[Jun 8, 2026] 0.9

Product Updates

• Smarter code generation — The agent now automatically detects and packages the correct Python dependencies when generating tools, reducing manual setup
• Edit-aware execution & export — Code execution and data export now reflect the latest edits made to a tool, ensuring outputs are always in sync with the current state
• Thinking widget v2 — Improved in-progress thinking indicator in the chat UI, now settles cleanly when a run ends
• Per-question rating — Users can now rate each clarifying question individually, providing more granular feedback
• Knowledge Saver — Users can now save and persist knowledge snippets directly from the chat
• Agent run error visibility — Chat UI now explicitly surfaces backend run failures and connection errors rather than silently stalling
• Tool readiness status — Artifact tools now expose a "ready" status indicator so users can see when a tool is available for use

Security & Performance Patches

• Authentication library hardened (better-auth 1.6.2 → 1.6.11) — Resolved multiple upstream security issues including: OAuth authorization-code race conditions, magic-link token replay attacks, device-authorization session binding, OIDC/PKCE spec compliance, invitation email-verification bypass, and an SSRF vulnerability in SSO provider registration
• HTTP framework patched (starlette 1.0.0 → 1.0.1) — Fixed a vulnerability where a malformed Host header could affect request URL construction
• Async HTTP library updated (aiohttp 3.13.5 → 3.14.0) — Security update
• Content Security Policy introduced — A nonce-based CSP header (report-only mode) has been added to the builder app to monitor and prevent XSS vectors ahead of full enforcement

Bug Fixes

• Fixed Excel exports not honouring the configured Data Models schema
• Fixed dynamic map output types causing LLM validation errors during tool design
• Fixed PDF preview failing in production with a MIME-type error due to incorrect Vite worker bundling