v0.9.37: workspace files paging and search, token sealing by default, scim hardening, db indexes

Merged
WA
1d ago
+202080-3659
  • docs(cli): add agent skills setup to the CLI overview (#9417)
  • fix(ci): predict the promoted app digest instead of trusting a read right after the retag (#9416)
  • fix(billing): withhold the free allowance from Gmail aliases of an existing account (#9418)
  • fix(desktop): hold the GitHub credential check open while the e2e asserts its pending state (#9420)
  • chore(deps): dependency hygiene cleanup (#9422)
  • chore(deps): replace deprecated OpenTelemetry trace SDK packages with @opentelemetry/sdk-trace (#9421)
  • fix(library): merge duplicate sections and FAQs in the ecommerce and Zapier alternatives posts (#9424)
  • chore(ci): authenticate Trigger.dev deploys with per-environment API keys (#9423)
  • perf(db): cut hot-path database work and close copilot cleanup gaps (#9419)
  • feat(db): seal account tokens by default and backfill them during migrate (#9425)
  • fix(files): cap how long a room delivery waits for its refetches (#9427)
  • fix(ci): fail the promote wait on a digest lookup error instead of retrying it (#9430)
  • chore(deps): drop the stray bun tag hunk from the zod patch (#9432)
  • fix(billing): serialize Gmail inbox allowance decisions so racing alias signups can't both keep it (#9431)
  • fix(scim): harden directory lifecycle and clarify group mappings (#9429) Harden suspension and OAuth revocation, fix group mapping races and cached memberships, and clarify provider setup guidance.
  • perf(db): index a workspace's live files in upload order (#9434)
  • fix(cleanup): keep shared chat files, sweep inline images by prefix, and make room refetches wait (#9433)
  • feat(files): page, search, look up and roll up workspace files over the session API (#9435)
  • perf(files): page the Files browser and resolve files without listing the workspace (#9436)
  • perf(audit-logs): index organization-level rows and read them as two keyset parts (#9437)