v0.9.0

Changelog

Features

• 2d8559c: feat(targets): git organization targets with repository secret scanning (#688) (@l1ttps)
• 7ac0a5b: feat(connector): add trivy scan repositories (#694) (@l1ttps)
• 8823fa5: feat(console): add Create quick-action dropdown to header (#695) (@mizhm)
• 31c7d51: feat(agent): allow agent to use connectors (#690) (@mizhm)
• 37f0d00: feat(pr-size): add workflow to enforce pull request size limits and guidelines (@l1ttps)
• 86dd3fa: feat(tools): expose agentTool flag and show agent icon in tools list (#702) (@l1ttps)
• e49cde3: feat(console): unify app/settings sidebar and add AI Studio menu (#704) (@l1ttps)
• 03a4774: feat(agents): per-user agent config with models, web search and instruction settings (#711) (@l1ttps)
• 652b1db: feat(vulnerabilities): add JSON filter tree to vulnerability list (#705) (@mizhm)
• 7996fd5: feat(console): add filter builder to vulnerability list (#706) (@mizhm)
• f15ae6d: feat(agents): agentTool filter, landing tools tray and sidebar chat actions (#712) (@l1ttps)
• 419e429: feat(agents): tool install confirm dialog and landing prompt groups (#713) (@l1ttps)
• 24c9fc4: feat(agents): AI Studio agents overhaul — custom agents, autonomous subagents, streaming resilience (#716) (@l1ttps)
• ea8acae: feat(agents): resume runs on return, global workers for agents with sandboxed shell (#719) (@l1ttps)
• 4bc08e2: feat(agents): resumable answer stream, split agent tools, AI Studio UI refresh (#720) (@l1ttps)
• 91af38c: feat(tools): multi-category tools with per-step category selection (#715) (@mizhm)
• 36b67b6: feat(events): single live events SSE stream with worker lifecycle events (#723) (@l1ttps)
• 265c79f: feat(workers): event-driven worker list with slim API and toolbar cleanup (#724) (@l1ttps)
• 05d1e08: feat(workers): one-time join keys, online-only agent workers (#725) (@l1ttps)
• cf9ee53: feat(vulnerabilities): multi-target fast scan, target logos and type badges (#727) (@l1ttps)
• 020625f: feat(console): admin area, audit log filter toolbar and console UX polish (#728) (@l1ttps)
• f3eafeb: feat(console): app links in metadata and prefilled GitHub bug reports (#729) (@l1ttps)
• c6caee8: feat(agents): run agent to completion past the step limit (#733) (@l1ttps)
• af01db7: feat(integrations): native Discord webhook notifications (#732) (@mizhm)
• cf6cc23: feat(agents): subagent transcripts with a chat side panel (#739) (@l1ttps)
• 75530f1: feat(agents): resume runs on open, release streams on leave (#740) (@l1ttps)
• 552dee2: feat(agents): AI Studio usage page and connectors page (#741) (@l1ttps)
• a5156e6: feat(worker): agent-driven headless browser via "browser" commands (#742) (@mizhm)

Bug fixes

• 90a6547: fix(ci): regenerate pnpm-lock.yaml after dependency merges (#701) (@l1ttps)
• d39d03c: fix(worker): store worker state under ~/.oasm instead of the working directory (#703) (@l1ttps)
• b324a23: fix(worker): restart pool wait budget whenever a slot is freed (#731) (@mizhm)
• 13dcc74: fix(agents): clear stale approval prompts on resume (#743) (@l1ttps)

Refactor

• dd4a01f: refactor(console,core-api): structured asset filter builder (#691) (@mizhm)