Changelog Ledger
Full per-commit stream for the 12-day Alumia rollout (2026-05-02 to 2026-05-14).
2026-05 Commit Audit Ledger (deep)
This section preserves one-entry-per-commit analysis for the 12-day window from 2026-05-02 to 2026-05-14.
2026-05-02 (155 commits)
View commits
709d6849— fix: make hero demo resilient to stream failures (packages)9e065363— fix(ai): route platform mistral large through verified gateway (packages)e98722b6— fix(deploy): tolerate private route policy db in smoke (packages, scripts)ce44544b— fix(ai): use production route policy in live smoke (packages, scripts)4cb0dde3— fix(deploy): send same-origin verifier headers (scripts)0247f770— fix(deploy): include shared package in runtime seed image (Dockerfile, scripts)90843040— fix(ai): withdraw leaking nvidia route from deploy smoke (packages)62a33b5e— fix(ai): stabilize model defaults and live route gates (packages)4d7f8607— fix(deploy): send same-origin smoke headers (.github, scripts)f89e6160— fix(ai): harden deploy model smoke routing (.github, packages, scripts)697e7b2e— fix(canvas): lock project viewport scrolling (packages)66de6307— fix(prompts): search before creating canvas blocks (packages)e605137d— fix(blocks): harden science block rendering (packages)379b96e4— feat(blocks): add 9 science blocks for chemistry, biology, and physics (packages)78f78459— test(dashboard): cover home action buttons (packages)84530d31— fix(dashboard): show last project name in tooltip on Continue button (packages)a93f1826— fix(dashboard): make action buttons inline in a single row (packages)eb3c9203— Revert "fix(connectors): switch connector list from grid cards to inline rows" (packages)4712c594— fix(connectors): switch connector list from grid cards to inline rows (packages)5d4d8940— fix(dashboard): render home actions as compact buttons (packages)651cbb14— fix(observability): isolate browser sentry config (packages)d9196ced— fix(docs): stabilize search index and ask drawer (packages)a3fcae4e— fix(ci): stabilize api integration browser guard (packages, scripts)ecea4e3f— feat(blocks): add 7 culinary blocks for restaurants, chefs, and recipe work (packages)c2b00c0b— fix(ci): generate docs source before web typecheck (packages, scripts)6cc9a1db— test(ci): assert symlinked testbox pnpm toolchain (scripts)d76ac5f6— test(artifacts): assert secure e2b dependency install (packages)2621ca72— fix(deps): sync release-age-safe docs lockfile (packages, pnpm-lock.yaml)8dcdb557— fix(deps): pin AWS SES/SQS clients to 3.1037.0 to match the rest of the SDK suite (packages)1a1be9b2— fix(ci): persist pnpm via corepack symlinks instead of wrapper scripts in testboxes (.github)0ef27987— refactor(deploy): make live AI smoke loader injectable for unit testing (packages)b8dc7524— fix(canvas): reload blocks on artifact writes and use autoRenamePending for rename polling (packages)d7fe6629— feat(projects): expose autoRenamePending in serialized project responses (packages)8bd5b53f— feat(tools): register focus_block and highlight_block as core tools with canvas_navigation discovery (packages)6f22614e— feat(ai): add Fireworks managed route and prevent route policies from stripping required env (docs, packages, scripts)02bd0654— feat(canvas): auto-fit block height to content with max-height cap from registry (packages)5a847770— feat(canvas): restyle project drawer as floating popover with open/close animation (packages)8cf243f3— feat(lab): add agent selector, visibility toggle on prompt bar, and sticky preference saver (packages)051878e4— fix(connectors): use regular text size for category headings and descriptions (packages)1fe02d53— feat(tools): add MCP management tool and improve document reader (packages)144b7319— feat(domains): expand domain registry with additional TLDs and tests (packages)209b5c92— feat(email): add email billing tracking and address improvements (packages)91989195— feat(ai): add LLM routing policy engine, prompt leak guard, and billing rate updates (docs, packages)e0deba12— docs: add API reference, concepts, and connector documentation (packages)597fc17b— fix(deploy): update deploy workflow and pre-deploy checks (.github, scripts)eab051bb— fix(connectors): restore Brandsight api_secret — GoDaddy requires key:secret pair (packages)2b58c9c1— refactor(connectors): move API-key credential form to a sub-dialog (packages)6f55b297— fix(connectors): use first option as default when saving dropdown credential fields (packages)845a1004— feat(connectors): add options support to credential fields, simplify Brandsight to key + customer ID (packages)f0b264ef— fix(connectors): add dialog scroll, slim down connections tab (packages)97fa92ed— fix(connectors): replace Brandsight icon with shield-eye mark in GoDaddy teal (packages)2e2ea812— feat(connectors): rebuild Brandsight with full GoDaddy Corporate Domains API and logo fetch (packages)b1009fdf— docs: add sessions concept page and connectors landing page (packages)56bd5956— docs(api): add API reference index landing page (packages)683299cd— docs: add memory concept page and scaffold connectors section meta (packages)15c9fb3f— docs(api): scaffold api reference section meta (packages)3ad6f82c— chore(label-filter): match the normalized dashboard button sizing (packages)6d9d5867— fix(lab): forward selected agent to the project canvas via ?agent= when no prompt is stored (packages)9f1f9266— feat(docs): dedicated docs header, compact ask drawer, sticky sidebar search (packages)6cd27dce— refactor(public): hide marketing nav on docs and slim the public footer (packages)4721fd83— feat(connectors): discover X Ads and lock in Twitter→X alias for connector_connect (packages)ee57e547— fix(connectors-oauth): reject empty token responses and scrub state on callback failure (packages)d9062fcd— test(lab): assert sidebar→lab prompt handoff dispatches and consumes the event (packages)3af91c40— fix(lab): pick up sidebar prompt handoff on the live lab page via a custom event (packages)b93ae949— fix(command-palette,docs): drop bg-transparent override that flattened the input group (packages)3d1b8d97— feat(ai): runtime model profiles drive cautious tool use and per-provider tool strictness (packages)d205ae9e— test(lab): unit-cover the lab/project sessionStorage prompt handoff helpers (packages)ab07dcbd— fix(command-palette): drop input wrapper border to match the dialog chrome (packages)328d86ec— fix(lab): hand off prompts to lab and project canvas via sessionStorage instead of ?q= (packages)150bd320— fix(docs): drop the docs command's input border and group chrome inside the dialog (packages)683cb1b8— chore(dashboard): normalize top-right action buttons across list pages (packages)7f971118— feat(ai): accept NVIDIA / NGC env aliases and treat SDK key aliases as route alternatives (.env.example, packages, scripts)f9104cb0— refactor(models): drop Llama 4 Scout and switch system formatters to llama3.1-8b (.env.example, packages)48e9aab2— feat(deploy): live AI model smoke run against every native provider before image build (.github, packages, scripts)a8f1b037— feat(lab): add agent picker dropdown and move visibility toggle to the prompt's bottom row (packages)b06816bb— docs(public): refresh model count copy to 37 and derive stats from the catalog (packages)a963624a— feat(deploy): wire missing native AI provider secrets and gate releases on the model harness (.env.example, .github, packages, scripts)896c6465— feat(blocks): add audio-playlist block + tighten marketing helper reuse (packages)7073c770— refactor(ai): unify provider key resolution and accept upstream env aliases (packages)0be59e07— fix(tools/video): retry transient Veo internal errors and drop personGeneration (packages)3de11507— feat(canvas): present-mode tour with focus_block / highlight_block tools (packages)81dd684a— fix(chat): inline code scrolls horizontally instead of breaking mid-token (packages)910fd539— fix(artifacts): pass --ignore-scripts when installing esbuild in E2B sandbox (packages)fbb500d4— fix(middleware): drop spoofed x-forwarded-host and reject ambiguous body framing (packages)7e327986— feat(connectors): persist OAuth PKCE state so PWA / cross-tab callbacks work (packages)9a8fb889— refactor(email-security): tighten serializer input typing and shared filter helper (packages)1aa4eb82— feat(domains): scrub internal fields from domains API responses (packages)03a5c1ce— fix(share): bind share-access cookie to the current password hash and harden responses (packages)6194cc72— feat(agents): lock Ala to claude-sonnet-4-6 across user and admin agent edits (packages)90780e82— feat(models): rename DeepSeek catalog ids to deepseek-reasoner / deepseek-chat (packages)196c40ac— refactor: simplify billing top-up + lab agent picker per /simplify review (packages)73d7995b— feat(lab): agent picker dropdown in prompt bar with handoff to project chat (packages)3292ec01— feat(chat): inline billing top-up card replaces raw 402 JSON in chat (packages)8f3f26e0— feat(emails): add email-security wrapper and cover address/domain routes (packages)4a721ddf— docs: refresh API reference and architecture overview (docs)b61eed0e— chore(dashboard): polish developers/files/lab/projects/settings + image proxy (packages)f04cbb77— fix(security): SSRF guard, browser preview, and secrets service tightening (packages)9c68eccd— feat(canvas): marketing structured blocks, devops connector logos, media tool (packages)9246a1d6— feat(telephony): voice provider service and OpenAI realtime hardening (packages)fb19dd72— feat(domains): name validation, DNS/WHOIS tool hardening, agent-ops fixes (packages)4c994182— feat(emails): MIME, address, SES hardening with new validation module (packages)327aa868— feat(artifacts): object storage adapter and remote build sandbox hardening (packages)d433c57b— feat(api): per-resource security wrappers for v1 routes (packages)59c81641— feat(users): persist default project visibility preference (packages)cda99adc— chore(ci): refresh workflows, deploy manifest, and secrets verification (.github, scripts)ed8a4f49— chore(infra): 7-day supply-chain quarantine, drop NPM_TOKEN from Docker, tidy ignores (.dockerignore, .gitignore, .npmrc, Dockerfile, bunfig.toml, package.json, packages, pnpm-workspace.yaml)2b01442c— feat(docs): auth-aware snippets, runnable canvas, ask-route tests, e2e suite (packages)c55c4a3c— feat(docs): cmd-k palette, ask AI drawer, related graph, copy/open buttons (bun.lock, packages)fe91b388— feat(docs): rebuild user docs on Fumadocs with /docs/mcp, llms.txt, and content negotiation (bun.lock, packages)191c392d— feat(connectors): add spotify, sonos, oura, hue, home assistant, tenor (packages)bc1dff55— docs: refresh rules, agents, and architecture docs (.claude, AGENTS.md, CLAUDE.md, README.md, docs)245d37d9— test(webhooks): cover webhook receivers api (packages)98d07b8d— chore(ci): tune playwright config, isolation scripts, and workflows (.github, packages, scripts)91b63853— test: expand coverage across api routes, ci guards, and source modules (packages)73f5b660— feat(ui): refresh shared components, sidebar, and chat surfaces (packages)f459d534— feat(webhooks): add webhook receivers, deliveries, and rotation endpoints (packages)19c61258— feat(web): refresh dashboard and public marketing pages (packages)c9aa64a2— refactor(api): tighten v1 route handlers across the platform (packages)e6fb401d— refactor(tools): align tool surface with peer-messaging behavior prompts (packages)0a01df28— refactor(api): add project access helpers and block positioning (packages)ea6802a2— feat(canvas): add project switcher and refresh shared block components (packages)3c35b057— feat(admin): expand admin routes and inventory bulk actions (packages)b3791bcb— refactor(connectors): centralize input validation and tighten routes (packages)1f410a23— refactor(telephony): split service helpers and tighten audio routes (packages)170ec2eb— feat(artifacts): add filesystem locks and harden runtime routes (packages)bb89ec85— refactor(ala): extract ala service and demo prompt module (packages)bfe70ca1— feat(projects): add visibility and project workspaces (packages)6bc928de— feat(trash): add universal trash for projects and records (packages)ef0e3866— fix(canvas): harden gallery block and normalize input shapes (packages)094148bf— test(deploy): cover telephony secret verification (scripts)2f121973— fix(telephony): configure production voice runtime (.env.example, .github, packages, scripts)efaea583— fix(email): ignore idempotent SES DKIM preference (packages)87553835— fix(email): prefer task role for SES in production (packages)a32fcaf7— fix(tools): default heartbeat to current agent (packages)6d9a6a3a— fix(tools): expose schedules and heartbeat to agents (packages)d80dcf52— fix(admin): add email domain sync repair (packages)07ebcd4a— fix(email): recover missing SES identities (packages)07ad6ead— fix(tools): prefer current explicit tool intent (packages)eca40387— fix(chat): keep media generation streams alive (packages)1fb063f0— fix(ai-tools): prefer internal email setup (packages)00a29a23— fix(lab): honor sidebar project prompt (packages)3b3ef584— fix(public): render hero demo immediately (packages)fc642602— test(deploy): keep seed dependency guard current (scripts)01ba9e27— fix(ci): retry seed password verification (packages)efd4f698— fix(knowledge): repair version schema drift (packages)a232a168— fix(knowledge): scope item mutations under rls (packages)a30d1db5— fix(knowledge): avoid detail joins for collection mutations (packages)65553084— fix(developers): clarify api key step-up requirement (packages)f7c23f9f— fix(deploy): validate logs permissions on ecs execution role (scripts)528a59f2— fix(domains): keep external domain setup resilient (packages, scripts)b1df8ff5— fix(auth): avoid eager refresh token rotation (packages)85b2985e— fix(mcp): allow org owners to manage servers (packages)edc18bbf— fix(domains): keep external domain checks client-side (packages)82927174— fix(auth): refresh dashboard sessions before retries (packages)2c00d8c9— fix(public): keep hero demo available without billing secrets (packages, scripts)
