Features
- Pages (Beta) — agents can now build you persistent mini apps: dashboards, reports, trackers, and small tools that live in your workspace, appear as tiles in the new Pages sidebar section (filterable by project), and render inside the app in a sandboxed frame. Each page has its own small data store (key-values plus time series) that agents update through session tools, and a cached preview poster on its tile. This is a beta: expect rough edges and tell us what you build.
- Scheduled refresh — give a page a cron schedule and a workspace script, and its data updates deterministically in the background — no agent session, no token cost. Schedules are validated when saved (minimum interval: 5 minutes), and refresh failures surface on the page instead of failing silently.
- Page actions with approved grants — interactive pages can trigger real source calls (an API endpoint, an MCP tool, or a workspace script) strictly through capabilities you approve per page. Grants are bound to the exact page content and expire; anything that can change something requires a fresh click inside the page; every decision lands in an audit log; and you can remove any approval at any time from the page menu. Pages never see credentials.
- Inline source reconnect — when a source a page depends on loses authentication, a banner above the page offers one-click reconnect (OAuth, key entry, or a prefilled chat for multi-field setups) without leaving the page.
- Share pages publicly — publish a page as a view-only copy at a short link, optionally password-protected, with the current data snapshot included only if you opt in. Published copies never execute actions, publish warns when the included data looks like it contains secrets, and unpublishing always works — even where publishing is disabled.
- Page management basics — rename a page inline from its header, move it between projects from the page menu, and empty pages now offer "Design this with an agent" instead of a dead end.
- Built security-first — the whole Pages surface shipped through a dedicated hardening pass before earning the beta label: path-traversal-proof storage, rate limits on every render and on public publishing, growth caps on page data, credential-free logs, and sandboxed rendering with no same-origin privileges.
Bug Fixes
- ChatGPT Plus sign-in works again after the Pi SDK 0.81.1 update changed how stored credentials resolve; OAuth flows for ChatGPT-account connections are registered explicitly so the packaged app can't lose them
- Amazon Bedrock IAM connections resolve credentials correctly again — the stored IAM shape no longer shadows the environment/instance-profile chain