Features

• feat(library): Governing AI Agents Built by Different Teams in One Enterprise Workspace (#6773)
• feat(jotform): add Jotform integration (#6772)
• feat(microsoft_ad): licensing, security, audit, role, and device operations (#6742)
• feat(mssql): add Microsoft SQL Server integration (#6739)
• feat(tooling): enforce docs freshness and modernize agent skills (#6756)
• feat(cloudflare): add WAF rulesets, rate limiting, Zero Trust Access, R2, Workers, and Tunnels (#6740)
• feat(datadog): extend to 40 tools and align every operation with the published OpenAPI specs (#6745)
• feat(servicenow): semantic incident, change, catalog, approval, CMDB, and knowledge tools (#6747)
• feat(crowdstrike): add alerts, host response, IOC, Spotlight, RTR, and case tools (#6746)
• feat(splunk): add Splunk Enterprise and Cloud integration (#6743)
• feat(okta): add System Log, MFA, sessions, apps, roles, and group rules (#6741)
• feat(resources): multiselect on tables and knowledge, spring-loaded folders (#6721)
• feat(cli): Sim CLI with AWS-style profiles and a platform key exchange (#6147)
• feat(credential-groups): complete managed account enrollment (#6729)
• feat(credentials): add v2 credential lifecycle APIs (#6664)
• feat(library): Automation Anywhere Alternative: AI Agents vs. RPA for Real Reasoning (#6728)

Improvements

• improvement(tables): make Cmd+F search as you type and clear on close (#6733)
• refactor(resources): converge Files onto the shared drag hook and batch bulk authorization (#6748)
• improvement(credential-groups): align settings surface with the shared page patterns (#6727)

Bug Fixes

• fix(search): match block references by the name the canvas shows (#6779)
• fix(forking): keep dependent overrides editable (#6776)
• fix(execution): stop a cancelled run reporting success when its wait swallows the cancellation (#6775)
• fix(connectors): validate and repair the knowledge-base connector fleet (#6757)
• fix(integrations): close defects found by an independent cold audit (#6767)
• fix(knowledge): stop capping the unpaged knowledge-base list (#6771)
• fix(knowledge): list knowledge bases on the same authority that creates them (#6770)
• fix(forks): stop sync demanding config the source never had (#6766)
• fix(integrations): close regressions found in the final validation sweep (#6764)
• fix(docs): serve JSON-LD in the HTML, fix sidebar spacing, and tighten the CLI guides (#6763)
• fix(sandbox): undefine the raw fetch host bridge before user code runs (#6761)
• fix(forking): hide satisfied dependent configuration (#6723)
• fix(workflow): derive the webhook URL only where a sub-block shows one (#6758)
• fix(fork): preserve folder structure across a fork edge for files, tables, and knowledge bases (#6752)
• fix(tables): re-check the find match at the reveal, not just before paging (#6750)
• fix(deploy): resolve the error-output flag from edges on both sides of change detection (#6754)
• fix(credentials): restore reliable OAuth connections (#6753)
• fix(okta): stop partial updates erasing stored profile data (#6751)
• fix(auth): scope SSO account linking to the verified domain and fence plugin provider mutations (#6738)
• fix(media): prevent drawtext filtergraph injection in add_text (#6734)
• fix(credentials): let workspace admins disconnect a teammate's OAuth credential (#6737)
• fix(docker): prune the app package by manifest name (#6736)
• fix(knowledge): bound chunking separators so one config can't stall processing (#6735)
• fix(credentials): conceal inaccessible credential reads (#6730)
• fix(tables): auto-scroll during column drag (#6722)

Other Changes

• docs(integrations): add missing manual intros; fix light brand tiles rendering white glyphs (#6774)
• docs(cli): add a CLI docs section generated from the command tree (#6762)

Contributors

• @TheodoreSpeaks
• @icecrasher321
• @j15z
• @mzxchandra
• @waleedlatif1

View changes on GitHub

Automated dev-channel desktop build from dev @ 95c3f26.

Automated dev-channel desktop build from dev @ 3a9fc1c.