2026-05-03 (111 commits)
View commits
7d56799e— feat(shop): add UCP identity linking OAuth flow with HMAC-signed state (packages)33af3504— feat(shop): add shop-product, shop-cart, shop-order-tracking canvas blocks (packages)eea72263— feat(shop): add agent tools (search, list, cart, checkout, confirm, track) with guardrails (packages)7512b581— feat(shop): add /shop/orders list and per-order tracking timeline (packages)bab38aeb— feat(shop): add checkout page with UCP session + AP2 mandate flow (packages)e094cfbb— feat(shop): add /shop/cart with per-store carts and inline mutators (packages)6e56e7bd— feat(shop): add /shop/products/[id] PDP with gallery and add-to-cart (packages)d6d67cc6— feat(shop): add /shop/stores/[domain] detail with manifest and catalog (packages)84dde7b2— feat(shop): add /shop/stores directory with filters and pagination (packages)edfe1f14— feat(shop): add /shop home with sidebar entry and verified store strip (packages)2f062bbf— feat(shop): add UCP order webhook verifier and reconciler (packages)bf90fd87— feat(shop): add Stripe-via-AP2 payment handler (packages)727b4ee5— feat(shop): add lazy on-demand UCP product indexer with embedding hook (packages)f7538897— feat(core): add UCP client for catalog/checkout/orders/identity (packages)d67e20d8— feat(core): add UCP manifest fetcher with discovery, validation, and cache (packages)16a6056f— feat(shop): add UCPChecker/ucp-merchants HF dataset importer (packages)16b5788f— feat(shop): add orders and identity links with RLS (packages)8d251628— feat(shop): add carts, items, and checkout sessions with RLS (packages)bb4895e7— feat(shop): add shop_products schema with FTS and pgvector (packages)be9b09ad— feat(shop): add shop_stores schema for UCP merchant directory (packages)6123a2c2— fix(models): correct pricing for MiniMax, Kimi, GLM + add cache rates (packages)ac0edf37— fix(models): correct Mistral pricing + replace deprecated Cerebras model (packages)f926c850— fix(models): add missing cache read pricing for xAI Grok models (packages)a9fcb5d4— fix(models): correct grok-4.3 pricing to $1.25/$2.50 (packages)a9bad2d3— fix(models): correct pricing against May 2026 official docs (packages)66071271— refactor(models): update catalog for 2026 deprecations across providers (packages)6c0542eb— feat(models): add full xAI Grok 4 family to catalog (packages)7376efeb— test(tools): regression — every real tool must be discoverable by name (packages)b62c8fd1— chore(tools): raise DEFAULT_MAX_ACTIVE_APP_TOOLS from 15 to 30 (packages)a41552c6— feat(tools): tool_search catalog-wide token fuzzy fallback (packages)0ce5d907— feat(tools): pin always-active tools that bypass discovery cap (packages)c0a3a59b— fix(tools): add canvas_operations discovery group so delete_block is searchable (packages)baf2073d— fix(test): point slug validation test at organization sub-page after settings split (packages)4eddc631— refactor(settings): split monolithic page into 7 nested route segments (packages)45a59193— fix(responsive): mobile pass for tabs, tables, and top bar (packages)0a2bfb77— test(layout): cover empty state action row (packages)0414c18d— feat(billing): add trust signals to deposit dialog (packages)37089c2d— feat(ui): add illustration + secondary action slots to EmptyState (packages)8b35a448— fix(settings): announce reserved slug errors (packages)46dd0a27— feat(a11y): add aria-invalid and aria-describedby to org slug input (packages)bf10af40— refactor(copilot): name open-state constants (packages)5a4188bd— fix(ci): collect coverage from isolated test runner (packages, scripts)2fefbc86— feat(connectors): add finance and chatbot integrations (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)3c83e975— feat(connectors): warn about dependent agents before disconnecting (packages)688a7ddb— feat(home): surface promotional credit banner on dashboard home (packages)b489a349— fix(sidebar): move localStorage read to useEffect to avoid hydration mismatch (packages)ba896974— test(llm): scope public routing copy guard (packages)97ae7e4a— fix(sidebar): add border below workspace switcher for scope/location separation (packages)712b8bce— feat(a11y): add global aria-live region for async status announcements (packages)a8004700— fix(sidebar): match header height to top bar (h-12) (packages)ed34862d— feat(shortcuts): add?keyboard cheat-sheet overlay (packages)f7258b1f— refactor(balance): shared zustand store replaces dual fetches (packages)398e0deb— fix(connectors): restore focus to trigger after credential dialog close (packages)2eaa9816— fix(sidebar): allow multiple collapsible groups open at once + persist (packages)f916373a— test(web): refresh source guard expectations (packages)96cd1003— refactor(wallet): name precision formatting constants (packages)58343d06— test(telephony): cover outbound voice wiring (packages)6bbe4834— fix(home): compact getting started checklist (packages)3465f007— fix(copilot): share handled open helper (packages)b326ed69— fix(copilot): centralize copilot:open dispatch with fallback toast (packages)b360e409— feat(connectors): expand native catalog coverage (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)b995905f— test(ai): cover tool access and model regressions (packages)f4e497da— fix(connectors): credential vault select no longer auto-picks first secret (packages)7a0e9bad— feat(admin): add live usage monitor (packages)20246320— feat(sidebar): add theme toggle to sidebar footer (packages)7b96ca01— fix(home): add "View all" to recent sessions + skeleton for spend chart (packages)65e3e7cc— fix(home): tooltip on disabled "Continue last project" button (packages)373849f0— fix(agents): match skeleton grid cols to loaded grid (eliminate CLS) (packages)016f581a— feat(agents): add Undo action to "moved to Trash" toast (packages)eb1bc288— refactor(format): extract shared currency formatter, replace inline duplicates (packages)1f97488b— fix(top-bar): show balance with 2 decimals, full precision in tooltip (packages)9eff235f— fix(settings): use exact-match for reserved org slugs, not substring (packages)73defc35— feat(agents): surface peer messaging in agents UI (packages)532734d4— feat(canvas): first-visit tour and persistent help button (packages)0d6e38f5— feat(home): add first-run onboarding checklist for empty orgs (packages)0b8d3c2b— fix(agents): handle partial bulk-delete failures with retry (packages)3a8b29b7— feat(web): add loading/error/not-found boundaries for org routes (packages)39522db7— docs(testing): preserve shared blacksmith boxes (.claude)17b7626a— test(shared): cover random suffix generation (packages)802b07b8— docs(public): refresh model catalog counts (docs, packages)25172e96— test(connectors): expand marketing suite coverage (packages)5094984b— test(security): harden secrets sandbox and smoke gates (packages, scripts)0b7a2f42— fix(telephony): close realtime calls by provider id (packages)42a64db6— feat(guardrails): surface project policy controls (packages)37b6ac41— feat(connectors): expand native integration catalog (.claude, .implementation, AGENTS.md, CLAUDE.md, README.md, docs, packages)a959b1c8— fix(artifacts): harden preview lifecycle (packages)a681b605— feat(ai): add guardrail policy controls (packages)aeeefe81— fix(deploy): tolerate live smoke tool gaps (packages)0aa352d4— fix(ci): clean next cache before integration dev server (packages)230f9349— fix(deploy): cover google meet connector secrets (scripts)d1ea9b19— fix(ui): promote artifacts and tighten dashboard cards (packages)c1167269— feat(connectors): add provider and webhook integrations (packages)ac919d0f— fix(artifacts): recover stale preview bundles (packages)17d9fc83— fix(canvas): release inactive block wheel capture (packages)65ef53b1— fix(share): harden shared gallery assets (packages)7f9c2e1b— fix(artifacts): align sandbox asset bundling (packages)b13c3f06— fix(ai): use stable production model defaults (packages)90b52cea— fix(ui): restore canvas scroll and hero demo (packages)5e1b8169— fix(artifacts): bundle local asset imports (packages)de3d64a1— feat(memories): add shared workspace scope (packages)93c7ff5d— fix(share): serve project files through share links (packages)f3567629— fix(chat): show live agent build activity (packages)e397af57— refactor(chat): unify peer-agent activity rendering with the regular tool-call UI (packages)4866d11c— fix(ai): harden live model smoke parsing (packages)e77c240e— fix(blocks): remove duplicate generated titles (packages)0b4a9911— fix(lab): persist selected agent handoff (packages)b79dda5e— feat(workspaces): add workspace prompt instructions (packages)d00257aa— fix(ui): show wallet balance with four decimals (packages)6a7e75ae— fix(deploy): pass preview RDS credentials to db tasks (.github, scripts)b32d2b03— fix(chat): relay agent activity across web tasks (packages)a063237c— fix(ai): harden model routing and live smoke (packages, scripts)
2026-05-04 (43 commits)
View commits
8eb9bf34— fix: support cookie auth in deploy verification (scripts)5bc38d66— fix: tolerate transient ai smoke provider failures (.github, packages, scripts)c0f457c6— fix: keep deploy smoke auth unblocked (.github, scripts)ab702e3c— test: harden api integration guardrails (packages)d2dcb226— test: avoid secret-shaped byok fixture (packages)18706873— fix: harden production security gates (.claude, AGENTS.md, CLAUDE.md, Dockerfile, bun.lock, package.json, packages, pnpm-lock.yaml)32649965— perf: reduce chat response latency (packages)620034b6— fix: stabilize canvas media interactions (packages)66f3d566— fix: tolerate live smoke response refusals (packages)bd02fbcd— fix: wait for api route readiness in integration ci (packages, scripts)7d1058f9— test: update live smoke runtime options (packages)a2e38820— fix: tolerate transient provider smoke errors (.github, packages, scripts)f5328a1b— fix: preserve playwright install failures (packages, scripts)28778cf8— fix: bound playwright install retries (packages, scripts)cb7dc57d— test: update ci guard for playwright installer (packages)d44b8f2e— fix: retry playwright browser install in ci (.github, scripts)0ec36d13— fix: stabilize production model smoke routing (AGENTS.md, CLAUDE.md, docs, packages)baaafcd3— fix: inherit runtime secrets for preview deploys (scripts)dbbbbd59— fix: align settings e2e with section navigation (packages)9fb44d3a— fix: build workspace dependencies before lint (packages, turbo.json)f6648f88— fix: align release gate model checks (docs, packages)a223a679— feat: harden alumia release surface (README.md, bun.lock, docs, package.json, packages, pnpm-lock.yaml, scripts)70454be3— chore: misc test, billing, chat-persistence, and tooling polish (.env.example, packages, scripts)c1fab29a— feat(connectors): add Aeroleads, PipelineCRM, RocketReach, and ZoomInfo (packages)6ad7047f— feat(shop): checkout handler registry, manifest hydration, Shopify integration (packages)eda58685— feat(shop): normalize pages, hide UCP from user-facing copy, add product gallery (packages)c844f56a— feat(spaces): auto-assign emoji via Cerebras and debloat space view (packages)9910efff— feat(guardrails): permission modes, always-allow, approval UI integration (packages)326513ab— feat(connectors): expand integration command coverage (packages)df20741c— fix(chat): harden model context and tool feedback (packages)8f76aa79— feat(public): redesign nav with shadcn NavigationMenu dropdowns and multi-column footer (packages)33b97742— feat(web): add context menus to spaces, artifacts, and BYOK pages (packages)111f00e3— chore(connectors): add connector logos and fix finerworks module (packages)dad86a2d— feat(web): agent runtime, chat UI, canvas, guardrails, and test improvements (.claude, AGENTS.md, CLAUDE.md, README.md, packages)1e81b833— feat(connectors): expand connector registry with new integrations and tests (.claude, docs, packages)51070191— feat(web): add error and loading boundaries for all dashboard routes (packages)16edc746— feat(shop): add POST /api/shop/[orgSlug]/cart/items API route (packages)f360c567— feat(shop): add catalog seeder for indexing products from all UCP stores (packages)f49f6f16— feat(core): add UCP MCP catalog client for real-world store integration (packages)0a483850— feat(shop): sanitize error-like store names and add favicon fallback (packages)7e63107f— feat(shop): wire real shop tools (search, list, add-to-cart, track) into agent runtime (packages)21c99abe— feat(shop): add seed-ucp-merchants script for HF dataset import (packages)685a229b— fix(shop): use embedding_key instead of pgvector to match codebase pattern (packages)
