Changelog

Every improvement we ship to the boilerplate, released regularly.

v3.21.0
Oct 9, 2026
Safer AI actions, healthier email and clearer billing
Your app's AI now asks before it does anything risky and can no longer be talked into approving itself, every email you send is tracked with bad addresses blocked automatically, and billing reads in plain money with one line per AI reply.
Features
Risky AI actions wait for an Approve or Deny card that shows exactly what will run, cannot be faked by the AI, expires after five minutes and works once; places that cannot show the card refuse those actions instead of running them
The admin Emails page shows delivered, bounce and complaint rates, a searchable log of every email sent (password resets and invites included) and a list of blocked addresses you can unblock with one click
Bounced addresses stop receiving all mail and spam complaints stop marketing mail, reported automatically by Amazon SES or Resend, with addresses SES already blocked picked up daily
Each AI reply shows as one billing line with its steps on expand, and every credit amount reads as money with page sizes of 10, 25, 50 or 100
The AI chat knows which project you are working in, so it stops asking
Fixes
The AI can no longer answer its own questions to you, and a question asked at the end of a reply can still be answered after a reload
Opening another chat, starting a new one, clearing or deleting no longer brings back the wrong conversation, and the side-panel chat no longer jumps back to an old transcript mid-reply
Cheaper AI models no longer have tool calls refused for writing "null" or a wrongly capitalised option, and a refused tool call shows as failed instead of completed
Unsubscribing from a marketing email takes a confirm click so security scanners cannot unsubscribe people, and one-click unsubscribe now works with Amazon SES
An integration whose sign-in expired says so, Cancel on a connect link returns you where you came from, and the project switcher picks up a rename made by the AI
Performance
AI tool definitions are sent in the format of the model actually running, about a fifth smaller for non-OpenAI models, and the unchanging part of the prompt is cached, so every AI step costs less
v3.20.0
Oct 8, 2026
Translate your app with your own coding agent
A new bundled translate skill lets your AI coding agent translate your messages and content into every language you configure, with no translation API key, and a changed string is now re-translated in every language rather than only the first.
Features
Type /translate in your coding agent (or ask it to translate the project) and it translates every missing or outdated message and document into each of your languages, checked by the same rules as the API translation and tracked so nothing is translated twice
Fixes
Projects with more than one extra language re-translate a changed string in all of them; before, every language after the first kept its old wording
v3.19.0
Oct 7, 2026
One sidebar for web and desktop, and a smoother everyday app
Web and desktop now build their sidebar from one shared layout, so they can no longer drift apart, and a round of fixes makes sign-in, notifications, chat and the desktop app clearer day to day. After updating, Organization and Project are reached through Settings rather than their own sidebar rows; to change the sidebar, edit `packages/config/src/sidebar-layout.ts`.
Features
Web and desktop build their sidebar from one shared layout: Dashboard, Chat and Automations on top, Admin for admins and Settings at the bottom, with Organization and Project inside Settings
The desktop app tells you in-app when an update has downloaded and restarts into it on one click, and its ⌘K search reaches Profile, Billing, Security, Organization and Project
Fixes
Hitting the rate limit shows a "try again" page instead of signing people out to the sign-in page
The chat says whether the balance is empty or just too low for this message, instead of one message for both
Clicking a button or a chart no longer draws a focus outline; keyboard focus still shows it
A shared integration no longer says "shared by" its own owner, and its status reads as a single word
Notifications use sentence case, show credits in the same unit as the sidebar, name the device as "Chrome on macOS" rather than a raw browser string, and show their full text on the notifications page
Sign-in and sign-up copy is clearer and consistent, sending a magic link no longer shows two messages, and the sign-up link opens the right tab
The desktop window keeps a minimum size, so the sidebar can never disappear with no way to open it
Opening a page no longer makes a failed request for a chat that was never saved
Chat starter suggestions wrap instead of scrolling out of view
v3.18.1
Oct 5, 2026
Desktop chats survive restarts, brand-coloured emails
The desktop app keeps the conversation you had open across a quit, an update or a closed window, emails now follow your theme's brand colour, and users stop getting "session revoked" alerts for their own sign-outs. After updating, if you changed `--primary` in your theme, copy the same value into `THEME_PRIMARY` in `packages/mail/src/theme-colors.ts` (a test names it for you).
