Tale v0.2.96

What's Changed

• feat(platform): hot-reload convex + frontend in docker:dev by @larryro in #2238
• fix(sandbox): self-heal buildkitd egress fence across restarts by @larryro in #2254
• fix(convex): truncate over-long imported task titles instead of rejecting by @larryro in #2256
• fix(sandbox): heal buildkitd egress fence on IP drift, not just on restart by @larryro in #2258
• feat: shared skills source-of-truth + sync tooling by @yannickmonney in #2252
• feat(platform,sandbox): live-browser human takeover — always-on control, native chrome, paste & key fixes by @larryro in #2262
• feat(platform,sandbox): default in-sandbox Claude Code agent to max effort, 1M context, workflows by @yannickmonney in #2271
• feat(sandbox): ship visual-aspect-analyzer as a built-in skill by @yannickmonney in #2274
• refactor(skills): consolidate skill sources under .agents/skills by @yannickmonney in #2278
• fix(platform): keep conversation inbox panes scrolling independently by @Israeltheminer in #2275
• feat(convex): event-driven capacity wake for parked workflow sandbox steps by @larryro in #2235
• feat(platform): multi-party mentions and author attribution in discussions by @Israeltheminer in #2280
• feat(platform): hide password field when adding an existing user by @Israeltheminer in #2276
• fix(platform): reset cross-org entity subpath on org switch by @Israeltheminer in #2277
• fix(platform): disclose auto-disabled personalization on thread share (#2071) by @larryro in #2244
• fix: show 'not scanned yet' label instead of perpetual spinner in websites table (#2073) by @larryro in #2245
• fix: add accessible name to list-filter search inputs (#1989) by @larryro in #2242
• fix(sandbox): accumulate canonical stdout from polled deltas, not final re-read (#1850) by @larryro in #1915
• fix: Agent webhook "will only be shown once" warning is false (#2064) by @larryro in #2246
• fix(platform): cover customer name in conversations inbox search (#1996) by @larryro in #2251
• fix: include the entire end day in executions date-range filter (#2075) by @larryro in #2239
• fix(sandbox): verify skipTLSVerify/caFile kubeconfig behavior under Bun (#1849) by @larryro in #1916
• fix(platform): keep zero-cost fallback models after a credit-exhausted credential (#1454) by @larryro in #1937
• fix(platform): surface actionable error when whole fallback chain is unconfigured (#1455) by @larryro in #1940
• fix: make the "Enable two-factor" button secondary (#1946) by @larryro in #1967
• fix: remove search and multi-select from the AI providers table (#1957) by @larryro in #2110
• fix: rename branding "Clear all" action to "Reset" (#1962) by @larryro in #2111
• fix(platform): use icon buttons for inline table row actions and confirm passkey revoke (#1963) by @larryro in #2112
• fix(platform): polish logo/favicon upload button hover and feedback (#1961) by @larryro in #2113
• fix(platform): allow branding favicon and font under CSP via SITE_URL origin (#1964) by @larryro in #2115
• fix: add back navigation to "what's new" changelog page (#1965) by @larryro in #2127
• fix(platform): styled 404 for nested unknown dashboard routes (#2097) by @larryro in #2128
• fix: relabel 2FA manual secret to "Or enter manually:" and make it copyable (#1947) by @larryro in #2129
• feat(platform): add borderless read-only input variant (#1942) by @larryro in #2131
• fix: close governance logs and notifications inbox low-severity gaps (#2092) by @larryro in #2133
• fix: set document title on apps dashboard route (#2093) by @larryro in #2134
• fix(platform): count visible rows in automations list footer (#2094) by @larryro in #2137
• fix(platform): show sign-in toast on 2FA TOTP login, not enrollment copy (#2083) by @larryro in #2138
• fix(platform): show backup-code description on 2FA verify page (#2084) by @larryro in #2139
• fix(platform): auto-retry convex deploy on transient module-analyze timeout (#2117) by @larryro in #2142
• fix(platform): add accessible name to notifications popover dialog (#2096) by @larryro in #2143
