v0.1.5

QM 0.1.5 makes everyday agent work faster and deployment operations safer.

• Search every visible conversation from a new full-text command palette.
• Work across improved multi-pane sessions with clearer navigation and controls.
• Connect custom model endpoints and admin-managed HTTP MCP tools.
• Run and recover sandboxes with more control, including out-of-band status and restart.
• Deploy with broader live validation, stronger authorization checks, and tighter credential boundaries.
• Use improved Slack threads, drafts, channel controls, and customizable bot identity.

What's Changed

• Resolve skill shadowing from one catalog snapshot in visibleFor by @16francej in #160
• reach: accept threadTs to reply inside a channel or group thread by @ReganBell in #168
• Extend the agent self-API: conversation read/fork/colors, memory history, skill restore, viewer-scoped files/deployments, projects by @ReganBell in #169
• Slack delivery: fast group-DM addressing without directory clobbering, and no duplicate replies by @ReganBell in #170
• web-ui: in-document panes with a byte-budgeted transcript, plus the stacked UX and steering fixes by @ReganBell in #175
• credential broker: refuse percent-encoded parent traversal by @ReganBell in #198
• Never show a raw Slack id where a person will read it by @ReganBell in #199
• model: custom provider endpoints by @ReganBell in #200
• web-ui: fork origin badge, author-labeled bubbles, real sidebar links by @ReganBell in #202
• Persist full runtime defaults per scope by @ReganBell in #203
• self-API: spawn a fresh conversation by @ReganBell in #204
• dev-instance: browser-only mode (--no-slack) by @ReganBell in #205
• docs(security): record the three deliberately portal-only actions by @ReganBell in #206
• deploy: owner app shell with docked iterate chat by @ReganBell in #201
• tape-fold: don't synthesize tool results for aborted assistant messages by @ReganBell in #239
• Fix main image dependency audits by @16francej in #319
• Fix AWS production deployment blockers by @16francej in #163
• Add slack-drafts skill: create Slack drafts as the user via their Slack OAuth by @16francej in #279
• Fix Pi routing and broaden live deployment validation by @16francej in #325
• Fix command-form approval rules by @16francej in #324
• logs: never pass a raw error object to console.* by @ReganBell in #408
• Session titles: stop the titler replying to the transcript by @ReganBell in #407
• skills: Gmail helper calls the API via curl so it by @ReganBell in #398
• web-ui: session top bar follow-ups — fork badge, and apps/skills/keychain join the quick tools by @ReganBell in #485
• sessions: replace per-step LLM request bodies with hash-deduped prompt envelopes by @ReganBell in #484
• MCP connectors v1: admin-registered HTTP by @ReganBell in #481
• Withhold tape coverage for a stopped turn until its partial is imported by @ReganBell in #470
• sandbox: out-of-band computer status and restart via the execute tool by @ReganBell in #469
• web-ui: keep the device safe-area under the composer on mid-width surfaces by @ReganBell in #491
• web-ui: one idiom for proxied API routes by @ReganBell in #488
• web-ui: clock indicator on sessions a cron is scheduled to post into by @ReganBell in #500
• acl: version-checked cache for grant reads instead of re-reading the whole table by @ReganBell in #499
• Sidebar: always show Sessions, collapse by @ReganBell in #498
• Grant conversation-scope read on files posted in group/DM sessions by @ReganBell in #475
• Let an admin grant a specific cron narrow admin-read access for unattended fires by @ReganBell in #471
• goal: agent-registered thread goals with harness enforcement by @ReganBell in #497
• Fix five CLI and validation bugs from issue triage by @ReganBell in #494
• projects: refresh the Slack directory on demand when a channel link misses by @ReganBell in #487
• Build deployment git URLs from the API origin by @ReganBell in #482
• sandbox: smolmachines backend by @ReganBell in #478
• Contributor-reported fixes: paths with spaces, redactor gaps, safe Slack by @ReganBell in #476
• config: treat a top-level "//" key as a comment, not an unknown field by @ReganBell in #505
• cli: close hosting-target abstraction leaks behind the HostingProvider seam by @ReganBell in #506
• sandbox: provision-time machine resources for the smolmachines backend by @ReganBell in #507
• Slack channels: opt-in pinned header message instead of setting the description by @ReganBell in #508
• web-ui: count badges and strictly scoped tool views on the session top bar by @ReganBell in #501
• Full-text chat search: a ⌘K palette over every visible conversation by @ReganBell in #509
• web-ui: hover popover labels the session top-bar icon buttons by @ReganBell in #511
• Wire custom providers end-to-end (admin API, boot default, model picker) by @ReganBell in #512
• web-ui: single-header multiview panes by @ReganBell in #513
• Fixes for four reported issues: destructive-SQL scanning, by @ReganBell in #515
• Chat search follow-ups: archived results, clearer copy, and a visible failure state by @ReganBell in #516
• web-ui: pane chat keeps its two-row grid — by @ReganBell in #517
• Retry transient admin access probes by @16francej in #531
• admin: name attached scopes on environments and tag attached scope rows by @16francej in #533
• Make bot identity customizable per deployment by @garrytan in #530
• Gate env-delivered org credentials by service-cred grants by @ReganBell in #548
• Tighten shared runtime boundaries by @16francej in #539
• Prepare the QM 1.0.5 rollout by @16francej in #557
• Harden admin authorization readiness by @16francej in #564
• Clarify admin navigation icon by @16francej in #562
• Fix approval layout in narrow panes by @16francej in #563
• fix(web-ui): snap chat to bottom instantly on pane tab re-activation by @16francej in #565
• Correct release version to 0.1.5 by @16francej in #568