Browserless tools and the browser tool share one browser per session, and now run one at a time instead of racing on the same page. browserless_content, browserless_scrape and browserless_screenshot read in a tab of their own, so they no longer move the page the agent is working in.

A browser key press now reports where focus landed (Pressed Tab. Focus is on link "Vision".), and read_page marks the focused element, which makes keyboard and accessibility testing practical.

Connecting a connector that is turned off for the organization now says so, and where an admin turns it on, instead of reporting an unknown connector.

In code: routes under /v1/channels/{channel_id} start sessions, send messages, follow events over SSE, answer questions, approve tools and cancel turns. A key sees only the sessions it started. Channel settings add end users through your own identity provider, browser origins, Idempotency-Key retries, a daily spend limit per caller, and access for organization members.

See Call your agent from code, Agent API and #4438, #4490, #4508, #4511, #4514, #4516.

tools github list-pulls '{"repo":"acme/api","state":"open"}' | jq -r '.[].number'

Every call goes through the turn’s tool policy. A script that would make a call needing approval is held before it starts. tools plan lists a script’s calls and their risk without running anything. Tools with no risk hints are rated once, which Rate unlabeled tools can turn off. Each call shows in the session timeline under its shell call.

See Tools in Shell and #4385, #4388, #4435, #4439, #4443, #4501.

In the UI: a session now opens on Trace, which replaces the Transcript and Timeline tabs. A turn rail with a minimap leads to each turn’s steps: model calls, tool calls, approvals, sub-agents and messages, with waterfall timing bars. The step inspector shows input, output, the full model request and raw events. Batches and sub-agents expand inline, search jumps to a hit, and j and k move between steps. The view, error filter and selected step live in the URL.

In code: read the same data from /v1/sessions/{id}/trace, or with everruns sessions trace get and everruns sessions trace turns list.

See Web UI, the sessions CLI reference and #4481, #4500, #4503, #4556.

The server now keeps an in-memory SQLite cache per database and, after every write, stores only the changed 4 KB pages in PostgreSQL in one transaction. A server that does not have the database cached rebuilds it from the stored pages, and each commit is a compare-and-set so concurrent writers cannot overwrite each other. Agents keep using sql_execute, sql_query and sql_schema as before.

See SQL database and #4553.

{ "ref": "poppy_client", "config": {} }

The deployment holds one personal agent identity with pairwise user IDs, and keys and session tokens stay in the control plane. A Poppy channel type serves the company side of the protocol.

See Poppy personal agent and #4479, #4549, #4558.

For agents: with the User MCP Servers capability (user_mcp), each turn adds the enabled servers of the person chatting. Platform Chat has it on, with manage so it can add and connect servers mid-conversation after approval. Personal servers load their tools on demand unless you turn off Load tools on demand.

See User MCP servers, the capability and #4295, #4315, #4345, #4381, #4496.

In the UI: open Settings > MCP catalog and click Tools on a server. Suggest labels asks a decision model to judge unlabeled tools; nothing changes until someone picks a choice or clicks Use suggestion.

In code: PUT /v1/mcp-servers/{id}/tools/{tool_name}/label with {"label": "read_only"}, or everruns mcp-servers label-tool and suggest-labels on the CLI. Label changes are in the server’s history.

See Which tools ask before they run and #4475, #4498.

Organizations are migrated once: agents bound to the old Worker move to Bashkit Worker or Sandbox Worker based on their sandbox policy. Worker Base and Generic stay as deprecated harnesses for existing bindings.

See Built-in harnesses and #4484.

For agents: llm_judge and mcp checks are now valid on the output stage. They run once on the finalized assistant message, with the same caps, advisory downgrade and fail-open behavior as the tool stages.

See Guardrails and #4459, #4542.

Turn on Only when the CI result changes in the GitHub trigger form to wake the agent only when the outcome for a workflow and branch changes, for example from passing to failing, instead of on every run. Triggers expose this as the changes_only filter.

