v0.1.13

QM 0.1.13 brings a desktop app, spend visibility, Inbox Loops, and a lot of speed.

• QM has a desktop app, with browser sign-in handoff and the download in Settings.
• Admins can see where the money goes: a spend dashboard with time-series breakdowns, reports served from saved daily totals, and per-cron runtime overrides plus separate org defaults for crons and sub-agents to keep recurring spend in check.
• Inbox Loops arrive: flagged loops with durable event ingestion, each with its own icon or uploaded logo.
• New models and easier picking: GPT-6 Sol, GPT-6 Luna, and claude-opus-5-5 join the registry, you can save eight model presets, and the picker menus got simpler.
• Sign in with a password on the built-in auth broker, alongside the existing email flow.
• Agents integrate outward: a turn can call tools the caller executes, and runs stream tool calls and results as AG-UI events.
• Teams onboard faster: teammate invitations with single-use sign-in links in Admin, and personal Slack accounts link to existing web identities.
• Slack: opt-in isolation for external users with private continuation, app owners approve access requests right from Slack, and Stop now responds immediately.
• Chat renders Mermaid diagrams, shows image attachments as compact previews, and keeps a scrolled-up reader in place when a turn ends.
• Faster everywhere: lower send latency during concurrent streams, responsive multiview streaming, bounded transcript reads, and cheaper recovery and run lookups.
• Sandboxes are sturdier: the E2B, Modal, Sprites, and Smolmachines backends now match their providers' docs, and transient provider errors retry with request ids.

