What's new

History of Agent OS changes. New releases come out once a week.

Download Agent OS · Status and build version

October 12–18, 2026

Other

sc: universal shell tool for sc-fix-agent (d479388e)
sc: capacity guard (max_running) + keep issue open when no changes (a43b9550)
sc: poll SourceCraft queue every minute (was 5) (e8b93583)
sc: register sc_mr_merge/sc_worktree_diff/sc_deploy_server in toolbox (030ac66d)
sc: risk judge + operator-approved merge and self-deploy (239d706e)
delegated sub-agents carry their own template (1f3e5c75)
machines + kernels engines (SSH inventory, remote Agent OS control) (bb979d6a)
one loop per shared transport (generic) + YM front router agent (db1530be)
run notifications to channels (universal) with event filter (7ea06289)
build: builder builds the agent from the catalog via the builder (build on the builder)
sc: commit artifact uses pushed.head (publish step output_key is pushed) (7cf96804)
capture diff against the branch base; publish returns data (402299cc)

October 05–11, 2026

New

tools: add image_gen_tool (text-to-image) engine; use in image/egidia; docs (976aaab2)
android: attention stream status + battery-optimization prompt (fade7def)
notify: attention tools, push sink and background notifications (Android + web) (8ffaf549)
yandex: env-overridable OAuth redirect_uri (dev loopback vs prod URL) (1ab612d3)
site: weekly changelog page generated from git history (f1f206b9)
yandex: unified Disk/Calendar agent, Disk change-monitor, compact tool output (49ebcf62)
server: public_url so agent links use the public origin (93b2c4f8)
index: per-user document index module (server folders + Yandex Disk) (40d3ee58)
blogger: content assistant + declarative duckdb operations (4ad5d6fd)
approvals: relay sub-agent approvals to the delegating agent's chat (fbba7e26)
chat: hide intermediate tool visuals, add widget.tool_visuals (78a6f46e)

Fixes

duckdb: share one connection per file across hot-reloaded hooks/caches (73d7ba76)
widget: keep tool cards flex when expanded so labels ellipsize (3e5eada8)
widget: stop tool-card/status payloads spilling outside their boxes (334fdeb4)
android: send x-user-token when registering push endpoint (da4927ea)
android: fetch x-user-token ticket for attention stream + session identity (645d02fa)
agent: keep answer on disconnect, bound code search, reap orphan browsers (69544f95)
widget: render inline markdown and clamp tool-card/status labels (01093321)
android: request notification permission (Compose) + self-test button (23526803)
widget: Stop clears the thinking status pill (b86dd96f)
index-demo: require Yandex login so the per-user Disk token is shared (b6188100)
index-demo: env-overridable Yandex redirect_uri for prod (07b1e0ef)
plugins: put the dot before {ext} (agent_os_index.{ext}) (7a5ceb88)
plugins: resolve native module path by platform/profile (e586e5ec)
admin: cut tool_call warnings, add inline tool base_dir, triage bench (3dfbebf0)
widget: linkify bolded bare URLs (a9ebe752)
admin: rewrite loopback links in the engineer's answers (53f6f5b3)
widget: readable code blocks on the light theme (25ab68bb)
chat: keep links clickable outside demo; render markdown blocks in text blocks (c0f4ec0e)
tools: distinguish/override transport timeouts; browser partial progress (9dd9024b)

Other

sc: skip retry when the source ticket no longer exists (e0ecdc68)
input/output artifacts (sources/results/materials) + UI links (0de2118d)
sc: tolerate missing SourceCraft issue in comment/close (f288388f)
parse JSON tool output into output_key (fixes step.field refs) (efc28acf)
sc: pass ingest flags as strings (template drops input booleans) (cbed790e)
sc: MR-link race fix, failed-item auto-retry, timeline order (0fd2f744)
ui: tabs (overview/queue/runs) + work-item queue actions and retry (ae3808b8)
run agent-os as realityfaker (not root) (470ad703)
sc: sharpen sc-fix-agent testing instructions (e0731500)
implement /v1/harness/overview (store aggregate + dashboard UI) (e627fbc8)
sc: sourcecraft bugfix harness - ingest, fix agent, MR publishing, issue close (da404180)
supervise agent-os with systemd (restart, memory cap, OOM guard) (a5939676)
Lissa's portrait only in the welcome message, no duplicate on the entry card (a66ac4d5)
render the image in welcome; egidia shows Lissa's portrait in the greeting (8ffe92ac)
Lissa's portrait on the welcome page, art on key scenes (7e1e989c)
Lissa's portrait at startup and periodic display of illustrations (65b51223)
pregenerated art + egidia_art tool, widget page theme/layout; shared generate_image + docs (9a030775)