See Agent triggers, Summarize GitHub pull requests and #4541, #4546.

This fits Slack channels and conversations with several people, where the agent should answer only when it has something to add. The setting is on the agent in the web UI, the API, agent packages, the Framework builder and the CLI, and it replaces Slack’s per-endpoint reply mode. Every sent message is recorded as a conversation.message event.

See Explicit communication and #4447.

Every outbound request is logged on the everruns::egress::audit target with its decision, host, status, organization and session.

A platform administrator can let an organization extend the allowlist with up to 50 host patterns, or grant it open egress. Manage this with everruns orgs egress-allowlist.

See Network access, the orgs CLI reference and #4432, #4437, #4452, #4534.

The screen now offers Sign in again. Signing in again at Everruns ID sends a fresh verification link if the old one expired, and you continue to onboarding once the address is verified.

See Everruns Cloud quickstart.

A credit chip under the sidebar shows the balance and links to Billing. A banner appears on every page when credit is low (under $1), below zero, or used up, asking members to contact an admin and admins to top up.

See Credit and the spend cap.

Connecting a personal ChatGPT plan used to depend on an organization feature flag that hosted deployments kept off. The flag is gone: connecting the provider is the opt-in, and each connection already belongs only to the user who signs in.

Open Models → Providers → Connect provider → ChatGPT → Sign in with ChatGPT, approve plan use in ChatGPT, then pick a discovered model in the chat model picker. The composer shows Using your ChatGPT plan. Other users, shared defaults and Playground cannot use your connection.

See ChatGPT plan and #4329, #4547.

In code: POST /v1/sessions/{id}/messages accepts an optional client_message_id. Sending the same one again returns the stored message instead of starting a second turn, and the response reports whether the message started, steered or resumed a turn. The CLI takes --client-message-id.

See Chat and threads and #4502, #4494, #4480.

Clients must move to the Agent API routes under /v1/channels/{channel_id}. Old request shapes get 400 api_endpoint_retired pointing at the Agent API docs, and /v1/apps/{app}/api/{chan} routes return 410.

See Call your agent from code, Agent API and #4527.

This is the Require reasons from agents feature flag, now on by default. An organization can turn it off to let such changes through with a warning, which the everruns_entity_changes_without_reason_total metric counts. People in the UI and scripts calling the API may still leave the reason out.

See Reasons and #4271, #4552.

Budget summaries also carry the budget ID, so a client can tell which of several stacked budgets stopped the turn. To continue, top up the exhausted budget with the budget API or CLI.

See Budgets and #4477.

In the UI: an organization administrator turns on Voice in Settings → Features. Then add a voice channel from the agent’s Integrations tab and use its talk button. Speech uses an OpenAI provider.

In code: everruns::voice puts a voice channel in front of any Framework session, and serve’s voice feature gives every top-level agent browser calls.

See Voice, Framework voice and #4394, #4402, #4406.

Providers moved out of Settings into Registries → Models, which has three tabs. Models lists every model from every connected provider and flags new ones a sync discovered for review. Providers connects a provider in one sheet: driver, name and key, then the models to enable, with recommended ones ticked. Defaults sets the organization’s default model, decision model and default providers per service.

Provider names are now unique within an organization. Managing providers and models needs the org:models:manage permission, which replaces the separate provider permission.

See Models, Providers and #4458.

In the UI: open Settings → My agent experience to see each client and when it was last used, and revoke any you no longer use. Revoking deletes the client’s refresh tokens, and its next request is refused.

In code: GET /v1/user/connected-clients lists them and DELETE revokes one. Every MCP request checks that its grant is still live.

See Use Everruns in AI tools and #4461.

curl -H "Accept: text/markdown" https://app.everruns.com/

MCP connect dialogs also show the Everruns icon for the app.

See Use in AI Tools.

