# Changelog

Sixb packages are versioned independently. Each release entry names the packages that shipped.

## 2026-11-10 — Sixb 0.2.3

0.2.3 makes the data plane run on its own: the lake is retained and compacted, webhook changes are
stored before they are written, and every run lost by a worker comes back. Artifacts become live
documents people edit together, comment on and attach to objects; the app becomes an installed
phone app; and each person can connect their own accounts. The upgrade needs a plan: read the
upgrade notes first.

### Highlights

- Keep the lake healthy without a cron: DuckLake compacts datasets after the commits that need
  it, retention removes replaced versions on a built-in schedule set by `lakeMaintenance`, and
  Console › Lake health shows what waits. The new `@sixb/lake-worker` runs it.
- `sixb.datasets.ingest` stores changes and returns at once; a worker writes what waits as one
  version per flush. A pipeline step that replaces a keyed output stores only the rows that
  changed.
- Bring back what a lost worker left: the orchestrator resumes queued and running syncs,
  pipelines, workflows, projections and webhook deliveries, worker leases are renewed while a run
  works, and one run of a sync runs at a time.
- Edit a canvas live with others: who is there shows over the canvas, the Agent's changes merge
  with yours, and edits work offline until saved. Comment on a board's words, pictures and colors,
  and send comments to the Agent, which resolves or answers them. Each board keeps a picture.
- Artifacts change their current version until someone creates one with
  `sixb.artifacts.freeze(id)`, and restore points put back what an Agent turn changed.
- Hold an artifact in an object property with `ref.artifact()`: whoever reads the object reads
  the artifact, object pages show it, forms pick it, and a shared link's visitor follows it live
  and comments as a guest. `ArtifactViewer` shows one in a page of your own.
- Install the app on a phone like a native one: `AppShell` builds a top bar, a tab bar and a More
  sheet from the nav, screens push and pop, and the installed app opens offline and resumes.
  Loading states take the shape of what loads.
- Start a conversation from your phone that runs on your computer, or in a sandbox from the
  page's own picker with `newThreadSandbox` and `newThreadControls`.
- Let each person connect their own accounts with `owners: ["user"]` on a connector: syncs bring
  in everyone's data, each person sees only their own. Microsoft 365 connects people with OAuth,
  and `entraDirectory()` suspends whoever leaves Entra and ends their connections, as
  `sixb.users.suspend()` does from code.
- Keep a project's values in Azure Key Vault with `@sixb/env-azure-key-vault`, and run
  `sixb env init` on any source.
- GitHub gains branches, attachments, pull requests, stacks, commits and issue tracking;
  QuickBooks gains estimates and 26 more Accounting resources with incremental sync.
- Connect Instagram professional accounts without a Facebook Page with `@sixb/connector-meta`'s
  `meta({ appId, appSecret, configId, accounts: "instagram" })` (Instagram API with Unified
  Login): each connection is one shared account, published and read with the grant's system user
  token. Give Facebook videos and reels a custom thumbnail with `videos.create({ thumb })` and
  `facebookVideo(id).thumbnails.create({ source })`.
- `@sixb/broker-redis` expires idle streams once their records leave age retention.

### Upgrade notes

Read this first: lake retention starts on its own, and what it deletes does not come back. In order
(`sixb deploy` does steps 3 to 5):

1. **Decide what the lake keeps.** Replaced versions go after 7 days, and the files only they read 7
   days later. Set `lakeMaintenance` now if that is not what you want.
2. **Install and compile.** All `@sixb/*` move together, and `@sixb/lake-worker` arrives through
   `@sixb/cli`. See _What stops compiling_.
3. **Stop the old services.** Old workers get `killTimeoutMs` to finish, 70 s under `sixb deploy`;
   a run they leave behind ends 24 hours after it started.
4. **Migrate and check, with services down.** `sixb db migrate`, then `sixb check` and
   `sixb lake check`. This is the first step that opens DuckDB 1.5.6, so a host that cannot fetch the
   new extension fails here. The `ALTER`s take no `lock_timeout`: behind a long report on `sync_runs`
   or `pipeline_runs` they wait, and so does every reader behind them.
5. **Look at what `sixb check` counts, then start.** See _What a restart picks up_.
6. **After.** `/api/status` reads `unknown` until the first beat: a monitor on `== "ok"` alerts for up
   to one beat. Regenerate clients.

To roll back to 0.2.2, stop `ingest` traffic and let the inbox drain first: 0.2.2 does not read
`dataset_ingest_deliveries`, so what waits there stays until you roll forward. A run holding an
execution token stays `running` on 0.2.2, whose workers skip it.

#### What stops compiling or starting

- `@sixb/ducklake`: `lakeStorage.runMaintenance()` and its `DuckLakeMaintenanceOptions` and
  `DuckLakeMaintenanceReport` types are gone. Call `lakeStorage.maintenance.applyRetention()`.
- Artifacts: `sixb.artifacts.publish(id, input)` is now `sixb.artifacts.update(id, input)`
  (`PublishArtifactRuntimeInput` becomes `UpdateArtifactRuntimeInput`), and
  `POST /api/artifacts/{id}/versions` is now `PUT /api/artifacts/{id}/content`. A write replaces
  the artifact's current version instead of adding one; `sixb.artifacts.freeze(id)` creates a
  version. Regenerate clients.
- `sixb.datasets.ingest` returns `{ deliveryId, changes }`: `outcome`, `version` and `rowsRead` are
  gone. See _What changes at runtime_.
- `sixb.scheduler` and the `SchedulerController` type are gone: nothing outside tests called them.
  Cron runs in the orchestrator's maintenance loop, through `host.startMaintenance()`.
- `services.scheduler` is no longer a `sixb deploy` setting. Remove it. A deployment with
  `orchestrator: false` runs no cron.
- `sixb scheduler` is gone: `sixb orchestrator` runs cron schedules now. The command exits with an
  error, so a process manager left on it shows up. Remove that process. During the rollout, stop the
  old scheduler before the new orchestrator starts, or occurrences due in between fire twice.
  `sixb deploy` does this for you: it stops every service of the old release first.
- `sixb lake cleanup --expire-older-than` and `--delete-older-than` are now `--keep-versions-for`
  and `--delete-files-after`. A server cron on the old flags fails. A version now ages from the
  commit that replaced it, not from its own, and neither may be under an hour. The command defaults
  to the project's `lakeMaintenance` instead of 7 days, and runs until nothing is left instead of
  one pass.
- `Queues` gains a required `lake` lane, so a third-party queues provider must implement it. Without
  it `sixb orchestrator` fails to request cleanup, once a minute, and reports it through
  `maintenance.pass.failed`. A third-party `LakeStorage` needs nothing: `maintenance` is optional.

#### What to migrate

- Storage gains `maintenance_heartbeats`, `lake_retention_runs`, `dataset_ingest_deliveries` and
  `dataset_ingest_state`, and `sync_runs`, `pipeline_runs`, `webhook_runs` and `projection_runs`
  gain columns. Migrate before starting the new services.
- `@sixb/ducklake` runs on DuckDB 1.5.6 (from 1.5.2) and a checked DuckLake build, `ac7595b0`. The
  first process that opens the lake installs that extension over the network, so a host that cannot
  fetch it fails there. Any other build logs a warning and still opens the lake.

#### What runs where

- `sixb api` no longer delivers events left undelivered or purges expired records: run
  `sixb orchestrator`, even with no schedules. It warns at startup. `sixb deploy` runs one unless
  `services.orchestrator` is `false`.
- Only the orchestrator brings back a run that lost its worker. Without one, a lost sync run stays
  `running`, and later runs of that sync wait behind it.
- The new `@sixb/lake-worker` runs lake retention and writes ingested changes, as worker type `lake`.
  `sixb worker-group` with no types and `sixb deploy` include it, in the existing process. A
  deployment that lists its worker `types`, or a `sixb worker-group` given a list, must add `lake`:
  both warn when it is missing, and until then nothing cleans the lake and changes wait, shown in
  Console › Lake health. It starts for any dataset with a primary key.
- Separate `sixb worker <type>` processes get no such warning at startup: add a `sixb worker lake`
  process. Until then the orchestrator's output, `sixb check` and Console › Lake health say that no
  lake worker has run cleanup, and `sixb check` names the datasets whose changes nothing writes.
- No orchestrator is needed for webhooks to reach the lake. Keep it on all the same: it reports
  changes that wait, and asks again for a write the queue lost when no other `ingest` call comes.
- `createSixbServer` keeps delivering events and purging records, and writes what `ingest` stores
  before the call returns, since no lake worker would. Pass `ontologyMaintenance: false` to it if
  your process also runs an orchestrator, and `ingestFlush: false` if a lake worker runs for the
  project. `sixb api` passes both. An embedded server runs no cron, no lake retention and no report
  of changes that wait.

#### What a restart picks up

- The orchestrator's new `runs` pass brings back what lost its job, however old: a queued run starts,
  and a running run whose lease lapsed resumes. A run lost for a week ends `cancelled` instead, and
  so does a run an older version left running, 24 hours after it started. `*.run.finished` fires for
  those, and a schedule on it with them.
- `sixb check` counts what will go on and what will end. Workflows are the ones with side effects,
  so read them before you start:
  ```sql
  SELECT status, count(*), min(queued_at) FROM workflow_runs
  WHERE status IN ('queued','running') GROUP BY status;
  ```
- The first `triggers` pass looks at each dataset once, and may start a pipeline for a change no run
  read. The first `lake-retention` request deletes what step 1 of these notes says.

#### What changes at runtime

- A stopped worker no longer ends a run: it stays `running` and the next delivery resumes it, so
  `*.run.finished` with `cancelled` stops firing at deploys. A run that loses its worker five times
  ends `failed`. `attempt` joins the sync and pipeline run APIs, and the Console run rows.
- A worker that dies gives its job back after a minute, not 15: the lease of syncs, pipelines,
  projections, workflows and lake jobs is renewed while they run, so only a lost worker waits it out.
- One run of a sync runs at a time: a queued run waits for the running one, and triggers join it.
  Datasets stay multi-writer.
- A webhook retry during a live delivery gets `503` with `Retry-After`, not `202`. A delivery whose
  process died runs its handler again on the retry, so handlers must be idempotent.
- `sixb.datasets.ingest` stores the changes and returns before they are in the dataset; a worker
  writes what waits as one version. Code that read the dataset right after `ingest` must be
  triggered by the version instead: `defineSchedule("x").on(events.dataset(x).updated())`, attached
  to the sync, pipeline or workflow. In tests, and in an embedded server, `ingest` still writes
  before it returns.
- `ingest` refuses, by throwing, a value the lake cannot hold when it can tell, such as a date
  DuckDB does not read. One found later sets its call aside for a week: `sixb lake rejected` prints
  it, and Console › Lake health counts it. Nothing else behind it waits.
- During a rollout, a lake worker older than the API keeps retrying what it would refuse, until it
  runs the same code. Finish the rollout: changes wait for it. Rolling back past a definition leaves
  the same wait, until you roll forward.
- DuckLake compacts a dataset on its own, in the process that wrote, after the commits that need
  it. Compaction never creates a dataset version, and time travel reads the same rows after it.
- A pipeline step that replaces a keyed output now stores only the rows that changed, so projections
  of it apply only those. A version that changes no row is still recorded, and fires no
  `updated()`.
- An automatic dispatch that fails no longer holds the routes behind it. An outage retries until it
  ends, and a failure about one event, such as a mapper that throws, is reported and dropped.
  `packages/orchestrator/README.md` lists what can be lost.
- A cron occurrence the broker refuses is retried until accepted, and fails the `cron` pass
  meanwhile, instead of being reported once and lost.
- `@sixb/broker-redis` expires a stream with `maxAgeMs` once it is idle: its records `maxAgeMs`
  plus a minute after the last append, its metadata a day later. A finished agent run's stream
  used to keep every record until someone read it again. Streams written before the upgrade get
  their expiry the next time they are read; one nobody reads again keeps its keys until deleted.
- `/api/status` reads a heartbeat the orchestrator writes to storage. `status` can now be `unknown`,
  and `maintenance` holds `owner`, `beatAt`, `stale`, `passes` and `outbox` instead of the last pass
  of the process that answered.
- `onError` gains `maintenance.pass.failed`, `orchestrator.dispatch.failed`, which carries `dropped`,
  `lake.retention.failed`, `dataset.ingest.flush.failed` and `dataset.ingest.rejected`, and the
  error catalog `dataset.change_refused`. `@sixb/core/lake-storage` exports `LakeValueRefusedError`
  and `DatasetSequenceConflictError`. `InMemoryBroker` now honors `idempotencyKey`, as Redis and NATS
  do.

### Package versions

- `0.2.3`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/app`, `@sixb/ui`, `@sixb/cli`,
  `@sixb/cli-core`, `@sixb/agent`, `@sixb/orchestrator`, `@sixb/pg`, `@sixb/sqlite`,
  `@sixb/ducklake`, `@sixb/agent-worker`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`, `@sixb/broker-redis`,
  `@sixb/queues-bullmq`, `@sixb/auth-oidc`, `@sixb/connector-github`, `@sixb/connector-meta`,
  `@sixb/connector-microsoft`, `@sixb/connector-quickbooks`, and `@sixb/lake-worker` and
  `@sixb/env-azure-key-vault` (new).