2026-05-05 (50 commits)
View commits
4ee64b3b— chore: harden deploy evidence and workflow structure (.github, docs, packages, scripts)539a42e8— fix: harden ci workflow gates (.github, packages, scripts)d18fc261— fix: harden admin bootstrap deploy config (.github, infra, packages, scripts)8ed8f700— chore: ignore local claude lock files (.gitignore)7c5614fb— feat: expose admin entry in app sidebar (packages)7f7724c0— feat: add shared social preview metadata (packages)8f1dcc6c— fix: require admin emails during production bootstrap (.github, infra, packages, scripts)8b5026c7— test: cover connector contact preservation across slugs (packages)a23c7dc5— fix: harden tool safety regressions (packages)49093637— fix: improve canvas drag and block reveal pacing (packages)f5069b1f— fix: preserve connector contact data (packages)e961bd19— fix: reduce connector chat ttft (packages)cc430297— test: update passkey e2e dialog flow (packages)e98b1719— fix: polish canvas and chat workflows (packages)e6eb0e12— fix: restrict spreadsheet formula evaluation (packages)81784b2a— fix: normalize dashboard dialog layouts (packages)67cf47b8— fix: preserve Ala while allowing model choice (packages)4819f1ae— fix: harden connector query inputs (packages)66b8cb20— feat: add org invitations and authenticator management (packages, pnpm-lock.yaml)ba973742— fix: harden chat session recovery (packages)30cd669e— fix: harden file and artifact inputs (packages)95ad182a— fix: harden auth refresh and oauth recovery (packages)cfc160d0— fix: recover canvas api calls after auth expiry (packages)7a2416a5— fix: preserve mfa assurance across sessions (packages)05f0d3d6— fix: harden edge deployment and preview secrets (infra, packages, scripts)6b7caa10— test: align canvas resize source safeguards (packages)622f783b— fix: avoid duplicate tiptap link extension (packages)bc3254b7— fix: recover dashboard api calls after auth expiry (packages)c65ba069— fix: centralize default chat permission mode (packages)6684766b— fix: smooth canvas block resizing (packages)aba61151— fix: preserve org context during session refresh (packages)e78aaee4— perf: reduce chat tool-call setup latency (packages)9ab2de02— ci: harden production deploy workflow (.github, scripts)aa0031a0— test: harden core runtime stream assertion (packages)be56b864— test: fix clean ci assertions (packages)f72af3d5— feat: record chat response latency timings (packages)c4462ba5— fix: enforce core agent output guardrails (packages)b0c8fbed— fix: align deployment observability config (.github, Dockerfile, docs, infra, packages, scripts)b64df6f0— test: harden auth integration runner (packages)4b14bbcb— fix: surface connector account identities (packages)eff2ae79— fix: tolerate concurrent auth refresh (packages)46a6141e— fix: harden deployment rollback flow (.github, scripts)774107f4— fix: polish chat inline notices (packages)232af54c— docs: refresh public legal links (packages)062dda2c— fix: stabilize canvas block sizing (packages)c4cd919f— ci: optimize deployment workflow (.github, scripts)4d4c8d1b— ci: serialize live api integration tests (packages)d19dd133— chore: clear axios audit finding (bun.lock, package.json, pnpm-lock.yaml)9e47f683— ci: harden playwright install retries (scripts)a7c4ef51— fix: restore production auth hydration (packages)
2026-05-06 (57 commits)
View commits
feb833d6— fix: harden connector canvas tool inputs (packages)463408fd— fix: set default agent for new chat sessions (packages)84efd00a— fix: align enterprise deploy routing (docs, infra, packages, scripts)55a8860c— fix: fail closed when music file storage fails (packages)e2499375— fix: preserve selected chat agent state (packages)8996e442— fix: allow deploy checkout on release tags (.github, scripts)f863d417— fix: align deploy runtime port with ecs ingress (.github, scripts)97f8ff30— fix: align card selection checkbox insets (packages)32ea5f7e— chore: update model pricing (packages)8197e88b— feat: polish data block renderers (packages)acb2c052— fix: serialize canvas block insertion (packages)f09dec4a— fix: harden open meteo geocoding (packages)2b5d180c— fix: include avatar update and stabilize CI gates (packages)21b1ce41— feat: ship canvas reset and lab deploy hardening (.claude, .env.example, Dockerfile, README.md, docker-compose.yml, docs, infra, packages, scripts)b4ca37bc— test(deploy): cover telephony and smoke paths (bun.lock, packages, scripts)b13d8664— fix(web): harden agent runtime tools (packages)01187552— chore(docs): trim product facts test whitespace (packages)10a9eea4— docs: refresh product facts and public copy (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)f111d1c5— feat(connectors): expand oauth auth handling (.claude, packages)25935077— chore(chat): trim persistence test eof whitespace (packages)c990a51d— feat(chat): add durable run event tracking (packages)dd6bf093— chore(canvas): trim mcp app eof whitespace (packages)7b3b7b3f— feat(canvas): add mcp app block runtime (.claude, docs, packages)0fe5bdd7— feat(admin): expand management operations (packages)9a78edb4— fix(core): enforce safer agent tool execution (packages)7186195f— fix(cli): harden local config handling (packages)ab9c6f91— chore: add repo hygiene gate (.github, .gitignore, .implementation, package.json, scripts)427206f4— fix: tighten chat route helper types (packages)7540e47f— fix: restore predeploy verification gates (packages, pnpm-lock.yaml)4d62219f— feat: add canvas data blocks and tool discovery apps (.implementation, packages, pnpm-lock.yaml)749f891f— refactor: modularize chat streaming route (packages)0f94d42b— feat: expand admin and tenant management surfaces (.implementation, packages)d9e3c046— feat: refresh pricing and fractional billing ledger (packages)691c9c63— test: harden tool allowlist source assertions (packages)3225088a— feat: add Hasna enterprise deployment control plane (docs, infra, packages, scripts)6a14f7fb— docs: refresh blacksmith monitor proof (.github, docs, scripts)3e6e1ed0— docs: refresh blacksmith monitor escalation (docs, scripts)504b4e23— ci: gate deploy hardening audit in ci (.github, docs, scripts)05e5cbf8— ci: add deploy hardening audit script (docs, scripts)a1302a45— chore: refresh blacksmith monitor audit (docs, scripts)cbd554b3— docs: add ci deployment hardening audit (docs, scripts)56ab4340— docs: record blacksmith testbox proof (.github, scripts)de094eca— docs: refresh blacksmith monitor proof (docs, scripts)c15768d6— ci: run all deploy script tests (.github, scripts)58ed5e05— docs: add blacksmith monitor escalation packet (docs, scripts)36a100a6— fix: verify blacksmith monitor configuration (.github, scripts)f53dd18d— refactor: centralize ci toolchain setup (.github, scripts)27fd91fb— refactor: extract deploy ci wait script (.github, scripts)1ba016c6— ci: upgrade pnpm setup action pin (.github, scripts)8673c977— ci: clarify blacksmith monitor auth diagnostics (.github, scripts)c67fa9d6— ci: opt workflows into node 24 action runtime (.github, scripts)1eeb7c6e— docs: prefer ECS-native canary path (docs, infra, scripts)00e490ee— ci: rebuild stale API integration artifacts by default (.github, packages, scripts)63f8c161— ci: align API integration runner with standalone semantics (packages, scripts)52fc05cd— ci: run API integration from standalone build (packages, scripts)7a4b9ace— fix: stabilize API integration readiness (.github, packages, scripts)d50e3ca3— ci: pin Node 24 GitHub actions (.github, scripts)
2026-05-07 (87 commits)
View commits
d9b5a9ff— docs: add credential audit (docs)35b4d437— feat: add backend spending budget controls (packages)a1985c45— fix: redact secrets at ai persistence boundaries (packages)fe86b0b0— fix: meter web research tool costs (packages)3a3c308e— fix: use audio playlist for generated music (packages)42169887— feat: add spending guard approvals (packages)60474049— fix(public): update Alumia page title (packages)5e78a441— fix(canvas): restore trackpad panning (packages)13886c5a— fix(deploy): keep public build secret resolution reviewable (.github, scripts)4cc30315— fix(media): bake mapbox token and harden audio playback (.env.example, .github, Dockerfile, packages, scripts)b18c1252— fix(auth): ignore bind addresses in OAuth redirects (packages)8ee4060a— chore(deploy): keep workflow reviewable (.github)9edf9938— fix(deploy): bootstrap enterprise tenant owners (.github, packages, scripts)29081270— test(e2e): align public and shared asset assertions (packages)d9d17c15— fix(connectors): harden Gmail attachment saves (packages)a34db5c6— refactor(marketing): tighten public landing sections (packages)0a990846— fix(files): proxy inferred remote images (packages)af71eb22— fix(canvas): use React Flow bounds for exports (packages)c5cf5d03— feat(chat): add prompt copy actions (packages)18f30fdb— fix(canvas): guard audio player — skip audio element when src is empty (packages)be9c0f8b— fix(canvas): pros-cons uses fully neutral bg-card + bg-muted, no red/green (packages)387c1f2a— fix(canvas): remove destructive red from block delete button (packages)b597fd7b— feat(canvas): keyboard delete for selected blocks, subtle pros/cons tint (packages)086a75c9— fix(canvas): pros-cons uses neutral black/white colors, not green/red (packages)0999cf65— feat(canvas): search-within-block for lists, kanban card drag across columns (packages)43b63fd2— feat(canvas): collapse/expand toggle on block title bar (packages)a30c156c— feat(canvas): weather forecast shows condition emoji icons per day (packages)f6a17dfa— feat(canvas): add 6 new presets — testimonial, itinerary-day, contact-card, before-after, poll-results, notification (packages)e20204a3— feat(canvas): drag-to-reorder for list and timeline blocks (packages)3eead815— test: update tests for tool-call stop, agent activity, canvas ops, discovery, media (packages, scripts)cb4be1db— feat: block-node stop control, chat panel wiring, hero section, file download route (packages)83ae367b— feat: agent activity emitter, tool-call stop, canvas inspect/screenshot, durable runs (packages)d33a5e45— feat: file-media-url util, tool-call cancellation, scripted lab demo, render state (packages)4cfc5117— test(canvas): regression tests for presets, pdf, gallery carousel, action href, audio player (packages)37eadf92— fix(canvas): AI image guidance, audio preset routing, label badges, CSS polish (packages)6a265b46— feat(chat): compressed-context divider, edit button, attached blocks chips, connector logos (packages)a355aa69— feat(canvas): restore map block with Mapbox GL integration (packages)cf415f59— feat(canvas): gallery edge-to-edge, per-item carousel, music player with scrubber (packages)042a5a71— feat(canvas): inline editing for callout, card, list, kpi-grid, table blocks (packages)732327d0— feat(canvas): add 14 new app-view presets with hand-tuned fragments (packages)6f2f3246— feat(canvas): add PdfRenderer, MediaCarousel, ReadMore, InlineTextEditor