Everruns now leaves that metadata out of the request body while keeping the session HTTP header and host observability metadata. No configuration change is needed; existing ChatGPT connections work after upgrading.

See ChatGPT plan and #4464.

In the UI: the Agents page shows each agent’s channels and triggers, 24-hour run bars and a Needs attention list for setup problems. Its Channels view lists every channel in the organization with publish and unpublish, people reached and fastest first reply. It replaces the Exposures page; /exposures now redirects there.

New agent offers Describe, Example, Blank and Import. Describe drafts the agent with the utility model, and Create makes the agent with its draft channels and schedule trigger.

In code: everruns agents draft runs the same agent builder from the CLI.

See Web UI, Channels and #4399, #4448, #4457.

Inside the shell, tools scripts lists and runs them with the caller’s tools and identity, and with manage_scripts on the agent can save new ones.

A schedule or webhook trigger can run a script without asking the model:

{ "script": { "script": "triage-prs", "input": { "pr": "{{payload.pull_request}}" } } }

Input strings are templates over the event, so a webhook payload reaches the script.

See Saved scripts, Agent triggers and #4390, #4400, #4403, #4423.

Agents can now operate a full Linux desktop instead of only a browser page. The experimental computer_use_desktop capability runs the provider-neutral computer tool on an E2B desktop sandbox, and computer_use_daytona runs it on a Daytona sandbox through Daytona’s Computer Use API. The session creates the desktop on first use, keeps it between calls and deletes it when its lease ends.

The computer tool also gained zoom, cursor position, mouse button down and up, hold-key and modified drag actions on Daytona, E2B and Browserless.

Connect E2B or Daytona first, then add one computer-use capability to the agent; only one can provide the computer tool.

See Computer use and #4244, #4365, #4367.

In code: the Framework’s everruns::coordination capability runs threads as sessions of the same engine. Threads wake the coordinator with automatic updates, and coordination::threads returns each thread’s status, such as NeedsYou, Working or ReadyForReview.

See Chat and threads, Coordination and #4372, #4377.

The browser_use capability gives an agent a browser tool on a Browserless browser. Pages are read as an accessibility tree with element refs, and the agent acts by ref or viewport coordinate, fills forms, finds text and works across tabs. Traffic goes through the Everruns network guard.

On Claude models that support Anthropic’s native browser toolset, the capability uses it directly; set native_tools: false to keep the function tool.

Browser use is experimental and ships behind the browserless_browser_use feature flag.

See Browser use and #4375, #4376.

Its profile has tiered pricing, up to 128K output tokens, always-on adaptive thinking with medium effort by default, preserved thinking, tool search and the computer toolset. Select it in an agent’s model picker or reference claude-haiku-5-5 wherever a model ID is accepted.

See Anthropic and #4359.

To let agents sign in to a Public Chat channel, register an AgentID client, set AGENTID_CLIENT_ID and AGENTID_CLIENT_SECRET on the server, and set the channel’s sign-in to AgentID. The chat page then shows Continue with AgentID.

Going the other way, the experimental AgentID sign-in capability gives an agent the agentid_authorize tool, which approves an app’s AgentID sign-in for the agent’s AgentMail inbox.

See Sign in with AgentID, AgentID and #4326, #4334, #4337.

Add pact to an A2A channel’s config to accept personal agents under the PACT 1.0 Identity profile, with each conversation bound to the calling user. With delegation on, the channel runs an OAuth device-code sign-in so a personal agent can act as a company user through the configured MCP server, and delegated replies carry a signed receipt.

See A2A, Personal agents (PACT) and #4322, #4328, #4350, #4352.

In the UI: open the ⋯ menu on an entity’s page. History lists changes with their reasons, and Restore this point asks for a reason. Manager notes holds context agents read before changing the entity.

In code: pass a reason with --reason on the CLI or the Everruns-Change-Reason header, and read history with everruns history list, show, diff and restore.

