trueforge-dev-bot · Oct 28, 2026 · Oct 28, 2026
diff --git a/.changeset/20261016133543-regenerate-sdk-from-openapi.md b/.changeset/20261016133543-regenerate-sdk-from-openapi.md
diff --git a/.changeset/agent-model-param-fallbacks.md b/.changeset/agent-model-param-fallbacks.md
diff --git a/.changeset/agents-library-usage-columns.md b/.changeset/agents-library-usage-columns.md
diff --git a/.changeset/ask-question-markdown.md b/.changeset/ask-question-markdown.md
diff --git a/.changeset/balanced-artifact-download-paths.md b/.changeset/balanced-artifact-download-paths.md
diff --git a/.changeset/build-agent-new-chat-reset.md b/.changeset/build-agent-new-chat-reset.md
diff --git a/.changeset/context-summarization-events.md b/.changeset/context-summarization-events.md
diff --git a/.changeset/custom-cron-schedules-ui.md b/.changeset/custom-cron-schedules-ui.md
diff --git a/.changeset/default-reasoning-medium.md b/.changeset/default-reasoning-medium.md
diff --git a/.changeset/deferred-mcp-server-description.md b/.changeset/deferred-mcp-server-description.md
diff --git a/.changeset/fix-saved-agent-chat-reopen.md b/.changeset/fix-saved-agent-chat-reopen.md
diff --git a/.changeset/gateway-forward-pings-summarization-metadata.md b/.changeset/gateway-forward-pings-summarization-metadata.md
diff --git a/.changeset/hide-running-turns-shared-session.md b/.changeset/hide-running-turns-shared-session.md
diff --git a/.changeset/instructions-markdown-editor.md b/.changeset/instructions-markdown-editor.md
diff --git a/.changeset/keenable-mcp-catalog-preset.md b/.changeset/keenable-mcp-catalog-preset.md
diff --git a/.changeset/large-tool-response-size.md b/.changeset/large-tool-response-size.md
diff --git a/.changeset/markdown-list-markers.md b/.changeset/markdown-list-markers.md
diff --git a/.changeset/mcp-preserve-inputschema-defs.md b/.changeset/mcp-preserve-inputschema-defs.md
diff --git a/.changeset/metric-tooltip-scroll.md b/.changeset/metric-tooltip-scroll.md
diff --git a/.changeset/model-mcp-error-prefixes.md b/.changeset/model-mcp-error-prefixes.md
diff --git a/.changeset/model-warning-missing-properties.md b/.changeset/model-warning-missing-properties.md
diff --git a/.changeset/new-chat-web-search-default.md b/.changeset/new-chat-web-search-default.md
diff --git a/.changeset/npm-security-mcp-hono.md b/.changeset/npm-security-mcp-hono.md
diff --git a/.changeset/operation-metrics.md b/.changeset/operation-metrics.md
diff --git a/.changeset/paint-session-events-before-tip.md b/.changeset/paint-session-events-before-tip.md
diff --git a/.changeset/reasoning-effort-high-low-fallback.md b/.changeset/reasoning-effort-high-low-fallback.md
diff --git a/.changeset/safe-return-to-backslash.md b/.changeset/safe-return-to-backslash.md
diff --git a/.changeset/sandbox-env-schedule-admin-rbac.md b/.changeset/sandbox-env-schedule-admin-rbac.md
diff --git a/.changeset/sandbox-env-status-icons.md b/.changeset/sandbox-env-status-icons.md
diff --git a/.changeset/schedule-run-open-session.md b/.changeset/schedule-run-open-session.md
diff --git a/.changeset/schedule-run-session-id.md b/.changeset/schedule-run-session-id.md
diff --git a/.changeset/sentry-allowlisted-logs.md b/.changeset/sentry-allowlisted-logs.md
diff --git a/.changeset/session-last-turn-details.md b/.changeset/session-last-turn-details.md
diff --git a/.changeset/session-tokens-donut.md b/.changeset/session-tokens-donut.md
diff --git a/.changeset/session-turn-model-name.md b/.changeset/session-turn-model-name.md
diff --git a/.changeset/ssrf-block-https-http-redirect.md b/.changeset/ssrf-block-https-http-redirect.md
diff --git a/.changeset/subagent-tool-only-model-time.md b/.changeset/subagent-tool-only-model-time.md
diff --git a/.changeset/superseded-ask-user-not-cancelled.md b/.changeset/superseded-ask-user-not-cancelled.md
diff --git a/.changeset/timeline-chart-scroll.md b/.changeset/timeline-chart-scroll.md
diff --git a/.changeset/timeline-turn-hover-times.md b/.changeset/timeline-turn-hover-times.md
@@ -1,5 +1,27 @@
 # @truefoundry/trueforge-assistant-ui-runtime
 