September 28 – October 04, 2026

New

admin: shared assistant dock and theme fixes (7fa63b1d)
code: show command + args in the run_command approval card (c87a7812)
admin: light theme toggle and unify the admin UI to Russian (1827b8fb)
harness: registry, workspace-scoped code tools and operator tools (e8412f8f)
widget: show gated tool arguments in the approval card (3a220632)
agent_tools: ask_user forms, widget form/approval cards, admin-only coder (2368dbdd)
harness: observability — cost, timeline, metrics and summary (d82d23bc)
harness: work items with lifecycle, claim and run linkage (3e9347d2)
supervisor: ship the observer agent bundle (c422288a)
agents: code agent module, supervisor subscriptions, dual-transport tooling (123f1703)
workflow: run-level deadline (timeout_secs) (0ec89e56)
workflow: resume for_each from unfinished items (1c35b1bc)
workflow,harness: replay-safe tool keys and workspace artifacts (4e9345c3)
harness: isolated workspaces, run read-model and cancellation (45894f8c)
workflow: durable runs, loop/verify steps and run budget (fac82d00)
admin: embed the user-inspector widget on the users page (9fb920ff)
agents: user-inspector read-only agent + widget ?q= deep-link (5691f08a)
admin: richer users page (alias, activity, budget, memory, teams, traces) (638e8369)
config: triz agent (board + TRIZ tools, design doc) (6c604775)
platform: chat-first /console with admin tool visuals (ac408671)
admin: users page and teams member autocomplete (e00d361f)
events: native agent_events hook + GET /v1/events; migrate sc off scripts (4b5d804f)
admin: teams page and fix nav active-state on child paths (579c2c52)
teams: team scope, membership registry, grants and access control (f01003db)
versioning: highlight active version; make restore truly switch versions (0a16fc84)
versioning: git-backed config versioning, history UI and sealed secrets (cd3c0ef8)
agents: add sc-agent for SourceCraft issue management (ea87a901)
control: operator state tools, agent-scoped tool calls, restart-race fix (0e8b6502)
tools: tool-load diagnostics and universal state() template context (1ae23dd8)
admin: tool-registry meta-tools, toolbox library, and reasoning control (e4940830)
kernel: reconstruct tool exchanges on session resume (4a0dc677)
yandex: add ym_tool for Yandex Messenger Bot API (b49a0e1f)
settings: show only settings of modules that agents actually use (5d05d63f)
admin: enable builder/env by default; add run, env and web tools (b9453eb1)
trace: expose a read-only trace API and the agent-os trace CLI (18f1e648)
searchers: support multiple search providers (ca465cf1)
searchers: ship a demo agent via the module config bundle (d0cf0c96)
settings: wire searcher API key via transport-neutral declarations (efa5d4da)
modules: stable ToolEngine interface + registry bridge for tool kinds (37524545)
settings: scoped settings & pending configuration (0f1d4050)
searchers: add provider-aware web_search module (FireCrawl, dual transport) (58369f08)

Changes

admin: merge inbox into an access menu; rebalance menus (8ae37722)
events: pre-aggregated 300s bucket rollup for the dashboard series (7908e54f)

Fixes

control: percent-decode path params (e5b60a8e)
caddy: do not compress SSE endpoints; flush immediately (cc47864c)
interaction: forward payload/granted in POST /v1/input-response (e41014ac)
teams: reentrant-lock deadlock in merge_users (dd7592bc)
admin: give the users list its own scrollbar (d940658d)
kernel: nudge structured-output agents to finish via job_done (f83041e0)
config: correct toolbox tool_files indentation; document versioning (d5508da6)
admin: tool UX hints, restore server_url, fail on missing required args (fdb54d71)
kernel: send script HTTP headers passed after the timeout (152a8cdf)
kernel: truncate data_label on char boundaries, not bytes (bbc8a448)
kernel: strip answer markers case-insensitively (2aaa4dad)
platform: attribute stable ToolEngine kinds to their module (39148f03)
settings: declare the agent_os.RequestContext capability (f9352d8f)
searchers: FireCrawl v1 rejects 'sources'; add web_search tests (286aa183)
settings: carry DLL descriptor settings through BatchModule (2c4beee9)
events: surface dropped events and read errors; dashboard loading indicator (eccbaf5a)