See Change history, the history CLI reference and #4228, #4264, #4272.

Version endpoints, CLI verbs and fields such as agent_version_id and default_version_id are removed. To go back to an earlier configuration, use History → Restore this point on the agent page or everruns history restore.

See Agent revisions replace agent versions and #4312.

In the UI: open Sandbox Templates and select New Sandbox Template. The Sandboxes page lists every sandbox across providers and states, with a lifecycle timeline, a Needs attention filter and pause, resume and delete in the detail drawer. Both sit in the collapsible Sandboxes sidebar group.

In code: GET /v1/sandboxes lists the fleet; /stats and /timeline back the page.

See Sandbox Templates and #4199, #4246, #4262.

In code: PUT /v1/agents/{agent_id}/avatar uploads an image as the multipart field file, and PUT /v1/agents/{agent_id}/avatar/preset selects a preset. The agent’s avatar field lists public, immutable image URLs. The A2A Agent Card carries it as iconUrl, and one-click Slack apps use it as their icon.

See Web UI and #4198, #4220.

Review issues in Settings > Health, beside the channel’s settings, and under Action required in the notification menu. Managed apps get a repair that extends the app’s manifest before Slack asks for consent again; manually configured apps get scope, reinstall and token guidance. Reading or snoozing an issue keeps it active until a fresh check passes. From the CLI, use everruns health-issues.

See Resolve installation issues. PR #4134.

Chat now always uses the managed Platform Chat agent. The sidebar opens your permanent conversation, New chat starts a side conversation, and All chats lists only your personal conversations. Platform Chat runs on the shell-based implementation for every organization.

See Chat and Threads and Platform Chat. PRs #4060, #4076, #4121, #4129.

Generic is deprecated but unchanged. Selectors hide it behind Show deprecated. On upgrade, agents that inherited Generic as the default are pinned to it, so their behavior does not change. A custom harness whose name collides with a new built-in keeps its ID and definition, but its slug moves to <name>-custom; update callers that look it up by name.

In code: Harness::base(), conversation(), worker_base() and worker() build the same presets.

See Harnesses and the upgrade notes. PR #4133.

On models with a native computer tool, the agent uses the provider’s tool instead; set native_tools to false to always use the function tool. max_actions_per_session caps actions per session, and navigation passes the egress guard. No call waits for a person by default: add soft_approval to record confirmations, or tool_approval to approve every call.

See Computer use. PRs #3922, #3968, #4064.

Create a New thread, search conversations, and open work from its card, where you can answer pending input or stop it. Resolve thread puts a conversation away without losing history, and Reopen thread continues it. The panel becomes a drawer on mobile. Turning the feature off restores the previous Chat and keeps conversations and their URLs.

See Chat and Threads. PR #4146.

Organization admins and owners also get an Approvals page under Operational. It filters all activity, recorded approvals, or requests, and links each entry back to its session. It reads the existing approval audit records, so earlier history appears too.

See Soft approval. PR #4110.

Two gateway providers are available. Cloudflare reaches many upstream providers and Cloudflare’s own Workers AI models through one account token and account ID. Vercel AI Gateway uses its OpenAI-compatible Responses endpoint and syncs its model list.

The Cloudflare provider lists Workers AI text-generation models with their context window and tool support. Third-party model IDs on Cloudflare are still added by hand, because no endpoint lists what an account can bill.

This also fixes a token dropped from Cloudflare streams when the model emitted a purely numeric token.

See Cloudflare and Vercel. PRs #3996, #4021.

In code: the ag-ui feature lets any Rust host stream a Framework session to an AG-UI client without the Everruns server. Session::ag_ui(input) returns the run as AG-UI 1.0 events, and ask_user questions and tool approvals become interrupts. A durable thread store keeps history between runs, and the ag-ui-axum feature adds a ready-made route:

cargo add everruns --features ag-ui-axum

See AG-UI channels and Serve AG-UI. PRs #3965, #3967, #3972, #3979, #3976, #3998, #4000.

