Changelog

What we've shipped.

Every improvement, fix, and new capability — newest first. Subscribe to updates at [email protected].

May 14, 2026

v0.3.22
  • Published agent install count on catalog entries — registry now surfaces popularity signals to help users discover trusted agents.
  • Added published_at timestamp to catalog JSON so downstream tooling can sort agents by recency without round-tripping the API.
  • Improved factory sandbox: baked Bun, uv, and make into the sandbox-claude image to eliminate cold-start dependency fetches.
  • Fixed scoped pool routing — dispatches now correctly route to (user, repo, agent) pools when a match exists, falling back to the shared pool.
  • Hermetic test mode (PRIX_HERMETIC=1) strips Supabase credentials so the test suite runs cleanly on CI with no external calls.

May 13, 2026

v0.3.21
  • Microsoft OAuth shipped: Outlook mail and Calendar tools are now available to agents via the proxy — no additional credentials required for end users.
  • Teams outgoing webhook integration for the Synopsys pilot; factory dispatches route to the correct team channel on completion.
  • Slack tools expanded: slack_users, slack_apps, and slack_dms endpoints added, enabling agents to look up teammates and send direct messages.
  • Fixed im:write scope missing from Slack bot registration — outbound DMs were silently failing for agents installed before this release.
  • Factory cold-clone capped with shallow partial flags — reduces initial workspace sync time by ~60% on large repos.

May 9, 2026

v0.3.20
  • Cloud-run summary output increased from 2 KB to 50 KB — agents returning large reports no longer get truncated in the dispatch response.
  • Code-reviewer agent now runs on cloud-agent-authored PRs, closing the gap where automated PRs bypassed review.
  • User credentials and .agents/ config are forwarded correctly on PR review webhook dispatch.
  • Agent share-card OG images now bust the Cloudflare cache on update — stale preview images no longer appear in social embeds.
  • Proxy passthrough hardened: default LLM params are no longer injected by the proxy, preserving per-agent model configuration.

April 28, 2026

v0.3.18
  • Slack OAuth state is now HMAC-bound to the initiating session, preventing CSRF on the OAuth callback.
  • Simplified Slack app agent ID to rush-assistant for consistency across workspace installs.
  • PATCH endpoint added for teams-generated HMAC secrets, enabling headless team setup without UI interaction.
  • Codex auth.json is mirrored into agents-cli versioned paths on startup — no more manual re-auth after version switches.
  • PostHog pageview and visitor metrics added per host domain; Grafana dashboard updated with histogram metric names.

April 18, 2026

v0.3.15
  • Blog migrated to file-based Markdown with a unified rendering pipeline — posts are now co-located with source and render without a CMS.
  • Featured post hero card added to /blog index with a large editorial image slot.
  • Vercel auto-alias: prix.dev now points to the latest deployment automatically after each successful deploy.
  • Fixed prix/web host detection for the Vercel alias to prevent the wrong domain appearing in canonical tags.
  • Uniform 3-column grid and consistent preview heights on /agent-interface — visual rhythm issue resolved.

April 7, 2026

v0.3.10
  • Workspace refresher job machinery added — agents can now request a clean workspace snapshot mid-run without a full re-clone.
  • Tool and OAuth call tracking added to the central handleWithContext wrapper — routes that previously bypassed instrumentation now report correctly.
  • Grafana push fixed: duplicate PostHog host metrics now deduplicated using max-over-instances rather than sum.
  • Reconciler syncs terminal agent status back to Supabase — stale 'running' records are cleaned up after crash or timeout.
  • /ax redirect added to prix/web for legacy CLI links; halo references in CLI copy renamed to rush.

March 28, 2026

v0.3.5
  • Error handling standardized: all proxy errors are now classified into typed codes (AUTH_FAILED, QUOTA_EXCEEDED, RATE_LIMITED) before reaching the client.
  • Claude OAuth tokens that lack the user:profile scope are now accepted — resolves login failures for tokens issued without profile grants.
  • Twitter refresh tokens are single-use and the new token from each response is now saved immediately, preventing token expiry on the next call.
  • halo_encryption_key pinned in 1Password and auto-rotation disabled — key drift was causing decryption failures across restarts.
  • Shallow partial flags added to factory git clone — large monorepos now bootstrap ~60% faster on first dispatch.

March 16, 2026

v0.3.0
  • prix/api deployed to mark server (Hetzner) with full systemd unit, health-gated activation, and one-command rollback.
  • Preprod environment (preprod.api.prix.dev) provisioned — all changes now flow through preprod before production promotion.
  • Secrets pipeline: /etc/prix-api/env rendered from 1Password via secrets.sh, eliminating plaintext credentials in deployment scripts.
  • LLM proxy launch: Claude (claude-sonnet-4-5, claude-opus-4) and OpenAI (gpt-4o, o3-mini) models available through a single authenticated endpoint.
  • Agent registry v1 live — rush publish, rush install, and rush list work end-to-end against the production catalog.