1.37.0 (2026-06-16)
- per-agent granular access for app connections (#366) (622cb26)
- sync shared changes from cloud (#368) (a05782b)
- vault: 1Password as a secret value source (#113) (ccdfe8d)
1.36.0 (2026-06-10)
1.35.1 (2026-06-04)
- allow digit-leading agent identifiers and flag unknown agents (#346) (e553d90)
- restore default project fallback for self-hosted auth (#348) (6b5cadf)
- show run command in Get Started dialog (#350) (8efdf12)
1.35.0 (2026-06-03)
1.34.1 (2026-06-02)
1.34.0 (2026-06-02)
- add GitLab integration with OAuth and gateway support (#286) (ce585fd)
- add Google Chat / Spaces integration (#314) (2b36f05)
- unify codex into openai secret type, add app categories and credential stubs (#339) (26f7c5e)
1.33.0 (2026-05-31)
1.32.3 (2026-05-31)
1.32.2 (2026-05-31)
1.32.1 (2026-05-29)
1.32.0 (2026-05-28)
- derive OAuth redirect URI from request host to resolve localhost vs 127.0.0.1 mismatch (#325) (ccf5b2b)
1.31.1 (2026-05-26)
1.31.0 (2026-05-26)
1.30.0 (2026-05-24)
1.29.2 (2026-05-24)
1.29.1 (2026-05-23)
1.29.0 (2026-05-23)
1.28.1 (2026-05-19)
1.28.0 (2026-05-19)
1.27.0 (2026-05-18)
1.26.0 (2026-05-18)
1.25.0 (2026-05-16)
1.24.0 (2026-05-14)
- add app permission definitions for AWS, Cloudflare, Datadog, and Notion (#270) (b6bd222)
- add MongoDB Atlas Administration API integration (#261) (3cbbc02)
- add MongoDB Atlas, GitHub App integrations, org API keys, and OAuth refactoring (#267) (22b1611)
1.23.0 (2026-05-11)
- add activity page, app permissions, AWS integration, and request telemetry (#264) (85ffc35)
- add Cloudflare integration with Bearer auth on api.cloudflare.com (#265) (cbc7be3)
1.22.0 (2026-05-08)
1.21.1 (2026-05-07)
- include hostname in injection cache key (#251) (#252) (fa6468e)
- serve gateway skill definition from unified API endpoint (#255) (800ece8)
1.21.0 (2026-05-05)
- add cloud-only apps framework, credential header injection, and user provisioning schema (#247) (16dfe1a)
- generic OAuth interface, pro app badges, and credential resolution (#249) (ed2474f)
1.20.0 (2026-05-05)
- add OpenAI secret type, WebSocket proxy, and SecretInput component (#244) (a740187)
- add Todoist app integration (#242) (8accd63)
- make app and gateway ports configurable for multi-user hosts (#227) (ea4118e)
- support ONECLI_VERSION env var in install script (#246) (197d2f9)
- GitHub config to clarify OAuth App credentials (#245) (6ba8ae3)
- split Secrets tab into Custom/LLMs, swap logo to PNG, fix settings redirect (#241) (b73c8a3)
1.19.1 (2026-05-03)
- inject OAuth bearer on Google batch endpoints (#237) (5fa436d)
- resolve mobile layout issues and update session handling (#230) (bca6873)
1.19.0 (2026-04-30)
- add Jira and Confluence app integrations with Atlassian OAuth (#222) (0b7cd8e)
- add secret injection in query parameters (#194) (0956ec6)
- add Vertex AI integration with ADC import and token endpoint interception (#224) (3832ac6)
- add YouTube app integration for playlist management (#221) (5c43421)
- detect postgres port conflict in installer (#214) (6c6017c)
- harden secret param injection — security, UX, and correctness (#218) (aa5941b)
- secret dialog examples and overflow (#217) (e3ce339)
1.18.6 (2026-04-27)
1.18.5 (2026-04-27)
1.18.4 (2026-04-27)
1.18.3 (2026-04-26)
- improve gateway telemetry, app connections, and dashboard header (#204) (7a374eb)
- restrict local mode session auth to loopback requests (#201) (81d4352)
1.18.2 (2026-04-22)
1.18.1 (2026-04-20)
1.18.0 (2026-04-16)
1.17.0 (2026-04-16)
1.16.0 (2026-04-14)
- broaden access_restricted to cover secrets and app connections, add ResolvedRules struct, improve gateway cache auth (#185) (b6492a4)