primitives (packages)7a60f368— feat(canvas): extend DataSpec schema — pdf type, images[], Action.href, ImageSrc internal paths (packages)74d3c889— fix: render canvas file media images (packages)565d38e2— fix: make casual sonnet chat responsive (packages)a128b8f8— fix: refresh chat session stats (packages)dfd77fef— fix: render shared gallery assets (packages)59865f90— refactor: compact project cards (packages)89c269ee— fix: sanitize chat guardrail errors (packages)b93f3edd— ci: smoke host routed tenants (.github, scripts)6b8f3aa2— fix: harden tenant host routing (packages, scripts)cdf7544d— fix(tools): show friendly media tool errors (packages)036f0a1d— fix(chat): retry failed assistant responses with regenerate (packages)18254ca0— test(canvas): narrow app view playlist assertion (packages)a05a8638— fix(canvas): improve pdf table export layout (packages)af4a5004— fix(sessions): keep selected agent as sole agent participant (packages)c803b578— fix(billing): scope cached balances by org (packages)a8feaef2— fix(canvas): persist generated media playback (packages)c3c762ff— fix(deploy): sync shared enterprise tenants safely (.github, scripts)6aa71015— fix(deploy): sync enterprise tenant targets during release (packages, scripts)d7d13550— feat(data-block): typography pass on markdown/gallery/form/chart/map (packages)9d2a4358— feat(data-block): final 5 fragments — 100% preset coverage (39 of 39) (packages)7484be64— feat(data-block): nine more app-view fragments — 32 of 39 specialized (packages)b669e37f— refactor(data-block): split app-view fragments by surface + 4 new commerce fragments (packages)1591d2e1— feat(data-block): eight more app-view fragments — 19 of 39 specialized (packages)bacb6bd0— test(data-block): cover preset renderer output (packages)c5455c94— feat(data-block): expand app-view preset fragments (packages)38a8f620— feat(data-block): typography pass on card/kanban/comparison/dashboard/steps (packages)ced50c4f— feat(data-block): typography + spacing pass on metric/kpi-grid/callout/list/timeline/calendar (packages)efeaf5a0— feat(data-block): per-preset render fragments for app-view (packages)7975e40d— test(prompt): align app-view section assertions (packages)ce414264— feat(admin): canvas fixtures page for visual QA (packages)c5984b56— feat(prompt): preset-first push for app-view + bad/good exemplars (packages)3bfd2850— refactor(data-block): split app view presets (packages)2ff3078f— fix(connectors): keep pinterest oauth coming soon (packages)0002c7b2— feat(canvas): pass selected blocks into chat context (packages)ce9e3d21— feat(data-block): person-portrait preset + checkbox table column (packages)e45bcb6e— feat(data-block): preset field + slot validation, table sort/filter, expanded preset library (packages)68c88a33— feat(data-block): extend table column formats + URL/email auto-render (docs, packages)78134676— fix: preserve oauth origin ports (packages)e96c68c6— feat: allow editing latest chat prompt (packages)7122fb8c— fix: queue busy chat prompts without stopping (.claude, packages)95b2f9f2— fix: keep canvas and queued chat responsive (packages)1528f05b— feat: harden agent tool surfaces (.env.example, packages)ac6b2386— fix: scale enterprise tenant routing (.github, docs, infra, packages, scripts)ad8883c6— fix: catch tenant oauth callback failures (packages)ceb30221— fix: inject enterprise tenant allowlist for production deploys (scripts)5cf2c133— fix: enforce enterprise tenant host boundaries (infra, packages, scripts)
2026-05-08 (109 commits)
View commits
dfedcd4e— fix(public): use 1200x630 OG image so WhatsApp stops blowing up the logo (packages)b237cb4f— fix(ci): sync pnpm lockfile and deploy workflow lint (.github, pnpm-lock.yaml)f37444d4— fix(ui): polish chat actions and tool activity (packages)358b45bf— fix(chat): stabilize durable agent activity (packages)19eb8bc6— fix(canvas): preserve viewport control during agent activity (packages)e9b1ae3e— fix(voice): harden realtime handoff and telephony status (packages)004d32e4— feat(admin): add inbound connector event operations (packages)f0043cc8— chore(ai): refresh AI SDK dependencies (bun.lock, packages)699ef132— fix(voice): stop AI cutoff, fix turn-order flicker, add live placeholder (packages)b37b955d— fix(voice): handle response.output_audio_transcript event names (packages)15ffec6e— fix(chat): stream voice transcripts live, drop mic icon, quote user (packages)61bd4eb8— feat(chat): ChatGPT-style voice transcripts and inline edit UX (packages)15fe3c10— refactor(dashboard): declutter sidebar, top bar, home, chat header (packages)902eab99— refactor(top-bar): tighten chrome and flip wallet to solid when negative (packages)0f4fb7ab— refactor(public): normalize header CTAs to shadcn Button size=sm (packages)cdd13ede— fix(chat): pin content edges to the panel gutter, cap user bubbles at 70% (packages)2110fe74— fix(chat): align panel header, messages, and prompt bar horizontally (packages)6e9db846— feat(public): replace comparison with positioning section (.github, infra, packages, scripts)aa15367e— fix(theme): use theme tokens for public skip link and destructive dialogs (packages)418d033c— feat(public): restructure hero and animate cursor across blocks (packages)24db4685— fix(auth): respect dark mode across login and signup shell (packages)68d9733c— fix(public): align hero demo width with other landing sections (packages)3161ebab— refactor(public): widen hero demo to match landing container (packages)6a83a127— feat(chat): add inline tip selection engine (packages)74213b0a— feat(chat): add workspace mode tool profiles (packages)f3cecf8b— feat(projects): add prompt creation route (packages)d406dc91— feat(audio): save transcription recordings as attachments (packages)b04cd1b0— feat(agents): add block targets to activity events (packages)e8d11439— feat(canvas): add section break placement for text headers (packages)aa71035c— feat(chat): show agent role in the picker dropdown (packages)74ef1070— feat(tools): create crawl page document blocks (packages)fe4df754— chore(connectors): bump remaining 787 references to 797 (packages)3a5fca3e— feat(skills): refresh catalog entries (packages)64e2fc6f— feat(canvas): polish app-view code snippet fragment (packages)99e18dd5— feat(admin): wire platform settings page to the new service surface (packages)4a1dfdc1— feat(tools): meter crawl-pages and surface its activity in chat (packages)61c28796— feat(deploy): add release-prod script and environment contract checks (.github, config, infra, package.json, scripts)d16d303c— feat(tools): add crawl-pages tool and refresh discovery + prompts (packages)78b6b41a— test(workspace): add source coverage for the workspace switcher (packages)603e133f— fix(connectors): tighten X media uploads and twitter-post MCP app (packages)2df93da9— feat(chat): durable runs, abort registry, panel hardening (packages)4321ca8f— feat(audio): add realtime voice model catalog and per-use-case settings (packages)866efb1a— feat(guardrails): add pipeline tracing and policy controls (packages)e52fb950— feat(public): add blog index and post pages (packages)2a086484— feat(onboarding): add personalize dialog from checklist (packages)ab188902— feat(canvas): add session participants popover (packages)f2bef57a— feat(projects): add snapshots tab (packages)16dcfcfb— feat(projects): add share visibility settings panel (packages)f974fe1b— feat(settings): add agent communication language picker (packages)e91ae46c— feat(audio): add voice profile cloning UI (packages)9bcd9680— feat(dashboard): add schedule summary widget (packages)55c2ea19— feat(billing): surface credit grants and budget controls (packages)2f16aa2b— feat(connectors): add 10 scholarly research connectors (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)ca31035a— feat(canvas): add markdown pagination contract (packages)a4e07174— feat(video): add remotion planning tool (packages)8e10e260— feat(canvas): add clickable link settings API (packages)9a4807bf— feat(chat): persist source citation parts (packages)91f027cd— feat(chat): add server text-to-speech endpoint (packages)aebe362e— feat(chat): add conversation export serializers (packages)4d8bca31— test(files): cover file rename and move contracts (packages)292963d6— feat(analytics): add server provider abstraction (packages)237aed92— fix(canvas): scope block export actions (packages)3d115f2f— feat(canvas): polish social-thread, email-draft, email-thread fragments (packages)66b60183— fix(canvas): trim social-thread connector line so it lands exactly on next bullet (packages)86343e71— fix(canvas): align social-thread bullets and connector line (packages)bd699006— fix(canvas): defer audio scrubber pending clear via microtask to break sync cycles (packages)5f8b1062— fix(chat): cap context badge width with truncation, contain overflow (packages)0b563ad8— feat: add brain backend foundations (packages)5f48cc10— feat: attribute generated block costs (packages)536f0ee1— feat(projects): show subtle "Shared" badge when project has a public link (packages)a96297e9— feat: add vector and transparent image tools (.env.example, packages, scripts)b27241b7— feat: seed initial AI comparison blog posts (packages)33a565f2— chore: add changelog generation workflow (.takumi, CHANGELOG.md, package.json, packages, scripts)0bf43ce2— feat: add machine payment billing controls (packages)7f109966— chore: add deployment maintenance agent definitions (.gitignore, .takumi, packages)15ee0257— feat: add voice profile cloning backend (packages)1347c14e— test: relax music playlist block assertion (packages)23f871f1— feat: add chat websocket protocol foundation (packages)ffa37220— feat: add agent language preferences (packages)8e87e062— feat: add session participant collaboration api (packages)e6e1ae85— feat: add project share visibility settings (packages)3c707b51— feat: add schedule summary api (packages)a87a1b6b— feat: add durable onboarding backend (packages)b6544d4f— test: cover session rename and delete api (packages)dd272f05— feat: add agent feedback submission tool (packages)5ba7920d— feat: add durable goal slash command (packages)638f250d— feat: add platform blog api (packages)557dbff5— test: stabilize snapshot restore fixture (packages)9dc4086c— feat: add agent management tools (packages)3f29ee61— feat: add project snapshots (packages)fd35345c— feat: add agent event subscriptions (packages)e4608d26— feat: seed specialized default agents (packages)d0f1adb7— fix: purge storage on permanent file delete (packages)b0e8780c— docs: record asana calendly oauth credential boundary (docs)a10e85d0— docs: record pinterest oauth credential boundary (docs)6b9d61d2— docs: record paid ads oauth credential boundary (docs)4735cc3b— docs: record twitch oauth credential boundary (docs)392e09ed— docs: record sentry observability token setup (.env.example, docs)8e0fa30f— docs: record api key rotation sweep (docs)f7c3ccd0— fix: keep anthropic routes off unsupported effort (docs, packages)1a3f07a6— fix: block tracked canvas backup leaks (.gitignore, packages, scripts)ea021ba4— docs: record deepseek zhipu secret setup (docs)3b763d52— fix: map elevenlabs agent secret for deploys (docs, packages, scripts)dc6bf51e— docs: update google workspace credential audit (docs, packages)dc66e145— chore: record stripe live secret setup1193ecea— feat: add expiring credit grants (packages)c8ee58da— feat: add headless browse tool (packages)33950c62— fix: reuse Google OAuth sessions (packages)e0375302— feat: add safe zip extraction tool (packages)
2026-05-09 (25 commits)
View commits
ea3f3bd2— fix(deploy): provide built-in audio verify sample (packages, scripts)351a9efc— fix(deploy): fund smoke account before chat check (packages, scripts)a8c7c95b— fix(deploy): align smoke metadata and rollback target (.github, scripts)e4b2e0e4— fix(deploy): wait for ECS rollout drain (.github, scripts)d3f3d077— fix(deploy): extend image evidence scan timeouts (.github, scripts)10326c3c— fix(ci): retry actionlint archive downloads (.github, scripts)32090b81— fix(deploy): use patched trixie image base (Dockerfile, scripts)755120cc— test(images): harden reference gallery matcher (packages)8ef0a6dc— fix(canvas): preserve text tool drops (packages)8b10c7c5— test(canvas): align source guards with canvas split (packages)35161d86— fix(tools): expose task and runtime discovery surfaces (packages)0db79369— fix(connectors): require production Google OAuth secrets (.env.example, docs, packages, scripts)7adc7878— test(security): isolate production rate-limit bypass guard (packages)6f73434a— feat(connectors): add AWS service integrations (.claude, AGENTS.md, README.md, docs, packages)0b8b89ad— fix(canvas): restore responsive text drops and agent cursors (packages)6e34e2ac— fix(auth): refresh org slug session cookie (packages)ce2ba3e2— refactor(canvas): extract capsule shadow into a single utility (packages)a2961f88— fix(ci): timebox dependency audit deferrals (scripts)0c50a8b6— fix(runtime): harden production guardrails (packages)babd3e10— fix(chat): allow queued prompts to be cancelled (packages)eddbc4d9— fix(workspaces): refresh switcher after workspace changes (packages)080e6179— fix(media): keep shared assets playable (packages)74ebd358— fix(admin): centralize currency formatting (packages)4ceb4503— fix(auth): enforce canonical org slug isolation (packages)fb3b08ba— feat(canvas): polish participants popover, drop duplicate presence bar (packages)
