v1.804.0

1.804.0 (2026-09-05)

Features

• ai-sessions: replace the context panel with an assistant settings modal (#10919) (fda7b3f)
• frontend: group the agent form and edit saved agents as drafts (#10880) (f037c73)
• guest app execution mode, a role that takes no seat (#10929) (fce635d)
• guest JWT entry for embedded apps (#10954) (8aab503)
• instrument sandbox isolation, data tables and in-flow script edits (#10981) (130a2f7)
• make S3 permission rules reorderable by drag and drop (#10958) (2257b05)
• reconcile IdP instance groups from the SSO groups claim (#10957) (79426a1)

Bug Fixes

• deploy a relocked script version only when its lock changed (#10966) (1113828)
• frontend: render ordered lists in markdown descriptions (#10973) (a0295b2)
• keep braces inside string tool arguments out of JSON depth count (#10965) (3e3d2a6)
• keep the instance user editor popover inside the viewport (#10979) (1901d31)
• meter WAC compute per segment, not the whole sleep (#10985) (5428710)
• name the extension to load when duckdb autoload hits the fence (#10972) (64b6798)
• oauth: show the account chooser on an explicit Google/Microsoft login (#10961) (9f7908e)
• patch critical CVEs in the worker image (#10962) (b100606)
• render the MCP OAuth consent page without a workspace (#10988) (ebfac29)
• stand the WAC park down for a cancel that beat it to the row (#10990) (f977f5b)