September 21–27, 2026

New

widget: configurable dialog persistence (widget.persist, widget.history_limit) (9ef08ee0)
kernel: max_output_tokens as the authoritative output ceiling (global + per-agent) (6b08e283)
wait_tool: stream a live countdown (ToolProgress) + UI templates (a8ccc9bf)
bench: universal run overrides (A/B), compact run list, admin trace tools, hook signal (7cffe803)
bench repeats+compact, wait_tool, session-transcript resume, events.db hardening (f66ac2e3)
lexicon: self-learning query normalizer with slot-driven auto tool call (be78b161)
env: runtime environment-variable overrides + admin page (13ad9731)
surfaces: first-run onboarding overlay + admin settings (04a96a4e)
analytics: lexical topics, bench exclusion, master-detail UI, agent filter (d5537957)
widget: optional banner close button, hidden on inline embeds (0d793471)
scripts: add env_var to the JS engine; admin agent server_url tool (2bbd6fc3)
analytics: opt-in business analytics module + analytics agent (b4df2cb6)
tools: session scratchpad module (scratch_tool) (9cb51423)
builder: hierarchical agent-config reads and granular edits (ad890063)
bench: send a run to the engineer agent from the run card (85156b47)
admin: unified master-detail Benchmarks page and shared bench UI (967445dc)
admin: navigable introspection, docs API and self-configured service-agent transport (094b69ef)
bench: judge failed/errored turns, recommendations and run summary (1fe778f2)
platform: agent builder API and engineer/admin agent in the admin UI (d2dc16ef)
admin-ui: feature modules own pages/nav; platform restart + module toggles (10e68a2a)
bench: share bench core, add LLM judge and parallel runs (b1c93f74)
platform: bilingual module docs, per-item docs and owned registries (4c755799)
platform: preserve the open tab across selections (8e453c60)
platform: required per-subject docs (ru), grouped types, server-side markdown (8d474906)
platform: expose CLI commands as an engine-backed registry (72020993)
admin: shared shell, platform console, module control, engine introspection (76a35ab1)
personal: single-chat personal agent prototype (docs + demo + config skeleton) (dc99b9af)
cli: unified module-extensible agent-os binary (7343adc4)
distrib: resumable downloads + ported download page (c43f46c3)

Changes

events: store turn token counts as columns for the dashboard series (7e0e5a04)
control: lower /v1/sessions default page to 200 + UI 'load more' (14f38da7)
events: materialized session_history rollup off the write hot path (8698818e)
load: admission control + batched store writers; fix JSONL/access-log (62f61506)
admin: give the engineer agent the full model context and efficiency rules (550f2d31)
build: make release use fat LTO (verified safe on prod VM); deploy -j4 (3bbb7227)
build: size-optimized profiles, lean feature gates, faster dev builds (22e09679)
personal: rename Бадди to Персональный Агент (a703adff)
repo: split crates/features into channels/tools/hooks/platform (4549eebf)
repo: split crates/modules into surfaces/engines/fixtures/builtin (28b4aa8e)
repo: split crates/module-system into abi/runtime/plugin/support (e9250c52)
repo: move top-level crates under crates/ (29939304)
modules: move remaining host routes into modules; bound module-route bodies (543cb2cc)
modules: extract interaction routes (uploads/responses) into a module (bace0642)
modules: extract control-plane routes into a module (454c61e0)

Fixes

control: /v1/sessions ignored limit/offset (passed as strings) (9fd3c5d2)
kernel: keep planning narration out of answers, live stream and FAQ cache (60655128)
memory: reap process trees, bound host caches, add leak soaks (2308c075)
site: substitute https://vectorres.ru before making the CTA href absolute (cdf63962)
distrib: show real archive sizes on the downloads page (97942c9b)
state: anonymous sessions resolve a per-session user scope (e2feba73)
site: resolve header CTA/nav hrefs absolutely so they work from /docs pages (64565aaa)
web: percent-decode query parameters (6adaac3f)
bench: recover orphaned running runs on store open (777f4c3c)
admin: give the engineer agent an unlimited budget group (4424a2e6)
host: access-log module and plugin routes (512b22d7)
platform: attach docs to service types (types/ falls back to services/) (31ddbe31)
distrib: readable code blocks on the downloads page (02a3c0bf)
hot-reload: serve config/web live, prune removed tools/hooks, harden reload (8bfe44bc)
workflow: run HTTP-triggered workflows on the server runtime (009d7157)
rmasla,ngu: cover Berdsk branches and enable NGU group schedules (81222327)
drom: recommend only fully-matching listings; add drive/mileage filters (fa2fc9ac)
personal-demo: use proper Russian weekday abbreviations (пн вт ср чт пт сб вс) (00714a8a)
tests: repair missed KernelServices call sites and Identity::merge fake (3f1e0ed0)
chat: drain stream sink, UTF-8-safe SSE decode, item-aware truncation (68f1f255)

Other

kernel: make the marker rule explicit about what is shown and what may follow it (f7c22519)
build-timing profiler, disk reclaimer, worktree target helper (202cb7b0)