Fixes
The desktop chat open when the app quits, updates or its window closes comes back as it was, including your message and any part of a reply still being written
Email buttons and highlights follow your theme's primary colour instead of a fixed amber
A "session revoked" notification is sent only when someone else, such as an admin, ended the session, not when users sign out themselves or old sessions expire
A destructive button's label in the mobile app stays readable in dark mode, whatever colours your theme uses
v3.18.0
Oct 4, 2026
Sign in with Apple for iOS, App Store ready
The mobile app can now offer Sign in with Apple without setting up Apple on the web, and iOS pairs Google with Apple so an App Store review does not reject the app for offering one without the other. To turn on Apple for the app alone, set `APPLE_TEAM_ID`, `APPLE_KEY_ID`, `APPLE_PRIVATE_KEY` and `APPLE_APP_BUNDLE_IDENTIFIER`, with no `APPLE_CLIENT_ID`.
Features
The iOS app offers Sign in with Apple from your Apple signing key and app bundle id alone, with no web Services ID; the web shows no Apple button in that mode, and account deletion still revokes Apple sign-ins
On iOS, Google sign-in appears only beside Sign in with Apple, as App Store guideline 4.8 requires, and the app learns from your server whether Apple is on, so enabling it needs no new app build
Fixes
Leaving the app on the sign-in screen and coming back stays on sign-in instead of opening the passkey screen
The iOS app falls back to the browser for Google sign-in when the build has no iOS client id, instead of failing, and registers the URL scheme Google's native sheet needs when it does
v3.17.1
Oct 3, 2026
Organization logos are checked when saved
A security fix for projects with multi-tenancy on: an organization logo can no longer be pointed at another user's file, which account deletion could then remove. Nothing to change after updating.
Fixes
An organization logo must be an image the person saving it uploaded (or a link off your storage), so deleting an account can no longer delete another user's public files through a forged logo
v3.17.0
Oct 3, 2026
Reconnect expired sign-ins and sturdier AI chat
Expired integration sign-ins can now be renewed in one click, AI chat handles more models and layouts gracefully, and newly generated projects no longer fail their first deploy when a dependency was just published. Nothing to change after updating.
Features
An integration whose sign-in expired shows a Reconnect button that renews it in place, keeping the connection and its settings, and any page can send users straight to it with `?reconnect=<integration>`
Fixes
Chat titles and other "reasoning off" requests now work on OpenRouter models whose reasoning cannot be turned off, such as GLM 5.3 Flash and gpt-5-mini, and are billed only for the request that runs
A table in a chat reply stays readable in a narrow chat panel and scrolls sideways instead of squeezing every column into a tall tower of words
A question the assistant asks keeps its own line breaks, so a list it asks you to review reads as a list
A freshly generated project's Docker and Vercel builds no longer refuse a dependency released in the last week
A new release's CLI is offered only once npm can install it, so `init` no longer refuses the new template for a few minutes after a release
v3.16.0
Sep 30, 2026
Complete account deletion and API-key access for AI agents
Deleting an account now erases everything the user owned and ends the subscriptions it paid for, AI agents can reach the MCP server with an API key, and chat and desktop dev work get smoother. After updating: the desktop dev app starts signed out once, because it now keeps its own data folder (the desktop building docs show how to carry the old one across); set `projects.seedDefault` to false if you do not want a Default project created at sign-up.
Features
Account deletion is one flow for a user's own request, the emailed link and an admin removal: it refuses while the user is the only owner of a team others still use or while a subscription owes money, then cancels their live subscriptions without a refund, erases chats, notifications, files, their solo organizations and API keys, and revokes Apple sign-in. A refusal changes nothing, and webhooks that arrive afterwards are ignored
AI agents can connect to the MCP server with an API key that carries the MCP permission, beside OAuth sign-in, and every tool now tells clients whether it only reads, deletes, is safe to repeat or reaches the open web
API keys can no longer create, change or revoke other keys, so a REST-only key cannot grant itself MCP access
A new `projects.seedDefault` option turns off the Default project created at sign-up and for new organizations; the first project a user creates then picks up the chats they started before it
Fixes
A queued chat message is no longer refused with "you already have runs going" on plans with a small concurrent-run limit
A long answer option in a question card wraps inside the card instead of being clipped
