QM 0.1.5 makes everyday agent work faster and deployment operations safer.

• Search every visible conversation from a new full-text command palette.
• Work across improved multi-pane sessions with clearer navigation and controls.
• Connect custom model endpoints and admin-managed HTTP MCP tools.
• Run and recover sandboxes with more control, including out-of-band status and restart.
• Deploy with broader live validation, stronger authorization checks, and tighter credential boundaries.
• Use improved Slack threads, drafts, channel controls, and customizable bot identity.

What's Changed

• Resolve skill shadowing from one catalog snapshot in visibleFor by @16francej in #160
• reach: accept threadTs to reply inside a channel or group thread by @ReganBell in #168
• Extend the agent self-API: conversation read/fork/colors, memory history, skill restore, viewer-scoped files/deployments, projects by @ReganBell in #169
• Slack delivery: fast group-DM addressing without directory clobbering, and no duplicate replies by @ReganBell in #170
• web-ui: in-document panes with a byte-budgeted transcript, plus the stacked UX and steering fixes by @ReganBell in #175
• credential broker: refuse percent-encoded parent traversal by @ReganBell in #198
• Never show a raw Slack id where a person will read it by @ReganBell in #199
• model: custom provider endpoints by @ReganBell in #200
• web-ui: fork origin badge, author-labeled bubbles, real sidebar links by @ReganBell in #202
• Persist full runtime defaults per scope by @ReganBell in #203
• self-API: spawn a fresh conversation by @ReganBell in #204
• dev-instance: browser-only mode (--no-slack) by @ReganBell in #205
• docs(security): record the three deliberately portal-only actions by @ReganBell in #206
• deploy: owner app shell with docked iterate chat by @ReganBell in #201
• tape-fold: don't synthesize tool results for aborted assistant messages by @ReganBell in #239
• Fix main image dependency audits by @16francej in #319
• Fix AWS production deployment blockers by @16francej in #163
• Add slack-drafts skill: create Slack drafts as the user via their Slack OAuth by @16francej in #279
• Fix Pi routing and broaden live deployment validation by @16francej in #325
• Fix command-form approval rules by @16francej in #324
• logs: never pass a raw error object to console.* by @ReganBell in #408
• Session titles: stop the titler replying to the transcript by @ReganBell in #407
• skills: Gmail helper calls the API via curl so it by @ReganBell in #398
• web-ui: session top bar follow-ups — fork badge, and apps/skills/keychain join the quick tools by @ReganBell in #485
• sessions: replace per-step LLM request bodies with hash-deduped prompt envelopes by @ReganBell in #484
• MCP connectors v1: admin-registered HTTP by @ReganBell in #481
• Withhold tape coverage for a stopped turn until its partial is imported by @ReganBell in #470
• sandbox: out-of-band computer status and restart via the execute tool by @ReganBell in #469
• web-ui: keep the device safe-area under the composer on mid-width surfaces by @ReganBell in #491
• web-ui: one idiom for proxied API routes by @ReganBell in #488
• web-ui: clock indicator on sessions a cron is scheduled to post into by @ReganBell in #500
• acl: version-checked cache for grant reads instead of re-reading the whole table by @ReganBell in #499
• Sidebar: always show Sessions, collapse by @ReganBell in #498
• Grant conversation-scope read on files posted in group/DM sessions by @ReganBell in #475
• Let an admin grant a specific cron narrow admin-read access for unattended fires by @ReganBell in #471
• goal: agent-registered thread goals with harness enforcement by @ReganBell in #497
• Fix five CLI and validation bugs from issue triage by @ReganBell in #494
• projects: refresh the Slack directory on demand when a channel link misses by @ReganBell in #487
• Build deployment git URLs from the API origin by @ReganBell in #482
• sandbox: smolmachines backend by @ReganBell in #478
• Contributor-reported fixes: paths with spaces, redactor gaps, safe Slack by @ReganBell in #476
• config: treat a top-level "//" key as a comment, not an unknown field by @ReganBell in #505
• cli: close hosting-target abstraction leaks behind the HostingProvider seam by @ReganBell in #506
• sandbox: provision-time machine resources for the smolmachines backend by @ReganBell in #507
• Slack channels: opt-in pinned header message instead of setting the description by @ReganBell in #508
• web-ui: count badges and strictly scoped tool views on the session top bar by @ReganBell in #501
• Full-text chat search: a ⌘K palette over every visible conversation by @ReganBell in #509
• web-ui: hover popover labels the session top-bar icon buttons by @ReganBell in #511
• Wire custom providers end-to-end (admin API, boot default, model picker) by @ReganBell in #512
• web-ui: single-header multiview panes by @ReganBell in #513
• Fixes for four reported issues: destructive-SQL scanning, by @ReganBell in #515
• Chat search follow-ups: archived results, clearer copy, and a visible failure state by @ReganBell in #516
• web-ui: pane chat keeps its two-row grid — by @ReganBell in #517
• Retry transient admin access probes by @16francej in #531
• admin: name attached scopes on environments and tag attached scope rows by @16francej in #533
• Make bot identity customizable per deployment by @garrytan in #530
• Gate env-delivered org credentials by service-cred grants by @ReganBell in #548
• Tighten shared runtime boundaries by @16francej in #539
• Prepare the QM 1.0.5 rollout by @16francej in #557
• Harden admin authorization readiness by @16francej in #564
• Clarify admin navigation icon by @16francej in #562
• Fix approval layout in narrow panes by @16francej in #563
• fix(web-ui): snap chat to bottom instantly on pane tab re-activation by @16francej in #565
• Correct release version to 0.1.5 by @16francej in #568

