v0.105.6

What's Changed

• test(web): fix the active-tab locator that broke five acceptance tests by @mmabrouk in #5378
• feat(sdk): emit tool-output-denied so the UI can tell a denial from a failure by @mmabrouk in #5381
• feat(runner): client tools on Claude in remote sandboxes by @mmabrouk in #5383
• [AGE-3962] fix(runner): surface Claude extended-thinking in the playground by @mmabrouk in #5380
• docs(readme): reposition around building and running agents by @mmabrouk in #5390
• fix(auth): correct exc_infp typo to exc_info in auto-join error logging by @truecallerabreham in #5377
• docs: add truecallerabreham as a contributor for bug by @allcontributors[bot] in #5379
• fix(sdk): use Claude harness model identifiers by @mmabrouk in #5365
• [fix] Refresh workflow name after rename by @ashrafchowdury in #5330
• test(sdk): align bare Claude alias test with the curated alias list by @mmabrouk in #5393
• test(agent): add the agent release gate — a portable wire-level QA harness by @mmabrouk in #5351
• [fix] Enable agent rename on the onboarding playground [AGE-3954] by @ashrafchowdury in #5340
• fix(frontend): Show raw payload for commit deltas outside parameters by @ardaerzin in #5129
• [release] v0.105.6 by @github-actions[bot] in #5385

New Contributors

• @truecallerabreham made their first contribution in #5377

Full Changelog: v0.105.5...v0.105.6

v0.105.5

What's Changed

• refactor(runner): decompose the sandbox_agent engine into small modules by @mmabrouk in #5369
• [release] v0.105.5 by @github-actions[bot] in #5374

Full Changelog: v0.105.4...v0.105.5

v0.105.4

What's Changed

• [release] v0.105.3 by @github-actions[bot] in #5360
• feat(hosting): run.sh auto-includes local compose overrides and gains surgical --recreate/--rebuild by @mmabrouk in #5353
• chore(runner): bump daytona SDK to @daytona/sdk 0.198 and OTel to 2.x by @jp-agenta in #5362
• [5357] fix(runner): recognize client-tool settles as a resume in cold replay by @ardaerzin in #5364
• fix(runner): refuse a Claude-on-Daytona run whose tools are all client-kind by @mmabrouk in #5366
• feat(agents): OpenAI-compatible endpoints for Pi via vault custom connections by @mmabrouk in #5345
• feat(frontend): OpenAI-compatible endpoint label and harness-gated picker by @mmabrouk in #5346
• [release] v0.105.4 by @github-actions[bot] in #5368

Full Changelog: v0.105.3...v0.105.4

v0.105.3

What's Changed

• [release] v0.105.2 by @github-actions[bot] in #5338
• [chore] Revert ts dep bumps from #5337 by @ashrafchowdury in #5358
• feat(frontend): agent playground sessions, files, and inspector by @ardaerzin in #5306

Full Changelog: v0.105.2...v0.105.3

v0.105.2

What's Changed

• [chore] Exclude docs/ manifests from dependabot scanning by @junaway in #5336
• [chore] Bump ts deps by @jp-agenta in #5337
• [fix] Resolve redis conflicts by @jp-agenta in #5347

Full Changelog: v0.105.1...v0.105.2

v0.105.1

What's Changed

• [chore] Bump py deps by @jp-agenta in #5333
• [chore] Regen fern clients by @jp-agenta in #5334
• [chore] Clean up redis exporter by @jp-agenta in #5335

