qm v0.1.5

QM 0.1.5 makes everyday agent work faster and deployment operations safer.

• Search every visible conversation from a new full-text command palette.
• Work across improved multi-pane sessions with clearer navigation and controls.
• Connect custom model endpoints and admin-managed HTTP MCP tools.
• Run and recover sandboxes with more control, including out-of-band status and restart.
• Deploy with broader live validation, stronger authorization checks, and tighter credential boundaries.
• Use improved Slack threads, drafts, channel controls, and customizable bot identity.

What's Changed

• Resolve skill shadowing from one catalog snapshot in visibleFor by @16francej in https://github.com/yc-software/qm/pull/160
• reach: accept threadTs to reply inside a channel or group thread by @ReganBell in https://github.com/yc-software/qm/pull/168
• Extend the agent self-API: conversation read/fork/colors, memory history, skill restore, viewer-scoped files/deployments, projects by @ReganBell in https://github.com/yc-software/qm/pull/169
• Slack delivery: fast group-DM addressing without directory clobbering, and no duplicate replies by @ReganBell in https://github.com/yc-software/qm/pull/170
• web-ui: in-document panes with a byte-budgeted transcript, plus the stacked UX and steering fixes by @ReganBell in https://github.com/yc-software/qm/pull/175
• credential broker: refuse percent-encoded parent traversal by @ReganBell in https://github.com/yc-software/qm/pull/198
• Never show a raw Slack id where a person will read it by @ReganBell in https://github.com/yc-software/qm/pull/199
• model: custom provider endpoints by @ReganBell in https://github.com/yc-software/qm/pull/200
• web-ui: fork origin badge, author-labeled bubbles, real sidebar links by @ReganBell in https://github.com/yc-software/qm/pull/202
• Persist full runtime defaults per scope by @ReganBell in https://github.com/yc-software/qm/pull/203
• self-API: spawn a fresh conversation by @ReganBell in https://github.com/yc-software/qm/pull/204
• dev-instance: browser-only mode (--no-slack) by @ReganBell in https://github.com/yc-software/qm/pull/205
• docs(security): record the three deliberately portal-only actions by @ReganBell in https://github.com/yc-software/qm/pull/206
• deploy: owner app shell with docked iterate chat by @ReganBell in https://github.com/yc-software/qm/pull/201
• tape-fold: don't synthesize tool results for aborted assistant messages by @ReganBell in https://github.com/yc-software/qm/pull/239
• Fix main image dependency audits by @16francej in https://github.com/yc-software/qm/pull/319
• Fix AWS production deployment blockers by @16francej in https://github.com/yc-software/qm/pull/163
• Add slack-drafts skill: create Slack drafts as the user via their Slack OAuth by @16francej in https://github.com/yc-software/qm/pull/279
• Fix Pi routing and broaden live deployment validation by @16francej in https://github.com/yc-software/qm/pull/325
• Fix command-form approval rules by @16francej in https://github.com/yc-software/qm/pull/324
• logs: never pass a raw error object to console.* by @ReganBell in https://github.com/yc-software/qm/pull/408
• Session titles: stop the titler replying to the transcript by @ReganBell in https://github.com/yc-software/qm/pull/407
• skills: Gmail helper calls the API via curl so it by @ReganBell in https://github.com/yc-software/qm/pull/398
• web-ui: session top bar follow-ups — fork badge, and apps/skills/keychain join the quick tools by @ReganBell in https://github.com/yc-software/qm/pull/485
• sessions: replace per-step LLM request bodies with hash-deduped prompt envelopes by @ReganBell in https://github.com/yc-software/qm/pull/484
• MCP connectors v1: admin-registered HTTP by @ReganBell in https://github.com/yc-software/qm/pull/481
• Withhold tape coverage for a stopped turn until its partial is imported by @ReganBell in https://github.com/yc-software/qm/pull/470
• sandbox: out-of-band computer status and restart via the execute tool by @ReganBell in https://github.com/yc-software/qm/pull/469
• web-ui: keep the device safe-area under the composer on mid-width surfaces by @ReganBell in https://github.com/yc-software/qm/pull/491
