Features

feat(blog): Tracking Secrets Through an Agent Run
feat(library): What Is Retrieval-Augmented Generation (RAG)?
feat(calendly): extend tools with booking, availability, no-shows, and routing forms
feat(search): page-aware cmd+k palette with ask-Sim mode
feat(incidentio): add on-call, alert, catalog, and team tools
feat(salesforce): add JWT bearer flow and sandbox OAuth support
feat(workflows): new workflow block card, progress indicator, colors, dsl for natural language preview, retry configs
feat(comparisons): add code-sandbox and session-policy rows

Improvements

perf(db): drop 0287's two zero-row scans from the ACCESS EXCLUSIVE hold
improvement(integrations): add Managed Agents templates and guard docs links
refactor(audit): derive updatedFields through one shared helper
improvement(updates): validate update path and fix native mac help
improvement(desktop, executions): fix desktop update script and throw error when thinking enabled on stream false
improvement(desktop): help menu
improvement(desktop): add apple signing, fix some bugs
improvement(provenance): make the incompleteness reason set closed and complete
improvement(audits): skip the sql-date-binding parse for files without drizzle-orm
improvement(external-endpoints): v2 versions with clean signatures + updated docs based on openapi spec
improvement(ui): align terminal with the workflow design system, fix row hover states
improvement(setup): complete knowledge and update flows
improvement(provenance): name every guard that can latch a registry

Bug Fixes

fix(executor): carry child provenance across the workflow agent tool result
fix(executor): copy the env map at the workflow-tool boundary
fix(v2): derive the log and run status enums from the persisted status list
fix(docs): restore api-reference URL continuity and fix translated SDK bodies
fix(sdk): make the 0.2.0 SDK release safe to publish
fix(copilot): clamp the legacy int4 size when materializing a chat upload
fix(executor): give the workflow agent tool the caller's env and PII policy
fix(workflows): pin a stored block retry policy when loading it
fix(mcp): stop refusing tool results authored by another workspace member
fix(uploads): sign Azure upload URLs create-only
fix(mcp): audit an upsert that rewrites or revives a server
fix(uploads): make execution attachment completion replay-safe
fix(files): restore CSV preview cancellation
fix(tables): tolerate row deletion during run cancellation
fix(files): order file folders in SQL like every other folder list
fix(mcp): audit the columns an MCP server update wrote, not the params it got
fix(knowledge): return pending status for new documents
fix(workflows): redact run and export secrets
fix(tables): prevent legacy group auto-run dispatch
fix(logs, workflows): snapshot fetch optionality, restore consistent draft read snapshots
fix(tools): bind schema-enrichment reads to executor delegations
fix(api): widen the cancel-execution reason contract to what the route emits
fix(api): wait for knowledge dispatch and encode filenames
fix(desktop): fix background tab spawning
fix(security): redact workflow snapshot secrets
fix(files): preserve slashes in folder paths
fix(logs): restore narrow v1 detail query
fix(api): conceal cross-tenant resource denials on internal routes
fix(tables): preserve group auto-run semantics
fix(docs): preserve items response fields
fix(api): close five defects found auditing the v2 migration against main
fix(authz): enforce credential and workspace boundaries
fix(api): collapse the internal error envelope and restore requestId
fix(tables): cap row pages and use native cursors
fix(api): restore migrated endpoint and SDK compatibility
fix(mship, desktop): fix bugs
fix(agiloft): resolve attachment MIME type instead of trusting the header
fix(v2-api): close three secret disclosures, make the surface consistent, and align docs with signatures
fix(credentials): authorize shared credentials without requiring a workflow
fix(agiloft): repoint the block at the alrest surface and fix EWLogin
fix(forks): detect secrets referenced from advanced-mode fields
fix(files): let a mouse wheel scroll CSV and XLSX previews horizontally
fix(api): align v2 permissions and resource behavior
fix(agiloft): align the integration with the documented ewws REST interface
fix(files): restore horizontal scroll in CSV and XLSX preview tables
fix(provenance): make one length floor the whole substitution rule
fix(auth): rate limit the password reset endpoints
fix(api): restore legacy endpoint compatibility
fix(tools): bound internal tool calls by the plan deadline, not Bun's fetch default
fix(auth): let Microsoft sign-in link via Entra's domain-verified email claim
fix(cmdk): update search-modal assertions to the renamed New chat label
fix(atlassian): share one cached, retrying cloudId resolver across Jira, Confluence, and JSM
fix(v2-api): standardization
fix(cmdk): New Chat -> New chat
fix(knowledge): retain model input provenance
fix(chat): deduplicate chat sends server-side instead of probing for them
fix(executor): restore delegated workflow execution
fix(ci): include auth package in app prune
fix(chat): stop losing sends aborted during mount-settling
fix(chat): stop the streaming transcript floor inventing scroll space
fix(logs): keep run provenance when compaction drops the execution state
fix(workflows): port the canvas card icons off lucide-react
fix(tables): handle row deletion during cell execution
fix(folders): show the folder trail in table and knowledge base headers
fix(knowledge): pluralize the module header and root breadcrumb
fix(sidebar): pluralize the Knowledge bases nav label

Other Changes

test(export): pin the table and tool-param loss the sanitized export accepts
chore: remove the stray .agiloft-spec working notes
test(table): pin the executor auth pairing on the table read route
docs(salesforce): correct the setup steps that would strand an admin

View changes on GitHub

Changelog

Features

Improvements

Bug Fixes

Other Changes

Python SDK v0.2.0

Installation

Documentation