2026-05-10 (32 commits)
View commits
8c648893— docs: refresh current blacksmith proof (docs, scripts)b5917488— docs: refresh blacksmith support evidence (docs, scripts)5827bb35— docs: refresh blacksmith monitor proof (docs, scripts)03befee7— ci: skip preview deploys for draft prs (.github, scripts)9edb9ae4— docs: refresh blacksmith monitor proof (.github, docs, scripts)079c0522— fix(deploy): bootstrap twilio verify secret (.github, scripts)8e676425— fix(connectors): harden open meteo forecast tests (packages)a876be8f— fix(chat): ignore invalid persisted message parts (packages)7e1ab788— fix(canvas): key read-only sortable rows (packages)2c2f6af6— test: keep mock e2e billing disabled (packages)7e803de1— chore: add dev server restart helper (scripts)98d2555a— docs: align public product facts (.claude, packages)33dc621a— test: align auth signup credit integration (packages)7f120890— fix: require domain proof for reserved org slugs (packages)46f22331— test(e2e): add deterministic chat canvas journey (packages)d1243c35— fix(chat): replay completed session runs on reconnect (packages)6270d2e8— fix(canvas): preserve block presence color state (packages)7afc943d— feat: gate signup credit behind phone verification (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)573dacaa— feat: add Product Hunt connector (.claude, docs, packages)4e9e7fb6— fix: harden production secret coverage (.env.example, packages, scripts)0d43fe55— fix: harden Stripe Issuing wallet gates (packages)f5dd427a— feat(canvas): show agent presence on the block, drop floating cursor (packages)0a7a8744— fix(canvas): only show agent cursor on the block it's editing (packages)a89dd51a— fix(canvas): collapse agent cursor badge to icon + inline status (packages)260eae2e— fix: render inline editors with valid nesting (packages)3acced49— fix: harden chat message history validation (packages)d9599566— fix: show validation error details (packages)fcc22033— feat(canvas): per-agent color cursor, white badge, multi-line activity (packages)b23c706c— fix: harden Stripe Issuing wallet gates (packages)e68f14e4— chore: gate Stripe Issuing wallet deployment (.env.example, .github, packages, scripts)dc6ab853— feat: add agent wallet admin inspection (packages)b10a110b— feat: add Stripe Issuing agent wallets (packages)
2026-05-11 (12 commits)
View commits
f68bb2c7— fix: repair Sentry edge config and release checks (packages)fe199d37— feat: prepare Alumia production release (packages, scripts)d71c359a— feat(chat): polish lab prompt and copilot controls (packages)ef6784be— feat(dashboard): refine navigation and mobile surfaces (packages)6c782ebe— feat(auth): simplify auth entry screens (packages)9208d29b— fix: create preview db without template cloning (scripts)f97d84d4— fix: pin patched fast xml builder (bun.lock, package.json, pnpm-lock.yaml, scripts)e26daa21— docs: refresh latest blacksmith monitor proof (.github, docs, scripts)b456cba9— docs: refresh current monitor proof handoff (.github, docs, scripts)ca8469f1— docs: refresh latest blacksmith proof (.github, docs, scripts)62925ded— ci: honor deploy hold labels for previews (.github, scripts)7fe170eb— docs: refresh current-head blacksmith proof (docs, scripts)
2026-05-12 (15 commits)
View commits
c4677418— fix: stabilize chat canvas runtime e2e (packages)9b474d86— fix: stabilize canvas drop e2e checks (packages)e3cb89ae— fix: stabilize canvas and durable chat ci checks (packages)79ab0c0b— fix: resolve expired fast-uri audit deferral (package.json, pnpm-lock.yaml, scripts)92144b80— feat: polish dashboard readiness states (.claude, packages)ed513cf1— fix: harden chat agent runtime flows (packages)307c6e87— feat: improve canvas block discovery and controls (docs, packages)e97b6180— fix: harden auth guardrails and phone verification (packages)fad5dd2d— feat: refresh public seo and connectors (AGENTS.md, README.md, docs, packages)aa87290b— fix: use public origin for cli device login (packages)ecc596f5— fix: default alumia cli login to public app (packages)88d6cd48— chore: align alumia cli package metadata (packages)2bcbb802— chore: prepare alumia cli for public publish (packages)321f32e6— chore: defer next audit until package age clears (scripts)365d7fec— fix: tolerate legacy chat tool history (packages)
2026-05-13 (25 commits)
View commits
67771577— fix: classify feedback sqli probes (packages)dc11a6a7— fix: classify template feedback probes (packages)18eafc54— fix: block api keys from admin routes (packages)e02b0450— fix: reject empty scheduled prompts (packages)b3507a55— fix: surface early bird claim eligibility failures (packages)c32a3751— fix: provision preview smoke billing (scripts)dd528580— fix: mount llm secrets in PR previews (packages, scripts)52802877— test: align phone verification fetch mocks (packages)a5d3984c— fix: harden phone verification Twilio config (packages)ed687342— fix: align homepage social metadata (packages)b1bb0bfe— test: update auth e2e registration flow (packages)45ed7638— test: update memories filter width guard (packages)9880a5f3— test: update signup source guard (packages)06b31d46— fix: polish canvas media block presentation (docs, packages)b16e45c8— fix: surface signup credit in top-up prompts (packages)e459e9ee— fix: clarify registration password guidance (packages)1bd27d63— fix: tighten dashboard responsive spacing (packages)d6ab5106— fix: stabilize ci cleanup and canvas e2e (packages)992761db— fix: align deploy contract canvas evidence (packages, scripts)7b0418ef— docs: update canvas and block documentation (packages)7d640716— fix: hide single-org switcher before menu open (packages)be22cad1— feat: polish data block renderers (packages)bfea9fad— fix: harden canvas focus and export behavior (packages)f5ae6249— fix: bootstrap twilio secrets for previews (scripts)60a70cd5— fix: configure phone verification for pr previews (packages, scripts)
2026-05-14 (617 commits)
View commits
24f2cb45— feat(connectors): add greenhouse with 30 endpoints (packages)fce714ad— test: cover prefect connector runtime (packages)0b43b89d— docs: document agent wallet api routes (docs, packages)8ed9ad58— feat(connectors): add workable with 24 endpoints (packages)0cda0325— test: cover workato connector runtime (packages)88ccf31d— test: cover airbyte connector runtime (packages)56131938— feat(connectors): add deel with 25 endpoints (packages)970e8400— fix(connectors): restore reconciled connector files (docs, packages)d09b7ffc— feat(connectors): add personio with 24 endpoints (packages)0f454cd9— feat(connectors): add reddit ads (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)47436cd4— docs: document agent wallet architecture (docs, packages)d0c4f78a— feat(connectors): add hibob with 27 endpoints (packages)f5381272— test: cover fivetran connector runtime (packages)d04e1f72— feat(connectors): add culture-amp with 22 endpoints (packages)0c3f9553— feat(connectors): add lattice with 25 endpoints (packages)f9387798— test: cover zatanna workflow runtime (packages)f79dc998— feat(connectors): add 15five with 27 endpoints (packages)91f31f1a— docs: document auth phone verification (docs, packages)97cadb55— test: cover census connector runtime (packages)21bc21f6— feat(connectors): add fellow with 25 endpoints (packages)6546482c— test: cover hightouch connector runtime (packages)e266c0c6— feat(connectors): add height with 25 endpoints (packages)5a4d1ce1— test: cover tines connector runtime (packages)41ca716b— feat(connectors): add aha with 29 endpoints (packages)d2879d01— docs: document newer API routes (docs, packages)02400f68— test: cover ortto connector runtime (packages)b3b1484d— feat(connectors): add roadmunk with 21 endpoints (packages)7f0c59db— test: cover encharge connector runtime (packages)9d0e4e90— feat(connectors): add prodpad with 22 endpoints (packages)97323d1b— test: cover userlist connector runtime (packages)924910ef— feat(connectors): add amazon ads (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)6c6eb79f— feat(connectors): add productboard with 25 endpoints (packages)fffd3b06— test: cover refiner connector runtime (packages)b876b3a0— feat(connectors): add teamgantt with 26 endpoints (packages)d401bc83— test: cover survicate connector runtime (packages)87488bb9— feat(connectors): add airfocus with 18 endpoints (packages)4d4e1ecf— fix(canvas): polish project drawer toggle and swap the generic Settings2 icon (packages)f2dfab7a— test: cover mailercheck connector runtime (packages)f1d9319c— feat(connectors): add teamleader-focus with 31 endpoints (packages)ad1551ed— test: cover beamer connector runtime (packages)329baf05— feat(connectors): add onepagecrm with 22 endpoints (packages)4e1bf5d7— fix(projects): enforce workspace sharing permissions (packages)42b58225— feat(drawer): add project icon editing to project drawer Settings (packages)aee65aea— test: cover featurebase connector runtime (packages)98c12e63— feat(connectors): add less-annoying-crm with 21 endpoints (packages)a3c202bb— feat(connectors): add streak with 30 endpoints (packages)3448840d— test: cover wildcard hosted discovery runtime (packages)8077ba13— test: cover frill connector runtime (packages)830f7173— feat(connectors): add freshsales with 24 endpoints (packages)3a8a7496— feat(connectors): add sugarcrm with 22 endpoints (packages)e65a4130— fix: cover debounce bulk upload runtime (packages)ee5f6881— feat(connectors): add pinterest ads (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)239c732a— feat(connectors): add insightly with 27 endpoints (packages)c20bad7b— feat(connectors): add capsulecrm with 26 endpoints (packages)f327a0e8— feat(connectors): add nuclino with 17 endpoints (packages)702f1db8— feat(connectors): add teamwork with 27 endpoints (packages)5c03af87— test: cover verifalia connector runtime (packages)e24190d6— fix(share): keep public file previews non-billable (packages)fac9c56f— feat(connectors): add smartsheet with 28 endpoints (packages)f9528efd— test: cover zerobounce connector runtime (packages)4ef52b7e— feat(connectors): add wrike with 28 endpoints (packages)6b54adf6— feat(connectors): add astronomer with 22 endpoints (packages)b912fc4a— test: cover sparkpost connector runtime (packages)af89ed36— feat(connectors): add dbt-cloud with 26 endpoints (packages)c63d6178— test: cover elastic email connector runtime (packages)058df0c0— feat(connectors): add flyte with 22 endpoints (packages)95f99789— feat(connectors): add argo-workflows with 26 endpoints (packages)cb63cf7e— feat(connectors): add google display video 360 (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)caaea961— test: cover sendpulse connector runtime (packages)93566a9a— feat(connectors): add dagster with 21 endpoints (packages)1c41e32f— feat(connectors): add kestra with 25 endpoints (packages)25558ab1— test: cover drip connector runtime (packages)83085d29— fix(sandboxes): enforce workspace access on lifecycle routes (packages)c12c71d7— feat(connectors): add hevo with 29 endpoints (packages)8d114cdf— test: cover terminal use logo asset (packages)835929e4— feat(connectors): add prefect with 28 endpoints (packages)0276b8e0— test: cover terminal use helper endpoints (packages)162802de— feat(connectors): add workato with 27 endpoints (packages)3362b770— test: cover getresponse connector runtime (packages)edcdd59b— feat(connectors): add airbyte with 31 endpoints (packages)abdaa718— feat(connectors): add fivetran with 29 endpoints (packages)d6c233b9— test: cover baremetrics connector runtime (packages)60d677e1— feat(connectors): add zatanna workflow api (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)94782206— feat(connectors): add census