## 2026-11-07 — Sixb 0.2.2

0.2.2 gives the Agent the web, background commands and the workspace's own instructions, runs it
on your computer from the desktop app, and plans PostgreSQL member reads over only the types they
reach.

### Highlights

- Search the web with the Agent's `web_search` tool whenever the project has a web search model,
  now a model kind of its own in `models.webSearch`. Every Vercel AI Gateway language model
  carries one (`gateway.webSearch("perplexity" | "exa" | "parallel")`), and `exaSearch` from
  `@sixb/connector-exa` is another. Searches are recorded and cost-limited like any model call.
- Read pages with `web_fetch({ url, question? })`, within the sandbox's network: HTML becomes
  markdown, a large page is saved to a file the Agent reads in pieces, and a question is answered
  from the page. Narrow both tools with `agent.web: { allowedDomains, blockedDomains }`, or turn
  them off with `agent.web: false`.
- Run commands in the background with `bash({ run_in_background })`, `bash_output` and
  `bash_stop`. A command gets 2 minutes by default and up to 10, where it had 30 seconds. The app
  and the terminal show a running command as a live card, and either can stop it.
- Read the workspace's `AGENTS.md` (else `CLAUDE.md`) from the repository root down to the working
  folder into the Agent's instructions, after Sixb's rules and `SIXB.md`.
- Run the Agent on your computer from the desktop app: a new conversation runs in a folder you
  choose, and `sixb connect` keeps the computer available without `sixb` open. `sixb agent` sends
  to a conversation from anywhere and follows whatever runs it.
- Plan a member's PostgreSQL reads over their own types' partitions, index view conditions, keep
  object statistics fresh between publications, and serve descending sorts from ascending sort
  indexes. Every framework connection starts with `jit = off`.
- Connect the only account on return from OAuth instead of stopping at account selection.
- DuckLake fetches missing DuckDB extensions over HTTPS, so a lake opens where plain HTTP is
  blocked.
- Delete Pipedrive persons and organizations with `persons.delete(id)` and
  `organizations.delete(id)`.

### Upgrade notes

- Run the migrations: PostgreSQL `087-agent-computer-background-commands` and
  `088-web-search-model-kind`, SQLite `084-agent-computer-background-commands` and
  `085-web-search-model-kind`. PostgreSQL re-prepares each object type's partition once.
- Vercel AI Gateway projects get `web_search` with no configuration, and every project gets
  `web_fetch`. Set `agent.web: false` to keep the Agent off the web. `web_search` and `web_fetch`
  are reserved tool names: a model's own tool by that name fails at startup unless `agent.web` is
  `false`.
- `@sixb/connector-exa` `0.2.1` removes `@sixb/connector-exa/agent-tools` (`exaWebSearch`,
  `exaWebFetch`). Use `models: { webSearch: [exaSearch({ apiKey })] }` instead.
- A computer runs messages sent from the web only in folders allowed on it, per project, and the
  list starts empty: allow a folder again from the terminal or the desktop app.
- Equal values in a sort now follow the last sorted property's direction on every store.

### Package versions

- `0.2.2`: `@sixb/core`, `@sixb/agent`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/ducklake`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`,
  `@sixb/vercel-ai-gateway`.
- `0.2.1`: `@sixb/app`, `@sixb/client`, `@sixb/desktop`, `@sixb/cli-core`, `@sixb/anthropic`,
  `@sixb/connector-exa`, `@sixb/connector-pipedrive`.

## 2026-11-05 — Sixb 0.2.1

0.2.1 runs pipelines and syncs only when there is something new to read, and keeps cost limits
working on Vercel AI Gateway bindings that set provider options.

### Highlights

- An automatic Pipeline or Sync trigger (event or cron schedule) joins a run of the same Pipeline
  or Sync that is still waiting to start, instead of queueing one run per trigger: the waiting run
  reads the latest inputs when it starts. A trigger that arrives while a run is running queues one
  new run, which later triggers join. Workflow triggers and manual requests keep one run each.
- A dataset version records `rowsChanged` and `lineageChanged`, and `dataset.version.committed`
  carries both. `events.dataset(X).updated()` fires only for a version that changed rows or
  markings, so a version that only records new input versions no longer wakes downstream
  schedules. DuckLake `readChanges` skips the table when no version in between changed rows.
- On a dataset with `sequenceBy`, a newer delivery that differs from the stored row only in its
  sequence column keeps the row: a webhook that re-reads an unchanged record no longer re-runs
  what reads the dataset.
- A Sync or Pipeline job that fails before starting its run retries twice, then fails the run,
  instead of leaving it queued.
- Vercel AI Gateway reserves a call at its model's catalog rates whatever its provider options,
  and at the dearest of its fallback models. Bindings that set `anthropic.thinking` or another
  provider option no longer fail every call under a cost limit.

### Upgrade notes

- No migration. Upgrade the packages below together.
- Fewer runs: Pipelines and Syncs triggered by schedules may now share one run, and
  `updated()` schedules skip versions that changed no rows.

### Package versions

- `0.2.1`: `@sixb/core`, `@sixb/agent`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/ducklake`, `@sixb/lake-local`, `@sixb/agent-worker`,
  `@sixb/pipeline-worker`, `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`,
  `@sixb/workflow-worker`, `@sixb/vercel-ai-gateway`.

## 2026-11-04 — Sixb 0.2.0

0.2.0 completes secure and traceable execution
([#360](https://github.com/sixb-ai/sixb/issues/360)): every operation runs in one execution
context, every protected read goes through one authorization model, markings follow data from
datasets to ontology properties, and current values can be traced to their source. Every package
moves to `0.2.0`.

### Highlights

- Explain where an object's values come from with `sixb.objects(T).lineage(id)` and
  `linkLineage(input)`: the projection, dataset version and columns behind each property, or the
  Action or write that edited it, who asked for it and the value it replaced. Walk a dataset
  version upstream with `sixb.datasets.lineage(dataset, { versionId, depth })`. Each step is
  authorized on its own, and a hidden step is counted, not described. The API serves the same
  reads, and an object page shows "Where this value comes from" for each property.
- Reorganize the app into Settings for everyone (Personal, Developers, Memory), project settings
  for admins (Members, Usage, Activity), and one Console for the project's developers (syncs,
  pipelines, ontology, logs), opened with `can.observe(project.console)`.
- Declare the variables a project needs in `sixb.env.ts`; `sixb dev` and `sixb check` stop on a
  missing one. Keep the values in Doppler with `@sixb/env-doppler` and `sixb env init`, `pull`,
  `set` and `status`, and let `sixb deploy` write each server's `.env` from it.
- Budget each conversation against its model's context: the Agent measures each model's bytes per
  token on the project's runs, saves tool outputs too large for the context to files it reads in
  pieces, and compacts idle or long conversations toward the model's limit. A context meter beside
  the model, `/context` in the terminal and the API show what each part of a conversation uses.
- Continue a conversation that runs on your computer from the web, or move it to the cloud.
- Cap agent runs at a number of model calls with `agent: { maxSteps, subagentMaxSteps }`,
  `defineAgentStep({ maxSteps })` and `spawn_agent`; sub-agents and workflow AI tasks stop at 500
  by default.
- Give Actions the `client` of the request that asked for them, revoke shared links from Actions
  and workflow steps with `sixb.shares.revoke`, and brand a dead shared link with
  `app/shared-unavailable.tsx`. `useDesktop` tells an app it runs in the desktop app.
- Partition PostgreSQL objects by object type, so a query plans against its own type's indexes,
  and keep idle connections for a minute. Links are read as the ontology declares them on every
  provider, and live object queries refresh only when a type they read changes.
- Manage Pipedrive fields, options and labels, and price one-hour cache writes on Anthropic routes
  through Vercel AI Gateway.

### Upgrade notes

- Upgrade every Sixb package to `0.2.0` together: `^0.1.x` ranges do not accept `0.2.0`. Rebuild
  application assets.
- Run the migrations: PostgreSQL `084-agent-token-rates` to `086-partition-objects`, SQLite
  `082-agent-token-rates` and `083-agent-computer-sessions`. PostgreSQL `086` locks the objects
  table while it copies every object into a partition of its type: plan for that pause, and
  rehearse it on a copy of a large database first.
- The routes that wrote objects, links and telemetry directly are removed: `PUT
  /api/objects/:type/:id`, `PUT` and `DELETE …/links/:linkId`, and `POST
  …/telemetry/:propertyId`. Change the ontology through Actions; code keeps writing in process
  with `sixb.objects(…).upsert()`.
- The `visibility` export in `app/layout.tsx` is removed. Grant the Console with
  `can.observe(project.console)` in a role.
- Core no longer exports `matchingAgentUsageAnchor`, `agentContextBytesPerToken` and
  `measureAgentContextRequest`, and `@sixb/agent` no longer re-exports core's context budget:
  import it from core.

### Package versions

- `0.2.0`: every published Sixb package, and `@sixb/env-doppler` (new).

## 2026-11-03 — Pipedrive connector 0.1.4

- `@sixb/connector-pipedrive` `0.1.4`: manage person, organization, deal and product fields with
  `create`, `update`, `delete`, `addOptions`, `updateOptions` and `deleteOptions`, including the
  labels on contacts through the built-in `label_ids` field. `get` and `list` accept
  `include_fields`. `PipedriveField` now has the v2 shape, so read `field_name` instead of `name`;
  `key`, `id`, `edit_flag` and `active_flag` are no longer typed.

## 2026-10-31 — Framework 0.1.26

### Highlights

- Work with the Agent from your terminal: `sixb` alone opens Sixb, and a conversation can run on
  your computer, in the folder you opened it in. `sixb agent "..."` asks once from a script.
- One agent harness for every runner, in the new `@sixb/agent` package. A runner outside the
  worker reaches its run over HTTP; the agent worker becomes the cloud runner.
- Keep the run's token out of the Agent's commands: every sandbox provider adds it to API requests
  where commands cannot read it. The commands call the normal API; `/__sixb/agent-api` is gone.
- Agent turns have no time or step limit, and sub-agents run beside their turn, without a queue.
- Redesign the composer: one settings chip for model, thinking and permissions, a `+` menu, slash
  commands, pasted images, files sent alone, and writing while the Agent answers. A notification
  sound plays when a turn ends.
- Look a member up by email with `sixb.users.get({ email })`, map `ref.user()` properties from
  member emails with `userRef.fromEmail(column)`, and seed members in tests with `seedTestUsers`.
- Read datasets, syncs and pipelines with `sixb datasets`, `sixb syncs` and `sixb pipelines`.
- Speed up object queries on PostgreSQL and SQLite, and cut about 30 s from an SSH deploy.
- Anthropic prices models from models.dev, shows thinking summaries and caches agent prompts by
  default; Vercel AI Gateway caches what agents reuse. Connect Facebook Pages through Facebook
  Login with the Meta connector.

### Upgrade notes

- Upgrade core, its exact worker/storage consumers, server and CLI together to `0.1.26`, with
  `@sixb/agent` `0.1.0`. Upgrade the other packages listed below; rebuild application assets.
- Run the migrations: PostgreSQL `082-agent-run-cancel-requests` and `083-agent-thread-runs-on`,
  SQLite `080-agent-run-cancel-requests` and `081-agent-thread-runs-on`.
- A custom sandbox provider must set `supportsRequestCredentials`; `createSixb` fails at startup
  otherwise. smolvm and Apple Container commands no longer run as root: bake tools into the image,
  which needs Bun or Node.
- An approval-gated call must be sent as `application/json` (415 otherwise).
- Removed: `queues.agentChildren`, `turnTimeoutMs`, `defaultMaxSteps`, `--agent-turn-timeout`,
  `SIXB_AGENT_TURN_TIMEOUT` and `services.workers.agentTurnTimeout`.
- `@sixb/app` replaces `ModelControls`, `AutoModelChip` and `ApprovalModeChip` with
  `ComposerSettings`.
- New projects need Bun 1.4.4 or later.

### Package versions

- `0.1.26`: `@sixb/core`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`, `@sixb/pg`,
  `@sixb/sqlite`, `@sixb/agent-worker`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.24`: `@sixb/client`.
- `0.1.18`: `@sixb/app`.
- `0.1.10`: `@sixb/cli-core`.
- `0.1.9`: `@sixb/vercel-ai-gateway`.
- `0.1.8`: `@sixb/queues-bullmq`, `@sixb/sandboxes-vercel`.
- `0.1.7`: `create-sixb`, `@sixb/broker-redis`, `@sixb/sandboxes-apple-container`,
  `@sixb/sandboxes-local`, `@sixb/sandboxes-smolvm`.
- `0.1.6`: `@sixb/anthropic`, `@sixb/azure-ai-foundry`, `@sixb/connector-meta`.
- `0.1.4`: `@sixb/deploy-ssh`.
- `0.1.3`: `@sixb/model-protocols`.
- `0.1.2`: `@sixb/sandboxes-azure`.
- `0.1.0`: `@sixb/agent` (new).