In the desktop app, a new conversation on a coding CLI sees tools added or renamed on the server without restarting the app
Editing the desktop app in dev no longer blanks the window, and two projects' dev apps no longer fight over one data folder and sign-in
v3.15.2
Sep 22, 2026
An integration sign-in comes back to where it started
One defect reported from a live project: connecting an integration from the desktop app finished in the web app, and neither shell returned the user to the page they had come from. After updating: nothing to change in your project.
Fixes
A sign-in started from the desktop app returns to the desktop app, through a small hand-back page that opens the app on the integration you were connecting; a sign-in started on the web returns to the page you came from once the connection is made, and a failed sign-in reopens that integration so the retry is one press away
A deep link into the desktop app's Integrations screen keeps its details, so the app opens on the named integration instead of the catalog
v3.15.1
Sep 22, 2026
A balance that cannot overdraw, and a CLI that gets its answer
Two defects reported from live projects: a near-empty credit balance could still buy one long AI call, and a question from the desktop coding CLI went unanswered. Both are closed, and the chat's drop zone is tidied. After updating: nothing to change in your project.
Fixes
An AI call is priced before it runs, prompt included, so an account with a sliver of credits cannot overdraw on a long conversation; a message the balance cannot cover is refused up front with its own wording and the top-up action, and summarising a long conversation answers the same way instead of failing
On the desktop app, a question the coding CLI asks now appears as a question card in the chat; answer or skip it and the agent carries on, and a run waiting on your answer is never treated as stalled, however long you take
Dragging a file over the chat shows a clean, centred drop zone instead of an outline over the page
v3.15.0
Sep 21, 2026
A chat you can steer while it works
Queued messages can be sent on the spot, files can be attached while a reply is still streaming, and the context meter now shows what the model really holds. After updating: nothing to change in your project.
Features
A message queued behind a running reply has a Send now control - it stops the reply, sends that message at once and keeps the rest in order behind it; a send the server refuses goes back where it was, so a message is never lost
Images, documents and text files can be pasted, dropped, picked and removed while the AI is still working, so the next message can be queued with them
Fixes
The context meter on the desktop coding-CLI lane counted only a sliver of each turn and sat near 1%; it now reads the conversation's real size against the window the CLI reports, for Claude Code, Codex, Grok and opencode
In hosted chat a tool-using turn was counted once per step, so a half-full context window could show as full; the meter now reads the last step
In the sidebar, the open page inside a group shows its icon in the primary colour along with its label
The line between the Settings side menu and the page reaches the bottom of the window under a short page, and the side menu stays in place while a long page scrolls
v3.14.0
Sep 20, 2026
Web search everywhere, and one Settings hub
The AI can now search and read the web from every place it runs, priced per call and free on the default engine, and Settings becomes a single hub with a grouped side menu. After updating: `readChatWebSearch` returns `boolean | undefined` (undefined means the user never answered), a user who had turned web search off reads as unanswered once, and `sectionTabsConfig` now lists only the Admin tabs - add or reorder a settings page in `settingsNavGroups` instead.
Features
Web search and page reading work on every AI surface - chat, the desktop app's coding-CLI lane, automations and the MCP server - metered to the user's credits per call at the vendor's price times your markup, which ships at twice cost and is written into your pricing file
TinyFish is the default web engine and costs your users nothing; add a Firecrawl or Parallel key and name that engine to use a paid one instead
Chat searches the web by default wherever an engine is set up, and a user's choice to turn it off is remembered; the provider's own per-request search still needs an explicit yes
Settings is one hub with a grouped side menu (Account, Advanced, Organization, Project) in place of the tab strips, on web and desktop, with every page keeping its address; on a phone it folds into a dropdown menu
With the sidebar collapsed to icons, a group opens its pages in a menu beside it, so nothing is out of reach
Fixes
A collapsed sidebar no longer shows a clipped letter beside a group's icon
A repeated paid web search from a long-lived desktop or MCP session is billed again once its cached result expires, so a session cannot search for free
New projects carry AGENTS.md alone; Claude Code reads it directly, so no CLAUDE.md is generated
v3.13.0
Sep 20, 2026
Steadier mobile social sign-in
