New
- Sessions run pi 1.4.0, and the daemon boots 20 ms faster (#11087) (3500b0d)
- Every deployment restores a lost conversation from the session log (#11032) (2d64f69)
- Photos, files and voice notes sent to a Telegram bot reach the agent (shared core, KRTX-2235) (#11091) (8adf1f6)
- /cli page removed, fitted nav menus, cleaner hero walkthrough (#11092) (1e1962e)
- /services shares the site navbar, with a new hero and a tighter story (#11096) (ce91f72)
- Kortix in Chrome — sessions drive the user's own Chrome (behind the chrome flag) (#9745) (849b60f)
- /help /status /new /stop /model /agent for Telegram, written once in the channel core (KRTX-2235) (#11097) (042c7fa)
- Use-case pages get a step-by-step setup guide (#11100) (be7d0f9)
- React Email Barebone shell for every transactional email (#11101) (0517ba0)
- Product-scene covers for four use cases, filled icons (#11102) (6646ff0)
- Telegram command menus with buttons — /model and /agent pickers, /help and /status actions (KRTX-2235) (#11105) (6a20a92)
- Add comment threads and permissions (KRTX-3661) (e672225)
- Add activity history and author receipts (KRTX-3662) (8bf7060)
- Approving a held connector call runs it once, as the original caller (#11103) (4aedc20)
- Add SDK and CLI comments (KRTX-3663) (813e351)
- Editor blocks, link cards, Ask AI sheet and a smoother gallery (#11111) (6482382)
- Add the Instagram content studio and Instagram Reels skills (#11116) (b434168)
- Kortix CompanyOS rebrand, plus custom pi agents and pi extensions on /framework and the home page (#11093) (7566de6)
- Residential IP per sandbox template, billed per GB from credits (#11122) (4b47b71)
- Notify people and route comment feedback to agents (a4fd484)
- Every session has a Kortix Computer desktop the user can watch and take control of (#11115) (a8207d6)
- New sandboxes boot without OpenCode, ~1 GB less disk (#11146) (fb3519d)
Improved
Fixed
- Schema render never emits {} for a pattern; HEIC browser test gets 30 s (#11074) (2d9f3c3)
- Type gateway analytics timeouts (KRTX-3631) (#11076) (a072230)
- Repair unsafe Unicode in prompt parts (KRTX-3647) (#11080) (b198e7c)
- Wait for Platinum derived images (KRTX-3648) (#11081) (59cfa29)
- Reserve kortix_telegram so a user connector cannot hide the Telegram channel (KRTX-2235) (#11084) (8508b97)
- The prod Vercel deploy uploads one archive and stamps the release commit (#11088) (29e07e4)
- Current web, mobile and CLI builds send no GET …/transcript (#11034) (55aacb7)
- Pi keeps a running turn in the log when the box dies (#11043) (581add6)
- A large image no longer stalls /health and SSE for ~0.9 s (#11029) (37715f2)
- A photo or file sent to a channel bot shows in the session's message (KRTX-2235) (#11094) (04bf6b3)
- A workspace-volume session boots from the S3 snapshot when lost+found is left (#11099) (7919385)
- Agents learn that an approved call must be repeated to run (#11095) (f270a86)
- An unchanged journal re-send costs the API no write (#11104) (b582d74)
- Filter wallet missing-account noise (KRTX-2150) (#11107) (e09fae0)
- Filter Talisman onboarding noise (KRTX-3678) (#11108) (e11b996)
- The image card's full-screen hint sits on the image corner (#11112) (22d4056)
- The / block menu shows every row with no scroll bars (#11114) (b35789f)
- KRTX-3686 audit session speed reliability denominators (#11118) (ed27a78)
- Portrait runs draw as a strip; calls the image cap refused draw nothing (#11121) (c7076ab)
- Escape closes a full-screen image without stopping the turn; full screen opens over the chat (#11120) (c717bee)
- V0.14.10 release suite green (RLS on new tables, stale tests, scanners, i18n) (#11123) (06d8e91)
- The migration-order guard lets a stage-fix branch carry a migration dev already has (#11124) (d7f87b4)
- A RegExp from another realm renders as its source, not {} (081b9b5)
- /sovereign no longer crashes when its walkthrough reaches the server step (#11141) (5def696)
- KRTX-3691 handle null show content paths (#11145) (20ef739)
Security
- Patch seroval, re2js, systeminformation and @hono/node-server advisories (#11070) (c57dc30)
- .deepsec pins @hono/node-server 2.1.3 (GHSA-rmxm-3fg6-px4f) (#11073) (ff04d1e)
- Systeminformation 5.33.16 (GHSA-3f7j-7jwc-fxfj) (#11077) (82b1fd4)
- Only the in-box CLI drives the owner's Chrome; panel sign-in rejects control characters (#11126) (c2bd329)
- Gitleaks ignores the made-up fixture credential left in v0.14.10 history (#11128) (5ff9561)
- The gitleaks ignore comment no longer quotes the fixture it explains (3bd2e9c)
Internal
- Fix a red release on the frozen staging candidate (#11063) (36a344f)
- Browser shards off until RELEASE_BROWSER_LANES=on (#11064) (f4282c8)
- Regenerate the kortix.yaml region of developers.mdx (#11067) (7bb30c4)
- One shared webhook route for every channel, Telegram first (KRTX-2235) (#11082) (2d0f93f)
- One descriptor per chat platform; API reads it, output unchanged (KRTX-2235) (#11085) (ee31fd7)
- The Channels page, Telegram row and access panel read the channel descriptor (KRTX-2235) (#11086) (1bdff1b)
- Dev VERSION → 0.14.10 (dev target after 0.14.9) [skip ci] (b1f87c4)