## 2026-10-29 — Framework 0.1.25

### Highlights

- Embed other sites in pages: `SIXB_APP_FRAME_ORIGINS` lists the exact origins an `<iframe>` may
  load, in production and in `sixb dev`.
- Redraw the device sign-in pages: the code shows one character per cell on both screens, and the
  account and its groups sit above Deny and Authorize.
- Check text over photos in Agent slides: a text box with too little contrast against the image
  under it is reported, and edge-to-edge photos no longer count as running into the footer.

### Upgrade notes

- Upgrade core, its exact worker/storage consumers, server and CLI together to `0.1.25`. Upgrade
  the app to `0.1.17`; rebuild application assets.

### Package versions

- `0.1.25`: `@sixb/core`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`, `@sixb/pg`,
  `@sixb/sqlite`, `@sixb/agent-worker`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.17`: `@sixb/app`.

## 2026-10-28 — Framework 0.1.24

### Highlights

- Dictate a message in the Agent chat. Declaring `models.audio.transcription` adds a microphone to
  the composer; the recording goes to the project's own model and is never stored.
- Transcribe audio passed as bytes, `{ data, mediaType }`, without writing it to blob storage.
- Ask whether the caller may run models with `sixb.models.canRun()`, or `capabilities.run` on
  `GET /api/models`.
- Record speech in the browser with `createRecordingSpeechRecognizer` and show it with
  `DictationWaveform` from `@sixb/ui`.

### Upgrade notes

- Upgrade core, its exact worker/storage consumers, server and CLI together to `0.1.24`. Upgrade
  the client to `0.1.23`, the app to `0.1.16` and the UI to `0.1.8`; rebuild application assets.

### Package versions

- `0.1.24`: `@sixb/core`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`, `@sixb/pg`,
  `@sixb/sqlite`, `@sixb/agent-worker`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.23`: `@sixb/client`.
- `0.1.16`: `@sixb/app`.
- `0.1.8`: `@sixb/ui`.

## 2026-10-28 — Framework 0.1.23

### Highlights

- A chat turn whose sender chose no approval mode runs in `auto` again: nothing waits for an
  approval until the user picks a stricter mode.
- Redraw the default Agent UI: a threads button and list, a composer menu, and reworked approval,
  model and delegation cards.
- Suggest project members when sharing a conversation.

### Upgrade notes

- Upgrade core, its exact worker/storage consumers, server and CLI together to `0.1.23`. Upgrade
  the app to `0.1.15` and the UI to `0.1.7`; rebuild application assets.

### Package versions

- `0.1.23`: `@sixb/core`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`, `@sixb/pg`,
  `@sixb/sqlite`, `@sixb/agent-worker`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.15`: `@sixb/app`.
- `0.1.7`: `@sixb/ui`.

## 2026-10-27 — Framework 0.1.22

### Highlights

- Approve what the Agent changes. Each user picks a mode, `manual` (the default), `accept-edits`
  or `auto`; a call that waits shows as a card in the reply, with Approve, Deny and "Always allow",
  and the turn resumes once it is decided. `sixb.agent.approvals` and `approvalMode` do the same in
  code.
- Let the Agent delegate again: `spawn_agent`, `wait_agent` and `message_agent` run sub-agents in
  threads of their own, each shown as a card under the work that spawned it. A child can ask its
  parent a question, hand files back, and keep its workspace while paused.
- Give the Agent a memory: a user repo and a project repo it reads before each turn and saves to,
  shown in the chat and correctable in Settings › Memory. `sixb.agent.memory` reads
  and saves it; `can.manage(agent.memory)` changes the project's.
- Share a conversation with other members, who read and write in it, or continue it in a
  conversation of their own. `can.observe(agent.threads)` reads other users' conversations.
- Configure language tiers, `models.language: { light, standard, heavy }`, and let Sixb pick the
  tier of each chat turn (Auto), or name a tier in code. Generate images and speech with
  `sixb.models.image` and `sixb.models.audio.speak`, priced on one rate card per model, and call
  the catalog from the API and `sixb models` with `can.run(project.models)`. AI usage breaks
  down by model kind.
- Add pages (small web apps on live data, keeping state with `sixb.state`), canvases, and live
  sheets that read queries as their reader. Sheets can be edited, filtered, sorted and totalled,
  with computed columns, and download as `.xlsx`; a value the reader may not see shows as locked.
- Grant only some objects of a type with `can.view(Type).where(...)`, including
  `currentUser()` to match the reading user. Reads, writes, events, telemetry, rules and Actions
  all follow the condition.
- Declare unique properties with `prop(..., { unique: true })` and get an object by one, in code,
  over HTTP and with `sixb objects`. A duplicate fails with `object.unique_violation`.
- Read the member directory with `sixb.users` and `useUsers`, granted with
  `can.view(project.users)`; user references show member names, and schedules can start on member
  events. Members edit their name in Settings › Personal.
- Redraw the CLI with OpenTUI: `sixb dev` and `sixb deploy` keep a live footer, and every other
  command prints plain text.
- Manage GitHub releases and their assets with the GitHub connector, and list directory users with
  the Microsoft connector.

### Upgrade notes

- Upgrade core, its exact worker/storage consumers, server, client, and CLI together to `0.1.22`.
  Upgrade the app to `0.1.14`, the UI to `0.1.6`, CLI core to `0.1.9`, and the model providers,
  auth strategies and connectors listed below; rebuild application assets.
- Run the migrations: PostgreSQL `069-artifact-kinds` to `081-subagent-questions`, SQLite
  `067-artifact-kinds` to `079-subagent-questions`. `073`/`071-unique-values` backfills unique
  values.
- A chat turn whose sender chose no approval mode now runs in `manual`: its Actions and workflow
  starts wait for an approval. Code that requests turns and expects them to act passes
  `approvalMode`, or sets its principal's default with `sixb.agent.preferences.update`.
- `LanguageModelRateCard` becomes `ModelRateCard`, and its `unit` field is removed.
- `can.observe` accepts only the project surfaces it lists.

### Package versions

- `0.1.22`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.14`: `@sixb/app`.
- `0.1.9`: `@sixb/cli-core`.
- `0.1.8`: `@sixb/connector-google`, `@sixb/vercel-ai-gateway`.
- `0.1.7`: `@sixb/auth-magic-link`, `@sixb/auth-oidc`.
- `0.1.6`: `@sixb/ui`, `create-sixb`, `@sixb/connector-github`.
- `0.1.5`: `@sixb/anthropic`, `@sixb/azure-ai-foundry`.
- `0.1.4`: `@sixb/connector-microsoft`, `@sixb/connector-rest`.
- `0.1.3`: `@sixb/deploy-ssh`.
- `0.1.2`: `@sixb/model-protocols`, `@sixb/blob-azure`.
- `0.1.1`: `@sixb/typesafe`.

## 2026-10-21 — Framework 0.1.21

### Highlights

- Let the Agent deliver its work as artifacts: documents, sheets with their grid and charts, slide
  decks and files, each versioned. `publish_artifact` and `publish_artifact_version` publish them
  from the sandbox, and the thread's latest versions are installed before each turn so the Agent
  revises what it published. `sixb.artifacts` and `/api/artifacts` create, publish, list, read and
  delete them; a user or service account reaches only its own.
- Show artifacts in the app: a viewer beside the conversation, a page at `/artifacts/:artifactId`,
  and a gallery at `/artifacts` filtered by kind. `@sixb/core/artifacts` is the public,
  browser-safe subpath, and the viewer-to-deck frame protocol is versioned as `sixb-frame/1`.
- Record app activity with `createSixb({ activity: { enabled: true } })`: visits, page views and
  the interactions an app marks by name, with a click marker and `trackSixbEvent(name)` from
  `@sixb/client/browser`. Observability › Activity lists a period's users, visits and page views,
  each visit's timeline, and a user's active days and connections. Grant it with
  `can.observe(project.activity)`.
- Let an Agent step declare its own sandbox with `defineAgentStep({ sandbox })`: its runs get a
  fresh sandbox from that factory's recipe, with the repository checked out and credentials issued
  host-side, destroyed when the run ends.
- Let a GitHub App sandbox open pull requests: write access also covers the GitHub API for the
  repository, with the token injected outside the sandbox and commits attributed to the App's bot.
  Request credentials can match a path prefix and a list of methods; the Vercel provider injects
  them into ephemeral sandboxes too.
- Let pipeline steps read marked columns. Each dataset version records the source columns its
  values come from, its markings follow that lineage through SQL and `.run()` steps, and
  `dataset.pick(...)` narrows a step input to some columns. Objects keep the markings of the
  version their projection applied, so removing a marking from a step does not reveal old values.
- Keep each dataset's latest version, and each projection's applied version, when DuckLake
  maintenance expires snapshots. Bound DuckLake version lookups to the snapshots above them, so a
  lookup reads a few rows whatever the catalog history length.
- Redact marked properties once per object type instead of rebuilding every row, and stop
  collecting PostgreSQL statistics on plan work payloads.
- Apply only a theme chosen in the app before first paint, so apps without a `ThemeProvider` no
  longer load dark on a dark OS.

### Upgrade notes

- Upgrade core, its exact worker/storage consumers, server, client, and CLI together to `0.1.21`.
  Upgrade the app to `0.1.13`, the UI to `0.1.5`, DuckLake to `0.1.9`, the local lake to `0.1.7`,
  the GitHub connector to `0.1.5`, and Vercel sandboxes to `0.1.7`; rebuild application assets.
- Run the migrations: PostgreSQL `063-artifacts` to `068-activity-interactions`, SQLite
  `062-artifacts` to `066-activity-interactions`. PostgreSQL `064` and SQLite `063` strip the
  `output_*` diagnostics from stored agent runs.
- `can.observe("logs")` becomes `can.observe(project.logs)`. The string form fails with a message
  naming its replacement.
- Agent project tools store the files they produce through `context.files` instead of
  `context.artifacts`. The Agent's output directory is removed: no `$SIXB_OUTPUT_DIR` and no
  collection after a run.
- Import `githubApp` from `@sixb/connector-github/sandbox` instead of `@sixb/connector-github/auth`.
  A GitHub App with write access needs the Contents and Pull requests write permissions.
- `@sixb/core/internal/artifacts` is replaced by the public `@sixb/core/artifacts`. The document
  preview's renderer registry and `AgentWorkspaceProvider` are removed.
- `createSixb` now rejects at startup a sandbox factory whose recipe asks for write access without
  `auth`, or sets `auth` on a provider that cannot inject request credentials. Wildcard hosts are
  rejected in sandbox networks, source URLs and credentials, and a sandbox network of `none` is
  rejected for agents.

### Package versions

- `0.1.21`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.13`: `@sixb/app`.
- `0.1.9`: `@sixb/ducklake`.
- `0.1.7`: `@sixb/lake-local`, `@sixb/sandboxes-vercel`.
- `0.1.5`: `@sixb/ui`, `@sixb/connector-github`.

## 2026-10-17 — Framework 0.1.20

### Highlights

- Ship Atlas's pages in every project's app. `@sixb/app` now brings built-in sections: Settings
  (Personal, Developers, Members, Service accounts), Data (connectors, syncs, datasets, pipelines,
  projections), Observability (runs, logs, AI usage) and Ontology (object types, objects, graph,
  actions, workflows, rules), opened from the user menu. A `visibility` export in
  `app/layout.tsx` chooses who sees each section.
- Make `@sixb/app` the one import for app code. Apps get `AppShell` and its parts
  (`AppShellProvider`, `Brand`, `NavItems`, `UserMenu`), `useCurrentUser`, `useSignOut`,
  `useCurrentSection()` and `SyncButton`. A project without `app/page.tsx` gets a built-in Home, and
  a project without an `app/` folder still gets the app in the default shell.
- Give every object a page at `/objects/:type/:id`, add Search on ⌘K across pages and objects, and
  dock the project's agent beside each page.
- Add `ThemePicker` to `@sixb/ui`, shown in the user menu and in Settings › Personal.
- Run four embedding calls at once in the projection worker; set it with `--vector-concurrency` or
  `SIXB_VECTOR_CONCURRENCY` on `sixb worker projection`, `sixb worker-group` and `sixb dev`.
- Let automatic and explicit vector indexing wait five minutes for an embedding. Search keeps its
  30-second deadline.
- Verify direct S3 uploads without relying on backend checksums, and keep SFTP abort reasons when
  remote cleanup fails.

### Upgrade notes

- `@sixb/atlas` and `@sixb/agent-ui` are gone, with `sixb atlas`, Atlas's place in `sixb dev` and
  `sixb build`, and the `atlas` deploy service. The app now takes port 3000 and the API 3001;
  `sixb api` starts without an app origin. Remove both packages from your project and update any
  proxy or deployment that pointed at Atlas.
- The app is bundled from the project, so React must be installed there; `sixb build` names what
  is missing.
- `@sixb/app/agents` and `@sixb/app/auth` are no longer import paths, and `SidebarUserMenu` becomes
  the app's `UserMenu`. CLI tooling moves to `@sixb/app/server`.
- Sessions, magic links and sign-in attempts no longer carry an audience, and
  `can.access(applications.*)` with the session's `applicationAccess` is removed. PostgreSQL
  migration `062-drop-auth-audience` and SQLite migration `061-drop-auth-audience` drop those columns and end Atlas's
  browser sessions; the app keeps its cookie names, so its sessions survive. Upgrade core, pg/sqlite
  and both auth strategies together.
- Managing service accounts now requires a membership policy with the `serviceAccounts` operation.
  Group files import `defineGroup` from the browser-safe `@sixb/core/security`.