with 27 endpoints (packages)8ff92d12— test: cover chartmogul connector runtime (packages)dbe3a99b— fix(billing): restrict spending reports to billing managers (packages)558daa90— feat(connectors): add hightouch with 28 endpoints (packages)4da50811— feat(connectors): add tines with 28 endpoints (packages)9bf1e012— test: cover recurly connector runtime (packages)1d760439— feat(connectors): add ortto with 20 endpoints (packages)04284205— test: cover schematic connector runtime (packages)a48d076b— feat(connectors): add encharge with 20 endpoints (packages)cdfbe98f— feat(connectors): add userlist with 14 endpoints (packages)566625c8— feat(connectors): add refiner with 13 endpoints (packages)732d4ba6— feat(connectors): add survicate with 14 endpoints (packages)ebf0c8e2— feat(connectors): add mailercheck with 11 endpoints (packages)ca9de441— feat(connectors): add beamer with 21 endpoints (packages)a2fffb94— feat(connectors): add featurebase with 28 endpoints (packages)a2ee9b5a— feat(connectors): add wildcard flow discovery (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)e0b4876c— feat(connectors): add frill with 26 endpoints (packages)6b37a223— feat(feedback): nudge low-signal drafts without blocking submission (packages)aaad3ad6— test: cover metronome connector runtime (packages)ae9f0f28— feat(connectors): add debounce with 8 endpoints (packages)ebafb118— feat(connectors): add verifalia with 18 endpoints (packages)ef285360— test: cover orb connector runtime (packages)8e2e3c07— fix(knowledge): rename user-facing 'collection' terminology to folders (packages)64366d93— feat(connectors): add zerobounce with 18 endpoints (packages)63f5dadf— test: cover lago connector runtime (packages)bac411b5— feat(connectors): add sparkpost with 53 endpoints (packages)3ae524ab— test: cover smartlead connector runtime (packages)8e098118— feat(connectors): add elastic-email with 55 endpoints (packages)115e27e3— feat(connectors): add sendpulse with 44 endpoints (packages)557da434— feat(connectors): add drip with 42 endpoints (packages)a53a5cf8— feat(connectors): add terminal use logo (packages)38482712— feat(connectors): add terminal use runtime (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)29fcdb25— feat(connectors): add getresponse with 41 endpoints (packages)e110cd59— test: cover abuseipdb content type header (packages)d70688a1— feat(connectors): add baremetrics with 33 endpoints (packages)c857f02d— test: cover task assignee avatar enrichment (packages)3709a419— feat(connectors): add chartmogul with 47 endpoints (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)a2acb5db— test: harden sidebar scroll restoration (packages)374e485b— feat(connectors): add recurly with 64 endpoints (packages)747d4ddf— feat(connectors): add schematic with 76 endpoints (packages)5030c883— feat(tasks): add 'Reference in chat' context-menu action on task rows (packages)9e4884e5— feat(connectors): add metronome with 75 endpoints (packages)f56d0c87— fix: restrict webhook management (packages)b92fb079— test: cover ideogram connector runtime endpoints (packages)2dc69318— fix(canvas): auto-fit image content when resizing image gallery blocks (packages)0464e2e5— feat(connectors): add orb with 89 endpoints (packages)6e7bea1d— test: cover cronitor connector runtime endpoints (packages)0290147a— feat(canvas): show project icon beside the project name in the header (packages)395c7849— feat(connectors): add lago with 74 endpoints (packages)86d2a5f2— feat(connectors): add growthbook runtime coverage (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)791f6c18— test: cover pirsch connector runtime endpoints (packages)5c6ce269— feat(connectors): add smartlead with 22 endpoints (packages)1c6d804b— test: harden listmonk runtime validation (packages)31a299e4— feat(connectors): add growthbook with 61 endpoints (packages)f96f6ca4— test: harden openreplay connector runtime (packages)3ecc93cc— test: cover skill catalog workflow search (packages)cff54d4d— feat(connectors): add statsig with 51 endpoints (packages)90360357— test: harden resemble ai connector runtime (packages)fbb0f3c9— fix: lock down legacy email creation (packages)3291d9d0— test: harden lalal ai upload validation (packages)0a459881— feat(connectors): add openreplay with 12 endpoints (packages)3e92f5e2— test: harden deepl connector runtime (packages)fac3e604— feat(connectors): add lalal ai runtime coverage (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)98c98a77— feat(connectors): add lalal-ai with 7 endpoints (packages)0de22e94— test: cover label assignment target scoping (packages)9445399c— test: harden play ht connector runtime (packages)ef694482— test: render canvas block copy controls (packages)e75a9d93— feat(connectors): add murf ai runtime coverage (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)5652080d— fix: filter email thread visibility (packages)55c75f98— feat(connectors): add deepl with 13 endpoints (packages)7adff606— feat(connectors): add murf-ai with 13 endpoints (packages)2e5ea20c— test: harden hume ai connector runtime (packages)08881731— test: cover apollo connector runtime endpoints (packages)e18f4992— test: harden bland ai connector runtime (packages)0c8382af— feat(connectors): add resemble-ai with 35 endpoints (packages)26a34465— test: harden tavus connector runtime (packages)f18bcbe5— feat(connectors): add play-ht with 12 endpoints (packages)4552a9f8— fix: protect whois profiles (packages)018d252b— feat(connectors): add bland-ai with 36 endpoints (packages)7d3c6f2f— fix: protect abuseipdb content type header (packages)0520b12f— test: harden synthesia connector runtime (packages)d4ce70c3— test: harden cartesia connector runtime (packages)9808adc7— feat(connectors): add hume-ai with 33 endpoints (packages)a4872626— feat(connectors): add d-id runtime coverage (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)8a596060— test: cover rootly connector runtime endpoints (packages)c927a067— feat(connectors): add tavus with 26 endpoints (packages)775fa1bd— feat(connectors): add synthesia with 19 endpoints (packages)cc6690a3— test: cover betterstack connector runtime endpoints (packages)301f0838— feat(connectors): add d-id with 27 endpoints (packages)fe72aa6f— feat(drawer): show assigned agent avatar on task rows in project drawer (packages)b09c27b5— test: cover axiom connector runtime endpoints (packages)5f431962— fix: preserve workspace owner invariants (packages)a2dc0c82— test: harden bunq connector runtime (packages)13692cdc— feat(connectors): add cartesia with 35 endpoints (packages)947a975e— test: cover abuseipdb header precedence (packages)40258c0b— fix(share): align shared canvas background with the new gray canvas (packages)b694d684— fix(sidebar): preserve nav scroll position across route changes (packages)0b09f6b3— test: harden make connector validation (packages)57511efa— test: cover coolify connector runtime endpoints (packages)a97cce8a— test: cover make connector validation edges (packages)f8c2dc36— test: harden leonardo connector runtime (packages)355c0890— test: cover agentmail authorization header precedence (packages)2e12efe6— test: cover bunq connector runtime endpoints (packages)006794d4— test: harden recraft connector runtime (packages)f907b506— test: harden aiven connector validation (packages)1289a5b3— test: cover make connector runtime endpoints (packages)32e5b36c— test: harden aiven connector runtime (packages)6eebcf25— fix: bind schedules to workspaces (packages)8e14e389— feat(connectors): add aiven with 31 endpoints (packages)4dce0a31— test: harden baseten connector validation (packages)734ea348— feat(connectors): add leonardo-ai with 24 endpoints (packages)fa650f55— test: harden baseten connector runtime (packages)d745aa7f— test: harden adroll connector query encoding (packages)6ff43dd4— feat(connectors): add ideogram with 18 endpoints (packages)f78ae21a— test: harden cronitor connector runtime (packages)e92efcae— feat(connectors): add recraft with 15 endpoints (packages)3726a7ef— test: cover additional social profile handles (packages)c6b127ec— docs: align connector catalog count (.claude, AGENTS.md, CLAUDE.md, README.md, docs, packages)6d07afb5— feat(connectors): add baseten with 11 endpoints (packages)dffb1a96— test: harden knock and loops connector runtimes (packages)0a9f155d— feat(connectors): add cronitor with 16 endpoints (packages)6f97007d— test: harden courier connector runtime (packages)7d0ef1ea— test: cover active trail authorization merge (packages)62dead9a— feat(connectors): add pirsch with 43 endpoints (packages)473f90ba— feat(connectors): add loops-so with 14 endpoints (packages)07164c0e— feat(connectors): add courier with 53 endpoints (packages)04fdb25c— test: harden connector runtime validation (packages)8aa76119— fix: honor shared workspaces for knowledge visibility (packages)8fd5c87e— feat(connectors): add knock with 37 endpoints (packages)89e28fa5— feat(connectors): add wufoo with 17 endpoints (packages)22f4c924— test: cover listmonk connector runtime endpoints (packages)d62e146a— test: cover n8n connector runtime endpoints (packages)6f0889c6— test: cover gladia connector runtime endpoints (packages)fefbe230— feat(connectors): add tally with 26 endpoints (packages)c4218458— feat: improve large skill catalog browsing (packages)6f4f3c26— test: cover wordpress connector runtime endpoints (packages)bb9312ab— feat(connectors): add fillout with 8 endpoints (packages)fc8f6986— feat: surface enabled platform skills in prompts (packages)475339f1— fix(canvas): project drawer flush to edges and over the bottom toolbar (packages)b67719f7— feat(connectors): add jotform with 26 endpoints (packages)593b850d— test: validate connector workflow skill mappings (packages)5f0509a9— feat: expand connector workflow skill catalog (packages)81bef19a— test: cover qdrant connector runtime endpoints (packages)d45152e5— feat(connectors): add expensify with 15 endpoints (packages)c6394ff6— fix: enforce label workspace access (packages)a8c4a219— feat(blocks): copy-to-clipboard on code and terminal canvas blocks (packages)9fa50e7b— feat(connectors): add wise with 24 endpoints (packages)2163a5f4— test: align canvas delete dialog source guard (packages)0019fcd4— test: cover typesense connector runtime endpoints (packages)491dbffd— feat(connectors): add apollo-io with 25 endpoints (packages)097557ca— fix: validate aircall custom base urls (packages)9236c129— feat: add connector sharing scopes (packages)f0bc2eaa— fix: guard reddit relationship enum values (packages)23356115— test: cover meilisearch connector runtime endpoints (packages)deb4f8d8— feat(connectors): add rootly with 30 endpoints (packages)c183fdbf— fix: restrict contact visibility (packages)9a5ca00b— feat(connectors): add betterstack with 33 endpoints (packages)67789bed— feat(connectors): add axiom with 41 endpoints (packages)9d2f35d0— test: cover wakatime connector runtime endpoints (packages)a7daccd7— fix: clear feedback metadata on popover close (packages)8b8a3a04— fix: protect abuseipdb connector headers (packages)b187c274— feat: add connector CLI commands (docs, packages)763a0c60— feat(connectors): add appwrite with 36 endpoints (packages)ffa62061— test: cover revenuecat connector runtime endpoints (packages)09e56dd2— test: cover directus connector runtime endpoints (packages)5290b980— feat(connectors): add liveblocks with 32 endpoints (packages)52ce1899— test: cover strapi connector runtime endpoints (packages)f1357989— fix: scope projectless tasks to workspaces (packages)19385e8d— feat(connectors): add coolify with 40 endpoints (packages)4bc30c5f— fix: protect agentmail connector authorization header (packages)fd317293— feat: add bunq connector (packages)bc1a0e65— test: cover daily.co connector runtime endpoints (packages)953f71ba— feat(connectors): add make-com with 29 endpoints (packages)73126f6d— test: cover cal.com connector runtime endpoints (packages)5b45ee72— feat(connectors): add pipedream with 26 endpoints (packages)ae488f13— feat: show connector badges on canvas blocks (packages)4770a49b— test: cover umami connector runtime endpoints (packages)e7ff7950— feat(connectors): add trigger-dev with 36 endpoints (packages)4af86814— fix(tasks): show 'Add your first task' CTA in the empty Tasks state (packages)a28cc532— feat(connectors): add ninjapear (formerly proxycurl) with 12 endpoints (packages)c1d81598— fix(tasks): render task statuses as friendly colored badges (packages)325049e7— fix: encode adroll connector query identifiers (packages)ba22750a— feat: parse social profile handles in connector output (packages)d7ae9642— fix: make chat attachment error dismiss label explicit (packages)bff4b7c3— test: cover plausible connector runtime endpoints (packages)78d93e2b— feat(connectors): add tinybird with 28 endpoints (packages)2435227b— feat: add connector catalog grouping controls (packages)86a7b4fc— fix: protect active-trail connector authorization header (packages)c65a18c2— feat(connectors): add outline with 38 endpoints (packages)d59c66cf— test(feedback): lock viewport-safe positioning of the feedback popover (packages)e0247176— fix: scope brain activity history (packages)0d3e158c— fix: preserve gallery audio progress accessibility (packages)a91933c1— fix: encode airbrake connector credentials in urls (packages)ff82b8ee— feat(connectors): add listmonk with 35 endpoints (packages)b1b8319e— fix: align amplitude connector auth and identify requests (packages)d307c143— fix: simplify connector category sections (packages)85465dbb— fix(tabs): restore compact bordered tab styling on project surfaces (packages)5a963a93— feat: add connector suggestion empty state (packages)7890159d— fix: validate algolia connector application ids (packages)726bc541— feat(connectors): add n8n with 33 endpoints (packages)46ab3689— feat(connectors): add gladia with 11 endpoints (packages)f818c8c4— fix: encode airtable connector path identifiers (packages)2cacdf6c— feat(connectors): add wordpress with 32 endpoints (packages)6f660220— fix: restrict voice profile access (packages)65f4881c— feat: expand gitlab merge request coverage (packages)a2bcbfbe— fix: harden accelo connector request targets (packages)510dea09— feat(connectors): add qdrant with 28 endpoints (packages)62fb4e20— fix: keep abstract connector query fields authoritative (packages)f2148969— feat(canvas): personalize the block delete confirmation dialog (packages)af6004d3— feat(connectors): add typesense with 32 endpoints (packages)4351af16— fix: protect aircall connector authorization header (packages)5555432f— fix: guard reddit connector enum paths (packages)0ffc8949— feat(connectors): add meilisearch with 33 endpoints (packages)17f2490f— fix(chat): condense overflowing context chips into a +N popover badge (packages)025c9033— test: harden canvas and llm router e2e stability (packages)e088737d— feat(connectors): add wakatime with 22 endpoints (packages)da68320e— feat(feedback): let users send multiple feedback notes in one popover visit (packages)b44e359a— feat(chat): add /feedback slash command to open the feedback popover (packages)f3e91a5f— fix: align abuseipdb connector parameters (packages)8cc5a1bb— feat(connectors): add revenuecat with 26 endpoints (packages)43a7c5f6— fix: validate lab start attachments (packages)add5cffa— feat(connectors): add directus with 27 endpoints (packages)b21bc113— fix(schedules): subtle row actions and quieter refresh control (packages)1d84d2bd— feat(connectors): add strapi with 13 endpoints (packages)41f7b90f— feat: expand agentmail connector coverage (packages)0bc947f7— feat(chat): surface frequently used actions next to the plus menu (packages)33d62755— feat(connectors): add daily-co with 22 endpoints (packages)44d0b177— feat(feedback): plain Enter to send, fuller thank-you, bounty CTA (packages)1c536c07— feat(connectors): add cal-com with 30 endpoints (packages)868f2305— docs: bump connector slug count to 813 after umami (.claude, CLAUDE.md)380f5710— fix: restrict brain worker management (packages)5433c311— fix(oauth): drop visible 'Connected' tab — close immediately on success (packages)b7b07506— feat(connectors): add umami with 26 endpoints (packages)fe62940f— docs: bump connector slug count to 812 (.claude, CLAUDE.md)217eb1cb— feat: expand adroll connector coverage (packages)f5a9d2b1— fix(chat): make oversized-attachment error banner click-to-dismiss (packages)7b4d8814— feat(connectors): add plausible with 17 endpoints (packages)d0676c5c— feat: expand active-trail connector coverage (packages)12ed2413— fix(gallery): audio player flicker + surface play() errors (packages)a665c8a9— feat: expand airbrake connector coverage (packages)22570a00— feat: expand amplitude connector coverage (packages)a80fdbb7— feat: expand algolia connector coverage (packages)d557317e— fix: authorize file parent folders (packages)aee13670— feat: expand airtable connector coverage (packages)a79afc06— feat: expand accelevents connector coverage (packages)c2f03461— fix(sessions): stop stamping every chat session with "Voice conversation" (packages)7c44bf0b— feat: expand accelo connector coverage (packages)dca5fedc— feat: expand abstract connector coverage (packages)ff0f53df— feat: expand airmeet connector coverage (packages)266ef317— feat: expand aircall connector coverage (packages)b30049ed— feat: expand reddit connector coverage (packages)2f239db6— test: harden canvas drop and dashboard smoke e2e (packages)3769d1da— feat: expand hyperbrowser connector coverage (packages)09b6c37e— fix: remove model connector credential saving (packages)2a4480e7— feat: expand linear connector coverage (packages)1283a3ab— feat: expand bitbucket connector coverage (packages)5bb833d8— fix: validate agent wallet spend scopes (packages)86773178— feat: expand trello connector coverage (packages)96b109d7— test: stabilize chat canvas journey session handoff (packages)609d65ba— feat: expand circleci connector coverage (packages)daf303b3— fix: authorize zip archive extraction (packages)0237f43b— feat: expand discord connector coverage (packages)7d810aa2— fix(chat): keep tool-call expand sticky across streaming chunks (packages)2bd1537c— feat: expand github actions coverage (packages)453f119b— fix: require fresh auth for MFA enrollment (packages)23ec7453— feat: expand github issue coverage (packages)f475f0d2— feat: expand github repository coverage (packages)30a16117— feat: expand gitlab merge request coverage (packages)1cd1015e— fix: preserve tenant context for magic links (packages)500bcb9d— feat: expand gitlab project coverage (packages)728b4f32— feat(connectors/github): add get-repo, get-commit, list-tags, list-issues (packages)a8edc6ba— fix: authorize canvas arrange inputs (packages)31ff0df6— feat(admin): user impersonation endpoint (POST + DELETE) (packages)70fa1d81— feat(admin): tool-call inspector section on session detail (packages)a0d3b050— feat: expand gitlab issue coverage (packages)b0533fef— feat(admin): /admin/live SSE consumer (with poll fallback) (packages)8a47431a— fix: enforce shop cart store integrity (packages)b07dc09c— feat(admin): /admin/live/stream SSE endpoint (heartbeat scaffold) (packages)d83b1bb9— feat: expand github pull request coverage (packages)b6f1cefc— feat(admin): worker pool controls — drain + pause-intake via flags (packages)02134c4d— feat(admin): /admin/billing/[orgId]/refunds — refund issue + history UI (packages)4854bcfe— feat(admin): /admin/billing/[orgId]/refunds GET + POST (packages)2f9a9112— feat(admin): /admin/usage/export streaming CSV endpoint (packages)7ed76d6d— fix(prompts/blocks): tell agents maps render via Mapbox and never to refuse (packages)ddbb2c43— feat(admin): client-side CSV export + audit-log download button (packages)c91c1537— feat(admin): /admin/usage/outliers — 24h cost outlier report (packages)f42f0691— feat(admin): /admin/agents/failures feed (window-bucketed) (packages)acb44141— fix: scope shop order details to purchaser (packages)4b4594cd— feat: expand all-images connector coverage (packages)346ff140— feat(admin): /admin/mcp-apps — cross-org install aggregate view (packages)6884f9dd— fix: remove media tool internal self-fetches (packages)c45c8ac3— feat: expand addressfinder connector coverage (packages)e363f4aa— feat(admin): /admin/datasets list page + GET endpoint (packages)19028cf0— feat: expand addresszen connector coverage (packages)2a1ea16a— feat(admin): /admin/schedules list page + GET endpoint (packages)56fb4092— feat: expand agentmail connector coverage (packages)ac7f6092— feat(admin): incident broadcast banner — CRUD + render in dashboard shell (packages)09b590e3— fix: require origin approval for browser secrets (packages)be15c15a— feat(admin): /admin/blog list page (front for existing backend) (packages)1d028b7d— fix: require step-up for org admin grants (packages)4423b252— feat: expand openweather api connector (packages)ac05e6e9— feat(admin): /admin/notifications standalone page (packages)9010a1a2— feat(admin): /admin/flags feature-flag CRUD page (packages)bc570cd5— fix: reject page writes before rsc rendering (packages)76b68902— feat(admin): active sessions card + force-logout on user detail (packages)d530d249— fix: gate mcp management probes (packages)8adc781f— feat(admin): Requeue / Cancel row actions on /admin/runtime (jobs mode) (packages)b9d97cbe— fix: suppress next async storage instrumentation noise (packages)94a6c408— feat(admin): row-level Replay action on /admin/connector-events (packages)c8db7bb7— fix: keep docs guardrail blocks out of response piping (packages)326621e6— fix: enforce workspace access for browser blocks (packages)04e960ab— feat(admin): force-cancel session button on session detail page (packages)4d91c2ad— fix: suppress runtime stream close noise (packages)dacdcd8a— feat(admin): /admin/byok page (cross-org BYOK inventory) (packages)af946be7— feat(admin): adminAuditLog captures impersonatedBy in metadata (packages)b8b4473d— feat(admin): cursor pagination on /admin/audit-log (packages)857806c6— fix: honor text-only llm routes (packages)300157e3— feat(admin): DELETE /admin/skills/[id] (custom skill removal) (packages)4bfc4c13— feat(admin): /admin/byok list + revoke endpoints (packages)30c58fb4— fix: filter successful chat latency warnings (packages)1ac9caaf— feat(admin): health endpoint exposes build SHA + migration version (packages)c05bf4c6— feat(admin): POST /admin/connector-events/[id]/replay (packages)b2c58b1a— feat: expand abuseipdb connector coverage (packages)e8223cce— feat(admin): DELETE /api/v1/admin/users/[id] — GDPR-style erase (packages)f4d091f7— feat(admin): agent pause/unpause (kill-switch) endpoints (packages)bdb0f00c— feat: expand ipinfo connector endpoint coverage (packages)9bc35e65— feat: expand open library connector list APIs (packages)e4c5ae32— feat(admin): user sessions list + force-logout endpoints (packages)ede1d1fa— fix(tests): drop nonexistent jobs.kind column from admin-runtime-jobs seed (packages)8b4ef139— fix: trust only latest durable chat turn (packages)58a4a508— feat(admin): POST /admin/runtime/jobs/[id]/requeue + /cancel (packages)25ee8cd9— fix: reduce non-actionable chat latency warnings (packages)b5375920— fix: suppress browser runtime sendMessage noise (packages)05fdd539— feat(admin): force-cancel session endpoint + feature-flag helper (packages)26e0766c— fix: require artifact mutation ownership (packages)0eccbba2— feat: expand ably connector endpoint coverage (packages)e0d22c6f— feat(admin): URL-state for /admin/users (packages)4e38eb8f— feat(admin): URL-state for /admin/sessions (search/status/project/agent/sort/page) (packages)9ce97db0— feat(admin): AdminStatusBadge — single source of truth for status colour (packages)05db80fc— feat(admin): migrate dashboard signup picker to shared useSelection (packages)59b353b6— fix: validate connector webhook targets (packages)e977a127— feat(admin): refresh-interval picker for /admin/health auto-refresh (packages)646fe994— docs: add missing flightradar24 and product hunt connector entries (docs)8a8dd0d9— feat(admin): URL-state for /admin/feedback (packages)3fd0f36c— feat(admin): URL-state for /admin/agent-wallet (packages)ea8059df— feat(admin): URL-state for /admin/domains (packages)cfa4c9f8— feat(admin): URL-state for /admin/storage (packages)705b57e3— fix: validate machine payment scopes (packages)4f6fa649— feat(admin): URL-state for /admin/telephony (packages)18e15833— feat(admin): URL-state for /admin/models (packages)09d73878— feat(admin): URL-state for /admin/connector-events (packages)9861c0a3— feat(admin): URL-state for /admin/knowledge (packages)02551d34— fix: exclude hidden chat from datasets (packages)57ac4de7— feat(admin): URL-state for /admin/security (packages)2d1f0597— feat(admin): audit-log ?preset=destructive-60m (packages)8a61ae77— fix(projects): wrap serializeProjectRecord in arrow for .map call (packages)1b88f443— feat(admin): URL-state range filter for /admin/usage (packages)56ad954c— feat(admin): switch all admin window.open row clicks to same-tab navigation (packages)43e79a4f— fix: require step-up for domain