September 14–20, 2026

New

reactions: move reactions onto module event bus (a67573d6)
ports: add reaction action ports (Agents v3 + Workflow) (72ea0463)
events: add module event bus (B2 step 1) (89f36319)
hooks: move memory hook into agent_os_memory (B2) (d15749b7)
hooks: move model_router hook into agent_os_model_router (B2 pilot) (d901f8ce)
channels: move storage channel into agent_os_channel_storage (94b42f6f)
channels: generic outbound dispatch via ChannelSink (P3) (c8fa80a6)
channels: close port gaps for file input, status and budget copy (ceafdd93)
channels: move yandex messenger into agent_os_channel_yandex_messenger (P2) (cd2409ae)
channels: move vk into agent_os_channel_vk (P2) (1c4e75d4)
channels: full telegram parity (visuals, pagination, tool events, welcome) (2ce0c4b2)
channels: move telegram into agent_os_channel_telegram (P2 core) (ec5fb207)
channels: expose pid in agent_os.Turns outcome (2e77361c)
channels: move email source into agent_os_channel_email (P1b) (30e513e9)
channels: add agent_os.Tasks/Job abstraction (host-owned runtime) (9c19dc6f)
channels: accept inbound attachments in agent_os.Turns (P1 prereq) (d728a20e)
channels: add agent_os.Sinks port for outbound fan-out (P1 prereq) (b22bbd35)
channels: add agent_os.Allowlist port (P1 prerequisite) (cb77586d)
channels: wire activations from agent.yaml into the supervisor (81ae7267)
channels: add ChannelSource contract + supervisor (P0.3) (a5b22e03)
channels: add agent_os_channels core (ChannelSink contract + sink bus) (59eb7a92)
channels: add agent_os.Turns port + streaming sink + host adapter (5d3dcbda)
auth: move OIDC login routes into agent_os_auth via agent_os.Oidc port (c12ec23e)
dashboard: extract system health snapshot into agent_os_dashboard module (68339c03)
feedback: extract like/dislike surface into agent_os_feedback module (3220c6ef)
model_router: extract admin surface into agent_os_model_router module (da4de7e1)
memory: extract memory inspection into agent_os_memory module (83bdb428)
connectors: extract OAuth callback surface into agent_os_connectors module (622593e4)
bench: extract benchmark admin surface into agent_os_bench module (db041e7e)
modules: extract ops/proxy/approvals/cron/auth surfaces + late host services (a74227b2)
distrib: serve the downloads page from the distribution module (7762d8d0)
admin-nav: dynamic shell nav from /v1/system/ui (B7 v3) (608bb461)
admin-nav: admin_ui-owned nav registry + kernel /v1/system/ui (B7) (56a6f324)
workflow: feature owns its admin page (B7 v1) (76eb33d9)
workflow: move run-events route; add run_id filter to agent_os.Events (4dc92916)
workflow: move the admin API routes into the module (8a316d76)
routes: agent_os.RequestContext service (per-request principal/scope) (6654d78c)
workflow: contribute the webhook route as a module Route (88f77cfb)
host: agent_os.Identity + Approvals ports (1c0210f1)
host: agent_os.Outbox + DeadLetter ports (37da67d9)
host: agent_os.Checkpoints port (6d1d0a3d)
host: agent_os.Sessions port (71df35d6)
host: agent_os.Events port (3172bbe8)
host: agent_os.Messages port (2e75e52e)
modules: host services, capabilities, module scripts, llm_cache (8430ca14)
modules: wire docs/widget stable objects through abi_registry ObjectList (f578a305)
abi: add a proper-name attribute to abi_trait (0147acf9)
abi: add open, evented service registry + ObjectList loading (620ad724)
modules: dual-transport modules (linked + DLL) via a shared SDK (b31dc84a)
modules: extract distrib and demo surfaces into modules (30292fea)
modules: extract admin UI into agent_os_admin_ui module (3f6cfd44)
modules: hierarchical docs engine + self-contained site (embedded web, catalog-driven docs) (aee5a37f)
site: extract markdown website into an internal agent_os_site module (fd2d42dc)
web: add request/response headers to the stable Route interface (85a860c0)
docs: internal docs module (embedded agent-os-docs, runtime markdown rendering) (061a6f6d)
widget: internal widget module (embedded assets as stable routes), server mounts module routes (72fdd881)
modules: uniform ModulePackage (internal Rust / DLL) + bundle materialization (5a3d5238)