### Package versions

- `0.1.20`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.12`: `@sixb/app`.
- `0.1.6`: `@sixb/auth-magic-link`, `@sixb/auth-oidc`.
- `0.1.5`: `create-sixb`.
- `0.1.4`: `@sixb/ui`, `@sixb/blob-s3`.
- `0.1.3`: `@sixb/connector-sftp`.
- `0.1.2`: `@sixb/deploy-ssh`.

## 2026-10-14 — Framework 0.1.19

### Highlights

- Run Actions in the process that requests them and return their finished run. There is no longer
  an Action queue or worker to deploy. Workflows, schedules, agents, and API requests use the same
  execution path.
- Save a successful Action's edits and terminal run together. Concurrent edits recheck the objects
  and links read by the Action and retry conflicts for up to three attempts, reusing a successful
  writeback rather than calling the external system again within that run.
- Bound waiting for validation, edits before the irreversible boundary, and effects that ignore
  cancellation. The Action deadline is 30 seconds; effects get their own 30 seconds. A writeback is always awaited,
  and edits and commit after a successful writeback finish even past the deadline.
- Let API and worker processes drain Action runs and effects for up to 65 seconds at shutdown.
  Generated deployments allow those processes 70 seconds before killing them, unless overridden.
- Stop the CLI waiting for an Action after 25 seconds without cancelling it. The error names the
  run and the command to inspect it; `--run-id` lets a caller retain the same identity after a lost
  response. Atlas and agent UI also stop waiting indefinitely for an effects outcome that never
  arrives, and distinguish old queued receipts from finished runs.
- Limit ordinary API request bodies to 1 MiB while streaming, before parsing and authentication.
  Authenticated file routes keep their larger limits: 25 MiB for file content, with multipart
  overhead allowed separately. Direct blob-storage uploads do not pass through that limit.
- Fix direct and multipart uploads failing in browsers because `fetch` received an invalid receiver.

### Upgrade notes

- This `0.1.x` release contains breaking Action API and storage changes. Upgrade core, its exact
  worker/storage consumers, server, client, and CLI together to `0.1.19`. Upgrade Atlas to `0.1.16`,
  agent UI to `0.1.12`, CLI core to `0.1.8`, and BullMQ queues to `0.1.7`; rebuild application assets.
- Stop accepting new Actions, drain or reconcile outstanding work with the old deployment, and
  stop all old processes before migrating. Back up and rehearse against an existing database.
  PostgreSQL migration `061-terminal-action-runs` and SQLite migration `060-terminal-action-runs`
  remove `queued_at` and retain only terminal runs. Old queued/running runs with committed edits
  become succeeded; the others become failed and will not resume. Cancelled runs become failed.
  Interrupted effects on recovered committed runs are recorded as failed. SQLite rebuilds the
  run table. Do not roll old binaries onto the new schema; rollback requires the old database too.
- Remove `@sixb/action-worker`, the Action worker role/concurrency configuration, and
  `queues.actions` from your application. The old npm package remains available for older releases;
  it must not run against this schema. Do not delete shared Redis data to retire its old queue.
- Action requests now return a finished run, not a queued receipt. A failed run is an HTTP `200`
  with `status: "failed"`; check the status when using the raw SDK. `useActionRunMutation` still
  raises `ActionRunFailedError`. Replace `requestActionAndWait`/`waitForActionRun` and their removed
  option/result types with the request API. `ActionRunTimeoutError`, queued/running/cancelled run
  states, and `queuedAt` are removed.
- Action lifecycle events (`action.requested`, `action.completed`, `action.failed`), their topic,
  and Action event selectors are removed. Migrate triggers and subscriptions to the object/link
  events of committed edits, or express dependent work in a workflow. Those edit events still
  carry the Action's `actionId` and `runId` in their origin.
- A run is recorded when it ends, with no durable queue, automatic redelivery, or cross-process
  execution lock. A crash can leave no run record even after an external call. Reusing a recorded
  run ID returns that record; a concurrent request in the same process gets `action.run_in_progress`
  (`409`), but requests in different processes can both execute. Pass `run.idempotencyKey` to
  external systems and reconcile uncertain outcomes before retrying. A missing run is not proof
  that no work happened.
- The deadline is not a hard execution limit: a writeback that ignores its signal can keep the
  request open, and a timed-out handler can continue its own external work. Effects run after the
  response, only when edits committed; they are not replayed, and their outcome may stay absent.
  Use workflows for durable, long-running orchestration. Review proxy and process shutdown limits.
- Concurrent Actions do not provide serializable isolation for every read. Object and link reads
  are checked, but newly matching query rows, `count`/`exists`/facets, telemetry, and file reads are
  not fenced. An `action.read_conflict` can follow a successful external writeback; a new run must
  not blindly repeat that external operation.

### Package versions

- `0.1.19`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.16`: `@sixb/atlas`.
- `0.1.12`: `@sixb/agent-ui`.
- `0.1.8`: `@sixb/cli-core`.
- `0.1.7`: `@sixb/queues-bullmq`.

## 2026-10-11 — Framework 0.1.18

### Highlights

- Hide sensitive properties and dataset columns from roles that are not cleared for them: define a
  marking with `defineMarking()` in `security/markings/`, apply it with `prop({ markings })` or
  `col({ markings })`, and grant it with a role's `clearances`. Readers without clearance receive
  the object or row with the value omitted and listed in `redactions`.
- Read dataset rows as the caller with `sixb.datasets.readRows(dataset)`, and open a file property
  through the object that holds it with `sixb.objects(Type).byId(id).file(Type.p.logo).open()`.
- Let agent tools use project data as the requester: a handler receives `sixb` to read objects,
  request actions, resolve connectors, and call models, with those model calls accounted to the
  run, and `attachments.open(key)` to open a file attached to the run.
- Give the chat agent project instructions in a root `SIXB.md`. Skills and `SIXB.md` are now
  discovered by `createSixb()`, so `sixb check` validates them and `sixb dev` restarts when they
  change.
- Give the agent a reference file per object type, written from your ontology and limited to what
  its requester can see. Add notes in a Markdown file next to the type's module, and scripts the
  agent can run in a `scripts/` folder under `ontology/`.
- Set the project's language and time zone with `createSixb({ locale, timeZone })`. Cron schedules
  without their own time zone, the dates the agent works with, and the document language of app
  pages follow them; in chat, the user's browser time zone and language take precedence.
- Show the text Sixb writes itself in English or French: `@sixb/ui` components, the agent chat, and
  the screens `@sixb/app` generates follow the user's browser languages and fall back to the
  project's `locale`. Reword individual messages with `UiLabelsProvider` and `AgentLabelsProvider`.
- Give a language model a default reasoning effort with its binding's `reasoning` option, such as
  `vercelGateway("zai/glm-5.3-flash", { reasoning: "low" })`. It applies wherever the model runs
  without an explicit choice, and chat follows the project defaults until the user picks one.
- End a chat turn whose worker stopped or died as interrupted instead of running it again: saved
  progress is kept and the chat offers **Continue**, or **Try again** when there is none. In
  `sixb dev`, agent turns start once the API listens, and a turn that starts while the API
  restarts waits up to eight seconds for it.
- Keep files the agent only viewed out of its answer: attachments are the files project tools
  return and the files published to `$SIXB_OUTPUT_DIR`. Viewed files stay in the work trace.
- Label an object in chat context by its title instead of its id, or set your own with
  `agentContext.object(Type, id, { label })`.
- Run `sixb atlas` and `sixb app` without loading the project: they hold about a third of the
  memory they did and need neither the project's secrets nor its database. Both show an error
  screen with a **Retry** button instead of a blank page when the API is unreachable.
- Close four access gaps. Following or expanding a link no longer returns subtypes the caller
  cannot view. An OIDC sign-in completes only in the browser that started it. An access token can
  no longer create another token. File responses send only well-formed media types, with a
  `Content-Security-Policy` that blocks script.
- Fix dataset row requests for several columns failing with a `422`, and list every query node and
  predicate shape in `sixb objects query --help`.

### Upgrade notes

- Upgrade core, exact worker/storage consumers, server, client, and CLI together to `0.1.18`.
  Upgrade Atlas to `0.1.15`, the app package to `0.1.11`, agent UI to `0.1.11`, and UI to `0.1.3`,
  and rebuild application assets: the Atlas and app pages now learn whether auth is enabled from
  the API. This release has no database migrations.
- Upgrade `@sixb/auth-oidc` to `0.1.5` with the server: sign-in fails against the earlier version.
  A sign-in started before the upgrade must be started again, and the provider's callback URL must
  use the same host as the API URL your app signs in through. A custom OIDC strategy must return
  `state` and `expiresAt` from `startOidcSignIn`.
- Creating a personal or service-account token now requires a signed-in session: Atlas, or a CLI
  profile signed in with `sixb login`. An access token that tries receives a `403`; it can still
  list and revoke tokens and manage service accounts.
- A query is denied when a link it follows or expands can reach a subtype the caller cannot view.
  A role that excludes a subtype, such as `can.view(every.object().except([ConfidentialDocument]))`,
  now also loses traversals to that subtype's parent type.
- A file's `mediaType` must be a single media type such as `application/pdf`; writes reject
  anything else. Files stored earlier with a malformed type download as
  `application/octet-stream`. Opened directly, only common raster images, PDF, plain text,
  Markdown, and JSON display in the browser: other types, including HTML and SVG, download.
- In agent tools, `connector` moves to `sixb.connector`. Upgrade the Exa connector to `0.1.2` and
  the FullEnrich connector to `0.1.1` for their agent tools.
- A workflow AI task receives only the skills it lists in `skills`, where it received every skill
  before. An invalid `SKILL.md` now fails `sixb check` and startup. The agent worker no longer
  accepts `skillsDir`.
- Files in a `scripts/` folder under `ontology/` are no longer imported as definitions: the agent
  runs them in its sandbox instead. Move any definition out of those folders.
- `AgentReasoningLevel` is removed: use `AgentReasoning`. A workflow AI task's `reasoning` and a
  model's default reasoning are checked against the model's declared capabilities at startup, so
  an unsupported effort or an out-of-range token budget now fails there. The `reasoning` binding
  option requires Anthropic `0.1.4`, Azure AI Foundry `0.1.4`, or Vercel AI Gateway `0.1.7`.
- Cron schedules without their own time zone keep running in UTC until you set `timeZone`.
- If you read agent runs through the API, handle `finishReason: "interrupted"` on a cancelled run
  and the `step_limit_reached` diagnostic with scope `run`. Continuing a cut-short answer is
  `continue: true` on the message request, and Sixb no longer writes its own text into the
  transcript.
- Marked properties are optional when read in TypeScript, even if required. Shared-link sessions
  carry no clearance, and pipeline steps cannot read marked columns yet.

### Package versions

- `0.1.18`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.15`: `@sixb/atlas`.
- `0.1.11`: `@sixb/app`, `@sixb/agent-ui`.
- `0.1.7`: `@sixb/cli-core`, `@sixb/vercel-ai-gateway`.
- `0.1.5`: `@sixb/auth-oidc`.
- `0.1.4`: `@sixb/anthropic`, `@sixb/azure-ai-foundry`, `create-sixb`.
- `0.1.3`: `@sixb/ui`.
- `0.1.2`: `@sixb/connector-exa`.
- `0.1.1`: `@sixb/connector-fullenrich`.

## 2026-10-09 — Framework 0.1.17

### Highlights

- Rerank vector search results with a model: register a reranker such as
  `vercelGateway.reranking("voyage/rerank-2.5-lite")` and opt in per query with
  `.rerank({ model })`.
- Transcribe stored audio with `sixb.models.audio.transcribe({ audio })`, starting with Vercel AI
  Gateway transcription models. Atlas shows transcription duration and cost with other model calls.
- Hand a stored file to services that fetch media from a URL, such as Instagram and TikTok, with
  `sixb.blobs.createDownloadUrl()`, and revoke one early with `sixb.blobs.revokeDownloadUrl()`.
  Shared-link pages now play video and audio.
- Let people connect their own Google accounts through Sixb-managed OAuth with
  `google({ auth: { oauth: { clientId, clientSecret, scopes, hostedDomain } } })`.
- Read and sync Outlook contacts and contact folders, and the tenant's organizational contacts,
  with the Microsoft connector's `client.contacts` and `client.directory.contacts`.
- Serve large PostgreSQL object lists, deep cursor pages, and relationship queries from bounded
  index scans, and prepare indexes from ontology declarations. Declare recurring sorts and text
  counts with `defineObjectType({ query: { indexes } })`; `sixb db prepare` prepares them on demand.
- Plan projection publications outside the commit transaction and recheck only what intervening
  commits touched, so large publications no longer hold locks for minutes or restart under
  concurrent edits. Outbox events are stored as compact drafts, about 70% smaller.
- Remove idle background polling: projection reconciliation tails a lake change feed, vector
  indexing is dispatched when its commit lands, the rules worker reconciles only at startup and
  after a failure, event sockets share one broker subscription per API process, queue claims wait
  for work, and source-version cleanup no longer walks history. Atlas polls projection runs only
  while one is pending.
- Fix a redelivered agent resume re-running workflow steps after the run had moved past the agent
  node, and first-time `sixb deploy` setup on projects whose `.env` holds a `GITHUB_TOKEN` or whose
  server has no Node.