In code: the a2a feature of everruns-serve answers A2A 1.0 for every top-level agent at POST /v1/e/{agent}/a2a, the same paths an Everruns A2A endpoint uses.

See A2A and Framework A2A. PRs #3999, #4010, #4013, #4014.

Each agent you put in Slack gets its own Slack app. In the agent’s Slack channel editor, choose a workspace if there is more than one and select Add to Slack. Everruns creates the app and opens Slack’s consent screen with that workspace selected. The channel then shows Live in Slack with an Open in Slack link.

See Connect a Slack workspace and Publish to Slack. PRs #3830, #3977.

Calls at xhigh and max reasoning effort on OpenAI and Azure run as background responses. If the stream drops or the worker restarts, Everruns picks the response back up instead of paying for it twice. A cancelled turn cancels the response, and the openai/background driver option overrides the policy.

See OpenAI. PRs #3932, #3969.

• An MCP client calls events/subscribe on /mcp to receive signed webhooks for session.completed, session.failed and session.input_required. Callbacks must be public HTTPS URLs and are verified before the first event.
• An agent trigger with trigger_type: "mcp_event" subscribes to an event one of the agent’s own MCP servers publishes, such as a tracker announcing new issues, and starts a session when it arrives.

See MCP and Agent triggers. PRs #3931, #3970.

The templates add GitHub review, issue upsert and pull request tools, enforced by the GitHub capability’s configuration, and a guided setup page.

See Set up review and security agents. PR #3980.

{ "ref": "openai_server_tools",
  "config": { "tools": ["code_interpreter", "shell", "file_search"],
              "file_search_vector_store_ids": ["vs_abc123"] } }

Hosted calls show in the work log and are priced in usage. Each remote MCP call pauses on an approval card by default. A server that needs credentials is named by its registered Everruns MCP server, and its URL and token are resolved per call, never stored in agent config or events.

See OpenAI server tools. PRs #3918, #3923, #3928, #3930.

An agent can now act on GitHub pull requests. Use the Connect GitHub card on the agent’s Integrations tab to create and install the agent’s own GitHub App. The GitHub capability then gives it get_github_pull_request, get_github_pull_request_diff and upsert_github_comment.

Add a trigger in GitHub mode, or from the CLI with --github-events and --repositories, to start work on pull request events. Webhooks are signature verified, deduplicated by delivery ID, and routed to one session per pull request. Every trigger now shares that pipeline, so webhook triggers also accept filters and dedupe templates.

See Summarize GitHub pull requests. PRs #3935, #3943, #3915.

GPT-6.1 Sol joins the OpenAI models. Its controls.speed setting accepts fast and ultrafast. The OpenAI drivers reject a speed tier the model does not list before sending, and usage is priced at the tier that served the call.

Anthropic sunset Claude Sonnet 4.5, so its model profile and catalog entry are removed.

See Anthropic and OpenAI. PRs #3902, #3925, #3952.

The Everruns MCP server at /mcp is now an MCP App. In hosts that render MCP Apps, such as ChatGPT and Codex, running an agent shows a session view with status, messages and a reply box. Agent questions appear as a form, and pending approvals as Approve and Decline buttons that refuse stale clicks. An Everruns panel opens from the ChatGPT sidebar.

Hosts that do not render apps get the same tools as plain text, and the existing tool shapes are unchanged.

See MCP: In ChatGPT and Codex. PR #3927.

MCP servers, credentials, branding, starter files, network access, token usage and health check open as side sheets from More. Version history and archive move to the header’s More actions menu. Old /edit links open the page in edit mode, and /sessions opens the Sessions tab.

See Agent page. PR #3917.