Features

• feat(credentials): add managed credential groups (#6697)
• feat(tables): filter by cell value from the cell menu, sort from the column menu (#6719)
• feat(ashby): incremental job sync, custom field writes, and application lifecycle ops (#6703)
• feat(connectors): add 9 knowledge base connectors (#6699)
• feat(integrations): add Azure Data Explorer (#6701)
• feat(rabbitmq): add RabbitMQ integration (#6700)

Bug Fixes

• fix(access-control): default every operation and model picker to one the permission group allows (#6720)
• fix(tables): allow unbounded v1 row queries (#6713)
• fix(webhooks): read every Ashby error shape when webhook registration fails (#6711)
• fix(knowledge): remove caution triangle overlay from connector icon (#6717)
• fix(grafana): validate against the API docs, add data source querying and contact-point CRUD (#6712)
• fix(settings): redirect unavailable tabs to general (#6710)
• fix(icons): align table block icon and 12-unit icon stroke with the emcn family (#6708)
• Revert "fix(integrations): read every service mark from one registry (#6682)" (#6682)
• fix(integrations): read every service mark from one registry (#6682)
• fix(settings): preserve tab when switching workspaces (#6704)
• fix(logger, blocks): log nested errors and stop spurious model-selection warnings (#6706)
• fix(v2): close seven correctness and honesty gaps found sweeping the API (#6702)
• fix(condition): stop a secret value from breaking or forging a condition (#6705)

Other Changes

• chore(utils): consolidate record guards and remove dead code (#6715)

Contributors

• @TheodoreSpeaks
• @icecrasher321
• @mzxchandra
• @waleedlatif1

View changes on GitHub

Features

• feat(library): How to Turn a Workflow Into a Reusable MCP Tool (Sim vs n8n, Gumloop, and Zapier) (#6687)
• feat(canvas): add a setting to turn off auto-focus when clicking blocks (#6685)
• feat(netsuite): add Oracle NetSuite integration (#6476)
• feat(logrocket): add LogRocket integration (#6678)
• feat(emails): add aug-13 what's new broadcast (#6663)
• feat(v2): complete and align the v2 API surface (#6643)
• feat(windchill): add document integration (#6577)
• feat(xai): wire reasoning effort through the Grok adapter (#6627)
• feat(models): add grok-4.6 and make it the xAI flagship (#6624)

Improvements

• perf(tables): stop a table write refetching every loaded page in the tab that made it (#6698)
• perf(workspace): stop the sidebar fetching palette data on every route (#6670)
• improvement(search): make overlap dedupe linear in match count (#6640)
• improvement(canvas): cancel an in-flight edge drag with Escape (#6669)
• perf(server): stop calling our own API over HTTP during render, execution, and tool runs (#6660)
• perf(prefetch): stop calling our own API over the wire during server render (#6657)
• improvement(nav): cut prefetch and session-recorder waste (#6656)
• improvement(docs): make the API reference read as code and unify its type token (#6653)
• improvement(emails): size the header wordmark to the landing navbar's rule (#6648)
• improvement(workflow): smooth the running hatch and sit it in the slot's own box (#6638)
• improvement(blog): simplify provenance post structure (#6631)

Bug Fixes

• fix(agent): show files in tool picker (#6666)
• fix(search): stop cmd+k boosts from lifting weaker matches over stronger ones (#6668)
• fix(desktop): let sites copy to the clipboard in the browser tab (#6696)
• fix(desktop): report a stock Chrome user agent in the browser tab (#6695)
• fix(tables): stop every table paginating forever on a null totalCount (#6694)
• fix(execution): give a cancelled async run its terminal metadata (#6693)
• fix(sidebar): align credits chip with panel toggle and square the collapsed rail (#6691)
• fix(icons): match folder icon optical size to sibling resource icons (#6692)
• fix(execution): resolve secrets against the acting principal, not the workflow owner (#6690)
• fix(logs): record how long a cancelled run had been going (#6686)
• fix(canvas): stop phantom ports and a latched-open action bar (#6688)
• fix(v2): hold create to the rules update enforces, and bind the last two cursors (#6684)
• fix(chat): focus the composer when opening a new or existing chat (#6683)
• fix(v2): close the defects live probing found (#6681)
• fix(autolayout): rescue new notes from blocks they were created on top of (#6680)
• fix(sidebar): stop bubbled dragleave events cancelling an in-progress drag (#6679)
• fix(desktop): move prereleases to release repo (#6674)
• fix(v2): stop telling callers something the server did not do (#6676)
• fix(loading): debounce selector search, fix two row-cache snapshots, and move Vertex refresh to the app (#6667)
• fix(blocks): give the detail headers the same tile as everything else (#6672)
• fix(v2): close the correctness gaps the release audit found (#6671)
• fix(sidebar): keep the right-click context menu open over the collapsed chat flyout (#6665)
• fix(realtime): keep the file-doc store reconnecting instead of dying quietly (#6661)
• fix(v2): close the correctness gaps an end-to-end audit found (#6655)
• fix(tools): resolve credentials over HTTP again so token refresh keeps the app's OAuth config (#6662)
• fix(files): stop the collaborative editor rewriting and reflowing a document on open (#6652)
• fix(files): preserve principals when serving generated documents (#6654)
• fix(emails): re-export the wordmark onto its original canvas (#6651)
• fix(enrichment): require work email company domain (#6531)
• fix(copilot): align principal lifetime with orchestration (#6649)
• fix(files): allow document compiler to read referenced images (#6647)
• fix(tools): sanitize database execution errors (#6645)
• fix(billing): checkout guard, admin panel case (#6641)
• fix(workflow): draw a highlighted edge over the ordinary ones (#6642)
• fix(workflow): stop a nested block jumping when it leaves its container (#6644)
• fix(workflow): stop subflows resizing themselves after every load (#6639)
• fix(v2): give the keyset cursor's timestamp an explicit SQL type (#6636)
• fix(cmdk): keep the first result focused and the top fog stable across re-ranks (#6635)
• fix(copilot): surface document render failures (#6629)
• fix(blocks): give a block one tile everywhere it is listed (#6634)
• fix(workflow): stop the coloured knob leaving a barb at each shoulder tip (#6632)
• fix(workflow): allow dual-mode blocks inside loop/parallel subflows (#6633)
• fix(desktop): fix desktop prod ci #6628
• fix(v2): serve HEAD, advertise PATCH, and document the reachable 403 (#6623)
• fix(v2): tell a caller when to come back on every failure meant to be retried (#6625)
• fix(docs): include API key header in generated code samples (#6630)
• fix(v2): give every collection one pagination contract and close four envelope holes (#6620)
• fix(copilot): keep a file-preview failure from stripping a tool call's arguments (#6621)