- No code reads the v1 transcript mirror (P8.2 Release B2) (#11033) (1526019)
- Agents plan before non-trivial changes; ponytail only on request (#11113) (a6cdfdd)
- Box identities follow a transferred project, live and retired (#11127) (fba24db)
- The action reference lists project.link_preview.read (862ce7c)
- The Kortix in Chrome pane is a form-tier settings tab (1db753b)
- The navigation stub carries ServicePreviewRow (0bdb6e7)
- Design record for Platinum Machines and Apps (#11134) (e0cb6f2)
- Reskin overrides waits for the shared cold build; excerpt timing bound tolerates a loaded runner (9768ecb)
- The schema-sync CI failure is still open; the realm theory did not fix it (4ccd971)
- Park the layered-primitives and bare-metal marketplace idea (#11140) (a6000da)
- The conformance check copies the schema, so toMatchObject cannot corrupt it for the sync test (5ec6656)
What's Changed
- feat(web): Kortix CompanyOS rebrand, plus custom pi agents and pi extensions on /framework and the home page by @markokraemer in #11093
- fix(telemetry): KRTX-3686 audit session speed reliability denominators by @agent-kortix in #11118
- fix(image-gen): portrait runs draw as a strip; calls the image cap refused draw nothing by @sutharjay1 in #11121
- fix(session): Escape closes a full-screen image without stopping the turn; full screen opens over the chat by @sutharjay1 in #11120
- fix(release): v0.14.10 release suite green (RLS on new tables, stale tests, scanners, i18n) by @DimitrijeGlibic in #11123
- fix(hooks): the migration-order guard lets a stage-fix branch carry a migration dev already has by @DimitrijeGlibic in #11124
- fix(chrome): only the in-box CLI drives the owner's Chrome; panel sign-in rejects control characters by @DimitrijeGlibic in #11126
- test(transfer): box identities follow a transferred project, live and retired by @DimitrijeGlibic in #11127
- fix(security): gitleaks ignores the made-up fixture credential left in v0.14.10 history by @DimitrijeGlibic in #11128
- docs(audit): the action reference lists project.link_preview.read by @DimitrijeGlibic in #11130
- feat(sandboxes): residential IP per sandbox template, billed per GB from credits by @markokraemer in #11122
- test(web): the Kortix in Chrome pane is a form-tier settings tab by @DimitrijeGlibic in #11131
- fix(manifest-schema): a RegExp from another realm renders as its source, not {} by @DimitrijeGlibic in #11132
- test(mobile): the navigation stub carries ServicePreviewRow by @DimitrijeGlibic in #11133
- docs(learnings): design record for Platinum Machines and Apps by @markokraemer in #11134
- test: reskin overrides waits for the shared cold build; excerpt timing bound tolerates a loaded runner by @DimitrijeGlibic in #11135
- feat(artifacts): route comments to people and agents (KRTX-3664) by @Ino-Bagaric in #11110
- feat(sandbox): every session has a Kortix Computer desktop the user can watch and take control of by @markokraemer in #11115
- fix(security): the gitleaks ignore comment no longer quotes the fixture it explains by @DimitrijeGlibic in #11137
- docs(manifest-schema): the schema-sync CI failure is still open by @DimitrijeGlibic in #11139
- docs(learnings): park the layered-primitives and bare-metal marketplace idea by @markokraemer in #11140
- fix(web): /sovereign no longer crashes when its walkthrough reaches the server step by @markokraemer in #11141
- test(manifest-schema): the conformance check no longer corrupts the shared schema for the sync test by @DimitrijeGlibic in #11142
- perf(api): a new session's first prompt reaches the box up to 3 s sooner by @DimitrijeGlibic in #11144
- fix(web): KRTX-3691 handle null show content paths by @agent-kortix in #11145
- feat(sandbox): new sandboxes boot without OpenCode, ~1 GB less disk by @DimitrijeGlibic in #11146
- Promote dev fb3519d to staging by @github-actions[bot] in #11147
- chore(release): staging VERSION → 0.14.11 [skip ci] by @github-actions[bot] in #11150
- test(api): stage release bootstrap and presigning repairs by @agent-kortix in #11162
- test(api): carry verified wake-status fixture repair to staging by @agent-kortix in #11166
- test(api): carry wake-status fixture repair onto staging by @agent-kortix in #11167
- KRTX-3700 test(api): carry bootstrap startup coverage to frozen staging by @agent-kortix in #11170
- KRTX-3703 test(api): stage explicit-env wake fixture repair by @agent-kortix in #11171
- test(api): stage KRTX-3703 duplicate fixture cleanup by @agent-kortix in #11178
- KRTX-3708 test(api): stage unlocked provider failover regression repair by @agent-kortix in #11179
- fix(i18n): carry desktop localization to frozen release by @agent-kortix in #11182
- fix(staging): carry verified desktop localization from #11180 by @agent-kortix in #11183
- fix(staging): carry digest identity isolation (KRTX-3717) by @agent-kortix in #11187
- fix(release): regenerate frozen staging learnings index by @agent-kortix in #11194
- Release v0.14.11 — Computer desktops, Telegram commands, and artifact collaboration by @github-actions[bot] in #11151
Full Changelog: v0.14.10...v0.14.11