Features
- feat(library): AI Agent Output Controls Compared: Guardrails, Structured Outputs, and Streaming (#9539)
- feat(library): Best AI Agents for Jira Triage and Datadog Incident Response (#9536)
- feat(mothership): answer a long workflow tool run still running, and stop detached runs on Stop (#9507)
- feat(people): organization People page with profiles, reporting lines, and people-data import (#9517)
- feat(desktop): continue a passkey sign-in in your browser and bring the session back (#9515)
- feat(mothership): erase private memory when a member leaves or an organization is deleted (#9503)
Improvements
- improvement(docs): collect reader feedback inline (#9538)
- improvement(release): harden favicons, sim links, and the extension from a pre-release audit (#9530)
- improvement(search): overlap live search stages and report every unsearched source (#9514)
- improvement(desktop): sign-in prompts for the agent browser — site passwords, passkey accounts, client certificates, and app links (#9521)
- improvement(cli): sim credentials providers lists providers (#9522)
- improvement(desktop): install updates on one click, asking only about real in-flight work (#9505)
- improvement(cli): files batch-delete takes file ids as arguments (#9518)
- improvement(desktop): bring agent browser menus, keys and fullscreen in line with Chrome (#9512)
- improvement(extension): document browser data handling and limited use
- improvement(extension): document browser data handling and limited use (#9513)
- improvement(oauth): serve still-valid tokens while refreshing ahead of expiry (#9509)
- improvement(sim-links): pass queries through, trim pasted punctuation, and suggest links from the address bar (#9508)
Bug Fixes
- fix(files): share one served-bytes predicate between the serve route and large downloads (#9548)
- fix(release): read Excel start dates, refuse impossible times and repeated columns, keep typed escapes, no suggestions for punctuation (#9545)
- fix(oauth): default a leader-lock follower's wait to the lease so its takeover can land (#9546)
- fix(desktop): address release review — count app downloads and unchecked terminals before an update restart, send the page referrer on Save Image, and tighten sign-in and people edge cases (#9547)
- fix(ci): drop the duplicate --accept-routes the Tailscale action already passes (#9543)
- fix(files): stream served files with byte ranges instead of buffering them under 100 MB (#9542)
- fix(files): resolve v2 file paths only on the v2 surface, through the canonical resolver (#9531)
- fix(oauth): take over a lapsed refresh lease, share overlapping service-account key reads, and label unsearched accounts (#9537)
- fix(auth): check a workspace's personal-key switch after membership (#9540)
- fix(oauth): keep a five-minute floor on served tokens and refresh ahead earlier (#9528)
- fix(mothership): Stop only cancels detached runs still running, and a held workflow run never blocks the next turn's workbench (#9532)
- fix(desktop): ask before an update restart from the menu, count uploads and downloads as running work, and harden sign-in prompts (#9533)
- fix(files): authorize the workspace before resolving a files/ path (#9527)
- fix(auth): block only curated disposable domains, and never gate SSO or SCIM provisioning (#9529)
- fix(people): keep a suspended manager link on edit and never fail the org layout on the People lookup (#9526)
- fix(execution): name the signal exit code of a failed sandbox process (#9523)
- fix(extension): keep site access compatible with strict CSP (#9524)
- fix(mothership): say why a workflow copilot chat cannot read other chats (#9520)
- fix(auth): refuse account creation from disposable email domains for every provider (#9516)
- fix(desktop): keep sign-in popups working in the agent browser (#9506)
- fix(files): accept files/ VFS paths in v2 file describe, rename and delete (#9504)
Other Changes
- chore(ci): reach the database over the tailnet when CI_DB_TAILNET is set (#9541)
- chore(search): retire legacy search knowledge base projection rows in place (#9511)
- chore(auth): correct where the short disposable list runs (#9535)
- docs(library): update best-multi-agent-frameworks-2026 (#9534)
- Merge pull request #9519 from simstudioai/codex/extension-privacy-production