### Upgrade notes

- Upgrade core, exact worker/storage consumers, server, client, and CLI together to `0.1.17`.
  Upgrade DuckLake to `0.1.8`, lake-local to `0.1.6`, and BullMQ queues to `0.1.6` at the same
  time: the orchestrator now requires the lake change feed, and queue workers require a claim that
  waits for work. Upgrade Atlas to `0.1.14` and the app package to `0.1.10`, and rebuild
  application assets. Reranking and transcription require Vercel AI Gateway `0.1.6`.
- Apply PostgreSQL migrations 053–060 and SQLite migrations 053–059 with old runtime roles
  stopped. Migration 054 rewrites the outbox into compact drafts, refuses to convert if any stored
  event would not rebuild exactly, and drops `requested_by` and `executor` from commits. The
  migrations also add replacement-plan and commit-touch tables (UNLOGGED on PostgreSQL), drop
  PostgreSQL's whole-document JSON index on objects, and recount superseded source versions.
  Rehearse on a representative `0.1.16` database backup and measure downtime and disk/WAL
  requirements. Rollback requires a database backup and matching binaries, not just an older
  application commit. With SQLite, migrate once before starting additional roles with
  `--no-migrate`.
- On PostgreSQL, startup and `sixb db migrate` now prepare declared query indexes after migrations.
  Initial text preparation rewrites the objects table and blocks writes: run `sixb db migrate`
  ahead of deployment when needed. `--no-migrate` and `SIXB_SKIP_MIGRATION=1` skip preparation too.
  Indexes add disk and write cost, and removing a declaration does not drop its index.
- `.facets()` returns `{ total, facets }` instead of an array, in the SDK, HTTP API, generated
  client, and query hooks.
- Queue workers no longer accept `idlePollMs`. A third-party queue provider must honor
  `claim({ signal })` by waiting until it claims a job or the signal aborts: a worker now fails
  when a claim returns empty first. A third-party lake storage provider must implement
  `listLatestVersionsSince()`. `/status` no longer reports `maintenance.terminalSources`.
- Token limits now apply only to token-billed calls: transcription and reranking skip them, while
  cost limits still apply, and a call is refused when an applicable budget cannot be evaluated.
  Reranking is bounded to 100 candidates, 1 MiB of input, and a 30-second model call. Neither
  reranking nor transcription inference is retried automatically.
- Set `SIXB_API_PUBLIC_ORIGIN` for the API and every worker that creates download URLs. Anyone
  holding a URL can read its file until it expires (one hour by default) or is revoked.
- Google OAuth requires an OAuth client registered for your deployment. Disconnecting deletes the
  stored tokens but does not revoke the Google grant. An interrupted Microsoft contact write is not
  retried and throws a `MicrosoftContactMutationError` with `outcomeUnknown`; check before writing
  again.

### Package versions

- `0.1.17`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.14`: `@sixb/atlas`.
- `0.1.10`: `@sixb/app`.
- `0.1.8`: `@sixb/ducklake`.
- `0.1.7`: `@sixb/connector-google`.
- `0.1.6`: `@sixb/lake-local`, `@sixb/queues-bullmq`, `@sixb/vercel-ai-gateway`.
- `0.1.5`: `@sixb/connector-meta`, `@sixb/connector-tiktok`.
- `0.1.3`: `@sixb/blob-s3`, `@sixb/connector-microsoft`.
- `0.1.1`: `@sixb/deploy-ssh`.

## 2026-10-05 — Framework 0.1.16

### Highlights

- Scope vector searches with traversals, explicit object references, or set operations before
  ranking. Resolve the vector profile on the resulting concrete object type and apply object,
  link, and source-property authorization before selecting the nearest results.
- Send separate document and query purposes through embedding execution. Vercel AI Gateway
  translates them for Voyage 4, Voyage 4 Lite, Voyage 4 Large, and Cohere Embed v4.0, with
  retrieval-aware model identity, disabled truncation, and conservative batching bounds.
- Preserve embedding purpose through Azure AI Foundry model resolution and expose optional
  `inputMode` in ontology API responses and generated client types.
- Reduce SQLite vector-list work to one bounded candidate scan for admission, ranking, and
  totals, hydrate results after top-k selection, and improve authorized traversal query plans.

### Upgrade notes

- Upgrade core, exact worker/storage consumers, server, client, and CLI together to `0.1.16`.
  Upgrade Vercel AI Gateway to `0.1.5` and Azure AI Foundry to `0.1.3` when used. No new SQL
  migration is introduced after `0.1.15`; deployments upgrading from older releases must still
  apply their intervening migrations and upgrade notes.
- Existing Voyage/Cohere vector profiles now use asymmetric document/query preparation. This
  changes their vector configuration identity: old vectors no longer match searches with the
  new configuration. Explicitly reindex existing objects; a configuration change alone does not
  trigger a historical backfill. Plan provider costs and reduced search coverage until indexing
  completes. Unchanged symmetric profiles retain their previous configuration identity.
- Direct embedding calls to the supported Voyage/Cohere bindings must supply
  `purpose: "document"` or `purpose: "query"`. Sixb indexing and text search supply it automatically.
  Custom embedding adapters and wrappers should preserve the optional purpose field and declare
  asymmetric input mode when preparation differs. Byte batching bounds are not token guarantees.
- Vector ranking still requires one concrete result type. Pagination, expansion, traversal after
  ranking, and combined keyword/vector search remain unsupported. SQLite rejects candidate-budget
  overflow instead of silently ranking a truncated set; narrow the candidate scope when needed.
- The Gateway adapter retains a route-specific Voyage output-dimension override because the
  common dimensions field was observed to be ignored on that route. Validate actual dimensions
  and retrieval quality against the configured live provider before reindexing production data.

### Package versions

- `0.1.16`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.5`: `@sixb/vercel-ai-gateway`.
- `0.1.3`: `@sixb/azure-ai-foundry`.

## 2026-10-05 — Framework 0.1.15

### Highlights

- Deploy committed projects over SSH with `sixb deploy`, `defineDeploy` from `@sixb/core/deploy`,
  and the new `@sixb/deploy-ssh` target. Set up servers, supervise services, configure HTTPS,
  manage deploy access, and generate a GitHub Actions deployment workflow.
- Resume projection candidates across retries, supersede stale object/link projection runs, and
  show the last attempt's failure while a run is retrying. Rebind a projection to another dataset
  without changing its ID, withdrawing obsolete source values while preserving application edits.
- Compact PostgreSQL and SQLite source storage and reclaim abandoned projection candidates sooner.
- Improve PostgreSQL connection-loss handling, explain exhausted lock-table errors, and support
  explicit direct TLS connections with `sslnegotiation=direct`.
- Add the FullEnrich connector for enrichment, reverse email lookup, search, signed webhooks, and
  agent tools. Add Microsoft drive-item previews and connector icons and sync filtering in Atlas.
- Make `sixb check` exit after printing its report even when provider handles remain open.
- Add the Plaud connector for recordings, transcripts, notes, and audio downloads, with
  Sixb-managed OAuth connections and token refresh.

### Upgrade notes

- Upgrade core, exact worker/storage consumers, server, client, and CLI together to `0.1.15`,
  Atlas to `0.1.13`, and the Microsoft connector to `0.1.2`. Rebuild application assets.
- Apply PostgreSQL and SQLite migrations 051–052 with old runtime roles stopped. Migration 051
  admits the terminal projection status `superseded` and errors on retrying runs; SQLite rebuilds
  `projection_runs`. Migration 052 rewrites source roots and rows with compact numeric references;
  SQLite also rebuilds the source-version table. Rehearse on a representative `0.1.14` database
  backup, measure downtime and disk/WAL requirements, and verify projections after migration.
  Rollback requires a database backup and matching binaries, not just an older application commit.
  With SQLite, migrate once before starting additional roles with `--no-migrate`.
- Handle `superseded` in projection status consumers. A `running` run may now have an `error`
  describing its last failed attempt; it is not necessarily terminal. Telemetry runs are not
  superseded. Abandoned source candidates no longer wait for `terminalSourceRetentionMs` and
  are cleaned in larger batches independently of `cleanupLimit`.
- Direct PostgreSQL TLS requires one TCP endpoint supporting PostgreSQL ALPN (PostgreSQL 17+
  without an incompatible proxy/pooler) and an explicit TLS mode. Prefer `verify-full` for
  certificate and hostname verification; `require` does not verify the certificate. Existing
  TLS negotiation remains the default. The installed postgres.js 3.4.9 still has a known crash
  window when a connection disappears between statements; retain process supervision.
- SSH deployment initially targets Ubuntu/Debian with systemd and Caddy. Only committed source
  is uploaded; keep secrets in the server's `.env`. Setup requires an administrator, and generated
  CI setup changes repository secrets and authorizes a deploy key. Deployment includes downtime;
  a failure after stopping services leaves them stopped. Deploying an older ref does not undo
  migrations. Separate deploy accounts are not isolation from the shared network or Caddy.
- Authorize Microsoft file access before returning a preview: anyone holding its URL can use it.
  FullEnrich search/enrichment spends provider credits; expose only the intended agent tools.
- Plaud requires registering an OAuth client for your deployment and enabling cloud sync.
  It follows the official Plaud MCP protocol rather than a guaranteed public account API;
  provider endpoints may change independently. Validate authorization and real account access.

### Package versions

- `0.1.15`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.13`: `@sixb/atlas`.
- `0.1.2`: `@sixb/connector-microsoft`.
- Initial `0.1.0`: `@sixb/connector-fullenrich`, `@sixb/connector-plaud`, `@sixb/deploy-ssh`.

## 2026-09-29 — Framework 0.1.14

### Highlights

- Configure OIDC sign-in for a single Microsoft Entra tenant with `trustedEmail`. Standard claims
  are typed, and providers sending `email_verified` as the string `"true"` are supported.
- Map provider claims to Sixb groups with the OIDC `groups` option. Reconcile directory-owned
  memberships at each sign-in without removing memberships granted manually or by invitation.
- Show identity-provider-managed groups in Atlas and prevent their removal through member editing.
  Member API responses now include `managedGroupIds`.
- Explain refused OIDC sign-ins with actionable messages for uninvited or suspended users,
  disallowed domains, and providers that supply no trusted address.

### Upgrade notes

- Upgrade core, its exact worker/storage consumers, server, client, and CLI together to `0.1.14`.
  Upgrade OIDC to `0.1.4`, magic-link to `0.1.5`, and Atlas to `0.1.12`; rebuild application assets.
- Apply PostgreSQL and SQLite migration 050 before enabling directory-managed groups. PostgreSQL
  replaces a source constraint; SQLite rebuilds `auth_group_memberships` and its group index,
  preserving existing memberships. Rehearse against a backup of a `0.1.13` database, stop old
  runtime roles before migrating, and plan rollback with a database backup and matching binaries.
  With SQLite, migrate once before starting multiple roles with `--no-migrate`.
- OIDC strategies must supply a trusted address on every sign-in. The default requires a verified
  `email`; Entra deployments must explicitly configure `trustedEmail`, normally from
  `preferred_username`, and use a tenant-specific issuer, not `common` or `organizations`.
  Review account linking and invitation addresses before enabling a custom trust callback.
- UserInfo is fetched only when the ID token lacks a trusted address. When fetched, ID-token claims
  take precedence. Ensure claims needed by your `groups` mapping are available in that flow.
- A nonempty provider group mapping permits account creation without an invitation. Validate the
  mapping and provider assignments carefully. Membership changes apply at the next sign-in; suspend
  a user in Sixb when access must stop immediately. Omitting `groups` leaves existing directory
  memberships untouched; returning an empty array removes only directory-owned memberships.
- A group already granted manually or by invitation retains its original source. Removing that
  group at the provider does not revoke the independently granted membership. Directory-owned
  groups cannot be removed through the member API or Atlas; edit them at the provider.
- Custom auth strategies calling `completeOidcSignIn` must validate address trust before storage:
  `emailVerified` and `autoLinkByVerifiedEmail` were removed. The unused
  `requireNoActiveUsersForUserCreation` input was removed from OIDC and magic-link completion.
  Update explicit member response types and fixtures for the required `managedGroupIds` field.

### Package versions

- `0.1.14`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.12`: `@sixb/atlas`.
- `0.1.4`: `@sixb/auth-oidc`.
- `0.1.5`: `@sixb/auth-magic-link`.

