What's Changed
- [codex] fix oversized agent message saves by @ross0x01 in #487
- [codex] fix desktop entitlement refresh by @ross0x01 in #489
- [codex] Guard oversized image URLs by @ross0x01 in #490
- [codex] Handle file token limit as expected upload block by @ross0x01 in #491
- [codex] Show aborted tool calls by @ross0x01 in #492
- [codex] Prefer signup for product intent auth by @ross0x01 in #493
- [codex] aggregate tool usage events by @ross0x01 in #494
- [codex] track agent runs by sandbox type by @ross0x01 in #495
- [codex] add PostHog usage cost analytics by @ross0x01 in #496
- [codex] add WorkOS signup webhook analytics by @ross0x01 in #497
- [codex] Improve provider error observability by @ross0x01 in #498
- [codex] Improve agent-long startup latency by @ross0x01 in #500
- [codex] Combine free request limits by @ross0x01 in #499
- [codex] Fix trigger agent long provider error classification by @ross0x01 in #501
- [codex] fix free user cost controls by @ross0x01 in #502
- [codex] fix Termux local client startup by @ross0x01 in #503
- [codex] Allow large agent uploads by @ross0x01 in #504
- [codex] Add source attribution tracking by @ross0x01 in #505
- [codex] Fix Convex search and stream fallback logging by @ross0x01 in #506
- [codex] Set free output cap to half paid by @ross0x01 in #507
- [codex] reduce expected PostHog noise and batch chat deletion by @ross0x01 in #508
- [codex] fix local attachment upload fallback by @ross0x01 in #510
- fix tokenizer special token pruning by @ross0x01 in #509
- [codex] Fix summary save race by @ross0x01 in #511
- [codex] Add Grok fallback for Kimi agent model by @ross0x01 in #512
- [codex] track authenticated checkout funnel by @ross0x01 in #513
- Restrict file URL processing to trusted fileId-backed attachments by @ross0x01 in #515
- Reinstate trust-based extra-usage cap enforcement by @ross0x01 in #516
- Verify real S3 object size when saving uploads by @ross0x01 in #514
- Guard refunds in agent-long outer catch to avoid refunding after observed usage by @ross0x01 in #517
- fix: prevent summary leakage when forking shared chats by @ross0x01 in #519
- Fix mid-stream budget hard-cap enforcement after extra-usage warning by @ross0x01 in #518
- fix: make checkout credit idempotency durable by @ross0x01 in #521
- [codex] Sanitize message parts before storage compaction by @ross0x01 in #523
- Enforce caps before auto-reload billing for team extra usage by @ross0x01 in #522
- [codex] Fix file-only regenerate attachment handling by @ross0x01 in #524
- [codex] fix agent-long empty prompt handling by @ross0x01 in #525
- fix(billing): validate plan keys and require admin for subscription updates by @ross0x01 in #526
- [codex] Move paid ask mode to Trigger.dev by @ross0x01 in #520
- fix(pty): enforce guardrails for interact_terminal_session send input by @ross0x01 in #527
- [codex] Fix team auto-reload cap precheck by @ross0x01 in #528
- [codex] fix local host security prompt by @ross0x01 in #530
- [codex] Secure account deletion for shared orgs by @ross0x01 in #531
- [codex] fix subscription invoice usage resets by @ross0x01 in #533
- [codex] Secure subscription billing authorization by @ross0x01 in #532
- [codex] Revert paid ask Trigger routing by @ross0x01 in #534
- [codex] Suppress expected Convex upload errors in PostHog by @ross0x01 in #535
- [codex] Improve cloud upload limits by @ross0x01 in #536
- [codex] Add free agent conversion analytics by @ross0x01 in #537
- [codex] Secure extra usage billing authorization by @ross0x01 in #539
- [codex] Harden subscription quantity validation by @ross0x01 in #540
- [codex] Enforce paid entitlements before S3 upload URLs by @ross0x01 in #541
- [codex] Fix token bucket debit admission check by @ross0x01 in #543
- [codex] Pin E2B sandbox build to repo Dockerfile by @ross0x01 in #542
- [codex] Pin Tauri action to commit SHA by @ross0x01 in #545
- [codex] Filter stale local sandbox connections by @ross0x01 in #544
- [codex] Secure file attachment ownership checks by @ross0x01 in #552
- [codex] Remove extra usage trust caps by @ross0x01 in #553
- [codex] Bound summary todo payloads by @ross0x01 in #555
- Bump docker/login-action from 3 to 4 by @dependabot[bot] in #547
- Bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #550
- Bump docker/build-push-action from 5 to 7 by @dependabot[bot] in #551
- [codex] Fix file upload ownership checks by @ross0x01 in #554
- [codex] Remove legacy agent endpoint by @ross0x01 in #558
- [codex] Fix message update ownership check by @ross0x01 in #560
- [codex] Fix PentestGPT migration org deletion by @ross0x01 in #559
- [codex] Fix S3 presigned upload limits by @ross0x01 in #557
- Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #548
- Bump azure/trusted-signing-action from 1 to 2 by @dependabot[bot] in #549
- [codex] Fix desktop release tagging flow by @ross0x01 in #562
- [codex] Fail closed when paid rate limits lack Redis by @ross0x01 in #563
- [codex] Bind desktop auth callbacks to local state by @ross0x01 in #561
- [codex] Fix attachment URL trust boundary by @ross0x01 in #564
Full Changelog: desktop-v0.0.51...desktop-v0.0.54