- credential_not_found for unknown hosts, MITM all authenticated traffic, auth-related 400 handling (#186) (8cd44ce)
1.15.1 (2026-04-10)
1.15.0 (2026-04-09)
1.14.2 (2026-04-08)
1.14.1 (2026-04-06)
1.14.0 (2026-04-06)
- add GET /api/apps/[provider] route with setup hint (#167) (28db4c3)
- add loading skeletons and prefetch tab routes for instant navigation (#164) (aa00bce)
1.13.0 (2026-04-06)
1.12.1 (2026-04-05)
- configurable bind host for Docker port bindings (#153) (97a36d1)
- encrypt Bitwarden vault session state at rest in connection_data (#146) (e6de1e6)
- pre-fill secret name with "Anthropic Token" for anthropic type (#157) (86444e0)
1.12.0 (2026-04-03)
- add missing error handling in OAuth token exchange and credential decryption (#148) (d9e70c6)
- gateway: add GATEWAY_SKIP_VERIFY_HOSTS for selective TLS skip (#145) (962d948)
1.11.0 (2026-04-02)
1.10.0 (2026-03-31)
- add Google Drive app integration with path-prefix routing (#136) (4745147)
- unified credential access dialog and always-visible connect button (#138) (0b20830)
1.9.0 (2026-03-31)
- add Gmail app with OAuth token refresh and BYOC support (#130) (41c2a83)
- add Google Calendar app integration and rename google to gmail (#135) (64e080c)
- add Resend integration and API key connection type (#133) (86010ef)
1.8.0 (2026-03-29)
- add google_oauth secret type with form-body injection (#123) (b99798b)
- app connections with OAuth flow and gateway credential injection (#127) (aa8ec62)
1.7.2 (2026-03-26)
1.7.1 (2026-03-26)
- enable automatic container restart on failure or system reboot (#112) (c933ad9)
- invalidate gateway cache on secret and rule mutations (#117) (9966c98), closes #116
- postgres18 data mount (#111) (dee1206)
1.7.0 (2026-03-25)
- don't follow redirects server-side in MITM proxy (#108) (bdab279)
- rewrite denormalize migration to handle non-empty tables (#106) (a6e75b7)
1.6.0 (2026-03-25)
- missing Authority Key Identifier in MITM leaf certificates (#100) (3d26e8d)
- preserve Content-Length header in MITM responses (#102) (21ee091)
1.5.5 (2026-03-24)
1.5.4 (2026-03-23)
1.5.3 (2026-03-23)
1.5.2 (2026-03-23)
1.5.1 (2026-03-23)
- redesign rule dialog with two-step flow and brand colors (#85) (296d878)
- restructure settings with sub-navigation and reorder main nav (#87) (a1e6f3a)
1.5.0 (2026-03-22)
1.4.2 (2026-03-22)
- rename indexes and foreign keys to snake_case (#81) (bc9705c)
- route all server output through pino JSON in production (#79) (1d91ad1)
1.4.1 (2026-03-20)
1.4.0 (2026-03-20)
1.3.0 (2026-03-19)
1.2.1 (2026-03-19)
- add start_period and increase retries for postgres health check (#63) (789d285)
- increase health check start_period for migrations (#65) (077fe84)
1.2.0 (2026-03-18)
- add per-agent secret permissions with selective mode (#56) (7d47647)
- default new agents to selective mode with anthropic secret (#58) (f7dbe7d)
- detect Anthropic auth mode from secret metadata for correct container env vars (#61) (2e42480)
- scope container-config anthropic secret lookup to agent's secret mode (#62) (1a794b7)
1.1.6 (2026-03-16)
1.1.5 (2026-03-16)
- add explicit bridge network to Docker Compose for reliable DNS resolution (#49) (369a0b5)
- migrate gateway to Axum with direct DB access (#46) (d76445f)
- remove unused gateway connect API route and shared secret (#48) (ed5e9a3)
1.1.4 (2026-03-15)
1.1.3 (2026-03-15)
- add Discord link to README (#39) (4bb22ce)
- enforce server-side session validation in all server actions (#42) (1232b51)
- replace embedded PGlite with PostgreSQL (#43) (db44f62)
1.1.2 (2026-03-12)
- correct encryption key generation command for zsh compatibility (#34) (f5ade32)
- update README with how-it-works section and copy cleanup (#35) (e43ca55)