## 2026-09-28 — Framework 0.1.13

### Highlights

- Sign native clients and the CLI in with refreshable bearer sessions, including authenticated
  WebSockets. Authorize native clients and access tokens through grants independently of web-app
  access.
- Persist upload sessions across restarts and replicas with PostgreSQL and SQLite. Enforce
  expiration and clean up abandoned provider uploads.
- Type SDK surfaces from a shared ontology registry, add user references with `ref.user()`, and
  render Atlas values from their declared schemas.
- Fence objects returned by Action query and list reads, reporting changed reads as
  `action.read_conflict`.
- Attribute ontology commits and events to their requester and executor.
- Add Instagram and Facebook media publishing and semantic search through vector profiles in the
  CLI.
- Resolve relative sandbox command directories against the workspace and run SmolVM commands in the
  guest workspace. Introduce a separately published Agent image with document, rendering, and
  browser tools.

### Upgrade notes

- Upgrade core, exact worker/storage consumers, server, client, and CLI together to 0.1.13. Upgrade
  the changed sandbox providers and rebuild custom-app and Atlas assets with the matching
  dependencies.
- Apply PostgreSQL and SQLite migrations 046–049. Migration 046 normalizes intervention actors to
  `{ type, id }`. Migration 047 replaces commit `actor` with requester/executor attribution,
  backfills existing commits, and rewrites unpublished outbox events. Migration 048 adds persistent
  upload sessions. Migration 049 adds native-session state and removes the device authorization
  token-name and token-expiration columns.
- Stop old runtime roles before migration and rehearse on a backup of a 0.1.12 database. Measure
  migration 047 against representative commit and outbox volumes. Do not assume old and new
  binaries can safely overlap. Plan rollback through database restoration and matching old
  binaries; with SQLite, migrate once before starting multiple roles with `--no-migrate`.
- Update consumers of event/commit `actor` to `requestedBy` and `executor`. Review replay consumers
  of historical events as well as live delivery; the migration rewrites the database outbox, not
  external event archives.
- Update explicit SDK type annotations to the shared ontology registry. Removed exports include
  `EventActor`, `SecurityContext`, `RegisteredObjectType`, `RegisteredValueTypes`, and the former
  `ActionReadObjectByIdHandle`, `ActionReadObjectSet`, and `ActionReadObjectSetSource` types. Use
  the current `ObjectReader`, `ObjectReadByIdHandle`, and `ObjectReadSet` contracts where
  applicable.
- Handle `action.read_conflict` explicitly in custom Action interfaces and integrations; do not
  treat an obsolete read as a successful write.
- Interactive CLI login now establishes a renewable native session. Personal access-token profiles
  remain supported. Verify login, refresh, revocation/logout, and native WebSockets after
  upgrading; coordinate new CLI/client deployment with the new server.
- Check `trustedProxies` against deployment topology. The server defaults to trusting private,
  loopback, and link-local proxy networks when resolving forwarded client addresses.
- Upload-session routes return 501 if storage does not implement `fileUploadSessions`; there is no
  in-memory fallback for these routes. Single-request file uploads remain separate.
- Configure SmolVM with an explicit `image`. A local archive supports offline boot and must match
  the host architecture. Its normal working directory is `/workspace` in the guest.
- The Agent image is versioned independently of npm as `ghcr.io/sixb-ai/sixb-agent:1.2.0`. Pin a
  verified digest in production; the npm framework version is not an image tag.

### Package versions

- `0.1.13`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.10`: `@sixb/agent-ui`.
- `0.1.11`: `@sixb/atlas`.
- `0.1.6`: `@sixb/cli-core`, `@sixb/sandboxes-apple-container`, `@sixb/sandboxes-local`,
  `@sixb/sandboxes-smolvm`, `@sixb/sandboxes-vercel`.
- `0.1.3`: `@sixb/connector-companycam`, `@sixb/connector-pandadoc`, `@sixb/connector-pipedrive`,
  `@sixb/connector-stripe`, `@sixb/connector-unipile`.
- `0.1.4`: `@sixb/connector-github`, `@sixb/connector-mercury`, `@sixb/connector-meta`.

## 2026-09-24 — Framework 0.1.12

### Highlights

- Introduce named vector profiles, automatic batched indexing, server-side text embedding for
  search, PostgreSQL and SQLite search, and Atlas profile visibility. Add Foundry embeddings with
  pinned representation identity and usage accounting.
- Add typed decision evaluation, the TypeSafe provider, and Vercel AI Gateway decision models.
- Persist conversation sandbox files across runs, recover confirmed lost state, and configure
  source/setup environments. Add execution-scoped GitHub App access to private repositories.
- Unify Agent surfaces and preserve conversation state across navigation.
- Add the Monday connector, LinkedIn and TikTok media publishing, Google Drive streaming downloads,
  and QuickBooks documents, attachments, and aging reports.
- Preserve safe error explanations across runtime boundaries.

### Upgrade notes

- Upgrade core, exact worker/storage consumers, and CLI together to 0.1.12. Upgrade sandbox
  providers and rebuild custom-app and Atlas assets.
- Apply PostgreSQL and SQLite migrations 041–045. SQLite 043 rebuilds executions; PostgreSQL 043
  changes execution constraints. Stop old runtime roles and rehearse against a backup of a 0.1.11
  database. Plan rollback through database restoration and matching old binaries. With SQLite,
  migrate once before starting multiple roles with --no-migrate.
- Replace removed query.vector and search.vector metadata with named search.vectors profiles. Adapt
  queries and reindex; do not assume legacy embedding properties migrate automatically.
- Vector persistence needs no extension. PostgreSQL search requires pgvector in the public schema.
  SQLite search loads sqlite-vec; macOS requires an extension-capable SQLite library configured
  before connections open. Search is exact and bounded to 10,000 eligible vectors and 16 million
  coordinates.
- Review third-party sandbox implementations against the new creation, resume, and
  execution-prepared authentication contracts. Bound conversations require a persistence-capable
  provider; workflows and subagents remain ephemeral.
- Confirmed lost sandbox state may be recreated without restoring local edits. Uncertain state
  blocks further runs until explicit recovery. Provider retention still applies. Normal cleanup
  revokes managed GitHub access; a worker crash cannot guarantee immediate revocation. Never put
  credentials in guest-readable environment variables or thread parameters.
- Replace the removed ThreadSidebar export. AgentWorkspaceProvider no longer accepts sidebarHeader,
  sidebarFooter, or sidebarWidth; adapt custom Agent layouts.

### Package versions

- `0.1.12`: `@sixb/core`, `@sixb/client`, `@sixb/server`, `@sixb/cli`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/sqlite`, `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/pipeline-worker`,
  `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/sync-worker`, `@sixb/workflow-worker`.
- `0.1.9`: `@sixb/agent-ui`, `@sixb/app`.
- `0.1.10`: `@sixb/atlas`.
- `0.1.2`: `@sixb/azure-ai-foundry`.
- `0.1.4`: `@sixb/vercel-ai-gateway`, `@sixb/connector-tiktok`.
- `0.1.5`: `@sixb/queues-bullmq`, `@sixb/sandboxes-apple-container`, `@sixb/sandboxes-local`,
  `@sixb/sandboxes-smolvm`, `@sixb/sandboxes-vercel`.
- `0.1.1`: `@sixb/sandboxes-azure`, `@sixb/connector-quickbooks`.
- `0.1.3`: `@sixb/connector-github`.
- `0.1.6`: `@sixb/connector-google`.
- `0.1.7`: `@sixb/connector-linkedin`.
- `0.1.0`, first publications: `@sixb/typesafe`, `@sixb/connector-monday`.

## 2026-09-20 — Framework 0.1.11

### Highlights

- Add Azure AI Foundry deployment discovery, model capabilities and pricing, publisher display,
  and Responses, Chat, and Messages inference through shared model protocol implementations.
  Move Anthropic and Vercel AI Gateway onto those protocols and guard interrupted tool calls.
- Introduce Azure Blob Storage with verified multipart uploads and an Azure Container Apps
  sandbox provider for ephemeral agent execution.
- Expose browser-safe `SIXB_PUBLIC_` runtime environment values through `publicEnv` in custom apps,
  and allow file navigation to authenticate with the app session.
- Preserve OAuth callback redirects and let users resume pending connector account selection
  after returning to the application, without an account-selection deadline.
- Accelerate outbox delivery, drain safely during shutdown, and recover failed Redis command
  connections. Add an indexed, bounded SQLite outbox claim path.
- Stream large DuckLake reads with bounded concurrency, fix SQLite catalog writes, and bound
  dataset version scans used by pipelines, projections, and maintenance.

### Upgrade notes

- Upgrade core, its exact worker and storage consumers, and the CLI to `0.1.11` together. Rebuild
  custom-app assets with the updated app and client packages.
- Apply SQLite migration 040 before deployment; it adds the outbox publication-order index.
  PostgreSQL has no new migration since `0.1.10`. Rehearse on a backup; there is no database
  downgrade path. For SQLite, migrate once before starting runtime roles with `--no-migrate`.
- Account-selection run responses no longer contain `expiresAt`. Update custom connection UIs
  that rely on that field; OAuth authorization deadlines still apply before account selection.
- Only put browser-safe values in `SIXB_PUBLIC_` variables: they are visible to every app user.
  Restart the app server to pick up changes; rebuilding the app is unnecessary for value changes.
- Foundry requires a full Azure project URL and an API key with deployment-discovery and inference
  access. Azure sandboxes require an existing sandbox group and support ephemeral execution only;
  named persistence and resume are unsupported.
- Four packages require first publication: `@sixb/model-protocols`, `@sixb/azure-ai-foundry`,
  `@sixb/blob-azure`, and `@sixb/sandboxes-azure`. Preserve their existing manifest versions below.
  Rehearse their bootstrap against a local registry before explicitly publishing them under
  `latest`. The normal `next` plan is blocked until `@sixb/model-protocols@0.1.1` is available,
  because the updated Anthropic and Vercel AI Gateway providers require it exactly. Stage core
  `0.1.11` under `next` first to satisfy the new packages' packed dependency floors. Bootstrap
  model protocols before Foundry, then stage the remaining existing-package updates under `next`,
  verify them, and promote the same artifacts to `latest`.

### Package versions

- `0.1.11`: `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/cli`, `@sixb/client`, `@sixb/core`,
  `@sixb/orchestrator`, `@sixb/pg`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/server`, `@sixb/sqlite`, `@sixb/sync-worker`,
  `@sixb/workflow-worker`.
- `0.1.8`: `@sixb/app`.
- `0.1.7`: `@sixb/ducklake`.
- `0.1.6`: `@sixb/broker-redis`.
- `0.1.5`: `@sixb/lake-local`.
- `0.1.3`: `@sixb/anthropic`, `@sixb/vercel-ai-gateway`.
- `0.1.1`: `@sixb/azure-ai-foundry`, `@sixb/blob-azure`, `@sixb/model-protocols`
  (first publications).
- `0.1.0`: `@sixb/sandboxes-azure` (first publication).

## 2026-09-19 — Framework 0.1.10

### Highlights

- Materialize only changed object and link projection roots with DuckLake and in-memory lake
  storage, retaining complete replacement as a fallback. Show incremental changes read in Atlas
  and expose the counter through the API and generated client.
- Reduce projection, queue, PostgreSQL cardinality validation, and outbox overhead. Bound broker
  consumer buffering, await asynchronous handlers, and retry runtime dispatch within the handler.
- Support per-stream retention overrides in the in-memory, Redis, and NATS brokers.
- Add OAuth callback parameters, encrypted provider authorization context, configurable PKCE,
  and managed connection clients in webhook handlers. Adapt LinkedIn and TikTok OAuth handling.
- Add Microsoft Graph subscriptions, Outlook mail subscription helpers, and verified webhook
  delivery, including subscription validation and lifecycle notifications.
- Introduce the QuickBooks Online Accounting connector with managed OAuth, queries, change data
  capture, verified webhooks, and typed accounting reads and writes.

### Upgrade notes

- Upgrade core, its exact worker and storage consumers, and the CLI to `0.1.10` together. Rebuild
  Atlas assets to include incremental projection counters.
- Apply PostgreSQL migrations 038–040 or SQLite migrations 038–039. These add projection source
  root history and optional OAuth PKCE; PostgreSQL also adds an outbox publication-order index.
  The source-root migration backfills existing materializations, and SQLite rebuilds the OAuth
  authorization-attempt table. Stop old runtime roles and rehearse on a backup before migrating.
  There is no database downgrade path; rollback requires the backup and matching old binaries.
  For SQLite, migrate once before starting multiple runtime roles with `--no-migrate`.
- Custom OAuth adapters must handle optional `codeChallenge`, `codeChallengeMethod`, and
  `codeVerifier` fields. S256 remains the default; explicitly disable PKCE only for providers
  that do not support it. Managed OAuth webhook handlers resolve clients through
  `connections.forAccount(accountId)`.
- Broker subscribers must return their processing promise to apply backpressure. Handler errors
  do not request redelivery; reliable consumers must retry before returning. Retention overrides
  apply when streams are created; existing streams keep their configuration.
- QuickBooks is a first publication at `0.1.0`. The `next` release plan defers its bootstrap;
  rehearse against a local registry before publishing it explicitly under `latest`.