• Over /mcp, the question set is a form-mode elicitation. A client that never declared elicitation gets the declared defaults.
• Over inbound A2A, the task reports that input is required, with the question as text and as a data part under everruns/ask_user. Reply with a data part under everruns/ask_user_answer.
• Over MCP Tasks, tasks/get exposes the pending form through inputRequests, and tasks/update answers it.

See Ask User, MCP and A2A. PRs #3781, #3780, #3828.

In code: implement the AskUser trait to answer questions from your own interface when you embed the Framework.

See Ask User and Answer an agent’s questions. PRs #3735, #3738, #3747, #3757, #3790.

• A request that ends on an assistant turn (prefill) fails fast with a configuration error that names the fix, instead of a provider 400 and a retry cycle.
• An explicit none reasoning effort maps to low on models where thinking cannot be turned off. Before, the driver sent nothing and the API ran at its own default.
• Each request in a session replays the previous one and only appends to it, so preserved thinking stays valid across turns.

See Anthropic. PRs #3782, #3783.

Now it returns to the login page and says whether sign-in was cancelled, the 10-minute sign-in window expired, or Everruns ID could not be reached, with a Try signing in again action. A connection failure while exchanging the login code is retried before it fails, and a malformed token response is reported as unavailable rather than as an expired link.

See Everruns Cloud quickstart.

GPT-6 Luna replaces GPT-5.6 Terra as the platform default model. It is also the default utility model behind Agent Analyze, Health checks and llm_judge guardrails; set UTILITY_LLM_MODEL to choose another.

See Anthropic, OpenAI and environment variables. PRs #3769, #3771, #3774.

One-click install needs a Slack app configuration token on the deployment, which Everruns Cloud has. Without one, the button is hidden and the manual fields stay available under Configure manually.

See Publish to Slack and Slack. #3724

In agent config: an MCP entry can reference a preset with catalog:<name> and say whose sign-in its calls use with actsAs (none, service, user or user_or_service):

{ "github": { "use": "catalog:github", "actsAs": "user" } }

See MCP and MCP credentials. #3726, #3675, #3638

In the UI: with the app_budgets feature flag on, the agent’s Integrations tab manages agent and endpoint budgets, showing the period, its UTC reset and any refusal. Members without budget.manage see them read-only.

Slack and FCP endpoint budgets now bind and are enforced. If you configured one before and it never took effect, it starts limiting spend.

See Budgets and Enforce a budget. #3719, #3623, #3625

• Approvals: when an agent pauses with request_approval, the thread shows buttons. Only the person the agent is answering can use them, and answering removes the buttons. Apps created earlier must save a fresh manifest once.
• Task progress: a delegating agent posts one message, updated in place, that summarizes its sub-tasks, for example how many finished or failed.
• Slack actions: a native slack capability adds slack_add_reaction, slack_update_message, slack_lookup_user and slack_upload_file, using the endpoint’s own bot token instead of a separate Slack MCP server.

See Slack approvals, task progress and Slack actions. #3696, #3697, #3693

In the UI: an agent’s Integrations tab lists its endpoints and triggers, each with its own publish switch and real endpoint URL, plus a switch to suspend all of the agent’s exposures at once. A new Exposures page lists every endpoint and trigger in the organization, flags anonymous live ones, and can suspend or resume an agent. App management pages are gone.

In the API: publishing moves one endpoint. Suspend with POST /v1/agents/{agent_id}/exposures/suspend and resume with .../resume. App write and command surfaces are removed; existing App records are frozen and ingress URLs keep working.

See Channels and Agent triggers. #3698, #3624, #3627, #3621

It is enabled at normal on the Generic and Platform Chat harnesses. The approver is resolved on the server from the authenticated message, never from what the model says, and recorded as agent.approval.requested and agent.approval.granted in the audit log.

See Soft approval. #3655

everruns agents list
everruns sessions --help

In code: a Framework application exposing its own command tree can name its root token with CliCommandSource::root instead of everruns.