• web-ui: one idiom for proxied API routes by @ReganBell in https://github.com/yc-software/qm/pull/488
• web-ui: clock indicator on sessions a cron is scheduled to post into by @ReganBell in https://github.com/yc-software/qm/pull/500
• acl: version-checked cache for grant reads instead of re-reading the whole table by @ReganBell in https://github.com/yc-software/qm/pull/499
• Sidebar: always show Sessions, collapse by @ReganBell in https://github.com/yc-software/qm/pull/498
• Grant conversation-scope read on files posted in group/DM sessions by @ReganBell in https://github.com/yc-software/qm/pull/475
• Let an admin grant a specific cron narrow admin-read access for unattended fires by @ReganBell in https://github.com/yc-software/qm/pull/471
• goal: agent-registered thread goals with harness enforcement by @ReganBell in https://github.com/yc-software/qm/pull/497
• Fix five CLI and validation bugs from issue triage by @ReganBell in https://github.com/yc-software/qm/pull/494
• projects: refresh the Slack directory on demand when a channel link misses by @ReganBell in https://github.com/yc-software/qm/pull/487
• Build deployment git URLs from the API origin by @ReganBell in https://github.com/yc-software/qm/pull/482
• sandbox: smolmachines backend by @ReganBell in https://github.com/yc-software/qm/pull/478
• Contributor-reported fixes: paths with spaces, redactor gaps, safe Slack by @ReganBell in https://github.com/yc-software/qm/pull/476
• config: treat a top-level "//" key as a comment, not an unknown field by @ReganBell in https://github.com/yc-software/qm/pull/505
• cli: close hosting-target abstraction leaks behind the HostingProvider seam by @ReganBell in https://github.com/yc-software/qm/pull/506
• sandbox: provision-time machine resources for the smolmachines backend by @ReganBell in https://github.com/yc-software/qm/pull/507
• Slack channels: opt-in pinned header message instead of setting the description by @ReganBell in https://github.com/yc-software/qm/pull/508
• web-ui: count badges and strictly scoped tool views on the session top bar by @ReganBell in https://github.com/yc-software/qm/pull/501
• Full-text chat search: a ⌘K palette over every visible conversation by @ReganBell in https://github.com/yc-software/qm/pull/509
• web-ui: hover popover labels the session top-bar icon buttons by @ReganBell in https://github.com/yc-software/qm/pull/511
• Wire custom providers end-to-end (admin API, boot default, model picker) by @ReganBell in https://github.com/yc-software/qm/pull/512
• web-ui: single-header multiview panes by @ReganBell in https://github.com/yc-software/qm/pull/513
• Fixes for four reported issues: destructive-SQL scanning, by @ReganBell in https://github.com/yc-software/qm/pull/515
• Chat search follow-ups: archived results, clearer copy, and a visible failure state by @ReganBell in https://github.com/yc-software/qm/pull/516
• web-ui: pane chat keeps its two-row grid — by @ReganBell in https://github.com/yc-software/qm/pull/517
• Retry transient admin access probes by @16francej in https://github.com/yc-software/qm/pull/531
• admin: name attached scopes on environments and tag attached scope rows by @16francej in https://github.com/yc-software/qm/pull/533
• Make bot identity customizable per deployment by @garrytan in https://github.com/yc-software/qm/pull/530
• Gate env-delivered org credentials by service-cred grants by @ReganBell in https://github.com/yc-software/qm/pull/548
• Tighten shared runtime boundaries by @16francej in https://github.com/yc-software/qm/pull/539
• Prepare the QM 1.0.5 rollout by @16francej in https://github.com/yc-software/qm/pull/557
• Harden admin authorization readiness by @16francej in https://github.com/yc-software/qm/pull/564
• Clarify admin navigation icon by @16francej in https://github.com/yc-software/qm/pull/562
• Fix approval layout in narrow panes by @16francej in https://github.com/yc-software/qm/pull/563
• fix(web-ui): snap chat to bottom instantly on pane tab re-activation by @16francej in https://github.com/yc-software/qm/pull/565
• Correct release version to 0.1.5 by @16francej in https://github.com/yc-software/qm/pull/568