v1.22.0

What's Changed

• Improve SDK version bump workflow by @xingyaoww in #3111
• fix: replace deprecated authlib.jose with joserfc by @xingyaoww in #3132
• feat(profiles): LLM profile management API by @VascoSch92 in #3129
• feat(sdk): make security_risk tool parameter optional, default to UNKNOWN by @VascoSch92 in #3126
• refactor(sdk/llm/message): reduce complexity of Message.to_responses_dict by @VascoSch92 in #2940
• refactor(sdk/llm): reduce complexity of function call converter functions by @VascoSch92 in #2939
• fix(hooks): allow prompt-based hooks in HookDefinition by @VascoSch92 in #2752
• fix(tools): Add browser crash detection and automatic session recovery by @VascoSch92 in #2738
• fix: treat ref=HEAD on empty repo as empty tree by @hieptl in #3158
• set semver tags by @rbren in #3159
• chore(deps): bump pip from 26.0.1 to 26.1 by @dependabot[bot] in #3125
• chore(deps): bump gitpython from 3.1.47 to 3.1.49 by @dependabot[bot] in #3124
• chore(deps): bump python-multipart from 0.0.26 to 0.0.27 by @dependabot[bot] in #3123
• chore(deps): bump slackapi/slack-github-action from 3.0.2 to 3.0.3 by @dependabot[bot] in #3096
• chore(deps): bump mako from 1.3.10 to 1.3.12 by @dependabot[bot] in #3048
• chore(deps): bump authlib from 1.6.9 to 1.6.11 by @dependabot[bot] in #3049
• ci: publish multi-arch agent-server binaries + docker smoke test by @VascoSch92 in #3082
• feat(profiles): Add cipher encryption for LLM profile secrets by @VascoSch92 in #3161
• Use native Python zipfile for trajectory downloads by @neubig in #3170
• fix(agent-server): decrypt cipher-encrypted profiles on conversation switch by @VascoSch92 in #3167
• feat(profiles): add active_profile tracking to profiles API by @malhotra5 in #3173
• test: add agent-server stress suite and known-bug xfail markers by @VascoSch92 in #3101
• fix for versions by @rbren in #3178
• fix(agent-server): suppress noisy traceback when sending events to a … by @rbren in #3182
• fix(agent-server): take over conversation leases left by crashed owners by @rbren in #3184
• handle lookup secrets that are local by @rbren in #3181
• feat(agent-server): add conversation worktree option by @rbren in #3180
• Fix Laminar root span exception handling by @neubig in #3189
• fix(git): treat ref=HEAD with unresolved HEAD as empty tree by @rbren in #3177
• feat(agent-server): serve conversation workspaces as static webserver by @rbren in #3192
• fix(settings): store MCP env/headers on disk instead of writing '' by @rbren in #3187
• feat(agent-server): cookie auth for workspace static server (cross-domain friendly) by @rbren in #3194
• chore(logging): demote noisy per-conversation startup logs to debug by @rbren in #3195
• fix(agent-server): don't dump tracebacks for raised HTTPExceptions by @rbren in #3196
• fix(agent-server): mark workspace-session cookie Secure on HTTPS and loopback by @rbren in #3198
• fix(sdk): enforce disabled skill model invocation by @Zheng-Lu in #3114
• feat: return dynamic favorites + roots from /api/file/home by @hieptl in #3202
• Add LLM profile switch tool by @neubig in #3188
• feat(sdk): gate switch llm default tool by @neubig in #3190
• Fix Windows terminal Ctrl-C process cleanup by @neubig in #3171
• fix(agent-server): bound initial-state push in subscribe_to_events by @VascoSch92 in #3201
• fix(agent-server): bound WebhookSubscriber queue under failed retries by @VascoSch92 in #3199
• fix(agent-server): run bash cleanup traps on timeout via process-group SIGTERM by @VascoSch92 in #3175
• feat(settings): encrypt MCP env / headers with cipher at rest by @rbren in #3193
• fix(agent-server): offload upload writes to thread to keep event loop responsive by @VascoSch92 in #3174
• fix(agent-server): propagate subscriber init errors by @VascoSch92 in #3200
• fix(release): dispatch server.yml to build versioned Docker images on release by @simonrosenberg in #3209
• fix(release): remaining Docker image fixes — merge-manifests gate, v-prefix stripping, release-binaries dispatch by @xingyaoww in #3210
• Release v1.22.0 by @all-hands-bot in #3204

Full Changelog: v1.21.1...v1.22.0