+## 0.181.0
+
+### Patch Changes
+
+- 9bed345: Emit `thread.context_compaction_started` / `thread.context_compaction_finished` around context compaction (trigger, usage, duration_ms).
+- 2b88c4b: Paint a loaded session from its events window before confirming the tip, and stop fetching the oldest turn to decide whether that tip is still running. A send that applies its message in that window is kept, a send that fails before then still lets the load finish, and a tip that finishes before its done event is still shown.
+- 90c7b1c: Unify admin checks with `hasAdminRole` (tenant-admin in TrueFoundry) and gate sandbox environment create to admins while allowing the creator or an admin to update or delete. Expose schedule and sandbox environment `MANAGE`/`DELETE` (and tenant `sandbox_environment` `CREATE`) via list-permissions so the UI matches the API; settings access remains disabled in TrueFoundry via `canAccessSettings`.
+- 36f95f5: Open the linked session in the Sessions page when clicking a schedule run on the Schedules page.
+- 457d16e: Show the model name in each turn header of the session view.
+- 28f5105: Stop showing a "cancelled" banner on a turn that paused for user input when the user sends a new message instead of answering.
+
+## 0.181.0-rc.1
+
+### Patch Changes
+
+- 9bed345: Emit `thread.context_compaction_started` / `thread.context_compaction_finished` around context compaction (trigger, usage, duration_ms).
+- 2b88c4b: Paint a loaded session from its events window before confirming the tip, and stop fetching the oldest turn to decide whether that tip is still running. A send that applies its message in that window is kept, a send that fails before then still lets the load finish, and a tip that finishes before its done event is still shown.
+- 90c7b1c: Unify admin checks with `hasAdminRole` (tenant-admin in TrueFoundry) and gate sandbox environment create to admins while allowing the creator or an admin to update or delete. Expose schedule and sandbox environment `MANAGE`/`DELETE` (and tenant `sandbox_environment` `CREATE`) via list-permissions so the UI matches the API; settings access remains disabled in TrueFoundry via `canAccessSettings`.
+- 36f95f5: Open the linked session in the Sessions page when clicking a schedule run on the Schedules page.
+- 457d16e: Show the model name in each turn header of the session view.
+- 28f5105: Stop showing a "cancelled" banner on a turn that paused for user input when the user sends a new message instead of answering.
+
 ## 0.180.0
 
