Computers work like every connector, and the audit trail records the credential that made each call.
New
- Computers are connector accounts like any other: the same row, the same Share dialog (people, groups or everyone), and one registration per machine.
- The audit trail shows Via for each event: the credential the API authenticated (browser session, personal access token, connected app, session token, API key, service account or SCIM token), never a self-reported client label.
Fixed
- Slack and Teams connector reads stay inside the calling project's own conversations.
- Stopping a session no longer fails with a database deadlock when a wake runs at the same moment.
- A malformed member id returns 400 instead of 500.
- A stopped session box stays stopped: auto-resume is turned off before the stop, not after.
- A transient git failure while saving a project's manifest returns a retryable 503 and no longer exposes the repository URL.
What's Changed
- feat(computers): computers work like every connector — generic row, Gmail-style Share, one registration per machine by @markokraemer in #8336
- chore(release): VERSION → 0.13.44 [skip ci] by @github-actions[bot] in #8337
- chore(release): staging VERSION → 0.13.44 [skip ci] by @github-actions[bot] in #8338
- refactor(audit): record the authenticated credential, not a self-reported client source by @markokraemer in #8339
- refactor(web): dedupe the sandbox browser chrome into one shared module (KRTX-400) by @agent-kortix in #8340
- fix(audit): bound the Via (credential_kind) filter to rows that can carry it by @markokraemer in #8341
- refactor(web): unify proximity hover hit testing (KRTX-717) by @agent-kortix in #8342
- refactor(api): extract wake delivery orchestration (KRTX-264) by @agent-kortix in #8343
- fix(connectors): Slack and Teams connector reads stay inside the calling project by @Ino-Bagaric in #8345
- fix(tests): clear the starter scaffold before config-release fixtures assert legacy content by @markokraemer in #8310
- fix(api): reject malformed member userId with 400 instead of 500 by @markokraemer in #8347
- fix(tests): stale OAU-7 and MCP-5 flows on deployed targets by @markokraemer in #8348
- fix(api): stop locks session before sandbox row, retries deadlock victims (40P01) by @markokraemer in #8349
- fix(api): classify transient manifest git failures safely (KRTX-855) by @agent-kortix in #8346
- Promote main 2bc410d to staging (v0.13.44) by @markokraemer in #8350
- fix(platinum): turn auto-resume off before stopping a box, not after by @markokraemer in #8352
- fix(tests): type the Platinum stop-confirm fixture as a record (TS2339) by @markokraemer in #8356
- Promote main f90b3d8 to staging (v0.13.44) by @markokraemer in #8355
- v0.13.44 — Computers work like every connector, and the audit trail records the credential that made each call. by @github-actions[bot] in #8353
Full Changelog: v0.13.43...v0.13.44