Other Changes

• test(realtime): wait for the idle read the streak test depends on (#6673)
• test(prefetch): cover the workspace-list seed, and fix two tests that could not fail (#6659)
• chore(ci): declare least-privilege permissions on the desktop e2e workflow (#6622)

Contributors

• @BillLeoutsakosvl346
• @Sg312
• @TheodoreSpeaks
• @icecrasher321
• @j15z
• @mzxchandra
• @waleedlatif1

View changes on GitHub

Automated dev-channel desktop build from dev @ ba78829.

Automated dev-channel desktop build from dev @ f54f7e0.

Manual dev-channel desktop build from dev @ b5bae34. Published only after signed desktop assets are attached.

Features

• feat(blog): Tracking Secrets Through an Agent Run (#6558)
• feat(library): What Is Retrieval-Augmented Generation (RAG)? (#6555)
• feat(calendly): extend tools with booking, availability, no-shows, and routing forms (#6545)
• feat(search): page-aware cmd+k palette with ask-Sim mode (#6518)
• feat(incidentio): add on-call, alert, catalog, and team tools (#6529)
• feat(salesforce): add JWT bearer flow and sandbox OAuth support (#6508)
• feat(workflows): new workflow block card, progress indicator, colors, dsl for natural language preview, retry configs (#6458)
• feat(comparisons): add code-sandbox and session-policy rows (#6517)

Improvements

• perf(db): drop 0287's two zero-row scans from the ACCESS EXCLUSIVE hold (#6609)
• improvement(integrations): add Managed Agents templates and guard docs links (#6608)
• refactor(audit): derive updatedFields through one shared helper (#6604)
• improvement(updates): validate update path and fix native mac help (#6580)
• improvement(desktop, executions): fix desktop update script and throw error when thinking enabled on stream false (#6578)
• improvement(desktop): help menu
• improvement(desktop): add apple signing, fix some bugs (#6519)
• improvement(provenance): make the incompleteness reason set closed and complete (#6559)
• improvement(audits): skip the sql-date-binding parse for files without drizzle-orm (#6554)
• improvement(external-endpoints): v2 versions with clean signatures + updated docs based on openapi spec (#5273)
• improvement(ui): align terminal with the workflow design system, fix row hover states (#6534)
• improvement(setup): complete knowledge and update flows (#6521)
• improvement(provenance): name every guard that can latch a registry (#6513)

