What's Changed
- Don't create clients for members and guests by @ignaciojimenezr in #5588
- Document admin-only client creation restriction by @mintlify[bot] in #5591
- Harden hosted diagnostics (MJ-001) by @chelojimenez in #5571
- Harden response headers (MJ-016) by @chelojimenez in #5567
- Harden sandbox proxy (MJ-014) by @chelojimenez in #5565
- Harden request metering (MJ-012) by @chelojimenez in #5572
- Harden telemetry (MJ-015) by @chelojimenez in #5581
- Harden tool approval (MJ-008) by @chelojimenez in #5574
- Harden organization API keys (MJ-010) by @chelojimenez in #5573
- Harden project fields (MJ-013) by @chelojimenez in #5566
- Harden conversation history (MJ-009) by @chelojimenez in #5583
- Harden error responses (MJ-020, MJ-021) by @chelojimenez in #5577
- Reap Railway preview environments whose PR is closed by @chelojimenez in #5592
- Harden artifact delivery (MJ-005) by @chelojimenez in #5568
- Harden session revocation (MJ-011) by @chelojimenez in #5570
- Harden uploads (MJ-006) by @chelojimenez in #5578
- Harden hosted diagnostic logs (MJ-001) by @chelojimenez in #5595
- Offer sign-in where the backend refuses a guest, instead of hiding the surface by @chelojimenez in #5235
- Document sign-in requirement for eval run insights by @mintlify[bot] in #5603
- models: P1-2 add ModelSelection beside HostConfigV2.modelId by @chelojimenez in #5563
- models: P1-5 runner and pickers write/read model selections by @chelojimenez in #5564
- models: P2-2 show execution provenance by @chelojimenez in #5575
- models: P3-2 client uses catalog observations by @chelojimenez in #5576
- models: P3-3 one picker for judges and environment models by @chelojimenez in #5580
- models: P3-5 catalog maintenance without manual churn by @chelojimenez in #5582
- models: P0-4 hosted dotted default and example model ids by @chelojimenez in #5560
- models: P0-6 explain provider_not_allowlisted without an API-key remedy by @chelojimenez in #5561
- models: P0-1 version-keyed harness model support, no emulated swap by @chelojimenez in #5559
- models: P3-4 BYOK discovery through provider adapters by @chelojimenez in #5579
- Saved credentials: backend-decided, held to their origin on the wire by @chelojimenez in #5554
- Update credential error docs for new messages by @mintlify[bot] in #5615
- Forward the caller's hashed IP on share-link redeem by @chelojimenez in #5616
- Offer sign-in on the server-quality card when a guest is refused by @chelojimenez in #5617
- Ask MCPJam on MCPJam's dime: send the attested claim and pin the model (I1) by @chelojimenez in #5287
- Harden chat-history error tests (MJ-020) by @chelojimenez in #5604
- Preserve workload admission for local organization model turns by @chelojimenez in #5621
- Read every page of the WorkOS preview lists before calling them clean by @chelojimenez in #5619
- Add a *.mcpjam.dev router for PR previews that verifies its upstream by @chelojimenez in #5622
- Exempt registerPreviewIdentityRoute from entry-point parity (fixes red main) by @SebasKoria in #5624
- Eval suites run only from environments (inspector) by @chelojimenez in #5569
- Retry desktop update downloads without trapping users by @ignaciojimenezr in #5596
- OAuth debugger: don't report a server's bad probe reply as our error by @ignaciojimenezr in #5613
- Feat/server check queue by @ignaciojimenezr in #5597
- Let extra prompts be removed from an eval case by @chelojimenez in #5627
- Complete local chat admission and refresh admitted eval models by @chelojimenez in #5623
- Swarms: say when a session never ran, and why by @SebasKoria in #5600
- Changelog: swarm sessions that never ran by @mintlify[bot] in #5630
- Grey out pricey models for guests only by @ignaciojimenezr in #5618
- Docs: guest-only model gating + new tooltip text by @mintlify[bot] in #5631
- Stop the eval run when its suite or run is deleted, in production too by @ignaciojimenezr in #5633
Full Changelog: v3.12.1...v3.12.2