v0.1.14

QM 0.1.14 refines approvals and goals, adds the newest models, and gets faster under load.

• Newest models: Claude Sonnet 5.5 with adaptive thinking, GPT-6.1 Sol, an Astra Ultrafast speed switch, and automatic fallback when a gateway model refuses or is unavailable.
• Approvals got stricter and clearer: the approval card is now the only way to approve credential use, strict-posture approvals show the gated call's arguments, and single-use credential grants are atomic again.
• Security screening simplifies to three modes: off, observe, and enforce. Memory adds provenance-aware disclosure and audience isolation.
• App sharing is one General access menu (Restricted, your org, or anyone with the link), and sharing outside the org stays off unless an org admin enables it.
• Goals are simpler and harder to game: exact timed floors, file-based evidence, a visible indicator, and only a human stop or an independent verifier can end one.
• Subagents feel present: their activity shows in the parent session, sessions keep working while they run, elapsed time ticks live, and opt-in Slack task cards track ongoing work.
• Long conversations got lighter: transcripts page by turns, model-only context stays out of view, and older history loads during live turns.
• Faster under load: sandbox operations no longer queue behind one machine lock, startup skips session-counter locks, and prompt inventories stay stable for cache reuse.
• Dependency security: fastify and hono updated to clear five new advisories, including an auth bypass.

What's Changed

• Carry the Slack source onto sub-agent runs by @16francej in #1676
• chore: update bundled Codex to 0.155.1 by @ReganBell in #1678
• Tell the user when Agent37 refuses an agent computer by @vishnukool in #1677
• Add inbox tabs, saved email filters, and shared AI sidebar by @evebouf in #1599
• Show only the latest Slack messages in inbox items by @16francej in #1683
• Recover saved responses after polling timeouts by @16francej in #1640
• porter: serve published apps in-cluster by default by @jackowfish in #1679
• web-ui: suggestions hug the composer in empty panes by @ReganBell in #1686
• Tighten desktop typography and conversation spacing by @ReganBell in #1688
• Stabilize prompt inventory ordering for cache reuse by @ReganBell in #1690
• Keep sessions working while their subagents run by @ReganBell in #1689
• Add opt-in Slack task cards for ongoing work by @16francej in #1655
• Keep recurring job checkpoints in durable Files by @ReganBell in #1694
• Probe the exec path in sandbox status for every sandbox by @16francej in #1684
• Fix model recommendation overflow in gated Inbox sidebars by @evebouf in #1697
• Match inbox loading feedback to conversation thinking by @evebouf in #1705
• Show subagent activity in the parent session by @16francej in #1710
• Clarify no-computer subagent delegation by @16francej in #1699
• Unblock tracked Fly deployments by @16francej in #1692
• Log completed portal 5xx responses by @16francej in #1707
• Report safe submission state for Sprites exec failures by @16francej in #1708
• Fix live Slack catalog setup and sandbox startup latency by @16francej in #1712
• Backfill Slack history once when the mirror starts late by @16francej in #1695
• Launch npm .cmd/.bat shims through cmd.exe in the Windows dev runner (#787) by @time-attack in #1703
• Give disposable execution scoped capabilities and reliable turn cleanup by @ReganBell in #1696
• Show session-tied crons as ongoing work in the web UI by @16francej in #1711
• Only a human stop or an independent verifier can end a goal by @16francej in #1715
• perf: avoid nested session lookup in pane header refreshes by @16francej in #1719
• Give the README a logo banner, badges, and section nav by @16francej in #1672
• Make browser inference follow saved AI access by @ReganBell in #1722
• Scale thinking rows with desktop density and label them Thinking by @ReganBell in #1723
• Focus the composer when switching multiview panes by @16francej in #1714
• Open a drafted new chat from a ?q= link by @16francej in #1682
• porter: upload published app files as one bundle by @jackowfish in #1724
• Let the run queue retry transient provider errors by @16francej in #1731
• Keep watch and cron delivery on the conversation's own surface by @16francej in #1717
• Add an Astra Ultrafast speed switch by @ReganBell in #1736
• Document object-store core layout as the Helm HA path by @16francej in #1726
• Tidy the subagent card above the composer by @16francej in #1733
• Tick subagent elapsed time every second by @16francej in #1741
• Make the approval card the only way to approve credential use by @16francej in #1713
• Fall back on refusals and unavailable gateway models by @16francej in #1743
• Keep the full waiting message on inbox cards by @16francej in #1746
• Make sandbox capability token lifetime configurable by @16francej in #1747
• Add Claude Sonnet 5.5 by @ReganBell in #1685
• End shared web turns on their reply instead of finish_silently by @16francej in #1737
• Add GPT-6.1 Sol by @ReganBell in #1744
• Stop serializing every sandbox operation behind one machine lock by @ReganBell in #1748
• Restore atomic single-use credential grants by @ReganBell in #1749
• Simplify goals: exact timed floors, file evidence, visible indicator by @16francej in #1734
• Resolve stale approval decisions quietly and contain denied commands in history by @16francej in #1742
• Add provenance-aware memory disclosure and audience isolation by @16francej in #1636
• Keep conversation status out of Slack turns by @ReganBell in #1754
• Avoid startup locks on session counters and the tool ledger by @ReganBell in #1753
• Update vulnerable brace-expansion and fast-uri transitives by @ReganBell in #1765
• Allow loading older history during live turns by @ReganBell in #1761
• Keep resolved credential approvals dismissed after refresh failures by @ReganBell in #1767
• Show the current default effort as Default and keep it selectable by @16francej in #1751
• Keep Slack thread context across directory warmup by @ReganBell in #1769
• Fold the Inbox migration notice into the sync line by @evebouf in #1774
• Turn off external app sharing unless an org admin enables it by @ReganBell in #1781
• Page transcripts by turns and keep model-only context out of the view by @ReganBell in #1687
• Update bundled Codex to 0.156.1 without exposing native goals by @ReganBell in #1788
• web-ui: open in-app session links in place instead of a new tab/window by @ReganBell in #1793
• Split sessions into subagents and sessions tools by @ReganBell in #1656
• Make app general access one menu: Restricted, the organization, or anyone with the link by @ReganBell in #1783
• Git credential broker: enforce the published-app token binding through the gate by @ReganBell in #1794
• Replace security screening knobs with one off/observe/enforce mode by @ReganBell in #1784
• Show gated call arguments in strict-posture approvals (#776) by @time-attack in #1702
• Run Postgres tests in parallel, one fresh database per test file by @ReganBell in #1780
• Reuse successful CI for exact tested trees by @ReganBell in #1777
• Bump @grpc/grpc-js from 1.14.4 to 1.14.5 by @dependabot[bot] in #1800
• Bump axios from 1.18.1 to 1.20.0 by @dependabot[bot] in #1791
• Optional prioritization and consolidation for Loops and the Inbox by @ReganBell in #1802
• Gate swarms per person and add a shared board and worker controls by @16francej in #1770
• Match AWS first-party workload defaults to published image architecture by @time-attack in #1807
• Allow reasoning capability on custom models by @time-attack in #1810
• Keep portal sign-out local and stop automatic re-login by @time-attack in #1808
• Bump fastify to 5.12.5 and hono to 4.13.9 to clear new security advisories by @16francej in #1862

Full Changelog: v0.1.13...v0.1.14