mutations (packages)999354c6— feat(admin): URL-state for /admin/promotions + same-tab row open (packages)7ce6bff4— feat(admin): URL-state for /admin/billing + same-tab row open (packages)15dc0866— feat(admin): URL-state for /admin/runtime + same-tab row open (packages)c6b8f857— test: cover emoji shortcode rendering (packages)e9233edc— fix: require project manage for snapshots (packages)756fd198— feat(admin): URL-state for /admin/sandboxes (packages)65b9aecb— test: cover docs changelog citations (packages)4f8c7719— feat(admin): URL-state for /admin/workspaces + same-tab row open (packages)da62a586— fix: require privilege for org secrets (packages)5db0125d— feat(admin): URL-state for /admin/projects + same-tab row open (packages)ccffd510— feat(admin): URL-state for /admin/orgs + same-tab row open (packages)2f7bf2d2— feat(admin): URL-state for /admin/agents + same-tab row open (packages)d693f003— fix: enforce voice session access (packages)753eddfe— test: allow cold canvas e2e startup (packages)7f5de5c9— feat(admin): /admin/skills status filter + per-row actions (packages)78f66596— feat(admin): "Recently viewed" sidebar group for records (not just pages) (packages)e0b0243f— fix: authorize tts session billing (packages)434777fd— feat(admin): dashboard cross-link cards + recent admin actions feed (packages)1c1296c7— refactor(spreadsheet): share markdown-cell escape between range-export and fill-column (packages)527e1425— feat(admin): bulk revoke API keys + extensible inventory bulk actions (packages)d24c750a— fix: reject client assistant message appends (packages)db274404— feat(spreadsheet): fill column with AI (packages)849f44ee— test: guard compact dashboard spacing (packages)dcff8d59— feat(admin): Cmd+K command palette + page/find registry (packages)48a22746— test: cover billing eligible promotions response (packages)1c04576f— feat(spreadsheet): explain/generate formula AI popover (packages)be94b481— fix: require telephony admin for number purchase (packages)683e3791— test: cover canvas media presentation guards (packages)821bd965— feat(spreadsheet): in-block peer-agent presence strip (packages)712446ae— fix: validate session tool allow approvals (packages)81c75f29— feat(spreadsheet): right-click range → send to chat (packages)2da567fc— fix: authorize session branch sources (packages)f29d6006— fix: enforce session participant mutation roles (packages)2ae2fa11— feat(spreadsheet): per-sheet conditional highlight rules (packages)817c5f23— fix: harden shop webhook replay checks (packages)899caa70— test: harden preview seed ordering guard (scripts)62d59645— feat(spreadsheet): autofill drag-handle (b065f56a) (packages)936ad458— fix: preserve org on totp step-up (packages)8d4ca4d8— test(admin): scaffold tests/admin shared fixtures for Phase-2 endpoint tests (packages)c1c2ea96— feat(spreadsheet): cell-reference highlighting while editing formula (d5011dd1) (packages)d538bdb6— test(admin): shared Playwright helper for destructive-action confirmation (packages)73ac67ab— feat(admin): seed admin.destructive_actions_enabled + admin.live.sse_enabled flags (packages)f3975c75— fix: validate file links and moves (packages)135671b8— feat(admin): expose category + authType filters on /admin/connectors (packages)96d35ee4— feat(spreadsheet): formula function autocomplete + arg hints (bf565488) (packages)0667694b— docs(admin): add .claude/rules/admin.md operator-console patterns (.claude)bb1e28b9— feat(admin): audit-log session transcript reads + fix summary GROUP BY (packages)7c0936f7— feat(spreadsheet): hide/unhide columns and rows (e1f25277) (packages)a37148cb— feat(spreadsheet): per-column filter row (32d09bc3) (packages)d371af01— feat(admin): dynamic action filter + expandable metadata on /admin/audit-log (packages)7811157d— feat(spreadsheet): inline formula error display with tooltip (29fcc609) (packages)725721fb— feat(admin): wire SortableHead into /admin/sessions (reference impl) (packages)10db05c7— feat(spreadsheet): row-height drag adjust (a557d801) (packages)3b3ce9a6— feat(spreadsheet): export current sheet to CSV (5b3cbe8b partial) (packages)31d1b3a7— feat(admin): add AdminDetailSheet + AdminFilterBar shared primitives (packages)31ffad23— feat(spreadsheet): column auto-fit + editable name box with Cmd+G (cf0ed2e5, 37289fdb) (packages)39e13912— feat(admin): add loading.tsx + error.tsx route segments under /admin (packages)86d777ca— feat(admin): add cursor mode + sort/dir parsing to pagination (packages)a74cc459— feat(spreadsheet): Cmd+F find + Cmd+H replace (4a585a44) (packages)8c8482ba— feat(admin): add super_admin role + requireSuperAdmin + converge authz outliers (packages)9682db4e— feat(admin): useAdminQueryState hook + pure URL-state helpers (packages)32a98624— feat(spreadsheet): undo/redo with Cmd+Z, Cmd+Shift+Z, Cmd+Y (97e8fc89) (packages)1eec8ece— feat(admin): validate audit action shape (packages)8b730461— test: add changelog ledger integrity regression (packages)6ffaab3e— feat(spreadsheet): header sort + multi-cell paste from Google Sheets/Excel (0de541c1, eaa7efea) (packages)74f5d5f2— fix: enforce workspace access for direct file routes (packages)597f0671— docs: include final ledger commit in 12-day stream (packages)1c8cf200— docs: refresh 12-day ledger counts after final commits (packages)95ba9d91— docs: document 12-day rollout with per-commit ledger (packages)836729ff— feat(spreadsheet): drag-to-select range + toolbar freeze toggle (ce862165, b0b55393) (packages)9cf8242e— feat(admin): add feature-flags + broadcast schemas, audit-log target indexes (packages)f0eee21a— feat(spreadsheet): Shift+Enter → up + Cmd/Ctrl+arrow jump to edge (e23c62d3, partial ce862165) (packages)c50625ea— feat: collect feedback on shared canvases (packages)fc23e54b— feat: raise chat attachment upload limit (packages)6d59fc9d— feat: speed up voice transcription paths (packages)744394e9— feat: capture browser feedback context (packages)6f83e142— feat: surface safe feedback context (packages)ca3604fb— feat: expose feedback signal triage (packages)cb3d63c3— feat: classify pentest feedback source (packages)d7f16da8— fix: normalize multiline feedback previews (packages)52c7345e— test: cover malformed feedback fuzz rendering (packages)5f9d43ce— feat: bulk resolve feedback noise (packages)1c823f7e— feat(project-drawer): Move file up to parent folder (5182deaf partial) (packages)a6a03aae— feat(data-table): inline editable cells + wire priority + due date in /tasks (34c4f5f5) (packages)d091c1be— feat: surface feedback burst groups (packages)40fe93a6— feat(canvas): redesign trash as bottom Sheet (02ba7542) (packages)23161e9c— feat: filter noisy feedback pagination (packages)a5e8b661— feat(tasks): add quick-add bar at top of /tasks (4c01e786) (packages)4fa6c57c— feat: cluster duplicate feedback submissions (packages)c94e99d0— feat(data-table): add rowActions for hover-revealed inline controls (fc97c1a4) (packages)b7917c7f— feat(data-table): user-resizable columns persisted per-table (82c7adb0) (packages)fb75339d— feat: score feedback signal quality (packages)49bba560— feat(chat): auto-render emails and phone numbers as click-to-copy badges (e0b699a8) (packages)ffd44a1e— feat(project-drawer): add Rename to file rows in Files tab (7b2555bb partial) (packages)a4bb3f4e— feat(agents): add Rename + Duplicate actions to the agent context menu (105b3720) (packages)52211ea1— feat: support projectless tasks (packages)b717404e— feat(canvas): seamless block surface — soft shadow over hard border (df56ff61) (packages)6846eef5— feat(canvas): always allow text selection inside blocks (5bb67ab4) (packages)597c35e0— feat: add admin feedback workflow metadata (packages)7872a93b— feat: add todos feedback task draft (packages)43d21cf8— fix: add billing recovery notification actions (packages)416bd695— fix: allow safe svg file downloads (packages)e90cb3a0— feat: expand github repository connector APIs (packages)fcbcf9fc— fix: require tool catalog search before refusals (packages)55053636— fix: refresh canvas project metadata (packages)095814c2— test: cover benign apostrophe feedback (packages)2ebf0144— fix: classify punctuation feedback fuzz (packages)8a59af5a— test: cover multiline feedback command probes (packages)56042762— fix: group traversal feedback probes (packages)26b1f84e— fix: group repeated xss feedback probes (packages)b666becb— fix: escape feedback task conversion (packages)7af57b8a— fix: delay chat suggestions until agent idle (packages)62db9c69— fix: restore lab agent dropdown scrolling (packages)0f49b056— fix: stabilize artifact preview sizing (packages)fcc99252— feat: add github commit listing connector command (packages)b5f103e9— fix: resolve connected x profile lookup (packages)65f5d948— fix: group paid model failure notifications (packages)471cd57b— fix: preserve timestamps in notification redaction (packages)ce5b3239— fix: focus shared canvas blocks responsively (packages)405a446e— fix: support spreadsheet range selection (packages)064f4975— fix: keep connector auth cards in message order (packages)db3c651c— fix: keep slash command menu unclipped (packages)7f0fedad— fix: show schedules from schedule navigation (packages)0ed231b5— fix: require full canvas reads for complete block content (packages)4964ce21— fix: redirect stale workspace detail routes (packages)06ed0d46— fix: seed shop data in pr previews (scripts)4c33fa23— fix: discover agent session messaging tools (packages)f6dd3f73— fix: keep canvas tour tools available (packages)d04530fa— fix: refresh copilot agents after creation (packages)ca0b0d8c— fix: route project prompt edits to project tools (packages)d2651da4— fix: keep saved chat attachments tool-first (packages)7a19d3bd— fix: reset label creation command state (packages)74d55358— fix: freeze canvas context per chat turn (packages)c8c7321d— fix: render admin feedback probes safely (packages)c0f79062— fix: require geographic confirmation for phone purchases (packages)c81ae3c9— fix: normalize opaque chat failure errors (packages)5ccbc432— fix: stabilize org home hydration greeting (packages)e0969e0e— fix: hide blocked guardrail prompt text (packages)ed58f81c— fix: restore trashed agents from agents page (packages)ea54f5cc— fix: bound admin feedback probe searches (packages)dbd8ba8c— fix: record feedback security probe signals (packages)e27be93b— fix: classify nested generate series feedback probes (packages)88571e42— test: cover quote-balanced sql feedback probes (packages)b79baf52— feat: group feedback security probes (packages)8bfc37ab— fix: add admin feedback security filter (packages)39fd22a1— test: cover exact sql feedback probe sources (packages)7702a5a5— fix: classify sql fingerprint feedback probes (packages)01c61ebd— fix: preserve uuid metadata during phone redaction (packages)886cf2e5— fix: classify generate series feedback probes (packages)2e5380aa— fix: escape feedback search wildcards (packages)228b4ae7— fix: classify postgres sleep feedback probes (packages)db71e6c8— fix: classify sql boolean feedback probes (packages)0889c3c4— fix: classify encoded feedback timing probes (packages)72ca8576— fix: classify shell echo feedback probes (packages)20b50243— test: cover duplicate shell sleep feedback probes (packages)f630b60e— fix: classify shell sleep feedback probes (packages)23f78c0f— test: cover duplicate template feedback probes (packages)edbd92d9— fix: classify shell id feedback probes (packages)e6bb3880— fix: classify ssi exec feedback probes (packages)d4a1f366— fix: classify template arithmetic feedback probes (packages)70ae0349— fix: classify traversal feedback probes (packages)5ebc96ba— fix: classify absolute path feedback probes (packages)d46a95f5— fix: surface google ads developer token setup (.env.example, packages, scripts)38dd0f7e— fix: add billing recovery context to schedule failures (packages)d674cfbe— fix: allow preseeded agents in workspace schedules (packages)b32d64f2— fix: classify script feedback probes (packages)caffebeb— fix: sanitize quota schedule failures (packages)0a27a4a6— fix: expose schedule update tool (packages)0fe98ffa— fix: strip hidden reasoning from notifications (packages)7a034573— fix: group retryable schedule outage notifications (packages)4cf2671e— fix: classify provider timeouts in schedule failures (packages)ec614fe0— fix: redact phone numbers in notifications (packages)24baa46b— fix: surface telephony webhook secret health (packages)a901b107— fix: repair scheduled agent workspace mismatch (packages)03feebe0— fix: reject empty chat message content (packages)