### Package versions

- `0.1.10`: `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/cli`, `@sixb/client`, `@sixb/core`,
  `@sixb/orchestrator`, `@sixb/pg`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/server`, `@sixb/sqlite`, `@sixb/sync-worker`,
  `@sixb/workflow-worker`.
- `0.1.9`: `@sixb/atlas`.
- `0.1.6`: `@sixb/connector-linkedin`, `@sixb/ducklake`.
- `0.1.5`: `@sixb/broker-redis`.
- `0.1.4`: `@sixb/broker-nats`.
- `0.1.3`: `@sixb/connector-tiktok`.
- `0.1.1`: `@sixb/connector-microsoft`.
- `0.1.0`: `@sixb/connector-quickbooks` (first publication).

## 2026-09-18 — Framework 0.1.9

This release includes breaking API changes, a database migration, and a new minimum Bun version.
Review the upgrade notes before updating dependencies or deploying.

### Highlights

- Add direct language-model generation to execution-bound SDKs, including Actions and workflows,
  with shared model-call accounting, recovery, and request/Action/workflow cost attribution.
- Move requester-group snapshots to durable executions so child work inherits the admitted
  snapshot, and expose the expanded attribution in the API, generated client, and Atlas.
- Improve failure details and redact sensitive HTTP context in Atlas and server responses.
- Add web search and web fetch source previews to Agent UI, preserve streamed Gateway reasoning,
  and fix structured output when a model's capability metadata is absent.
- Keep attachment metadata out of assistant history and share production modules between CLI
  configuration loading and discovery.
- Introduce the Microsoft Graph connector for SharePoint/OneDrive files, Outlook mail and delta,
  and calendars, events, and attachments. Subscriptions and webhooks are not part of this release.
- Add Stripe invoice line items and invoice payments, and explicit named Vercel sandbox creation
  and resume.
- Require Bun `1.4.2` or later throughout the published packages. Packages without source changes
  receive a patch release to publish this runtime requirement. Update the starter's dependency
  floors to the versions in this release.

### Upgrade notes

- Upgrade Bun to at least `1.4.2` on development machines, CI, and runtime hosts before installing
  this release. The CLI enforces this minimum.
- Upgrade core, its exact worker and storage consumers, and the CLI to `0.1.9` together. Rebuild
  custom-app and Atlas assets with the selected package versions. Commit the resulting lockfile
  and use frozen installs for deployment.
- Apply PostgreSQL or SQLite migration 037. It moves `requester_group_ids` from Agent and workflow
  runs onto executions, preserves historical snapshots, and drops the former columns. Stop old
  runtime roles before migrating; older binaries must not use the migrated database. Rehearse on
  a backup first. There is no database downgrade path; rolling back requires restoring the backup
  and the matching previous runtime versions. For SQLite, migrate once before starting multiple
  runtime roles with `--no-migrate`.
- Code that reads requester groups from Agent or workflow run records must read the associated
  execution's `requesterGroupIds` instead. Historical snapshots must not be reconstructed from
  current group membership.
- The Vercel factory no longer accepts `persistent`, including `persistent: false`. Remove the
  option for ephemeral sandboxes. Replace persistent creation with
  `factory.create({ persistence: { name } })` and resume stopped state with `factory.resume(name)`.
  Pass current environment and authority on each session. `stop()` preserves persistent state;
  `destroy()` deletes it. Local, Apple Container, and SmolVM providers reject named persistence.
- Implementation helpers are removed from public core exports. Root-level `requestAction`,
  `requestActionAndWait`, `waitForActionRun`, `requestAgentRun`, `requestSyncRun`,
  `requestPipelineRun`, and `requestWorkflowRun` must be replaced with execution-bound SDK calls.
  Root `emptyGrantIndex` and `validateSchemaOrRefValue` are also removed. Client-package request
  helpers and methods on `sixb.objects(...)` are not removed by this export cleanup.
- The `@sixb/core/actions/worker` and `@sixb/core/events/scope` subpaths are removed, along with
  runtime normalization, stream production/control, and storage mutation helpers previously
  exposed through ontology, query, logging, Agent context/streams, and storage entrypoints.
  In particular, `validateSchemaOrRefValue` is no longer exported from `@sixb/core/ontology`.
  Use application-owned validation or supported SDK APIs; `@sixb/core/internal/*` is reserved for
  framework packages and is not an application migration target.

### Package versions

- `0.1.9`: `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/cli`, `@sixb/client`, `@sixb/core`,
  `@sixb/orchestrator`, `@sixb/pg`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/server`, `@sixb/sqlite`, `@sixb/sync-worker`,
  `@sixb/workflow-worker`.
- `0.1.8`: `@sixb/agent-ui`, `@sixb/atlas`.
- `0.1.7`: `@sixb/app`.
- `0.1.5`: `@sixb/cli-core`, `@sixb/connector-google`, `@sixb/connector-linkedin`,
  `@sixb/ducklake`.
- `0.1.4`: `@sixb/auth-magic-link`, `@sixb/broker-redis`, `@sixb/lake-local`,
  `@sixb/queues-bullmq`, `@sixb/sandboxes-apple-container`, `@sixb/sandboxes-local`,
  `@sixb/sandboxes-smolvm`, `@sixb/sandboxes-vercel`.
- `0.1.3`: `@sixb/auth-oidc`, `@sixb/broker-nats`, `@sixb/connector-mercury`,
  `@sixb/connector-meta`, `@sixb/connector-pennylane`, `@sixb/connector-rest`, `create-sixb`.
- `0.1.2`: `@sixb/anthropic`, `@sixb/blob-local`, `@sixb/blob-s3`, `@sixb/connector-companycam`,
  `@sixb/connector-github`, `@sixb/connector-imap`, `@sixb/connector-pandadoc`,
  `@sixb/connector-pipedrive`, `@sixb/connector-sftp`, `@sixb/connector-sql`,
  `@sixb/connector-stripe`, `@sixb/connector-teamleader`, `@sixb/connector-tiktok`,
  `@sixb/connector-unipile`, `@sixb/logger-pino`, `@sixb/ui`, `@sixb/vercel-ai-gateway`.
- `0.1.1`: `@sixb/connector-ace-iot`, `@sixb/connector-exa`, `@sixb/connector-notion`.
- `0.1.0`: `@sixb/connector-microsoft` (first publication).

## 2026-09-14 — Framework 0.1.8

### Highlights

- Add scoped Share grants and isolated shared sessions, with expiration, revocation, CSRF
  protection, and execution provenance. Ordinary custom-app pages and layouts can run under
  shared access without loading application code before authority is established.
- Enforce selected object, link, telemetry, metadata, and Action access throughout delegated
  runtimes, and expose inert, authority-scoped Action descriptors.
- Add `sixb.datasets.ingest` for backend and webhook ingestion, shared source-writing behavior,
  and `sequenceBy` ordering with retained deletion sequences and concurrent-merge retries.
- Initialize empty dataset snapshots, reconcile sequenced snapshots without deleting omitted
  rows, and validate pipeline outputs before committing them.
- Export Agent chat components and hooks for custom layouts, simplify model-message adapters,
  and defer model preparation until needed.
- Reload development apps after backend source changes and preserve Bun runtime options in
  development child processes.
- Clear generated ontology types when the last definition is deleted and correct unit inference
  for unitless telemetry.
- Introduce the token-authenticated Notion Pages and Markdown connector, and add Payment Intents
  and Charges resources to the Stripe connector.

### Upgrade notes

- Apply PostgreSQL or SQLite migrations 035 and 036 for Share grants, shared sessions, and
  delegated execution provenance. Migration 036 replaces execution constraints on PostgreSQL and
  rebuilds the executions table on SQLite. Rehearse on a backup of the previous release; there is
  no database downgrade path. Installations running intermediate main builds must also verify
  migration history and checksums because session migrations were consolidated before release.
- Upgrade core, its exact worker and storage consumers, and the CLI to `0.1.8` together. Rebuild
  custom-app and Atlas assets with the matching release. For SQLite, migrate once before starting
  multiple runtime roles with `--no-migrate`.
- Shared pages require the built-in app server and same-site App/API origins in V1. Static hosting
  adapters are unsupported. Open shared URLs with native links. Shared access excludes WebSockets,
  uploads, direct object/link/telemetry writes, and Action-run listing or files; shared pages are
  not installable as PWAs and require a browser reload after development edits.
- Replace removed legacy `AgentModel*`, `AgentUi*`, and `AgentInboundUi*` message types with the
  appropriate durable Agent types or `@sixb/core/models` types. The legacy `fromUiMessage` and
  `toUiMessage` adapters are removed; `toModelMessages` remains available.
- A sequenced dataset snapshot reconciles rather than replaces: omitted keys remain, and deletion
  requires an explicit sequenced delete. Equal sequences with different content fail the merge.
  Primary keys and `sequenceBy` are immutable; create and backfill a new dataset to change them.
  Timestamp columns in sequenced datasets reject precision beyond milliseconds.
- Dataset commits and notifications remain separate. A crash can leave committed data without a
  notification, and identical sequenced retries do not resend it. Rerun the downstream pipeline
  after a missed notification; durable receipts and automatic notification recovery remain deferred.
- Delegated readers and metadata now enforce the selected authority throughout the SDK. Verify
  custom application reads and Action targets against their intended grants when upgrading.

### Package versions

- `0.1.8`: `@sixb/core`, `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/cli`, `@sixb/client`,
  `@sixb/orchestrator`, `@sixb/pg`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/server`, `@sixb/sqlite`, `@sixb/sync-worker`, and
  `@sixb/workflow-worker`.
- `0.1.7`: `@sixb/agent-ui` and `@sixb/atlas`.
- `0.1.6`: `@sixb/app`.
- `0.1.4`: `@sixb/ducklake`.
- `0.1.3`: `@sixb/lake-local`.
- `0.1.1`: `@sixb/connector-stripe`.
- `0.1.0`: `@sixb/connector-notion` (first publication).

## 2026-09-09 — Framework 0.1.7

### Highlights

- Move language-model inference into the Sixb runtime, add a project model catalog, and introduce
  the first-party `@sixb/anthropic` and `@sixb/vercel-ai-gateway` providers.
- Replace static agent definitions with one project Agent, add first-class conversations and
  workflow Agent steps, and persist the execution state needed for durable child tasks.
- Add aggregate monthly AI usage limits for projects, groups, users, and service accounts, with
  reservation, reconciliation, authorization, server APIs, and Atlas management views.
- Add per-turn model and reasoning controls to Agent UI, with provider branding and preserved user
  preferences.
- Add shared remote-instance commands through `@sixb/cli-core`, CLI profiles, and browser-approved
  device authorization for authenticated instances.
- Keep object file URLs fresh after replacement, refine Atlas workspace navigation and collections,
  and fix LinkedIn UGC analytics list serialization.

### Upgrade notes

- Apply bundled SQLite or PostgreSQL migrations 029–034 before or during deployment. They extend
  model-call accounting, add AI usage-limit state and durable child runs, retire stored static Agent
  identities, and add CLI device authorizations. Validate them on a backup first; this pre-1.0
  release has no database downgrade path.
- Replace `defineAgent` and `createSixb({ agents })` with project `models` and `tools`, move reusable
  instructions from `agents/` into `skills/`, and use `sixb.agent` or `GET /api/agent`. Existing
  conversation history is preserved without its former Agent identity.
- Configure at least one language-model binding for Agent conversations. The new Anthropic and
  Vercel AI Gateway packages read their normal provider credentials lazily; custom integrations
  must provide safe cost-reservation estimates before cost-based usage limits can admit calls.
- Conversational delegation tools remain temporarily disabled. Workflow Agent steps continue to use
  the durable Agent-task execution path.
- Deploy `@sixb/core`, its exact worker and storage consumers, and `@sixb/cli` as one coordinated
  release on `0.1.7`.

### Package versions

- `0.1.7`: `@sixb/core`, `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/cli`, `@sixb/client`,
  `@sixb/orchestrator`, `@sixb/pg`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/server`, `@sixb/sqlite`, `@sixb/sync-worker`, and
  `@sixb/workflow-worker`.
- `0.1.6`: `@sixb/agent-ui` and `@sixb/atlas`.
- `0.1.4`: `@sixb/cli-core` and `@sixb/connector-linkedin`.
- `0.1.3`: `@sixb/queues-bullmq`.
- `0.1.1`: `@sixb/anthropic` and `@sixb/vercel-ai-gateway`.

## 2026-09-07 — Framework 0.1.6

### Highlights

- Add copyable invitation links to Atlas and the auth API, with opt-in support for magic-link and
  OIDC authentication.
- Let custom apps register document viewers through `documentPreviewRenderers`.
- Catch non-JSON Action writeback results at compile time while preserving result inference.
- Fix Action commits that read projected cardinality-many links.
- Fix Atlas navigation for object identifiers containing reserved or Unicode characters.
- Correct the stale core dependency pins published in 0.1.5 and prevent stale lockfile versions from
  reaching future releases.