Changes

modules: extract observability routes into a module (3a4e40b9)
modules: move native core hooks onto the hook bus (1a7aa7c2)
modules: fold remaining tool engines into owner modules (e6c4ad37)
modules: extract web, agent and mcp tool modules (d0668a0d)
modules: extract documents, duckdb, sql and state tool modules (ed49e85b)
modules: extract google and yandex tool engines into modules (b9a418e7)
modules: fold vk/email tool engines into their channel modules (d889b5c4)
kernel: fold hook-services and onnx handles into KernelServices (582d8f31)
kernel: fold shared stores into KernelServices (30ea8e3e)
kernel: fold identity, allowlist and approval roles into KernelServices (326d2f69)
kernel: replace typed feature fields with a KernelServices seam (da7ba8c0)
kernel: extract cost accounting and audit logging into kernel/audit (30ba40e4)
kernel: extract provider/store/service wiring into kernel/wiring (18340c1c)
kernel: extract user-input, event and approval flow into kernel/interaction (5352abbc)
kernel: extract syscall dispatch, scheduling and turn loop into kernel/runtime (b9b4a442)
kernel: extract tool execution and outbox into kernel/tool_exec (da0dd3f8)
kernel: extract hook pipeline into kernel/hooks (6578366f)
kernel: move inline kernel tests into kernel/tests.rs (73d104d2)
kernel: extract process lifecycle syscalls into kernel/process_lifecycle (f01a01e0)
kernel: extract agent templates and budget gating (5506b5ff)
kernel: extract session lifecycle into kernel/sessions (7ef751de)
kernel: extract per-process setters and builders into kernel/process_config (ffcb4981)
kernel: extract supervision and quarantine into kernel/supervision (926b728e)
kernel: extract event emission into kernel/events (0bcb6742)
kernel: extract budget-group management into kernel/budget (543360c8)
kernel: extract process-tree and concurrency helpers into kernel/process (ba7651e1)
kernel: extract tool/hook management into kernel/tools (a46aea5b)
kernel: move safety-membrane and Default impls out of kernel.rs (3988bad6)
kernel: move LlmService impl into kernel/services (b0a96543)
kernel: move hook/escalation/tool/subagent service impls into kernel/services (48aeda66)
kernel: move IpcService impl into kernel/services (9e56809d)
kernel: move process-tree and run-loop types into kernel/types (8fd5d0aa)
kernel: extract state-independent helpers into kernel/helpers (21e03f30)
connectors: move OAuth engine + OIDC provider registry into crates (7d1f950e)
connectors: move encrypted token store into agent_os_connectors (183d6e47)
oidc: extract shared agent_os_oidc protocol primitives (45351e47)
workflow: move config discovery into the module (2cdd58b4)
workflow: move workflow_tool into the workflow module (56126e14)
workflow: move engine + store into agent_os_workflow (556ea388)
workflow: extract contract to agent_os_workflow_api + neutral durable api (25e55e49)
abi: make abi_registry a re-entrant factory (8a5b2445)
plugin-api: collapse stable-object registration (drop interface/destroy) (5ceda882)
module-api: replace StableObject/#[ao_interface] with OwnedObject/#[abi_trait] (eb8ed6ca)
group crates under crates/module-system + crates/modules; add agent_os_builtin facade (a1703ec4)
docs: co-locate the agent-os-docs content inside agent_os_docs (e827bc8b)
widget: derive dist content type from file extension (a266eb05)
widget: generate the dist asset table in build.rs (45155e9e)
widget: co-locate the widget npm project inside agent_os_widget (f374d3bb)

Fixes

chat: deliver buffered answer to stream sink, UTF-8 safe SSE decode, item-aware tool result truncation (6f5a64af)
modules: wire linked transport to contribute abi_objects (3dc7f523)
sdk: emit ao_plugin_init only in the DLL (no-default-features) build (313c9df0)
widget: keep an existing real dist when npm is unavailable (no placeholder clobber) (bfc5d650)
runtime: re-apply module contributions on activate even when state is active (021e435c)

Other

module-api: add agent_os_data arena experiment + workspace membership (e16aa03c)