A Platform Chat v2 harness built on this command line is available behind an organization opt-in flag. See CLI and CLI reference. #3680, #3490, #3496

Before this change, a machine set to dark mode got a partly dark interface; the whole UI now switches together, with semantic status colors that work in both themes.

See UI. #3637, #3639

Set agent_surface_enabled on a Slack channel and its app also appears as an agent in Slack’s dedicated assistant pane, while @mentions in channels keep working. In the pane, replies stream as the agent writes them, the stop button cancels the running turn, and the agent’s status and thread title show while a turn runs. Thread context is persisted and given to the agent, and replies post as markdown blocks.

The generated manifest declares the agent feature and fills Slack’s suggested prompts from the agent’s conversation starters, or the harness’s. An existing app must update its manifest and reinstall to gain the pane.

See Slack and Publish to Slack. #3560, #3564, #3606

Settings > Billing shows available credit, the starter and purchased split, and what running work holds. Owners and admins buy more credit there; every member can see the balance. At zero balance the built-in provider refuses new calls, while models on your own provider keys keep working.

See Everruns Cloud quickstart.

In the UI: the session Workspace tab gains an Environment panel.

In the API: GET /v1/sessions/{id}/environment and GET /v1/environment-targets are read-only views of the same data. The feature is enabled wherever sandboxes are.

In code: the Framework’s Environment gains named compute and containment members, with HostCompute behind the host-compute feature.

See Workspaces and environments. #3599

See Everruns Cloud quickstart.

In the API: POST /v1/sessions/{id}/messages?wait=true returns 200 with the turn result when the turn completes or fails, or 202 with partial messages when timeout_ms (default 120 s, at most 600 s) expires. Without wait it still returns 201 immediately, so existing clients are unaffected.

In code: RunOptions::timeout bounds Session::run_with; when it expires the in-process turn is cancelled and its outcome returned.

See Sessions and Stream events. #3541

In the UI: the chat composer offers PDF attachments when the selected model accepts PDF input, and shows each attachment as a file chip.

In the API: upload a PDF with POST /v1/files (PDF only, up to 32 MB), then reference it as a file content part in the message. GET /v1/files, GET /v1/files/{id} and DELETE manage stored files. Everruns converts the attachment for each provider, including Anthropic documents, Gemini inline data, Bedrock documents and OpenAI file inputs.

See UI. #3535

See Session schedules. #3527

platform_management is retired. Its 14 hand-written tools are replaced by the platform capability, which derives the same surface from the command catalog. Agents that still list platform_management should switch to platform.

See Platform Management (removed) and Platform. #3513

Platform Chat also runs on a wider capability set, adding current time, message timestamps, a to-do list, prompt caching, tool call repair and parallel tool calls. Existing organizations pick these up without a migration.

See Platform Chat. #3508, #3507

{ "config": { "fallback": "auto" } }

Credentials now come only from configured providers. The capability no longer reads OPENAI_API_KEY or OPENAI_BASE_URL from session secrets.

See OpenAI image generation. #3523

In the API and CLI: POST /v1/providers/check-credentials checks a key without storing it:

everruns providers check-credentials check --provider-type openai --api-key "$OPENAI_API_KEY"

Disabled models can be re-enabled. See Providers and CLI providers. #3526, #3516, #3515

The descriptions of create_agent, create_session and create_message also state their argument constraints, so an agent gets them right on the first call.

See Authentication. #3533, #3530

This keeps untrusted repository instructions below harness safety instructions and keeps the system prompt stable for caching. Resolution is bounded to 16 files, 32 KiB each and 128 KiB in total.

See Agent instructions and Use AGENTS.md. #3501

• OpenAI GPT-6 Astra (gpt-6-astra), seeded as an enabled favorite. Its reasoning effort accepts a new max tier above xhigh.
• Claude Fable 5.1 (claude-fable-5-1 and its 1M-context variant), seeded as enabled favorites with adaptive thinking.
• Muse Spark 1.3 and its Contributor tier on the Meta Model API. Muse Spark 1.2 stays selectable.