### Upgrade notes

- No database migration is required.
- Writeback handlers must return JSON-shaped data or no result. Serialize dates and other non-JSON
  values explicitly; existing invalid handlers may now fail typechecking.
- Invitation links are returned only with `revealLink: true`. Treat revealed magic links as sign-in
  credentials.
- Upgrade core, its exact worker and storage consumers, and the CLI to `0.1.6` together.

### Package versions

- `0.1.6`: `@sixb/core`, `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/cli`, `@sixb/client`,
  `@sixb/orchestrator`, `@sixb/pg`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/server`, `@sixb/sqlite`, `@sixb/sync-worker`, and
  `@sixb/workflow-worker`.
- `0.1.5`: `@sixb/agent-ui`, `@sixb/app`, and `@sixb/atlas`.
- `0.1.3`: `@sixb/auth-magic-link`.
- `0.1.2`: `@sixb/auth-oidc`.

## 2026-09-03 — Framework 0.1.5

This selective release is anchored by `@sixb/core` `0.1.5`.

### Highlights

- Add typed, authorized batch telemetry history reads to Actions through
  `read.telemetry.historyBatch(...)`.
- Expose Action input schemas and the CLI command catalog to agents so they can inspect and request
  Actions with less prompt and tool overhead.
- Enable automatic prompt caching for AI Gateway models, with an explicit
  `loop.caching: "off"` opt-out.

### Upgrade notes

- This release contains no SQLite or PostgreSQL schema migration.
- AI Gateway prompt caching is enabled automatically. Set `loop.caching` to `"off"` for workloads
  that must retain the previous behavior. Direct-provider models are unchanged unless their AI SDK
  binding implements caching itself.
- Deploy `@sixb/core`, its exact worker and storage consumers, and `@sixb/cli` as one coordinated
  release so packages importing core internals remain on the same version line.
- This pre-1.0 release has no database downgrade path.

### Package versions

- `0.1.5`: `@sixb/core`, `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/client`,
  `@sixb/orchestrator`, `@sixb/pg`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/server`, `@sixb/sqlite`, `@sixb/sync-worker`,
  `@sixb/workflow-worker`, and `@sixb/cli`.

## 2026-09-01 — Google connector 0.1.4

- `@sixb/connector-google` `0.1.4`: add the complete stable Google Meet REST API v2 surface for
  meeting spaces, conference records, participants and sessions, recordings, transcripts and
  structured entries, and smart notes, including paginated `listAll` iterators.

## 2026-09-01 — Framework 0.1.4

This selective release is anchored by `@sixb/core` `0.1.4`.

### Highlights

- Ship a self-documenting `sixb` CLI inside agent sandboxes, standardize the agent runtime profile,
  and validate each provisioned environment before model-issued commands can execute.
- Compact long agent conversations before they exceed model context limits, deriving budgets from
  the pinned Models.dev catalog while preserving the full durable transcript and exposing
  compaction progress in the agent UI.
- Add an optional project model catalog, validate agent models against it at startup, and expose the
  configured catalog through the server and generated client.
- Add exact-reference object query sources and paginated physical-link queries for object sets,
  with native SQLite and PostgreSQL execution and generated client support.
- Add grouped telemetry projections so one dataset row can atomically emit several readings for an
  object and instant; accept empty sync snapshots and safely handle DuckDB `BIGINT` sums.
- Add feature-owned nested layouts to custom applications and preserve superclass imports in
  production bundles.
- Add TikTok Login Kit Display API support, tighten LinkedIn campaign and creative write contracts,
  and accept equivalent OAuth authorization-code aliases.
- Add resumable npm dist-tag promotion tooling for selectively published framework packages.

### Upgrade notes

- This release contains no SQLite or PostgreSQL schema migration.
- Agent sandboxes are now checked against `sixb-agent-runtime/v1`. Custom images must provide Bash
  bootstrap support, the documented core file utilities, CA certificates, and either Bun 1.3+ or
  Node 22+. Rebuild versioned smolvm images and validate custom sandbox providers before deploying
  the matching agent worker.
- The project model catalog is optional. When configured, every registered agent model must appear
  in the catalog or `createSixb()` fails during startup.
- Deploy `@sixb/core`, its exact worker and storage consumers, and `@sixb/cli` as one coordinated
  release so packages importing core internals remain on the same version line.
- This pre-1.0 release has no database downgrade path.

### Package versions

- `0.1.4`: `@sixb/core`, `@sixb/action-worker`, `@sixb/agent-ui`, `@sixb/agent-worker`,
  `@sixb/app`, `@sixb/atlas`, `@sixb/cli`, `@sixb/client`, `@sixb/orchestrator`, `@sixb/pg`,
  `@sixb/pipeline-worker`, `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/server`,
  `@sixb/sqlite`, `@sixb/sync-worker`, and `@sixb/workflow-worker`.
- `0.1.3`: `@sixb/connector-linkedin`, `@sixb/ducklake`,
  `@sixb/sandboxes-apple-container`, `@sixb/sandboxes-local`, `@sixb/sandboxes-smolvm`, and
  `@sixb/sandboxes-vercel`.
- `0.1.1`: `@sixb/connector-tiktok`.

## 2026-08-30 — Framework 0.1.3

This selective release is anchored by `@sixb/core` `0.1.3`.

### Highlights

- Add catalog-backed AI model-call pricing, persist rated and unpriceable valuations, expose cost
  accounting through the server and generated client, and add AI usage analytics to Atlas.
- Preserve long-running agent progress with timeout recovery and durable context checkpoints; let
  agents inspect sandbox files and publish tool-created file and image artifacts.
- Unify conversation and workflow agent execution around one loop, expose detailed execution traces,
  and improve workflow node debugging in Atlas.
- Add configurable per-process worker concurrency while preserving safe defaults and bounded agent
  turn retries.
- Resolve projection sources and edits by recency, retain compact `mostRecent` assertion metadata,
  and persist per-property object override edit times.
- Add custom magic-link authentication experiences for applications and align LinkedIn analytics
  requests with the current API payload contract.

### Upgrade notes

- Apply the bundled SQLite or PostgreSQL migrations before rolling out all runtime roles. Migration
  026 adds AI model-call valuations, 027 adds durable agent context checkpoints, and 028 adds
  per-property edit timestamps to ontology object overrides. Validate the migrations on a backup
  before production rollout.
- Deploy `@sixb/core`, its exact worker and storage consumers, and `@sixb/cli` as one coordinated
  release so packages importing core internals remain on the same version line.
- This pre-1.0 release has no database downgrade path.

### Package versions

- `0.1.3`: `@sixb/core`, `@sixb/action-worker`, `@sixb/agent-ui`, `@sixb/agent-worker`,
  `@sixb/app`, `@sixb/atlas`, `@sixb/cli`, `@sixb/client`, `@sixb/orchestrator`, `@sixb/pg`,
  `@sixb/pipeline-worker`, `@sixb/projection-worker`, `@sixb/rules-worker`, `@sixb/server`,
  `@sixb/sqlite`, `@sixb/sync-worker`, and `@sixb/workflow-worker`.
- `0.1.2`: `@sixb/auth-magic-link` and `@sixb/connector-linkedin`.

## 2026-08-26 — Framework 0.1.2

This selective release is anchored by `@sixb/core` `0.1.2`.

### Highlights

- Add durable execution provenance and AI model-call cost accounting across actions, agents, syncs,
  pipelines, projections, workflows, webhooks, and ontology materialization.
- Persist portable, typed failure records and expose stable error codes through workers, run events,
  the server, and the generated client.
- Add keyed dataset merges, faster ontology materialization, and safer queue, scheduler, Redis, and
  action-wait recovery paths.
- Add managed connector connections with headless APIs and sync fan-out; introduce ACE IoT, Stripe,
  LinkedIn, and TikTok connectors, and expand Google, Meta, REST, and Unipile support.
- Refresh Atlas with an ontology graph explorer and improve the agent thread workspace.

### Upgrade notes

- Apply the bundled SQLite or PostgreSQL migrations before rolling out all runtime roles. Migrations
  022–024 deliberately stop when legacy projection runs, webhook runs or deliveries, or ontology
  commits cannot be assigned honest execution provenance; validate the migration on a backup first.
- This pre-1.0 release has no database downgrade path.

### Package versions

- `0.1.2`: `@sixb/core`, `@sixb/action-worker`, `@sixb/agent-ui`, `@sixb/agent-worker`,
  `@sixb/app`, `@sixb/atlas`, `@sixb/broker-nats`, `@sixb/cli`, `@sixb/client`,
  `@sixb/connector-mercury`, `@sixb/connector-meta`, `@sixb/connector-pennylane`,
  `@sixb/connector-rest`, `@sixb/ducklake`, `@sixb/lake-local`, `@sixb/orchestrator`,
  `@sixb/pg`, `@sixb/pipeline-worker`, `@sixb/projection-worker`, `@sixb/queues-bullmq`,
  `@sixb/rules-worker`, `@sixb/sandboxes-apple-container`, `@sixb/sandboxes-local`,
  `@sixb/sandboxes-smolvm`, `@sixb/sandboxes-vercel`, `@sixb/server`, `@sixb/sqlite`,
  `@sixb/sync-worker`, `@sixb/workflow-worker`, and `create-sixb`.
- `0.1.3`: `@sixb/broker-redis` and `@sixb/connector-google`.
- `0.1.1`: `@sixb/ui`, `@sixb/connector-unipile`, and the new
  `@sixb/connector-linkedin`.
- `0.1.0`: the new `@sixb/connector-ace-iot`, `@sixb/connector-stripe`, and
  `@sixb/connector-tiktok`.

## 2026-08-14

### Redis subscription recovery

- `@sixb/broker-redis` `0.1.2`: recover live subscriptions after a blocked `XREAD`
  connection fails or stalls by replacing disposable subscription clients and resuming from the
  last observed cursor.
- Abort pending subscription client connections and reconnect attempts during unsubscribe or broker
  shutdown so drains complete promptly.


## 2026-08-07

### Workspace dependency compatibility

Adopt hybrid workspace dependency contracts so public packages can release selectively without
letting packages that share core internals drift apart:

- Exact core consumers at `0.1.1`: `@sixb/action-worker`, `@sixb/agent-worker`, `@sixb/cli`,
  `@sixb/orchestrator`, `@sixb/pg`, `@sixb/pipeline-worker`, `@sixb/projection-worker`,
  `@sixb/rules-worker`, `@sixb/server`, `@sixb/sqlite`, `@sixb/sync-worker`, and
  `@sixb/workflow-worker`.
- Compatible public packages at `0.1.1`: `@sixb/agent-ui`, `@sixb/app`, `@sixb/atlas`, and
  `@sixb/client`.
- Compatible plugins and providers at `0.1.1`: `@sixb/auth-magic-link`, `@sixb/auth-oidc`,
  `@sixb/blob-local`, `@sixb/blob-s3`, `@sixb/broker-nats`, `@sixb/broker-redis`,
  `@sixb/connector-companycam`, `@sixb/connector-github`, `@sixb/connector-imap`,
  `@sixb/connector-mercury`, `@sixb/connector-meta`, `@sixb/connector-pandadoc`,
  `@sixb/connector-pennylane`, `@sixb/connector-pipedrive`, `@sixb/connector-rest`,
  `@sixb/connector-sftp`, `@sixb/connector-sql`, `@sixb/connector-teamleader`, `@sixb/ducklake`,
  `@sixb/lake-local`, `@sixb/logger-pino`, `@sixb/queues-bullmq`,
  `@sixb/sandboxes-apple-container`, `@sixb/sandboxes-local`, `@sixb/sandboxes-smolvm`, and
  `@sixb/sandboxes-vercel`.
- `@sixb/connector-exa` adopts the compatible provider contract at `0.1.0`, while
  `@sixb/connector-google` advances to `0.1.2`.
- `create-sixb` advances to `0.1.1` and keeps an explicit compatible range for each framework
  package instead of deriving every range from its own version.

### Package updates

- `@sixb/core` and `@sixb/agent-worker` `0.1.1`: define reusable agent tools and run the tools
  selected by each agent.
- `@sixb/connector-github` `0.1.1`: add users, memberships, members, invitations, and outside
  collaborators.
- `@sixb/sync-worker`, `@sixb/pg`, and `@sixb/sqlite` `0.1.1`: handle empty initial snapshots
  without creating an unusable dataset version.
- `@sixb/connector-exa` `0.1.0`: add bounded web search and fetch tools as a new connector package.
- `@sixb/connector-google` `0.1.2`: add the complete typed Gmail v1 surface.

## 0.1.0

First minimally stable and tested release. Publish this immutable version under npm's `next` tag,
verify the developer flow, then promote the same artifacts to `latest`.

This release refreshes the `create-sixb` starter around a complete satellite-tracking project,
aligns the published documentation with that starter, and makes `0.1.0` the default install line.

### Compatibility

This is a 0.x release and carries no compatibility guarantee. Expect public APIs and persisted
state to change between minor versions. Database schema changes can require recreating the database
before 1.0, and there is no downgrade path.