What's Changed

• QM-42: Record fast-mode LLM requests at the priority price actually billed by @pcapriolo-yc in #1394
• Retry interrupted session reads without replaying unsafe requests by @ReganBell in #1429
• Replace skill projection with an explicit skill tool and per-turn skill directories by @ReganBell in #1432
• Polish sidebar conversation styling by @evebouf in #1434
• Move suggested prompts below composer by @evebouf in #1437
• Migrate admin tabs to Lit and streamline Users and Slack settings by @ReganBell in #1441
• Report caught backend failures at shared boundaries to Sentry by @ReganBell in #1408
• Add sampled Sentry performance tracing by @ReganBell in #1410
• Preserve cron authority across native Loop stages by @ReganBell in #1443
• Keep opted-in Slack coordinators responsive through durable delegation by @ReganBell in #1466
• Wait for attachment delivery in live Slack qualification by @ReganBell in #1468
• Gate admin design system by inbox access by @evebouf in #1439
• Remove sidebar resize tooltip by @evebouf in #1471
• Renew verified background ownership during slow startup by @ReganBell in #1469
• Confirm ownership mutations and fence automatic compensation by @ReganBell in #1472
• Keep loop fires admitted through handover and repair inbox sync by @ReganBell in #1473
• Reuse the composer model picker in context settings by @ReganBell in #1476
• Add agent-settable session emoji statuses by @ReganBell in #1475
• Make Stop respond immediately and suppress post-stop replies by @ReganBell in #1477
• Coalesce completion wakeups behind active parent turns by @ReganBell in #1480
• Add flagged Inbox Loops and durable event ingestion by @ReganBell in #1479
• Stop repeating unchanged memory in every turn by @ReganBell in #1478
• Restore legacy email and Slack items to their Inbox tabs by @ReganBell in #1490
• Let users choose an icon for each loop by @ReganBell in #1494
• Allow uploaded custom logos for loop icons by @ReganBell in #1496
• Respect compaction when replaying document attachments by @ReganBell in #1499
• Link personal Slack accounts to existing web identities by @ReganBell in #1442
• Settle Codex RPC replies without waiting on notification callbacks by @time-attack in #1403
• Keep the Codex thread/start deadline as a non-retryable timeout by @time-attack in #1404
• Use the inherited project roster when starting a managed project turn by @time-attack in #1405
• Add native credential approvals and precise conversation message links by @ReganBell in #1502
• Retry deployment-layer sync when core is still unreachable after up by @time-attack in #1406
• Scrub internal examples and remove tracked screenshots by @ReganBell in #1504
• fix(web): show compact dates on older message timestamps by @ReganBell in #1506
• Show image attachments as compact previews above message bubbles by @ReganBell in #1510
• Preserve request context in subagent completion wakeups by @ReganBell in #1511
• Retry transient sandbox provider errors and report request ids by @ReganBell in #1412
• Keep app top bar and chat drawer themes synchronized by @ReganBell in #1512
• Align the Smolmachines backend with its lifecycle and exec docs by @ReganBell in #1422
• Align the Sprites backend with Sprites docs and SDK 0.2.3 by @ReganBell in #1419
• Align the Modal backend with Modal sandbox docs by @ReganBell in #1420
• Add teammate invitations and single-use sign-in links to Admin by @ReganBell in #1513
• Align the E2B backend with E2B lifetime, snapshot and network docs by @ReganBell in #1421
• Render Mermaid diagrams in web chat and shared conversations by @ReganBell in #1514
• Organize agent tools by resource and action by @ReganBell in #1516
• fix(web-ui): keep the composer visible under the iOS keyboard by @16francej in #1509
• Replace Fly ssh console with machine exec for internal transports by @time-attack in #1407
• Trust a verified live turn as proof of the speaker's room membership by @16francej in #1507
• Match credential drop pages to the web UI by @ReganBell in #1525
• Clarify credential service names and request timestamps by @ReganBell in #1527
• Add QM desktop app with browser sign-in handoff by @ReganBell in #1528
• Keep work header typography consistent with subagents by @ReganBell in #1537
• Clarify credential approval session and requested access by @ReganBell in #1535
• Add claude-opus-5-5 and harden preserved-thinking replay for adaptive Anthropic models by @ReganBell in #1536
• Wrap expanded pin text instead of truncating it to one line by @16francej in #1530
• Add GPT-6 Sol and GPT-6 Luna to the model registry by @16francej in #1534
• Allow operator-supplied SVG favicons by @16francej in #1538
• Remove Cmd/Ctrl+1-9 session-switch hotkeys by @16francej in #1546
• Derive transcript type sizes from one chat base so multiview panes scale as a unit by @16francej in #1545
• Fix Illegal invocation on admin Make admin button by @16francej in #1540
• Enforce goals for every harness, not only pi by @16francej in #1519
• Give sandbox-facing turn tokens a 48h TTL by @16francej in #1518
• Keep a scrolled-up reader in place when a turn ends by @16francej in #1548
• Condense the pinned prompt to two lines while it is stuck by @16francej in #1515
• Exclude tool results from agent history lookups by @ReganBell in #1555
• Recover when a scope has no computer by @16francej in #1557
• Clarify publish tool configuration guidance by @16francej in #1558
• Keep the model picker usable with personal AI credentials by @16francej in #1556
• Preserve app connections across verified identity links by @16francej in #1563
• Keep Composio project keys in the backend by @ReganBell in #1564
• Resolve selected execution credentials on demand and mask their output by @ReganBell in #1566