What's Changed

• Restrict the web-ui model picker to the org allowed-models list by @16francej in #40
• Use @latest in the qm init bootstrap instead of a version placeholder by @16francej in #41

Full Changelog: v0.1.3...v0.1.4

What's Changed

• Document playground deployments in the deployment workflow by @16francej in #39

Full Changelog: v0.1.2...v0.1.3

What's Changed

• Publish the deployment CLI to npm with provenance by @16francej in #10
• Prune docs/ to what the README reaches by @ReganBell in #13
• Publish images under a repo-nested GHCR namespace by @16francej in #12
• Stop shipping build-time caches and host identity in published images by @16francej in #14
• Pin real image digests into the published CLI package by @16francej in #15
• docs: round README screenshot corners by @16francej in #11
• Offer a retry link on the stale sign-in link page by @ReganBell in #18
• Ship references/email.md from qm init by @ReganBell in #17
• Warn after fly secrets push when staged secrets are not live on running machines by @ReganBell in #20
• Make the admin onboarding view reachable by @ReganBell in #19
• Fix MicroVM image tag parsing to read the capitalized Tags response key by @ReganBell in #16
• Make the base model key a deployment secret, and document Slack sign-in by @16francej in #21
• Replace the web UI's sign-in form with auth-gate states by @16francej in #23
• Improved support for OpenRouter by @16francej in #22
• Stop a mock deployment passing as a real one by @16francej in #25
• Fix the auth-gate lockouts found in review by @16francej in #24
• Route the first admin to onboarding instead of a 403 web UI by @ReganBell in #29
• qm check: verify Fly sandbox token, SMTP credentials, and Node engine before deploy by @ReganBell in #27
• Distinguish not-yet-deployed targets from secret drift in qm doctor by @ReganBell in #28
• Resolve sandbox base digests without registry reads and force amd64 base builds by @ReganBell in #30
• Take contributions as human-written text in adrs/ by @ReganBell in #34
• Treat fast mode as opt-in by @BinSquare in #26
• Add qm secrets set for safe in-place .env edits by @ReganBell in #32
• qm init: pick one email transport and scaffold only its keys by @ReganBell in #31
• Add an org-wide admin toggle defaulting interactive turns to fast mode by @ReganBell in #35
• Drop the removed-features regression test by @16francej in #36
• Add portal playground mode: anonymous browser-pinned sessions by @16francej in #38
• Cut releases from one dispatch that tags what it published by @16francej in #37

New Contributors

• @BinSquare made their first contribution in #26

Full Changelog: https://github.com/yc-software/qm/commits/v0.1.2