September 07–13, 2026

New

server: bring up module runtime on startup (kernel + web) (ec745820)
modules: deferred items in the live Registry (apply before provider) (a17d21fe)
modules: always-on kernel module with /v1/system/* introspection (4a581748)
web: DLL route end-to-end (register_registry_stable + foreign_route) (ef2ac13c)
web: stable Route interface, routes registry and RouteTable (549966fe)
modules: attribute plugin registrations per plugin and bridge data to Batch (3a3ecb75)
modules: runtime mirrors active modules into the live Registry (3b76f85a)
modules: live Registry with contributors, whole-batch apply and events (085ae8c0)
modules: typed Data|Stable registries + stable interface/struct macros (cdaa3831)
modules: wire() phase and optional dependencies (5925e9c4)
modules: semver module versions and unified dependency requirements (fc5d241c)
modules: runtime driver (graph activation, lifecycle state, builtin manifest) (58d0e2c6)
modules: artifact install, archive extraction, bundle materialization (7879db37)
plugin-abi: self-describing single-DLL modules (descriptor + embedded bundle) (276730b9)
plugin-abi: module-lifecycle host adapter end-to-end (61815f5c)
plugin-abi: collect slot providers and contributions (5a690a8d)
plugin-abi: script-fn host adapter (JSON bridge) (a2a76cf3)
plugin-abi: hook-engine resolution via create_hook (9d91da4b)
plugin-abi: tool-engine host adapter end-to-end (05fbe5a5)
plugin-abi: ABI v5 — engine kinds, script fns, slots, lifecycle, download (aceb2189)
modules: additive module-system skeleton (graph, slots, services, access) (fd519dee)
hooks: context_summary and schema_guard (faf410d5)
hooks: per-turn bag composition with ports and auto-order (900f9074)
onnx: enable ONNX inference in server and Windows distrib (dbccbed3)
hooks: add native llm_cache for tool-free inference (64eebd00)
onnx: runtime status endpoint + service-path e2e; reconcile consumers (18fe2c2f)
intent-router: classifier-based triage hook (3d0ecb7f)
onnx: register GPU execution-provider libraries at runtime (phase 2) (5dce4cd7)
onnx: load ONNX Runtime dynamically (load-dynamic + runtime resolver) (99f91081)
onnx: configurable execution provider (cuda/tensorrt/directml/rocm) with CPU fallback (c92034f6)
model-router: persist stats, reuse probe, tighten cache (8d36a534)
onnx: per-agent NER model selection (templates + ner_model) (9455211f)
safety,onnx: vault encryption+export, SentencePiece/tokenizer_config, kernel e2e (252ce3eb)
model-router: classifier-based model routing + admin page (9bfd32eb)
hooks: language_guard hook + auto-downloading langid model (729b3baa)
safety: apply guard/pseudonymize to script llm() (opt-out safety:false) (43e8f2fe)
onnx: eager preload + HF sha256 pinning (2e5a0ec7)
onnx: admin endpoints + runtime metrics; ship onnxruntime in distrib (b9930911)
safety: LLM-assisted detector (detector: llm) + WordPiece/BPE tokenizers (e7df7d26)
hooks: circuit_breaker hook to configure the native breaker (f4b3a2aa)
hooks: groundedness v2 with tool-result evidence (af32eacc)
provider: native circuit breaker with failover routing (909e6b7f)
hooks: groundedness output guardrail (archive evidence, notice) (3b8696ad)
safety: guard + pseudonymize hooks, local ONNX service, script model API (36c7f2c2)
approval: conditional gate (when) and custom card text (action) (d678ccda)
hooks: loop_guard to break repeated tool-call loops (3f17c796)
hooks: fire on_budget_threshold for group/user budget layers (10c5df33)
escalation: webhook operator sink + document operator channel setup (3ebf5589)
escalation: live operator handoff (hook, tool, delivery) (3cdad7cd)
sandbox: network egress isolation (allow_net) + violation metrics (9251ef7e)
hooks: guardrail rework loop (continue turn on invalid output) (9feee3b6)
sandbox: linux landlock fs confinement + cgroup v2 limits (2b WIP) (9dec1343)
sandbox: filesystem confinement + per-agent policy (1799d827)
sandbox: rootless resource limits for host-spawned processes (f37860b7)
hooks: smarter compact_results and streaming format_guard (2bb01318)
supervision: poison-turn quarantine + durable dead-letter + reset (503b55d0)
streaming: explicit replace signal for guardrail answer rewrites (5029c2f2)
supervision: restart policies for agents (d821bf90)
hooks: query-condensation hook (kind: condense) (fd919184)
hooks: link_check output guardrail (grounded + live HTTP) (c85f197d)
reactions: declarative event triggers + message events (dbb28c39)
hooks: tool-result cache hook (kind: tool_cache) (c10c535b)
steering: pause/resume/interrupt/terminate control-plane for live agents (733535a2)
outbox: expose idempotency key to tools + declarative saga workflow step (34d47a67)
hooks: ambient RAG hook (kind: rag) reusing the BM25 archive (d213cdeb)
outbox: durable at-least-once side effects + saga compensations (641a000c)
pending: durable user-input/await_event waits with resume after restart (4b0a6842)
pending: reconcile hook for externally-decided pending requests (955ec87e)
pending: durable pending requests (approvals) with idempotent resolve + resume (7e26415e)
durable: opt-in durable sessions (auto-checkpoint + boot restore) (576f30b7)
scheduler: preemptive time_slice for PriorityPreemptive (f7fbb878)
hooks: complete interception surface, metrics, composition, plugin ABI v4 (2c95df9f)
idempotency: per-tool auto policy, script/workflow key threading, server.yaml wiring (120966e7)
idempotency: opt-in idempotency key for side-effecting tools (80c62ba0)
metrics: in-process Prometheus metrics + /metrics endpoint (db88b334)
hooks: runtime grant/revoke + workflow tool-step coverage (review items 3,4) (f192e5ed)
android: per-agent login gate (OIDC WebView + password) (60b04c8a)
async-actions: async_action + show_link tools, URL button across channels (3687628d)
hooks: output guardrail + tool-allowlist gating (review items 1,2) (f135e1d2)
hooks: panic isolation + per-hook wall-clock timeout (854d5252)
plugins: hook interception ABI parity (ABI v2) (74edef16)
hooks: tool/inference/lifecycle interception points + audit logging (0d3e1d5d)
await_event: generic async-action tool + /v1/events/callback (b1b48f1e)
auth: per-agent login requirement + dynamic allowed-sender allowlist (e8492a14)
approvals: quorum + logical/physical approvers + Yandex operator notify (a273e040)
site_tool: rest_tool alias + base64 filter (a90eb823)
approvals: LLM summary + MiniJinja context template (a1389545)
approvals: attach conversation context to approval requests (9a455571)
approvals: operator notifications to messengers (5488b5b9)
approvals: VK + Yandex Messenger approve/deny replies (4c951064)
approvals: operator inbox (approval queue) (386b41e6)
rasp_tool — transport schedules (Yandex.Raspisaniya, free key) (be40c24f)
approvals: human-in-the-loop approval gate (60f1335c)
mcp_tool: expose external MCP server tools to agents (stdio + streamable HTTP) (a8daee07)
yandex_tool: Yandex.Disk (REST) and Yandex.Calendar (CalDAV) on behalf of the user (2ac8de92)
yandex_messenger: disable tool-call echo by default, fix ThematicBreak rendering, docs (46537059)
map_tool — map with a marker (web Leaflet, static map in TG/VK, Android geo-link) (455bd347)
Yandex Messenger inbound/outbound channel (polling bot + sink) (c15d20b7)
OIDC login (Google/Yandex/Tinkoff), widget sign-in, universal OAuth connectors (e29a63be)
image previews in Telegram/VK/Android + image_tool send defaults to scratch-only when output set (6c82434f)
image_tool (crop/resize/grayscale/rotate/flip/adjust/format) + inline image rendering in widget (e61d7f51)
request_attachment on telegram/vk + fix android photo capture crash (1988be1f)
inbound attachments from email/telegram/vk (gated on agent attachments.enabled) (7b34d612)
android: attachments (file/camera upload) + request_attachment input prompt (ac7f798e)
google_tool: font family, weight and background color in docs style (dfb543a9)
request_attachment tool (agent-initiated file/screenshot/camera input) + widget input-request prompt (e4a312ea)
google_tool: rich docs/slides/sheets - import/export, structured build, charts (896fc7ea)
widget attachments (file/screenshot/camera) + upload endpoint + per-agent capability (8a903dfd)
Google Calendar + Drive/Sheets/Docs/Slides tools (service account + user OAuth) (8a8c1cc0)
vision tool (OCR/multi-image) + multimodal image input (8a7a63d1)
checkpoints/restore + wall-clock limits + spawn context + llm failover (130ca7d7)
syscall capabilities + provider failover chain (f0cfecbc)
scripts IPC (send/recv/try_recv/wait/reap) + scheduler priority/deadline + VK sink (5b53fbfa)