 ### Patch Changes

@@ -1,5 +1,37 @@
 # @truefoundry/trueforge-core
 
+## 0.181.0
+
+### Patch Changes
+
+- 9bed345: Emit `thread.context_compaction_started` / `thread.context_compaction_finished` around context compaction (trigger, usage, duration_ms).
+- f5427d9: Pass each MCP server's saved description into deferred tool instructions. A server with `preload: false` now shows its description before its tools are listed.
+- a527e57: Send `x-tfy-forward-pings: true` on TrueFoundry-mode model invokes. Support per-call LLM `headers` and `metadata` (TrueFoundry folds metadata into `x-tfy-metadata`), and stamp `tfg.compaction: true` on context-compaction calls so those requests are visible in traces.
+- 7318806: Blocked large tool response messages now state the exact content size and which limit blocked it, in characters (`Content too large (50,000 characters; this response exceeds the 24,000-character limit for a single response). Result saved to: …`, at the default thresholds; responses blocked by the parallel total instead say the parallel responses together exceed the combined limit), and the file-dump message prompts the model to plan reads against the total instead of guessing with small incremental reads.
+- fcb48de: Keep local `$defs`/`definitions` containers when converting preloaded MCP tool input schemas, so `$ref` pointers resolve instead of being dropped.
+- 6247d67: Prefix model and MCP failures so logs and the chat error show which system failed.
+- 4682d87: Bump npm-security dependencies: `@modelcontextprotocol/sdk`, `hono`, and `undici`.
+- e0566ef: Record outbound HTTP, model calls, MCP, harness limits, tool-call duration, active threads, turn lifetime, Parallel web search, ServiceFoundry requests, and Postgres query duration on the existing Prometheus scrape. Daytona and Redis SDK meters are included on that same scrape.
+- 82e50e2: Report logged failures to Sentry except HTTP statuses from 200 through 499, including when that status sits on a wrapped cause. The log message is the Sentry title, and the thrown error is the cause and stack. Those events include the active tenant, request, session, and turn ids. Printed lines omit that marker even when Sentry is off.
+- c21132e: Sessions now return `last_turn_details` (`{ id, state: { status } }`, null before the first turn), kept in sync as the last turn changes status. Existing sessions are backfilled.
+- 012f8fc: Block HTTPS-to-HTTP redirects in the outbound SSRF-guarded fetch so cleartext downgrades cannot follow a secure hop.
+
+## 0.181.0-rc.1
+
+### Patch Changes
+
+- 9bed345: Emit `thread.context_compaction_started` / `thread.context_compaction_finished` around context compaction (trigger, usage, duration_ms).
+- f5427d9: Pass each MCP server's saved description into deferred tool instructions. A server with `preload: false` now shows its description before its tools are listed.
+- a527e57: Send `x-tfy-forward-pings: true` on TrueFoundry-mode model invokes. Support per-call LLM `headers` and `metadata` (TrueFoundry folds metadata into `x-tfy-metadata`), and stamp `tfg.compaction: true` on context-compaction calls so those requests are visible in traces.
+- 7318806: Blocked large tool response messages now state the exact content size and which limit blocked it, in characters (`Content too large (50,000 characters; this response exceeds the 24,000-character limit for a single response). Result saved to: …`, at the default thresholds; responses blocked by the parallel total instead say the parallel responses together exceed the combined limit), and the file-dump message prompts the model to plan reads against the total instead of guessing with small incremental reads.
+- fcb48de: Keep local `$defs`/`definitions` containers when converting preloaded MCP tool input schemas, so `$ref` pointers resolve instead of being dropped.
+- 6247d67: Prefix model and MCP failures so logs and the chat error show which system failed.
+- 4682d87: Bump npm-security dependencies: `@modelcontextprotocol/sdk`, `hono`, and `undici`.
+- e0566ef: Record outbound HTTP, model calls, MCP, harness limits, tool-call duration, active threads, turn lifetime, Parallel web search, ServiceFoundry requests, and Postgres query duration on the existing Prometheus scrape. Daytona and Redis SDK meters are included on that same scrape.
+- 82e50e2: Report logged failures to Sentry except HTTP statuses from 200 through 499, including when that status sits on a wrapped cause. The log message is the Sentry title, and the thrown error is the cause and stack. Those events include the active tenant, request, session, and turn ids. Printed lines omit that marker even when Sentry is off.
+- c21132e: Sessions now return `last_turn_details` (`{ id, state: { status } }`, null before the first turn), kept in sync as the last turn changes status. Existing sessions are backfilled.
+- 012f8fc: Block HTTPS-to-HTTP redirects in the outbound SSRF-guarded fetch so cleartext downgrades cannot follow a secure hop.
+
 ## 0.180.0
 
 ### Patch Changes

@@ -1,3 +1,7 @@
+## [0.181.0] - 2026-10-28
+
+## [0.181.0-rc.1] - 2026-10-26
+
 ## [0.180.0] - 2026-10-23
 
 ## [0.180.0-rc.0] - 2026-10-21
@@ -22,6 +26,20 @@
 
 ## [0.2.1-rc.0] - 2026-09-22
 
+## 0.181.0
+
+### Patch Changes
+
+- 5bb093e: Regenerate SDK from updated OpenAPI spec.
+- 90c7b1c: Unify admin checks with `hasAdminRole` (tenant-admin in TrueFoundry) and gate sandbox environment create to admins while allowing the creator or an admin to update or delete. Expose schedule and sandbox environment `MANAGE`/`DELETE` (and tenant `sandbox_environment` `CREATE`) via list-permissions so the UI matches the API; settings access remains disabled in TrueFoundry via `canAccessSettings`.
+
+## 0.181.0-rc.1
+
+### Patch Changes
+
+- 5bb093e: Regenerate SDK from updated OpenAPI spec.
+- 90c7b1c: Unify admin checks with `hasAdminRole` (tenant-admin in TrueFoundry) and gate sandbox environment create to admins while allowing the creator or an admin to update or delete. Expose schedule and sandbox environment `MANAGE`/`DELETE` (and tenant `sandbox_environment` `CREATE`) via list-permissions so the UI matches the API; settings access remains disabled in TrueFoundry via `canAccessSettings`.
+
 ## 0.180.0
 
 No changes in this release.