• fix(platform): Enterprise SSO + SCIM end-to-end hardening (Microsoft Entra) (#2116) by @larryro in #2144
• fix: stop getOrgWorkflowMetrics scan at prior-window boundary (#2077) by @larryro in #2146
• fix: chat attachment cap & cross-batch dedup bypassable by concurrent batches (#2078) by @larryro in #2147
• fix: add download/preview affordance to project files tab (#2070) by @larryro in #2150
• fix(platform): surface PROJECT_HAS_BOUND_APPS error on project delete (#2068) by @larryro in #2169
• fix: surface one-click app install/reinstall failures with a toast (#2067) by @larryro in #2171
• fix(platform): localize MCP server form validation messages (#2063) by @larryro in #2173
• fix(platform): require name in customer edit dialog for vendor parity by @larryro in #2176
• fix(platform): validate budget rules in editor so dead rules can't be saved (#2061) by @larryro in #2177
• fix: add missing i18n key apps.runs.backToApp (#2022) by @larryro in #2181
• fix: scope getByStorageIds to caller's org to close cross-tenant leak (#2027) by @larryro in #2182
• fix(platform): coerce automations metrics period search param (#2024) by @larryro in #2183
• fix(convex): add thread RLS to approval-by-thread queries (#2025) by @larryro in #2185
• fix(platform): coerce project metrics period search param (#2033) by @larryro in #2190
• fix: guard owner role and duplicate membership in createMember/addMember (#2035) by @larryro in #2192
• fix(platform): guard trusted-headers authenticate endpoint against open redirect (#2037) by @larryro in #2195
• fix(platform): clear conversations search filter when box emptied after ?search= seed (#1992) by @larryro in #2196
• fix: treat missing retention config as empty state on governance load (#1997) by @larryro in #2200
• fix: knowledge_entries mutations throw ConvexError instead of raw Error (#2000) by @larryro in #2201
• fix(platform): a11y polish — aria-modal, radiogroup arrows, single preview heading, protected-row checkbox (#1998) by @larryro in #2203
• fix(platform): close data-quality and affordance gaps (#1999) by @larryro in #2204
• fix(convex): throw ConvexError from file_metadata mutations (#2001) by @larryro in #2207
• fix: throw structured ConvexError codes from member management mutations (#2006) by @larryro in #2208
• fix(platform): throw ConvexError for vendor not-found and conflict cases (#2004) by @larryro in #2209
• fix(platform): return structured error codes from workflow execution mutations (#2013) by @larryro in #2210
• fix(platform): throw ConvexError from user profile mutations (#2012) by @larryro in #2212
• fix(convex): throw ConvexError with structured codes from MCP server actions (#2015) by @larryro in #2214
• fix(platform): cover pass-2 pii scrub rows in audit chain verifier (#1843) by @larryro in #2216
• fix(platform): preserve audit chain contiguity around custodian-hold rows (#1844) by @larryro in #2217
• fix(convex): harden audit integrity verifier and cron coverage (#1846) by @larryro in #2218
• fix(convex): throw ConvexError from admin-gated governance and audit_logs queries (#2016) by @larryro in #2220
• fix: clarify automations executions search placeholder (#1985) by @larryro in #2221
• feat: add customer support portal cases (view, manage, escalate, comment) (#1923) by @larryro in #2222
• fix: read governance policy server state directly instead of mirroring in useState (#2023) by @larryro in #2223
• fix(platform): show conversation status-tab count badges, drop dead ?priority= param by @larryro in #2226
• fix(platform): coerce agents metrics period search param (#1987) by @larryro in #2227
• fix: localize "Unknown Customer" fallback + fix missing pagination i18n key in conversations (#1978) by @larryro in #2230
• fix(platform): add ICU plural to message and team count strings (#2053) by @larryro in #2231
• fix: scan all pages for list search/filter, not just loaded ones (#2054) by @larryro in #2232
• fix(platform): deliver bulk conversation replies via integration (#2047) by @larryro in #2234
• fix(platform): render notifications bell i18n keys and ICU placeholders (#2055) by @larryro in #2237
