Share connector accounts with groups and people, mobile push notifications, and pi.dev packages for pi sessions.
New
- Share connector accounts with specific groups, specific people, or everyone in the project. Anything can also be granted to everyone in a project.
- Mobile push notifications when a turn completes, fails, asks a question, or needs a permission, even while the app is closed. Transcripts can also be shared as a public link from mobile.
- pi.dev packages. pi sessions can load any extension from pi.dev, per project, per agent, or for every session.
- Claude Code on the gateway. Claude Code works fully against
/v1/messages, and ChatGPT models work from a gateway key.
Fixed
- A long run whose first prompt has not loaded yet still reads in order.
- A sandbox's binaries update at a turn boundary instead of waiting for a restart.
- A restart failure is no longer reported as a lost computer before the provider is asked, and a removed parked box is recovered first.
- A parked session stays stopped under passive traffic, and the app stops polling a parked or unreachable sandbox.
- Unconfigured sessions use the project's shared ChatGPT accounts.
- Bring-your-own Anthropic-compatible providers respect their configured base URL.
- A session name set at creation is kept.
- The session audit view loads without 25-second timeouts.
- Interleaved text in streamed Anthropic responses opens its own content block.
- An invalid Composio toolkit returns a clear error instead of a server error.
- Tool output is parsed in linear time on web, mobile and the SDK.
- Several browser errors no longer surface as app errors.
- Project routes always run authentication before the route handler.
- Mobile Review merges work and feel instant, with change-request cards in sessions.
- Historical session dates and activity ordering are restored for migrated sessions.
- The web app no longer hits React error #467 while loading translations.
What's Changed
- system-skills: connector account ownership — shared slots must be authorized as the project identity by @agent-kortix in #7527
- fix(api): session-create 500 stops leaking the raw insert error (KRTX-237) by @agent-kortix in #7714
- fix(audit) KRTX-211: index session-scoped audit read; kill 25s statement-timeout 503s by @agent-kortix in #7680
- fix(api): keep a parked session stopped under passive proxy traffic (KRTX-378) by @agent-kortix in #7734
- fix(api): persist a create-supplied session name as the explicit override (KRTX-388) by @agent-kortix in #7733
- fix(api): cache projection etag after the durable store write (KRTX-218) by @agent-kortix in #7723
- fix(runtime): recover a removed parked box before reporting runtime_lost (KRTX-225) by @agent-kortix in #7696
- fix(api): answer 422, not a paged 500, for an invalid Composio toolkit slug (KRTX-212) by @agent-kortix in #7729
- Fix FE ApiError: Failed to commit agent config on a repository-policy push rejection (KRTX-236) by @agent-kortix in #7711
- fix(sdk): observe the session-sync read timeout when a loader throws synchronously (KRTX-384) by @agent-kortix in #7732
- fix(sdk): stop self-heal polls on a parked or unreachable sandbox (KRTX-269) by @agent-kortix in #7722
- fix(llm-gateway): open a fresh content block for interleaved text (KRTX-340) by @agent-kortix in #7726
- fix(web): stop Sentry paging on React #419 from Next.js 404/redirect recoveries (KRTX-230) by @agent-kortix in #7707
- fix(api): keep repository push stderr out of policy logs by @markokraemer in #7742
- fix(gateway): unconfigured sessions use project-shared ChatGPT accounts by @markokraemer in #7737
- fix(sandbox): attribute memory pressure and bound API test workers by @markokraemer in #7731
- fix(web): de-noise React error #412 (Connection closed.) RSC flight close — KRTX-240 by @agent-kortix in #7716
- Fix FE RangeError: Maximum call stack size exceeded (KRTX-235) by @agent-kortix in #7712
- fix(sdk,web,mobile): a long run whose prompt is not loaded reads in order by @Ino-Bagaric in #7738
- fix(apps): a switched-off hosting provider showed "starting" forever instead of asking for a redeploy by @markokraemer in #7180
- fix(release-gate): v0.13.29 browser failures — spec 21 preflight + Owner facet, spec 28 duplicate tile title by @markokraemer in #7517
- docs(learnings): port 15 rules from stale learnings PRs by @markokraemer in #7740
- build(deps): bump github/codeql-action from 4.37.7 to 4.37.8 by @dependabot[bot] in #6858
- build(deps): bump bridgecrewio/checkov-action from 12.3117.0 to 12.3119.0 by @dependabot[bot] in #6856
- chore(deps-dev): bump mermaid from 11.15.0 to 11.16.1 in /apps/mobile by @dependabot[bot] in #7518
