improvement(desktop): install updates on one click, asking only about real in-flight work
improvement(cli): files batch-delete takes file ids as arguments
improvement(desktop): bring agent browser menus, keys and fullscreen in line with Chrome
improvement(extension): document browser data handling and limited use
improvement(extension): document browser data handling and limited use
improvement(oauth): serve still-valid tokens while refreshing ahead of expiry
improvement(sim-links): pass queries through, trim pasted punctuation, and suggest links from the address bar
Bug Fixes
fix(files): share one served-bytes predicate between the serve route and large downloads
fix(release): read Excel start dates, refuse impossible times and repeated columns, keep typed escapes, no suggestions for punctuation
fix(oauth): default a leader-lock follower's wait to the lease so its takeover can land
fix(desktop): address release review — count app downloads and unchecked terminals before an update restart, send the page referrer on Save Image, and tighten sign-in and people edge cases
fix(ci): drop the duplicate --accept-routes the Tailscale action already passes
fix(files): stream served files with byte ranges instead of buffering them under 100 MB
fix(files): resolve v2 file paths only on the v2 surface, through the canonical resolver
fix(oauth): take over a lapsed refresh lease, share overlapping service-account key reads, and label unsearched accounts
fix(auth): check a workspace's personal-key switch after membership
fix(oauth): keep a five-minute floor on served tokens and refresh ahead earlier
fix(mothership): Stop only cancels detached runs still running, and a held workflow run never blocks the next turn's workbench
fix(desktop): ask before an update restart from the menu, count uploads and downloads as running work, and harden sign-in prompts
fix(files): authorize the workspace before resolving a files/ path
fix(auth): block only curated disposable domains, and never gate SSO or SCIM provisioning
fix(people): keep a suspended manager link on edit and never fail the org layout on the People lookup
fix(execution): name the signal exit code of a failed sandbox process
fix(extension): keep site access compatible with strict CSP
fix(mothership): say why a workflow copilot chat cannot read other chats
fix(auth): refuse account creation from disposable email domains for every provider
fix(desktop): keep sign-in popups working in the agent browser
fix(files): accept files/ VFS paths in v2 file describe, rename and delete
Other Changes
chore(ci): reach the database over the tailnet when CI_DB_TAILNET is set
chore(search): retire legacy search knowledge base projection rows in place
chore(auth): correct where the short disposable list runs