You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
improvement(desktop): install updates on one click, asking only about real in-flight work (#9505)
improvement(cli): files batch-delete takes file ids as arguments (#9518)
improvement(desktop): bring agent browser menus, keys and fullscreen in line with Chrome (#9512)
improvement(extension): document browser data handling and limited use
improvement(extension): document browser data handling and limited use (#9513)
improvement(oauth): serve still-valid tokens while refreshing ahead of expiry (#9509)
improvement(sim-links): pass queries through, trim pasted punctuation, and suggest links from the address bar (#9508)
Bug Fixes
fix(files): share one served-bytes predicate between the serve route and large downloads (#9548)
fix(release): read Excel start dates, refuse impossible times and repeated columns, keep typed escapes, no suggestions for punctuation (#9545)
fix(oauth): default a leader-lock follower's wait to the lease so its takeover can land (#9546)
fix(desktop): address release review — count app downloads and unchecked terminals before an update restart, send the page referrer on Save Image, and tighten sign-in and people edge cases (#9547)
fix(ci): drop the duplicate --accept-routes the Tailscale action already passes (#9543)
fix(files): stream served files with byte ranges instead of buffering them under 100 MB (#9542)
fix(files): resolve v2 file paths only on the v2 surface, through the canonical resolver (#9531)
fix(oauth): take over a lapsed refresh lease, share overlapping service-account key reads, and label unsearched accounts (#9537)
fix(auth): check a workspace's personal-key switch after membership (#9540)
fix(oauth): keep a five-minute floor on served tokens and refresh ahead earlier (#9528)
fix(mothership): Stop only cancels detached runs still running, and a held workflow run never blocks the next turn's workbench (#9532)
fix(desktop): ask before an update restart from the menu, count uploads and downloads as running work, and harden sign-in prompts (#9533)
fix(files): authorize the workspace before resolving a files/ path (#9527)
fix(auth): block only curated disposable domains, and never gate SSO or SCIM provisioning (#9529)
fix(people): keep a suspended manager link on edit and never fail the org layout on the People lookup (#9526)
fix(execution): name the signal exit code of a failed sandbox process (#9523)
fix(extension): keep site access compatible with strict CSP (#9524)
fix(mothership): say why a workflow copilot chat cannot read other chats (#9520)
fix(auth): refuse account creation from disposable email domains for every provider (#9516)
fix(desktop): keep sign-in popups working in the agent browser (#9506)
fix(files): accept files/ VFS paths in v2 file describe, rename and delete (#9504)
Other Changes
chore(ci): reach the database over the tailnet when CI_DB_TAILNET is set (#9541)
chore(search): retire legacy search knowledge base projection rows in place (#9511)
chore(auth): correct where the short disposable list runs (#9535)