v0.4.0 · Pinned subscription CLIs

Highlights

• Subscription CLIs follow the release: Claude Code runs on the binary shipped with the Agent SDK and Codex is pinned, reinstalled only when its version drifts.
• The models each CLI says it serves show up in the UI, and the model picker locks the ones your Codex account cannot use.
• Notifications get an entry in the workspace menu.

Fixes

• A Codex run that fails on a model refused by the account ends with Codex's message instead of spinning forever.
• A failed run keeps the provider's error sentence instead of [object Object].
• Connecting Codex reads the account's models before adopting the default one.
• Reopening an invitation link already accepted takes the member back to their workspace.
• The workspace assistant shows a single shortcuts card per message.
• The chat loader and the step group have the same size.
• Facebook Pages: tools that need a permission Meta no longer grants are removed.

Security

• Next.js 16.4.4 (remote code execution fixes) and a sweep of vulnerable dependencies (hono, zod, Tiptap, next-mdx-remote 6, ws, node-forge and more). Upgrade recommended.

Upgrade

• Nothing to do: pull the new images.
• Self-hosting on supabase.com now requires a custom SMTP server: the default mailer sends the sign-in email without its code. The check command now reports a missing schema or a wrong secret key, and sign-in RPC errors are written to the logs.