What's new for you
Control UI dashboard refresh, /fast toggle for Anthropic & OpenAI, Slack Block Kit, sessions_yield for subagents, K8s docs, Ollama/vLLM/SGLang provider-plugin architecture, and multiple security hardening fixes.
- Control UI dashboard-v2 — modular overview, chat, config, agent, session views, command palette, mobile bottom tabs
- /fast toggle — Anthropic and OpenAI fast-mode tiers via params.fastMode and shared /fast toggle
- Slack Block Kit — channelData.slack.blocks for agents to send Block Kit messages
- sessions_yield — subagents can end turn immediately and carry follow-up payload to next session turn
- K8s docs — starter install path with raw manifests and Kind setup
- Ollama/vLLM/SGLang — moved to provider-plugin architecture with provider-owned onboarding
- Security — /config and /debug now owner-only; workspace plugin auto-load disabled; /pair uses short-lived tokens
Release highlights
| Feature | Details |
|---|---|
| Control UI Dashboard-v2 | Refreshed gateway dashboard with modular views, command palette, mobile bottom tabs, richer chat tools (slash commands, search, export). |
| /fast Toggle | params.fastMode and shared /fast toggle map to Anthropic service_tier and OpenAI fast-mode. Live verification for both. |
| Slack Block Kit | channelData.slack.blocks in reply delivery — agents can send Block Kit messages through standard Slack outbound. |
| sessions_yield | Orchestrators can end current turn, skip queued tool work, carry hidden follow-up payload into next session turn. |
| Kubernetes Docs | Starter K8s install path with raw manifests, Kind setup, and deployment docs. |
| Provider-Plugin Architecture | Ollama, vLLM, SGLang moved to provider-plugin architecture with provider-owned onboarding and discovery. |
| Security: /config & /debug Owner-Only | Require sender ownership for /config and /debug. Authorized non-owner senders can no longer reach these surfaces. |
| Security: Workspace Plugin Auto-Load | Workspace plugin auto-load disabled. Cloned repos cannot execute workspace plugin code without explicit trust. |
⚠️ Breaking changes
Workspace plugin auto-load is disabled — cloned repositories cannot execute workspace plugin code without an explicit trust decision. /config and /debug are now owner-only.
Feature deep dives
Learn more about the changes that matter most. Bug fixes and minor improvements are listed on GitHub.
Control UI Dashboard-v2
Refreshed gateway dashboard with modular overview, chat, config, agent, and session views, plus command palette, mobile bottom tabs, and richer chat tools.
Read more →/fast Toggle
Shared /fast toggle and params.fastMode map to Anthropic service_tier and OpenAI fast-mode tiers, with live verification.
Read more →Slack Block Kit
channelData.slack.blocks in the shared reply delivery path so agents can send Block Kit messages through standard Slack outbound.
Read more →sessions_yield
Orchestrators can end the current turn immediately, skip queued tool work, and carry a hidden follow-up payload into the next session turn.
Read more →Kubernetes Docs
Starter K8s install path with raw manifests, Kind setup, and deployment docs.
Read more →Provider-Plugin Architecture
Ollama, vLLM, and SGLang moved to provider-plugin architecture with provider-owned onboarding, discovery, and model-picker setup.
Read more →Security: /config & /debug Owner-Only
/config and /debug now require sender ownership. Authorized non-owner senders can no longer reach owner-only config and runtime debug surfaces.
Read more →Security: Workspace Plugin Auto-Load
Workspace plugin auto-load disabled. Cloned repositories cannot execute workspace plugin code without an explicit trust decision.
Read more →Full release notes
The complete changelog with all changes, fixes, and technical details is on the official GitHub release page.
Open v2026.3.12 on GitHub →