Features
- feat(smartlead): add Smartlead integration (#6352)
- feat(files): preview HEIC photos in the file viewer (#6350)
- feat(files): let the agent read HEIC photos (#6346)
- feat(embeddings): multi-provider Embeddings block on a shared core (#6317)
- feat(mship): async runs- #6329
- feat(admin): provision a user with an emailed password reset instead of a set password (#6328)
Improvements
- perf(ci): parallelize repo audits, guard env-dependent tests, and fix the docs generator (#6358)
- improvement(linter): mship linter (#6359)
- perf(typecheck): run the native TypeScript 7 compiler (#6356)
- improvement(sandbox): exempt caller-consumed streams from the output retention budget (#6353)
Bug Fixes
- fix(chat): keep the composer remove badge anchored and align chip tokens (#6365)
- fix(files): render HTML files shared via a public file link (#6363)
- fix(chat): render HEIC attachments and restyle composer file chips (#6361)
- fix(mship): fix image handling (#6357)
- fix(tooltip): dismiss floating tooltip when its trigger is hidden without pointer events (#6354)
- fix(scripts): make the specifier audit path-separator agnostic (#6355)
- fix(chat): stop classifying secret-free binary sandbox exports as unknown (#6349)
- fix(utils): drop the .js specifiers Turbopack cannot resolve (#6351)
- fix(files): bound the HEIF fallback decode input (#6348)
- fix(search): restore cmd+k autofocus on the search input (#6347)
- fix(tables): resolve active selector before schema enrichment (#6345)
- fix(chat): stop chats storing a resource they can never send with (#6344)
- fix(deployment): prevent trigger registry initialization crash (#6342)
- fix(files): render audio and video stored as application/octet-stream (#6341)
- fix(scripts): make the sql Date-binding audit precise and crash-proof (#6340)
- fix(logger): never let structured serialization throw into the caller (#6331)
- fix(logger): stop a server-side jsdom window from silencing all logging in production (#6339)
- fix(uploads): drop the stray 'use server' directive that enables Server Actions app-wide (#6335)
- fix(observability): attach the real cause at three error-swallowing sites (#6336)
- fix(db): bind every raw-sql Date through its column encoder (#6337)
- fix(knowledge): align document tag provenance selections with the serialized request (#6332)
- fix(billing): stop the false unbilled-charge error on zero-cost runs (#6333)
- fix(cron): bind stale async-job cutoffs through the column encoder (#6327)
Other Changes
- docs(sso): correct callback host and issuer guidance, document Entra SAML and IdP-initiated behavior (#6334)