Full Changelog: 105.0...v0.105.1

v0.105.0

What's Changed

• fix(tools): support no-auth Composio toolkits + server-owned connection flags by @mmabrouk in #4785
• feat(agent): provider/model/connection for agent harnesses by @mmabrouk in #4815
• feat(agent): skills on the agent config by @mmabrouk in #4814
• feat(agent): capability config for sandbox, Claude, tool permissions by @mmabrouk in #4811
• feat(frontend): restore agent playground UI on big-agents by @mmabrouk in #4818
• fix(docs): remove broken custom-agent-runner-images links by @mmabrouk in #4819
• ci(agent): build and test sandbox-agent images by @mmabrouk in #4804
• chore(railway): add sandbox-agent preview deployment by @mmabrouk in #4802
• chore(kubernetes): deploy sandbox-agent sidecar by @mmabrouk in #4803
• fix(agent): drop skills on Claude wire (restore lost override) by @mmabrouk in #4824
• style(examples): ruff format RAG_QA_chatbot scripts by @mmabrouk in #4823
• fix(frontend): repair SessionsTable JSX from botched merge by @mmabrouk in #4822
• fix(agent): Claude carries skills for project-local materialization by @mmabrouk in #4825
• test(agent): align acceptance/integration tests with agent refactors by @mmabrouk in #4826
• fix(api): scrub server-owned flags from workflow query filters by @mmabrouk in #4827
• fix(api): only drop is_platform query filter when False, not True by @mmabrouk in #4832
• fix(frontend): use generateId() instead of crypto.randomUUID in AgentChatSlice by @mmabrouk in #4842
• [docs] Add agent workflow interface inventory by @mmabrouk in #4821
• [chore] Remove the /load-session endpoint and dead session-store scaffolding by @mmabrouk in #4828
• refactor(agent): remove legacy in-process backend, rename harnesses pi_core/pi_agenta by @mmabrouk in #4833
• feat(agent): versioned harness identity (slug + name) + bind builtin agent URI by @mmabrouk in #4829
• test(agent): guard /inspect x-ag-type-ref markers resolve in catalog by @mmabrouk in #4835
• feat(agent): wire models as the /run schema source + canonical /inspect response by @mmabrouk in #4830
• feat(frontend): harness-aware agent provider + model picker (inspect models) by @mmabrouk in #4839
• refactor(agent): collapse run-selection into AgentConfig, rename harness_kwargs by @mmabrouk in #4840
• [release] v0.104.3 by @github-actions[bot] in #4820
• feat(agent): enforce sidecar trust + disable unenforceable sandbox boundaries by @mmabrouk in #4831
• feat(agent): enable HTTP (remote) MCP transport with secret-backed headers by @mmabrouk in #4834
• feat(agent): fail loud on missing harness capabilities + debug assertions by @mmabrouk in #4838
• feat(agent): restore the internal gateway-tool MCP channel for Claude by @mmabrouk in #4847
• fix(agent): park HITL approvals + keep ACP alive + fail loud on code tools by @mmabrouk in #4848
• docs(agent): plan — restore gateway-tool MCP for Claude Code (decision needed) by @mmabrouk in #4844
• docs(agent): plan the HITL approval fix (F-024) by @mmabrouk in #4845
• fix(agent): clear error for bare model id + stable agent-chat keys (QA F-017/F-018/F-020/F-025) by @mmabrouk in #4846
• docs(agent): subscription-auth Claude sidecar dev/test recipe by @mmabrouk in #4849
• fix(agent): reconcile skills-system review findings by @mmabrouk in #4851
• fix(agent): restore services/agent/skills dir so the sandbox-agent image build works by @mmabrouk in #4852
• fix(agent): harden MCP delivery — Daytona loopback guard, Pi user-MCP fail-loud, http SSRF guard by @mmabrouk in #4853
• fix(agent): Claude alias resolution + skill/error tracing + error sanitize (QA F-031/F-029/F-030) by @mmabrouk in #4855
• fix(agent): scope HITL approval to the specific call + enable approve/deny promptly by @mmabrouk in #4854
• fix(agent): land skill/error trace attrs under recognized ag.* namespaces (F-036) by @mmabrouk in #4857
• fix(agent): stop Daytona sandbox leak (credit-burner) by @mmabrouk in #4856
• fix(agent): close LOW-severity backend findings (LOW-5/6/7, F-028) by @mmabrouk in #4858
• [fix] Resume HITL Deny end-to-end + guard the dev error overlay by @mmabrouk in #4859
• feat(frontend): agent playground config panel + agent run-lane wire fixes by @ardaerzin in #4850
• feat(frontend): offer Agent type in the Prompts page create menu by @ardaerzin in #4862
• feat(frontend): stream/batch response channel switch for the agent playground by @ardaerzin in #4861
• docs(agent): refresh QA run_matrix to current harness + model names by @mmabrouk in #4867
• fix(frontend): guard agent-chat run-error against crypto.randomUUID on plain HTTP by @mmabrouk in #4865
• fix(agent): force the _agenta platform skill on every pi_agenta run (D-016) by @mmabrouk in #4866
• fix(agent): end a HITL park turn gracefully so Approve/Deny complete (F-040) by @mmabrouk in #4869
• fix(hosting): guard against the web env-file footgun (F-037) by @mmabrouk in #4872
• fix(agent): surface the runner's actionable error on the batch path (F-038) by @mmabrouk in #4870
• fix(agent): fail loud when MCP is disabled but the request sent mcp_servers (F-039) by @mmabrouk in #4871
• [feat] Add triggers (connections, subscriptions, schedules) by @jp-agenta in #4749
• [feat] /invoke absorbs /messages + align agent env var names by @junaway in #4868
• fix(agent): avoid polynomial ReDoS in runner Bearer-token parsing by @junaway in #4878
• feat(frontend): hide evaluation actions in agent playground header by @ardaerzin in #4874
• [feat] Add custom secrets by @junaway in #4882
• chore(frontend): regenerate fern client against big-agents by @ardaerzin in #4887
• [fix] Claude: honor per-tool permission:"allow" so allowed tools don't park (F-046) by @mmabrouk in #4888
• [fix] Composio tunnel: idle instead of crash-loop when COMPOSIO_API_KEY unset by @mmabrouk in #4885
• [feat] Reference a workflow as an agent tool (type:"reference") by @mmabrouk in #4860
• feat(frontend): reference a workflow as an agent tool (type:"reference") by @ardaerzin in #4877
• [fix] Resolve broken workflows in big agents by @junaway in #4894
• [chore] Regenerate fern on big-agents by @junaway in #4895
• [fix] Expand x-ag-type-ref in reference-tool input schemas so harnesses can invoke them by @mmabrouk in #4890
• [fix] Claude: disable Tool-Search so agenta tools receive their input schema by @mmabrouk in #4896
• [fix] HITL: restore real tool args on approval so parked tools execute with their input by @mmabrouk in #4897
• [feat] Tool discovery: POST /tools/discover + reserved find_capabilities tool by @mmabrouk in #4884
• [feat] Direct-call tools — Phase 1: call descriptor on the resolved spec by @mmabrouk in #4889
• [feat] Direct-call tools — Phase 2: sidecar dispatch branch by @mmabrouk in #4891
• [feat] Direct-call tools — Phase 3a: run-context delivery + bind by @mmabrouk in #4892
• [feat] Direct-call tools — Phase 3b: platform-op catalog + find_capabilities + self-update by @mmabrouk in #4893
• [fix] Clean up Skill Template by @junaway in #49...