Bug Fixes

• fix(executor): carry child provenance across the workflow agent tool result (#6619)
• fix(executor): copy the env map at the workflow-tool boundary (#6618)
• fix(v2): derive the log and run status enums from the persisted status list (#6612)
• fix(docs): restore api-reference URL continuity and fix translated SDK bodies (#6617)
• fix(sdk): make the 0.2.0 SDK release safe to publish (#6616)
• fix(copilot): clamp the legacy int4 size when materializing a chat upload (#6615)
• fix(executor): give the workflow agent tool the caller's env and PII policy (#6611)
• fix(workflows): pin a stored block retry policy when loading it (#6614)
• fix(mcp): stop refusing tool results authored by another workspace member (#6610)
• fix(uploads): sign Azure upload URLs create-only (#6607)
• fix(mcp): audit an upsert that rewrites or revives a server (#6602)
• fix(uploads): make execution attachment completion replay-safe (#6601)
• fix(files): restore CSV preview cancellation (#6596)
• fix(tables): tolerate row deletion during run cancellation (#6600)
• fix(files): order file folders in SQL like every other folder list (#6599)
• fix(mcp): audit the columns an MCP server update wrote, not the params it got (#6598)
• fix(knowledge): return pending status for new documents (#6597)
• fix(workflows): redact run and export secrets (#6591)
• fix(tables): prevent legacy group auto-run dispatch (#6595)
• fix(logs, workflows): snapshot fetch optionality, restore consistent draft read snapshots (#6594)
• fix(tools): bind schema-enrichment reads to executor delegations (#6593)
• fix(api): widen the cancel-execution reason contract to what the route emits (#6592)
• fix(api): wait for knowledge dispatch and encode filenames (#6583)
• fix(desktop): fix background tab spawning (#6590)
• fix(security): redact workflow snapshot secrets (#6581)
• fix(files): preserve slashes in folder paths (#6589)
• fix(logs): restore narrow v1 detail query (#6588)
• fix(api): conceal cross-tenant resource denials on internal routes (#6586)
• fix(tables): preserve group auto-run semantics (#6579)
• fix(docs): preserve items response fields (#6587)
• fix(api): close five defects found auditing the v2 migration against main (#6575)
• fix(authz): enforce credential and workspace boundaries (#6585)
• fix(api): collapse the internal error envelope and restore requestId (#6584)
• fix(tables): cap row pages and use native cursors (#6582)
• fix(api): restore migrated endpoint and SDK compatibility (#6564)
• fix(mship, desktop): fix bugs (#6572)
• fix(agiloft): resolve attachment MIME type instead of trusting the header (#6573)
• fix(v2-api): close three secret disclosures, make the surface consistent, and align docs with signatures (#6560)
• fix(credentials): authorize shared credentials without requiring a workflow (#6571)
• fix(agiloft): repoint the block at the alrest surface and fix EWLogin (#6562)
• fix(forks): detect secrets referenced from advanced-mode fields (#6566)
• fix(files): let a mouse wheel scroll CSV and XLSX previews horizontally (#6563)
• fix(api): align v2 permissions and resource behavior (#6557)
• fix(agiloft): align the integration with the documented ewws REST interface (#6556)
• fix(files): restore horizontal scroll in CSV and XLSX preview tables (#6550)
• fix(provenance): make one length floor the whole substitution rule (#6551)
• fix(auth): rate limit the password reset endpoints (#6553)
• fix(api): restore legacy endpoint compatibility (#6552)
• fix(tools): bound internal tool calls by the plan deadline, not Bun's fetch default (#6547)
• fix(auth): let Microsoft sign-in link via Entra's domain-verified email claim (#6546)
• fix(cmdk): update search-modal assertions to the renamed New chat label (#6549)
• fix(atlassian): share one cached, retrying cloudId resolver across Jira, Confluence, and JSM (#6541)
• fix(v2-api): standardization (#6542)
• fix(cmdk): New Chat -> New chat (#6543)
• fix(knowledge): retain model input provenance (#6540)
• fix(chat): deduplicate chat sends server-side instead of probing for them (#6536)
• fix(executor): restore delegated workflow execution (#6539)
• fix(ci): include auth package in app prune (#6538)
• fix(chat): stop losing sends aborted during mount-settling (#6525)
• fix(chat): stop the streaming transcript floor inventing scroll space (#6527)
• fix(logs): keep run provenance when compaction drops the execution state (#6528)
• fix(workflows): port the canvas card icons off lucide-react (#6523)
• fix(tables): handle row deletion during cell execution (#6520)
• fix(folders): show the folder trail in table and knowledge base headers (#6515)
• fix(knowledge): pluralize the module header and root breadcrumb (#6516)
• fix(sidebar): pluralize the Knowledge bases nav label (#6514)

Other Changes

• test(export): pin the table and tool-param loss the sanitized export accepts (#6613)
• chore: remove the stray .agiloft-spec working notes (#6605)
• test(table): pin the executor auth pairing on the table read route (#6603)
• docs(salesforce): correct the setup steps that would strand an admin (#6526)

Contributors

• @Sg312
• @TheodoreSpeaks
• @icecrasher321
• @j15z
• @waleedlatif1

View changes on GitHub

Automated staging-channel desktop build from staging @ 380aca2.