• fix(rbac): give org members scope to run agents (#2618)
• fix(approvals): hide legacy chats from approvals (#2600)
• feat(ui+ee): Skills UI cleanup (#2614)
• infra: decouple fargate migrations image (#2613)

• treat superusers as tenant users (#2611)
• Add workspace-scoped route aliases (#2590)
• PAT data models (#2607)
• Sanitize and normalize skill name input inline (#2606)
• increase temporal test Postgres connections (#2603)
• Avoid synthetic prompt for approval continuations (#2598)
• sandbox DNS resolver (#2599)

Agents

• agent worker tool cap error surfacing and bump tool cap limits (#2605)
• ENG-1388 fix(agents): strip /vN from passthrough upstream_url to prevent /v1/v… (#2604)
• bump claude shim buffer limit (#2602)

Bug fixes

• agent worker tool cap error surfacing and bump tool cap limits (#2605)
• ENG-1388 fix(agents): strip /vN from passthrough upstream_url to prevent /v1/v… (#2604)
• bump claude shim buffer limit (#2602)

Thank you to all our contributors for making this release possible!
@daryllimyt and @jordan-umusu

Bug fixes

• Fixed sandbox DNS resolution for local/hosted agent execution. (#2599)
• Increased the Claude shim buffer limit to handle larger agent responses. (#2602)

Contributors

Thank you to @daryllimyt and @jordan-umusu for contributing to this release.

Full Changelog: 1.0.0-beta.45...1.0.0-beta.46

Agents

• llm provider cutover (#2567)
• compatibility fixes for legacy presets and actions (#2584)
• default custom provider auth to Bearer when header unset (#2593)
• route custom model providers via hosted_vllm to restore … (#2594)

Bug fixes

• compatibility fixes for legacy presets and actions (#2584)
• default custom provider auth to Bearer when header unset (#2593)
• route custom model providers via hosted_vllm to restore … (#2594)

Thank you to all our contributors for making this release possible!
@jordan-umusu

• fix: sandbox DNS resolver (#2599)

Thank you to all our contributors for making this release possible!
@daryllimyt

• Preserve legacy case duration anchors (#2589)
• treat override approval decisions as tool approvals (#2592)

Thank you to all our contributors for making this release possible!
@daryllimyt

What's Changed

• fix: sandbox DNS resolver by @daryllimyt in #2599
• fix(agents): bump claude shim buffer limit by @jordan-umusu in #2602

Full Changelog: 1.0.0-beta.45...1.0.0-beta.46-rc.1

• expose action output masking in UI (#2588)
• Add portless to cluster script (#2586)
• Use bearer auth for service account keys (#2587)
• restore workflows to previous versions (#2581)
• chat input refocus after model responses (#2570)
• Add ActionStatement mask_output flag to redact action results in execution API (#2578)
• Gate service accounts behind entitlement (#2582)
• bump litellm to 1.83.7 (#2583)
• improve mcp workflow patch editing (#2515)
• bump helm to 0.4.11 (#2579)
• llm providers v2 migration (#2566)
• add pasta networking and lock down /proc in nsjail (#2571)
• Support isolated Fargate stacks (#2569)
• Constrain org agent credentials dialog height and enable scrolling (#2563)
• sync_custom_registry tool with org-scoped service refactor (#2568)
• optimize case duration for burst responsiveness (#2558)
• type MCP server tool payloads (#2561)
• Enforce explicit third-party tool consent in MCP prompt guidance (#2560)
• build workspace skills studio (#2487)
• add workspace skills support (#2488)
• action selector hydration race (#2557)
• Add organization and workspace API key management (#2347)
• Throttle massive scatter gather regression test (#2555)
• Add dev cluster seed bootstrap (#2556)
• Add full analyst case management tools to MCP (#2532)
• restrict platform superusers to admin console (#2548)
• Add brokered nsjail Claude runtime (#2468)
• speed up integration tests (#2552)

Agents

• propagate errors from mcp and litellm to the client (#2574)
• control plane impl for llm providers v2 (#2509)
• new agent catalog db models (#2506)

Bug fixes

• resolve option_ref in closure validator and return 400 fr… (#2576)
• propagate errors from mcp and litellm to the client (#2574)
• control plane impl for llm providers v2 (#2509)
• coerce empty alias to null on clear (#2543)

Documentation

• add GitHub Copilot MCP setup to installation snippets (#2572)

Thank you to all our contributors for making this release possible!
@bishopdotdev, @boyazhang314, @daryllimyt, @jordan-umusu and @topher-lo

• Fetch registry SSH keys on executor worker (#2550)
• bump to 8 cores (#2551)
• add worker-side payload encryption (#2297)

Thank you to all our contributors for making this release possible!
@daryllimyt

• remote custom registry test (#2547)
• add HTTPException handler for observability (#2542)
• make health endpoint async (#2540)
• Add unwrap query param to /wait (#2535)

Agents

• cap on stop hook retries (#2546)

Enhancements

• cap on stop hook retries (#2546)

Bug fixes

• always include builtin registry in resolved lock (#2536)

Build system

• Patch dependencies (#2541)

Thank you to all our contributors for making this release possible!
@daryllimyt, @jordan-umusu and @topher-lo