• fix: validate non-blank rows and localize todo_list human-input field (#2079) by @larryro in #2243
• fix(platform): gate member bulk-select and guard self-removal (#2043) by @larryro in #2247
• fix: report the actual per-type ceiling in the chat upload size-limit toast (#2048) by @larryro in #2255
• fix(convex): throw ConvexError with structured codes from folder mutations (#2005) by @larryro in #2257
• fix: respect configured corporate identity in presentation generation (#1920) by @larryro in #2263
• fix: show agent display names in workforce metrics leaderboard and attention lists (#2066) by @larryro in #2264
• fix(platform): clear orphaned sharedWithTeamIds when a project goes org-wide (#2046) by @larryro in #2266
• fix: localize backend status enums and trash relative time (#2052) by @larryro in #2267
• fix: add Performance/metrics tab to loaded agent-editor nav (#1990) by @larryro in #2268
• fix: gate destructive surfaces on developerSettings capability (#2042) by @larryro in #2269
• fix(platform): gate governance/branding writes on write orgSettings capability (#2044) by @larryro in #2270
• fix: sandbox/k8s: stage attestation (prestage.json) lives on a runner-writable path (#1847) by @larryro in #2272
• fix(platform): make automation canvas read-only instead of no-op editing affordances by @larryro in #2273
• fix(platform): enforce active-org coherence on by-id reads and writes by @Israeltheminer in #2279
• chore(convex): regenerate generated api types by @larryro in #2284
• feat: prerender web and docs SEO to match the live page by @yannickmonney in #2282
• fix(platform): stop the issue-desk merge-gate crashing on review text, and surface failed runs by @larryro in #2285
• feat(platform): scope installed-app config per project by @larryro in #2286
• fix(platform): search and pagination UX polish by @AdeolaAdekoya in #2281
• feat(platform): upload private apps to the Apps hub by @larryro in #2289
• fix(convex): throw ConvexError codes from customer/website ops (#2003) by @Israeltheminer in #2294
• fix(convex): throw ConvexError codes from documents mutations (#2010) by @Israeltheminer in #2296
• fix(platform): gate automations read views on read not write (#2076) by @Israeltheminer in #2290
• fix(convex): throw ConvexError codes from team_members mutations (#2002) by @Israeltheminer in #2288
• fix(convex): throw ConvexError codes from two_factor mutations (#2014) by @Israeltheminer in #2291
• fix(convex): throw ConvexError codes from thread mutations (#2007) by @Israeltheminer in #2293
• fix(convex): throw ConvexError codes from location tool mutations (#2020) by @Israeltheminer in #2295
• fix(platform): reject re-use of current password on forced change (#2038) by @Israeltheminer in #2297
• fix(platform): emit conversation audit logs off the RLS ctx (#1972) by @Israeltheminer in #2283
• fix(convex): throw ConvexError codes from agents mutations (#2017) by @Israeltheminer in #2292
• feat(platform): vision and image generation for OpenAI-compat API by @larryro in #2298
• feat(sandbox): auto-inject vision MCP for text-only managed agents by @larryro in #2287
• fix(platform): heal app schedules from the ownership ledger by @larryro in #2299
• fix(platform): reliably close issue-desk tasks when their GitHub issue closes by @larryro in #2300
• feat(platform): add search to automations and apps catalogs by @Israeltheminer in #2304
• feat(ui): make CardGrid responsive to its container, not the viewport by @Israeltheminer in #2305
• feat(platform): add IMAP/SMTP mailbox integration for two-way email by @Israeltheminer in #2303
• feat(platform): add per-key budgets, ODT ingest, SSO errors, docs link by @yannickmonney in #2314
• test(platform): cover per-key budgets, ODT, SSO errors, docs link by @yannickmonney in #2315
• refactor(sandbox): move run_code to a persistent per-thread session + fix the file/path model by @larryro in #2301
• fix(platform): map AADSTS errors and use public origin in SSO redirects by @larryro in #2318
• fix(platform): make the E2E suite run on an isolated stack, fix rbac spec by @larryro in #2320

Full Changelog: v0.2.95...v0.2.96