @dpoulopoulos (0b8d780)
• inference: Look the client up in the stored country file by @dpoulopoulos (f9ae2f7)
• web: Upload the country file from the settings page by @dpoulopoulos (6b117d0)
• dashboard: Manage search and fetch tools on the Web search page in #2638 by @aittalam (875c898)
• traces: Show what fills a model request's context window in #2618 by @jigjigjig (519713b)
• web: Animate the turns a live session adds into its trace tree in #2652 by @jigjigjig (5dc1bca)

Full Changelog: v0.32.0...v0.33.0