Social sign-in on the mobile app no longer lets a stray tap push a screen underneath the provider's sheet, and the comparison pages grow to cover one more starter kit.
Features
The comparison and alternatives pages now cover TurboStarter, and every page argues its case in its own words instead of repeating passages across pages
Fixes
On mobile, tapping a social sign-in button now shows that it is signing in and holds every other sign-in option still until the provider's sheet settles, so you never return from Google to a screen you did not ask for
v3.12.0
Sep 19, 2026
The runner lane is retired
The paired-device runner is gone - the daemon your users installed, the pairing flow, the dispatch transport and the Runners screen. Running work on a user's own AI subscription is the desktop app's job now, and it forks its own runtime with nothing to install and no device to pair.
Features
New projects ship without the runner - no pairing endpoint, no dispatch transport, no Runners settings page, and one fewer question at init
Existing projects drop it on update and are told once; your chat and automations keep running on your own AI backend, and the desktop app's local CLI support is untouched
Performance
A generated backend is lighter by the whole relay - its device registry, presence tracking, per-device rate-limit budgets and the runner routes
v3.11.1
Sep 18, 2026
A first message that just works
A brand-new account could not send its first chat message: the composer named a model and the answer came back "No model selected". The model your app is configured to default to now runs that turn, on every client.
Fixes
The first message of a new account runs on your app's configured default model instead of being refused
A chat with no model picked yet sizes its context window and its attachment controls from the model it actually runs on
v3.11.0
Sep 18, 2026
One product on two screens
Every dashboard screen now lives in one place and renders in the web app and the desktop app alike, the admin panel included, so a change to a screen reaches both at once. Your product's own written instructions reach its assistant and any MCP client, and a conversation survives changing the model under it.
Features
Every dashboard screen is one shared screen both the web app and the desktop app render - dashboard, chat, automations, billing and history, models, integrations, runners, MCP, projects, profile, security, organization and its activity log, API keys and notifications
The admin panel ships inside the desktop app, all eight tabs, behind the same role check the web uses
Skills - plain markdown in one folder - reach the in-app assistant, MCP clients (a skills list, a skill fetch and one prompt per skill) and Mastra Studio, with no per-project wiring
Changing the model or the provider mid-conversation keeps the conversation, from your hosted default to a coding CLI on the user's own machine and back
A question the assistant asks can be skipped, on the web, in the desktop app and on the phone
The desktop app connects, tests and removes provider keys in-app, instead of sending the user to the browser
On macOS the desktop app draws its own title bar, with the side-panel toggle on it
The mobile app ships a build profile that installs on a real phone, and shows the brand and a spinner while it works out who is signed in
Fixes
A deployment on Inngest Cloud stops losing events - the client keeps both of Cloud's hosts
The security page lists sessions again for an account signed in more than a day ago, instead of reporting a failure
Screens wait for their data instead of announcing an empty account and then filling in
The web Create Key button opens its dialog - creating and revoking an API key on the web was unreachable
The desktop app shows plan and product names instead of the key paths behind them
The desktop terminal keeps the app's tools after a project switch or an expired session
The first mobile build works on a fresh clone, and an EAS iOS build no longer dies in "Configure expo-updates"
The mobile splash follows the phone's theme, the chat composer stays above the keyboard, and a field's text sits where its box says
v3.10.0
Sep 12, 2026
Answer the assistant's questions from any device
The assistant's question-and-answer loop now works end to end on web, desktop and phone, and the chat transcript tells the truth about what is running and what is waiting on you.
Features
The phone can answer a question the assistant asks mid-turn - tap an option or type a reply, and the same turn continues under the question
Fixes
Answering a question no longer prints the whole assistant turn a second time
A question waiting for your answer no longer spins like a running tool; the row says it is waiting and settles once you answer
Each "Thinking" row shows the time it actually took instead of animating until the whole reply has finished
The desktop model picker shows the built-in assistant under your product's name and no longer exposes the model behind it
The phone's chat header is a chats menu, the title and a New chat button, with no stray Back control, and the logo opens the dashboard
v3.9.0
Sep 12, 2026