• Show concise tool purposes and skill names in web activity by @ReganBell in #1568
• Update bundled Codex and OpenCode to cooled stable releases by @ReganBell in #1569
• Ship missing web UI assets in production Docker image by @time-attack in #1554
• Let a deployed app opt into being framed by named origins by @tdfirth in #1503
• Compact multiview pane header: session actions on the active tab, legible narrow panes by @16francej in #1550
• Fix suggested prompts in short multiview panes by @16francej in #1570
• Make AWS RDS instance class configurable by @time-attack in #1532
• Fix pinned prompt flicker during auto-follow by @16francej in #1574
• Fix admin feature flag layout by @16francej in #1577
• Compress large capability tokens with a staged rollout by @ReganBell in #1578
• Theme tooltips and position sidebar status outside the rail by @ReganBell in #1579
• Let app owners approve or decline access requests from Slack by @16francej in #1551
• Stage framed session cookies for safe rolling upgrades by @ReganBell in #1583
• Simplify and compact model picker menus by @evebouf in #1573
• Align skills and memory extraction with the resource tool catalog by @ReganBell in #1582
• Fix desktop sign-in, connection handoff, and window navigation by @ReganBell in #1581
• Show parent breadcrumbs and unwrap singleton activity by @ReganBell in #1585
• Put the desktop download in Settings and remove the announcement by @ReganBell in #1587
• Preserve delegated Slack behavior and deliver approvals through the runtime by @ReganBell in #1586
• Prevent subagent results from leaking into Slack and web replies by @ReganBell in #1592
• Fix Composio run authorization thread identity by @16francej in #1591
• Allow per-cron runtime overrides to control recurring model spend by @ReganBell in #1593
• Allow opt-in public app sharing by @16francej in #1571
• Keep authorized resources continuous across Open conversations by @16francej in #1552
• Prevent Unicode failures in persisted runs and signals by @16francej in #1595
• Restore personal automation access to owner credentials by @ReganBell in #1594
• Enable fast mode for OpenCode by @ReganBell in #1597
• Require external-content screening independently of tool posture by @ReganBell in #1602
• Fix pinned prompt scroll flicker and layout jumps by @16francej in #1600
• Allow eight saved model presets by @ReganBell in #1596
• Allow task-local runtime handoffs during cron fires by @ReganBell in #1604
• Fix pane tab sizing and narrow composer layout by @16francej in #1598
• Expand dev instance capacity and safely clean up completed instances by @ReganBell in #1606
• Fix retrying restored conversations after load failures by @16francej in #1603
• Stream a run's tool calls and results as AG-UI events by @tdfirth in #1607
• fix: make Auto reasoning provider-native and capability-gated by @ReganBell in #1610
• Let a turn call tools that the caller executes by @tdfirth in #1608
• Add admin spend dashboard and time-series breakdowns by @16francej in #1614
• fix: stabilize prompt prefixes across turns by @16francej in #1618
• Unify inbox drafts with chat and submit Send it as a prompt by @16francej in #1078
• Add separate org runtime defaults for crons and sub-agents by @16francej in #1619
• Preserve goals across compaction and worker recovery by @16francej in #1621
• Always issue the framed portal session cookie by @tdfirth in #1617
• Update bundled Codex to 0.155.0 by @ReganBell in #1631
• Preserve configured email sign-in admission by @16francej in #1633
• Fix concurrent file import archive race by @16francej in #1626
• perf: keep multiview streaming responsive by @16francej in #1620
• Prevent agents from pausing their own goals by @16francej in #1637
• Unify silent turn completion by @16francej in #1635
• Fix cron contention, approval delivery loops, and slow reports by @16francej in #1639
• Recover failed compaction with bounded recent context by @16francej in #1634
• Reduce send latency during concurrent streams by @16francej in #1638
• Improve spend report performance by @16francej in #1641
• Update new session tabs while the first turn is running by @ReganBell in #1643
• Keep Sprites proxy hosts reachable during migration by @ReganBell in #1642
• Improve background responsiveness by @16francej in #1644
• Improve request responsiveness by @16francej in #1645
• Show nonzero command exits neutrally instead of Failed by @ReganBell in #1648
• Improve web navigation responsiveness by @16francej in #1646
• Give session, background, and guidance tools unambiguous actions by @ReganBell in #1649
• Preserve recovery compatibility during releases by @16francej in #1650
• Add opt-in external Slack isolation and private continuation by @16francej in #1647
• Preserve concurrent guidance updates by @16francej in #1653
• Show steering messages where the model receives them by @ReganBell in #1652
• Acknowledge unmentioned thread followups QM decides to answer by @ReganBell in #1651
• Make compact composers the multiview default by @16francej in #1659
• Fix restored tabs getting stuck while loading by @16francej in #1658
• Fix Helm persistence, readiness and port wiring by @16francej in #1660
• Update README.md by @16francej in #1667
• Update README.md by @16francej in #1668
• Add optional password sign-in to the auth broker by @16francej in #1549
• Clarify authorized admin system maintenance by @16francej in #1654
• Keep uploads usable without a default sandbox by @16francej in #1670
• Keep the model picker in sync with runtime default changes by @16francej in #1669

New Contributors

• @tdfirth made their first contribution in #1503

Full Changelog: v0.1.12...v0.1.13