New organizations get them on the Models page automatically.

See Providers, Meta and Anthropic. #3363, #3351, #3352

In the UI: a tool call that stops on a URL elicitation pauses the turn on a confirmation card. The consent is single use and bound to the server, tool and domain you were shown.

For MCP clients of Everruns: the /mcp endpoint gains session_set_secret and connect, which point you at a form Everruns serves instead of taking the value.

See MCP URL elicitation and Complete a URL elicitation. #3354

For OpenAI Chat Completions and Open Responses, compatible tools are now sent with strict schemas. A schema that cannot be converted safely is sent non-strict, as before.

See Tool Call Repair and #3336.

Admins see no change. See #3315.

To go back to the platform default after choosing a model, select the platform default option, or send "default_model_id": null in PATCH /v1/orgs/{org}. Omitting the field leaves the setting unchanged.

See CLI: models, #3114 and #3321.

The chat composer is also locked when no explicit or default model resolves, with the model menu left enabled to fix it.

See Stream events, #3296 and #3295.

Verification and password-reset emails now carry the Everruns logo, an action button, a visible fallback link and an expiry note, with a complete plain-text version. A login started directly at Everruns ID, rather than from the app, now finishes on app.everruns.com instead of the ID landing page.

See Everruns Cloud quickstart.

Replay to providers is also more accurate: Anthropic thinking blocks keep their own signatures, including redacted_thinking; OpenAI reasoning items keep the ids the provider issued; and the Gemini driver now requests, parses and replays thoughts.

See Event reference, #3276 and #3279.

After upgrading, POST /v1/sessions/chat returns 405 and POST /v1/sessions/chat/voice returns 404. Sessions already tagged global-chat stay listed and readable through the normal session routes, and the Platform Chat harness is unchanged.

See Platform Chat and #3278.

Models that emit one tool call per response no longer need one model round per file. In the PR’s tests, three independent reads took 2 model calls instead of 4 and about half the input tokens. Loop detection recognizes repeated batch reads.

See File System and #3275.

The Work, Events and Workspace tabs now carry counts. Empty tabs show no badge, and large counts are shortened, for example 12.4K.

See Web UI, Environment variables, #3260 and #3266.

In the UI: use the archive control on a row in Chats, and the Show archived filter to list archived threads. The sidebar’s All chats link stays visible even when no threads are listed.

In the API: PUT /v1/sessions/{id}/archive archives and DELETE /v1/sessions/{id}/archive restores. Both are idempotent. Session lists hide archived sessions unless you pass include_archived=true, which widens facet counts too.

See Web UI and #3265.

In the UI: open a provider in Settings → Providers and use the Advanced card to add Custom headers or turn on Prompt cache diagnostics.

In the API: the provider settings accept the same options. Transport headers such as host and content-length are rejected, the list is limited to 16 headers of up to 2 KB each, and header values are redacted in diagnostics. The Anthropic, Gemini, Chat Completions and Open Responses drivers apply them.

See Providers, #3232 and #3240.

The thread names the harness as its counterpart and appears in the Chats list like any other chat.

See Harnesses, Generic harness and #3262.

Knowledge index sync, which embeds every indexed chunk in the background, now writes its spend to the usage ledger against the organization. Sync spend is not debited from any user’s budget, because no session triggered it.

See Knowledge Index, Budgets, #3149 and #3163.

• Transcript is the default view: a full-width, read-only replay of the conversation.
• Timeline is the execution history, with noisy worker details collapsed.
• Events is the complete raw event ledger.

Session links, global search and Fork into chat open the Transcript. Work, Workspace and Cost behave as before.

See Web UI and #3113.

Chat threads can also be pinned: use the pin button in a thread header to keep it at the top of the Chats list and the sidebar.

See Web UI, Platform Chat and #3100.