Collapsible sidebar groups, a calmer default sidebar, and test suites you can trust
This release makes the dashboard navigation scale with your product and makes the shipped test suites something you can rely on instead of babysit. Sidebar entries can now nest pages under a collapsible group that remembers what you opened, the default sidebar is reorganised so Settings is one click away in both the web and desktop apps, and every unit and end-to-end suite was rebuilt to prove behaviour rather than read source, so a rename, a copy edit, or a busy machine no longer turns tests red.
Features
Sidebar items can hold collapsible groups - children open where you left them, on the server-rendered first paint on web and instantly on desktop, with a choice between several groups open at once or one at a time, and the whole row toggles so it works with a thumb on a phone
The default sidebar reads top to bottom in both apps - Dashboard, Chat, Automations; a Workspace heading over Organization and Project; Admin; then a Settings row at the bottom, with the notifications bell last in the controls row and Go Home in the user menu above Log out
Broadcast SMS reaches every user who saved a phone number, and the phone verification step is gone, so nobody is asked to confirm a number during onboarding
A test-contract guard ships with the project and fails any test that reads source files as text, measures wall-clock time, or pins a file count - the patterns that made suites flaky
Fixes
Compare pages serve the social card they advertise instead of a 404
Running the end-to-end suite against the development server hydrates again
The macOS desktop release signs on fresh runner images instead of failing on a stale keychain
Local infrastructure and CI pull MinIO from Quay, the same pinned release, now that Docker Hub no longer serves the image
The first message of a new chat no longer fails with a not-found error when the thread's title lands a moment before it
Performance
The shipped unit and end-to-end suites run in about half the time - the API suite runs its files in parallel on one throwaway database per worker, and the end-to-end suite dropped a quarter of its cases without losing a behaviour
v3.8.0
Sep 10, 2026
Money-safety hardening, mobile parity, and lighter CI
This release is a broad money-safety pass across billing, auth and the AI credit paths, plus mobile and desktop parity work and a lighter CI story for generated projects. After updating, note three behaviour changes a buyer should know: a generated project no longer runs heavy CI on every push (run `pnpm preflight` before a release instead), `INNGEST_SIGNING_KEY` is now required in production, and the free plan grants its credits once per email rather than on a schedule.
Features
Free signup credits are granted once per email, so deleting and recreating an account no longer yields fresh free credits
Auto top-up is capped per day and the minimum for a purchase or top-up is now $10, so a runaway loop cannot drain a card
Phone numbers are verified with a one-time code, and broadcast SMS goes only to verified numbers
Account deletion sweeps every uploaded file, and per-user storage and per-plan seat limits are available
The mobile Chat tab opens a conversation with New-chat and History controls instead of a list, and its icons and social login now match web and desktop
The desktop profile card verifies a phone number, and the update command runs one way and asks only when a change is risky or alters behaviour
A generated project stops running heavy CI on every push; a pull request runs checks, the full suite runs on demand, and `pnpm preflight` runs it locally before a release
A new brand mark ships as the default logo, favicon, app icon and OG image
Fixes
NaN or infinite credit amounts, banned accounts, API-key sessions, oversized request bodies and a paid order that names no billing entity are all refused or reported instead of costing money
The request body-size limit no longer errors on delete requests under a production server, so removing an account, project, device, notification or automation works once deployed
Metered AI runs settle safely on every path, the concurrency cap refuses rather than admits when its counter is unreachable, and admin routes authenticate before they validate
A removed member's sessions and automations stop spending the owner's credits, and rate-limit and quota counters keep their expiry across cache providers
Broadcast SMS, newsletter sync, the inactive-user check and views ranking survive large audiences instead of stopping partway
Desktop quit waits for the runtime and refused streams settle their caller; mobile accepts HEIC photos, drops push on a revoked session, and replays a tapped notification only for its recipient
The CLI strip no longer ships a live PostHog branch to a non-PostHog desktop build, and eject removes the licensing test files it used to leave behind
v3.7.0
Sep 5, 2026
The mobile app
The boilerplate now generates a mobile app: a project made with `--mobile` gets a full Expo app beside the web one, with the same sign-in, chat, inbox, organizations, settings and billing, and `--mobile-purchases revenuecat` adds App Store and Google Play sales beside Stripe or Polar. Both options are off by default, so a project that does not ask for the app receives none of it.
