Tale v0.5.89

Highlights

• Native deployment provisioning now accepts the Better Auth 1.7 built-in password capability. Upgrading a host that already runs v0.5.87 or v0.5.88 completes the break-glass administrator reconciliation instead of stopping after the service containers become healthy.

Upgrade notes

• From v0.5.88 to v0.5.89 no database migration or manual configuration change is needed. The release is a deployment hotfix for the native CLI; rerun the normal Tale CLI deployment/adoption flow after the images and CLI are published.
• The native CLI still refuses a disabled or malformed password policy and verifies the declared credential hash before completing provisioning.

API contract changes

The contract moved from 3.43.0 to 3.44.0 (161 → 161 operations). Read the API reference's versioning section before upgrading a pinned client.

Added operations: none.

Removed operations: none.

Changelog

3.44.0 — 2026-10-13: coding agents may sign in to the MCP endpoint unless the operator turns it off (TALE_MCP_CLIENT_METADATA_DOCUMENTS and TALE_MCP_DYNAMIC_CLIENT_REGISTRATION now default to on): the discovery documents answer on a default deployment — the endpoint's protected-resource metadata at /.well-known/oauth-protected-resource, and the sign-in server's own with the agent scopes, refresh_token, the metadata-document flag and, for a client that registers itself, a registration_endpoint — and the 401 of /api/v1/mcp carries the challenge 3.43.0 describes. agentOAuth joins the security schemes (OAuth 2.1 authorization code with PKCE, the seven scopes) and the endpoint's security lists it beside the API key. No operation, schema or API key behaviour changes.

What's Changed

• feat(platform): add the Connected agents page to Settings by @yannickmonney in #4925
• Turn on coding-agent sign-in and narrow Codex's scopes by @yannickmonney in #4926
• fix(platform): preserve blocked indicators across task filters by @yannickmonney in #4250
• chore(deps): update dependency handlebars to v4.7.10 [security] by @renovate[bot] in #4583
• fix(platform): stage accepted task attachment metadata by @yannickmonney in #4283
• fix(platform): keep skill editor visible after saving by @yannickmonney in #4405
• docs(platform): say which boot steps wait out a database restart by @yannickmonney in #4906
• fix(platform): complete guardrail metrics error state by @yannickmonney in #4907
• fix(platform): treat missing credentials as already deleted by @yannickmonney in #4190
• fix(platform): preserve adjacent video caption word boundaries by @yannickmonney in #4195
• fix(platform): bind connection test results to form revisions by @yannickmonney in #4196
• fix(platform): preserve OIDC claim mappings on save by @yannickmonney in #4212
• fix(platform): enable explicit malformed standard-agent repair by @yannickmonney in #4183
• fix(platform): hide unavailable managed standard agents by @yannickmonney in #4168
• fix(platform): preserve search privacy and keyboard focus by @yannickmonney in #4214
• fix(platform): require targets for model access rules by @yannickmonney in #4216
• fix(platform): retain captured reviewer handoff identity by @yannickmonney in #4282
• fix(platform): preserve project-agent app save preconditions by @yannickmonney in #4322
• fix(ui): keep keyboard focus in the list after a confirmed row delete by @yannickmonney in #4273
• fix(platform): bind failed-send recovery to thread by @yannickmonney in #4222
• fix(platform): refresh current user after account name saves by @yannickmonney in #4262
• fix(platform): show failed contact, product and website list reads by @yannickmonney in #4290
• fix(platform): preserve team roster drafts on refresh by @yannickmonney in #4233
• fix(platform): measure Home row contrast and repair the selected row by @yannickmonney in #4522
• fix(platform): keep tool time out of the message info model phases by @yannickmonney in #4923
• fix(platform): return retry guidance for rate-limited video ingest by @yannickmonney in #4194
• fix(platform): serialize concurrent alias registrations by @yannickmonney in #4220
• fix(platform): preserve provider-specific usage ledger buckets by @yannickmonney in #4241
• fix(platform): retry stale review manifests coherently by @yannickmonney in #4291
• fix(sandbox): honor memory overrides and retry disk relief by @yannickmonney in #4169
• fix(skills): protect stale edits with entity tags by @yannickmonney in #4192
• feat(platform): show trigger readiness beside the live version by @yannickmonney in #4924
• feat(platform): improve agent run details by @Israeltheminer in #4683
• fix(platform): report refused sandbox cancellations by @yannickmonney in #4263
• fix(cli): accept Better Auth password capability by @yannickmonney in #4939
• docs(release): add v0.5.89 notes by @yannickmonney in #4940

Full Changelog: v0.5.88...v0.5.89