Changelog

Features

• feat(library): AEO vs GEO: What Answer Engine and Generative Engine Optimization Actually Mean

Improvements

• improvement(headers): one action cluster and one ordering app-wide
• improvement(settings): one header action order across detail pages
• refactor(auth): extract connector definitions out of auth.ts
• improvement(settings): consolidate resource UI onto shared primitives
• improvement(misc): settings organization, chat agent deploy request keys
• improvement(chat): secrets mounting / exposure improvements and controls

Bug Fixes

• fix(trigger): deps to include e2b and daytona
• fix(credentials): capture the correct provider identity on connect and rotate
• fix(files): collapse blank-line runs to markdown standard (no empty-paragraph explosion / reflow)

Other Changes

• test(files): collaborative agent-streaming coverage (two-writer, multi-editor, undo, persist round-trip)

View changes on GitHub

Features

• feat(zoho-desk): add Zoho Desk integration
• feat(chat): highlight-to-chat — reference file/table selections in Chat
• feat(library): Agentic AI Coding Tools: What They Are and How the Top Options Compare

Improvements

• improvement(permissions): confine workspace role changes to existing members
• improvement(logfire): scope block outputs per operation and refresh brand chrome
• improvement(settings): unify save/discard across editable surfaces
• refactor(dev): remove the minimal-registry escape hatch
• perf(tools): guard the tool-registry client boundary in CI
• perf(tools): read tool metadata instead of the registry on client paths
• perf(tools): generate serializable tool metadata artifacts
• perf(tools): move mergeToolParameters into a registry-free leaf module
• perf(dev): re-enable the Turbopack dev filesystem cache (5.4x faster restarts)

Bug Fixes

• fix(search): disambiguate tables and knowledge bases by folder
• fix(chat): show table and knowledge base folders in the resource menus
• fix(execution): stop run-buffer failures from stranding resumed executions
• fix(chat): show deployment passwords to admins
• fix(security): bind copilot chat attachment keys to their owner
• fix(copilot): close fail-open write gates in agent tools
• fix(copilot): guard document-style extraction against zip bombs
• fix(files): authorize presigned upload contexts per type
• fix(realtime): stop read-only members persisting block positions
• fix(file-parsers): guard .doc uploads against zip-bomb memory exhaustion
• fix(realtime): enforce room access continuously, not only at join
• fix(security): validate cloud region/project inputs and bind vertex credentials to the executing workspace
• fix(security): bound response bodies in secureFetchWithPinnedIP by default
• fix(ssh/sftp): cap remote file reads on received bytes, not stat() size
• fix(sanitization): secret exposure in function and agent trace spans
• fix(styles): restore transition timing Tailwind was silently dropping
• fix(files): serve rendered documents instead of source code

Other Changes

• chore(deps): bump @opentelemetry/core to 2.8.0 for CVE-2026-54285

View changes on GitHub

Features

• feat(realtime): shared room spine + live Files/Tables collaboration + Yjs document editing
• feat(managed-agent): add session lifecycle operations
• feat(chat): hide the Chat module when NEXT_PUBLIC_CHAT_DISABLED is set
• feat(notifications): email on schedule auto-disable and 100% usage limit
• feat(pi): install Bun in cloud sandboxes
• feat(knowledge): opt-in hybrid lexical + vector retrieval for KB search

Improvements

• improvement(files): cache stream binding meta, tighten file cache-control, prune dead persist path
• improvement(workspace): remove tip + simplify modal header text
• perf(bundle): stop three routes shipping the block and tool registries
• improvement(ui): drop full-content hover tooltips
• improvement(files): match CSV/XLSX preview tables to the markdown table chrome

Bug Fixes

• fix(chat): drop unparsable special-tag payloads instead of dumping raw JSON
• fix(auto-model): fix auto model
• fix(db): index large-value workflow_id FKs so workflow deletes don't seq-scan
• fix(pi): surface provider errors from agent events
• fix(billing): point self-hosted upgrade CTAs at the hosted app
• fix(realtime): noindex the socket server's 404 responses

Other Changes

• refactor Instagram integration architecture
• chore(trigger): upgrade version

View changes on GitHub

Features

• feat(library): What Is an AI Agent? Definition, How It Works, and Examples
• feat(custom-blocks): log and bill child runs in the publisher's workspace
• feat(tables): add currency column type on a new column-type registry
• feat(function): custom sandboxes
• feat(model): sim auto model
• feat(tables): typed predicate filter grammar, cursor pagination, and the v2 table surface

Improvements

• improvement(function): secrets access dropdown
• improvement(admin): update defaults for better UX
• perf(tests): mock the tool registry globally, drop the dead deps optimizer
• improvement(security): isolated-vm env construction (v8s escape case)

Bug Fixes

• fix(uploads): set Content-Type once on presigned PUTs; document x-goog-meta-folderid for GCS CORS
• fix(tables): refuse scale suffixes and resolve the lone-separator ambiguity
• fix(demo): exempt landing routes from COEP so the Cal.com booker loads on soft nav
• fix(emcn): stop the tab strip scrolling vertically by a pixel
• fix(desktop): clear the traffic lights on every full-viewport surface, and enumerate them in CI
• fix(invitations): report every reason a batch of invites failed
• fix(integrations): keep the Atlassian coverage hint visible, and trim dead surface
• fix(desktop): keep page headers clear of the traffic lights
• fix(integrations): show family service accounts on every product they authenticate
• fix(sidebar): stop the workspace switcher stranding a phantom hover
• fix(settings): add bottom padding to settings sidebar

View changes on GitHub

Features

• feat(desktop): floating hover-peek sidebar
• feat(organizations): sweep a joiner's owned workspaces into the org on join, disclose it at accept, and add external workspace invites
• feat(library): Best AI Agents for Scheduling and Calendar Management in 2026
• feat(pi): add update PR mode
• feat(exa): refresh Exa integration against current API, retire dead research endpoint
• feat(logfire): add Pydantic Logfire block, tools, and docs
• feat(pi): require the user's own API key for Create PR even on hosted models
• feat(pi): Babysit foundations — shared PR/push extraction, five GitHub tools, sandbox lifetime
• feat(tables): saved views with filter, sort, and column presets
• feat(outlook): add Microsoft Graph calendar operations

Improvements

• perf(tests): skip jest-dom in node-environment test files
• perf(ci): disable the Turbopack persistent build cache (3.2x faster builds)

Bug Fixes

• fix(triggers): stop cloned trigger blocks reusing the source's webhook URL
• fix(blocks): stop registry.ts reading BLOCK_REGISTRY at module scope
• fix(tests): stop pi-lifetime asserting the ceiling on a racing boundary
• fix(config): drop three dead next.config entries and correct two stale comments
• fix(ci): scope the Next.js build cache sticky disk per branch
• fix(desktop): release script
• fix(desktop): fix 11 security findings from a deepsec scan of the desktop app
• fix(folders): stop archived rows skewing sortOrder, hide them from admin, and cover the two untested modules
• fix(copilot): stop the special-tag parser discarding text it cannot resolve
• fix(knowledge): change "Create Tag" to "Apply Tag" when applying a tag to a document
• fix(tables): truncate sort option labels
• fix(db): encode Date binds in raw sql, document the fetch_types contract
• fix(desktop): origin settings for prod, github login improvements

Other Changes

• chore(gitignore): ignore the repo-root uploads spill directory
• chore(deps): upgrade next 16.2.11 -> 16.2.12
• docs(folders): correct four comments that claimed more than the code does
• chore(db): drop the legacy folder tables and adopt the deferred folder_id FKs

View changes on GitHub