Features
A full mobile app (Expo) ships as a Pro option - auth with Apple and Google, chat with camera, files and voice, notifications, organizations, billing
In-app purchases through RevenueCat, additive to Stripe or Polar, with store-safe billing rules
Push notifications with per-type preferences and deep links
Sign in with Apple on web and native
`--mobile` and `--mobile-purchases` join `init` and `update`, so a project ships the app, its store lane, both or neither
A generated mobile app carries the buyer's own identity — bundle id, URL scheme, universal links and store product ids come from the project
Chat on the phone opens the conversations the web app lists, streams over the app's own session, and takes photos, PDFs and dictation
The inbox lists what arrived, opens what each notification is about, and lets a person silence a type without silencing a charge or a sign-in
Automations, organizations, projects, passkeys, two-factor, signed-in devices, appearance and an app lock all manage from the phone
The billing page shows the plan, the balance, the history and a paywall that refuses a purchase which would charge twice
Account deletion now completes through an emailed confirmation link, on the web and in the app, and takes the Apple sign-in grant with it
The web app and the phone share one streaming chat client, so a change to it reaches both
The site and a standalone backend publish the association files iOS and Android read before opening a link in the app
The landing page offers the mobile app only where a store listing exists
Better Auth moves to 1.7, with the consent screen its OAuth provider now requires
A mobile release is cut deliberately on its own tag line, builds on EAS, ships over-the-air where the native code has not moved, and skips green with no credentials set
The battery gains a ninth leg that exports and drives a generated project's mobile app
A mobile documentation silo ships to buyers — setup, architecture, auth, chat, notifications, billing, testing and release
Admin alerts name a duplicate subscription, an orphaned store purchase, a family share and a payment the store left stuck
The tab you are on is filled in, so the bar says where you are by weight and not by tint alone
A generated mobile app ships only the error-reporting SDK the project chose, exactly as the web and desktop apps do
Fixes
A lifetime holder, a buyer in a blocked country, and a subscriber the app store already bills can no longer start a web subscription
An announcement reaches a phone and an inbox as the words that were written, whatever markup or stored entities sit in front of them
A long announcement no longer costs a whole broadcast batch its push, and a dead push queue pauses a broadcast once rather than once per thousand people
Every billing-log row names its source, so an unlabelled entry no longer reads as undefined
An emailed link states its lifetime as "1 hour", not "1 hours", whatever a project sets it to
Two-factor enrolment reads its response safely on Better Auth 1.7, and each sign-in provider keeps its own issuer
A Stripe cancellation arrives on the callback the provider now requires
A translated plural keeps its shape in every locale, and a reply that loses one never reaches a bundle
An app-store badge on the landing page takes the page's own theme and reserves the box its artwork needs
Text on the phone reads at every size a reader sets — headings, card titles, buttons and labels wrap and grow instead of being cut off, in every language the project ships
On a tablet the app reads in a centred column instead of stretching across the screen
A conversation names the thread you are in and offers a way back to the list
The model picker groups models by their maker, marks the one the chat is using, and the composer's model chip reads as a button
A settings picker opens the width of the screen and offers its last choice; every list inside a dialog scrolls instead of clipping
An open dialog closes when a link takes you somewhere else, instead of floating over the screen you landed on
A field's placeholder is legible on the dark theme, the way back out of a screen has room around it, and a status dot shows at a strength the light theme can display
A member's email shortens in the middle rather than breaking inside the word, and the pull-to-refresh disc takes the app's theme
The coverage audit that guards every `init` combination now reads multi-select options, so no configuration axis is skipped silently

v3.21.0

Features

Fixes

Performance

v3.20.0

Features

Fixes

v3.19.0

Features

Fixes

v3.18.1

Fixes

v3.18.0

Features

Fixes

v3.17.1

Fixes

v3.17.0

Features

Fixes

v3.16.0

Features

Fixes

v3.15.2

Fixes

v3.15.1

Fixes

v3.15.0

Features

Fixes

v3.14.0

Features

Fixes

v3.13.0

Features

Fixes

v3.12.0

Features

Performance

v3.11.1

Fixes

v3.11.0

Features

Fixes

v3.10.0

Features

Fixes

v3.9.0

Features

Fixes

Performance

v3.8.0

Features

Fixes

v3.7.0

Features

Fixes