- chore(deps): bump pypdf from 6.15.0 to 6.16.1 in /packages/starter/templates/general-knowledge-worker/.kortix/opencode/skills/presentations/scripts by @dependabot[bot] in #7090
- chore(deps): bump hono from 4.12.27 to 4.13.7 in /.deepsec by @dependabot[bot] in #7188
- fix(db): retry a busy migration advisory lock before failing deploy by @markokraemer in #7743
- chore(agents): ponytail on by default as agent-agnostic skills; every CLAUDE.md symlinks AGENTS.md by @markokraemer in #7744
- fix(security): read tool output in linear time on web, mobile, and the SDK by @Ino-Bagaric in #7581
- fix(api): de-noise transient git-mirror 503 from frontend Sentry (KRTX-231) by @agent-kortix in #7708
- Revert mobile mermaid bump: it broke pnpm frozen-lockfile on main by @markokraemer in #7749
- ci(dependabot): run the Tests lanes on npm dependency PRs by @markokraemer in #7751
- fix(api): respect catalog api base URL for anthropic-transport BYOK providers by @markokraemer in #7745
- fix(agent-tunnel): handle non-JSON responses in TunnelClient gracefully by @markokraemer in #7746
- fix(api): never call a restart failure a lost computer without asking the provider by @markokraemer in #7747
- docs: support any Serper.dev-compatible endpoint by @markokraemer in #7752
- docs(learnings): a failed migration gate skips the API deploy while the frontend still ships by @markokraemer in #7753
- docs(preview): document the preview environment flow by @markokraemer in #7755
- Revert "docs: support any Serper.dev-compatible endpoint" by @markokraemer in #7762
- feat(mobile): push notifications, public transcript share, and mobile triage fixes by @sutharjay1 in #7688
- Revert #7180: app wake provider check fails the public-proxy integration suite by @markokraemer in #7764
- feat(runtime-assets): converge binaries at a turn boundary, and make the secrets gate one predicate by @markokraemer in #7703
- feat(pi): pi.dev packages per project, per agent and system-wide, pre-built and loaded by pi's own extension loader by @DimitrijeGlibic in #7353
- fix(llm-gateway): Claude Code on /v1/messages, incl. ChatGPT models from a gateway key by @markokraemer in #7741
- fix(mobile): push public-link confirms inside the share sheet by @sutharjay1 in #7769
- feat: share connector accounts with groups, people, or everyone — and grant anything to everyone in the project by @DimitrijeGlibic in #7665
- fix(tests): FILE-8 waits for the session's remote branch to publish by @markokraemer in #7766
- fix(tests): give the CFG-11/CFG-12 fixture's hello.ts a real tool shape by @markokraemer in #7767
- chore(deps): bump github/codeql-action from 4.37.8 to 4.38.1 by @dependabot[bot] in #7754
- chore(deps): bump github/codeql-action/upload-sarif from 4.37.7 to 4.38.1 by @dependabot[bot] in #7758
- chore(deps): bump anchore/sbom-action from 0.24.0 to 0.24.2 by @dependabot[bot] in #7756
- chore(deps): bump hadolint/hadolint-action from 3.4.0 to 3.5.0 by @dependabot[bot] in #7759
- chore(release): staging VERSION → 0.13.34 [skip ci] by @github-actions[bot] in #7771
- chore(release): VERSION → 0.13.34 [skip ci] by @github-actions[bot] in #7772
- Promote main 180e5dc to staging by @markokraemer in #7773
- fix: PROJ-38 401->403 auth-order regression + missing audit title translations by @markokraemer in #7774
- Promote main fa79019 to staging (v0.13.34, includes #7774 auth-order fix) by @markokraemer in #7775
- ci: queued dev deploys, serving-based rolls, Live-on-dev and early preview comments by @markokraemer in #7763
- fix(mobile): make Review merges work and feel instant, add session CR cards by @sutharjay1 in #7777
- fix(admin): typed 503 for the analytics ledger timeout (KRTX-423) by @agent-kortix in #7770
- fix(web): always call use() for the i18n catalog to avoid React #467 by @agent-kortix in #7768
- Restore historical Suna session dates and activity ordering by @markokraemer in #7231
- refactor: apps/web reads the SDK's diagnostics store and managed storage by @markokraemer in #7644
- CI reads every credential from AWS Secrets Manager; GitHub stores none by @markokraemer in #7591
- refactor(wire-id): one wrap-aware wire message-id implementation by @markokraemer in #7652
- Promote main 381c7e5 to staging (v0.13.34 latest) by @markokraemer in #7784
- perf: Customize loads instantly — server caches, warm git mirror, background prefetch by @markokraemer in #7781
- fix(iam): CONN-28 — never cache empty object-grant map for connection narrowing by @markokraemer in #7794
- Promote main 7ca9f7d to staging (v0.13.34 + #7794) by @markokraemer in #7795
- Release v0.13.34 — Share connector accounts, mobile push notifications, and pi.dev packages by @github-actions[bot] in #7788
Full Changelog: v0.13.33...v0.13.34