Changes

plugin: split host into light plugin_core + heavy host (9b00690f)
modules: make kernel's web dependency optional (wire capability, opt-in WebModule) (9326ca1b)
web: WebModule owns routes; kernel contributes introspection (deferred) (62256699)
modules: unified registries (Data | Object), routes as a registry (b42ca8c9)
scripts: remove Rhai, make scripting JavaScript-only (55d69bbe)
map_tool: geocoding via Photon instead of Nominatim (0.8s instead of 20s+ in prod) (eb9814d9)

Fixes

tools: set ToolContext.onnx in compose test (ddee0752)
deploy: strip UTF-8 BOM from build_distrib.sh shebang (dc01dff2)
deploy: strip UTF-8 BOM from build_distrib.sh shebang (69b4e356)
tests: add missing ToolContext.onnx field in integration tests (892ae362)
onnx: truncate inputs to model max length (avoid position-embedding broadcast failure) (7016ce52)
onnx: allow github hosts when downloading the ORT runtime (7935a8fb)
onnx: fall back to cpu when the execution provider fails to init (4977100d)
vision: set LlmRequest.apply_safety (build break after safety llm() change) (a02e7ae9)
tests: register job_done stub so completion-guard tests terminate (55b8249b)
sandbox: enable only advertised cgroup controllers; relax cpu test (bfad44b1)
sandbox: use getpid() in child for cgroup.procs placement (006165d3)
sandbox: preserve cgroup placement errno for diagnostics (463884cb)
deploy: detach service over SSH; harden ssh/scp and health checks (e2f70f3e)
scheduler: map all policies from config and preserve policy across concurrency limit (3d5f0fd5)
hooks: session scratch for script hooks, lifecycle audit events, hook_tool parity (3a8cc5b7)
oidc: derive redirect origin from request (Host + X-Forwarded-Proto) (e296236f)
widget: close dangling tool cards on stop; docs: approval role endpoints (d27e8c8e)
approvals: emit via self.emit, clean up pending on cancel, drop redundant operator ack (b83b9f18)
yandex_messenger: render map blocks as static PNG (merge map-tool) (c7593936)
widget: reset cost/token counters on session reset and model switch (49578039)
sql_tool: decode numeric/decimal/money via BigDecimal (52db4e42)
sql_tool: use native Postgres/MySQL drivers so numeric/decimal and schema introspection decode (5c058f60)
tools: shell_tool cwd resolves from tool file, duckdb pool key stable, sql_tool installs any drivers; db-demo uses {session} + auto-id (ac79c30e)
publish office files to session scratch + drop redundant send_file (ecd63c64)
office_tool session-mode temp path doubling (absolute temp base) (84ae8abf)

Other

output-guard: stage A/C + stage B (unverified) + plan 37 (1a8f78d6)
add approvals/async docs (23-25) to docs sidebar + documentation index (7a1f870a)
S3/WebDAV/FTP tool + source channel + CronSink::Storage sink (6f7d8ed7)
pool Chromium processes, reuse via isolated CDP tabs (browser contexts) (12f3964e)