v0.104.3

What's Changed

• [release] v0.104.2 by @github-actions[bot] in #4796
• [feat] Move RBAC enforcement from ee to oss by @junaway in #4801
• fix: display exception message in trace output column when outputs is nullfix: display exception message in trace output column when outputs is… by @unfitcoder101 in #4747

Full Changelog: v0.104.2...v0.104.3

v0.104.2

What's Changed

• [release] v0.104.1 by @github-actions[bot] in #4729
• [fix] Select Railway services when redeploying previews by @bekossy in #4793
• fix(sdk): sandbox custom-code evaluators by default (RestrictedPython runner) by @mmabrouk in #4636
• [fix] Explicit service selection and graceful no-deployment on Railway redeploy by @bekossy in #4799
• fix: preserve string type when Text/Markdown view mode is selected in test case drawer by @NamHT4Devlop in #4705
• fix(frontend): surface invocation errors instead of dumping HTML 404 pages by @mmabrouk in #4702
• [Test] Web acceptance stability by @bekossy in #4506
• [feat] Enable full configuration of code and hook workflows and their schemas by @junaway in #4711

Full Changelog: v0.104.1...v0.104.2

v0.104.0

What's Changed

• [release] v0.103.5 by @github-actions[bot] in #4690
• docs(designs): Add OSS/EE convergence assessment and schema parity plan by @jp-agenta in #4669
• feat(api): Share membership tables with OSS and fix account-table drift by @jp-agenta in #4671
• feat(api): Add OSS org-creation path and EE-shaped signup flow by @jp-agenta in #4673
• feat(api): Enforce AGENTA_ACCESS_* domain and email controls in OSS by @jp-agenta in #4674
• feat(api): Sweep remaining single-org assumptions in OSS by @jp-agenta in #4675
• chore(api): Drop legacy app-centric tables and dead model classes by @jp-agenta in #4676
• docs(docs): Document multi-org OSS and the upgrade path by @jp-agenta in #4677
• feat(api): split migration chains at the alignment point by @jp-agenta in #4680
• feat(api): OSS-to-EE adoption migration on the EE chain by @jp-agenta in #4683
• feat(api): POSTGRES_DB_PREFIX for database-name resolution by @jp-agenta in #4684
• [fix] Clean up workflow uri<>type mapping by @junaway in #4708
• [chore] Add 'Rename' action to row menu in Prompts by @junaway in #4709
• fix(api): derive Postgres URIs against the fixed internal port, not POSTGRES_PORT by @mmabrouk in #4727

Full Changelog: v0.103.5...v0.104.0