August 31 – September 06, 2026

New

scripts — get_tool_result, run_subagent, llm_json (structured output), binary fs + base64; fs writes restricted to session temp (66c0f204)
scripts — temp_dir + fs_write/fs_list, caller(), list_tools() (19493b5a)
scripts can call other tools via call_tool(name, args) (7150b3d4)
Android file blocks open/save (FileProvider + SAF) (6bd787bc)
Android file blocks open/save (FileProvider + SAF) (fa40a9f6)
VK community bot channel (Long Poll) + vk_tool (generic VK API gateway) (feb82fb0)
offline tool testing + cron run-now/timezone + duckdb schema introspect (9395a0ce)
collapsible docs sidebar (accordion) + add chapters 20/21 (ef1cedff)
per-session scratch storage + file_tool temp source + shell_tool temp_dir (1cb8aa02)
file delivery tool + file visual block (web/telegram/android) (0c05bf80)
scripted & static HTTP routes (http_route/static_route) + route_tool (06dea50b)
universal DuckDB tool, script db/shell helpers, shell_tool (c00a460a)
native plugins (Rust DLL, stable C ABI) — tools, hooks, sinks, sources, channels, routes, DuckDB (af33c08e)
docs sidebar nav (grouped + prev/next) + widget & channels reference (60d56688)
named model configs (server.yaml models:) with per-model providers and pricing (7298496d)
memory supersede + /v1/memory + feedback loop; widget default model, session persistence, HMAC identity (7c654b07)
durable memory recall + user-scoped trace search (78fae320)
in-UI benchmark runner with persisted DuckDB run history (5f46a7ac)
change monitors (pull-triggers) with pluggable sources (e56a1d18)
inbound webhook + email channel + unified outbound sinks (8653e371)
version agent config via git repo (clone/pin at startup + poll reload) (42b398d8)
canonical user identity + FAQ cache quality gate (2c4aae5a)
shared TurnRunner + HMAC-signed web-user identity (7b404536)
workflow runs as first-class processes + stateful agent sessions (24b8b566)
lazy-load chart.js in the widget (code-split bundle) (c9625c75)
workflow access control (templates scope) + agent step budgets (ecb64a85)
workflow_tool CLI runner + docs discoverability (c287ba2e)
structured agent output + declarative workflows (52beffab)

Fixes

office tools hang server at startup (replace block_on in build_router) (c08f5259)
build full cross-doc link map before rendering pages (010338d3)
rewrite cross-doc markdown links to mapped hrefs (doc-*.html) (2f4c908a)
script sandbox & routes — exec/fs_read/config arg, exact-over-wildcard routing, site_tool --db-readonly, route_tool --args-file (4ec5263a)
persist DuckDB stores across hard kills (avoid DDL+UPDATE in WAL) (2fbebea3)
parse multi-directive logging.filter without panicking at boot (414b9cae)
memory hook recovers from corrupt DuckDB WAL (257f160f)
report turn token totals across all LLM rounds (not just last) (211c629f)
capture per-turn Cost event reliably (bench cost was intermittently 0) (ff921853)
bench mode with unlimited budgets + restore faq short_circuit (25b0c4a2)

Other

cap concurrent Chromium instances (AGENT_OS_MAX_BROWSERS, default 4) (211b63dd)
cache downloaded chrome-headless-shell (skip re-download) (95eafe8d)
fix pdf chrome icudtl.dat + relative path + docs nav/completeness (d4e8c259)
android apk — file blocks open/save (23557d46)
named model examples + surface agent_web_bot warnings in log filter (e4443d79)

August 24–30, 2026

Other

add a swapfile before the release build (link OOM on 3.6 GB VM) (6ef72e77)
build with -j 1 to avoid OOM on the 3.6 GB VM (81ea1d02)
add email_tool and cron email sink (SMTP via lettre) (450272af)
add subagent_tool (delegate tasks to child agents) (7ca288cc)
add visualize_tool and tool-result composition (source) (2256904e)
create and cancel cron jobs from the cron page (58329e9e)
cron jobs page (scheduled + run history, scope-aware) (3f0870d3)
skip result_blocks stream for non-visual tool results (ee488f4a)
auto-scale line/area/scatter y-axis (zero baseline only for bars) (75951605)
decimate/truncate x-axis labels to avoid overlap (1f065ae6)
auto-scale chart y-axis (nice ticks, keep zero baseline for bars) (4d6d5c54)
merge cron-support — scheduled jobs with run history (d3f3bc12)
polish chart/table rendering + lazy pagination (d9140b9c)
persistent per-install user id (x-user-id) + sound-on-finish toggle (be4745ea)
examples, docs, and e2e tests (5d1f8649)
scheduled jobs (config + scripting API) with run history (4d54824c)
sort by creation date newest first (9502c9be)
extract inference helpers, retry transient inference errors (5d07c6cd)
reset expanded tool cards on new message (811bbe79)
reset tool-call expansion per message (43a8bd0b)
auto-scroll during streaming too (ff27b258)
icon send button; hide empty bubble during tool phase (314a45c4)
render markdown synchronously to stop blink (89f506f3)
plain text while streaming, scroll to answer end (bfea24b4)
auto-scroll only at end of response (36dfc1f9)
reduce streaming jank (throttle markdown, disable size animation) (5ee4da03)
fix autoscroll, feedback taps, collapse tool cards (7fff7e41)
render final-answer tokens in real time (d5cdbf7e)
add Agent OS chat client app (9842970e)
serve android apk + download page link (8de19701)
sleep_ms helper; site_tool: retry/backoff + case-insensitive filters with default (1ee6011d)