Core Architecture Refactors
This release includes significant refactoring of core platform code to improve maintainability and scalability. The Sandbox Adapter was split into four discrete contract-based modules: lifecycle management, filesystem operations, command execution, and Provider integration contracts. The previously included E2B Adapter was removed from the codebase. Additional core refactors include complete rewrites of the login and authentication logic, as well as the rate-limiting module to standardize enforcement across all services. All platform container images are now built and published using a formal CI/CD pipeline to ensure consistent, verified deployments for self-hosted instances.
Security and Access Hardening
Multiple security enhancements were implemented to reduce attack surfaces and enforce consistent access controls. Hardened system tool permissions were added for multi-process deployments to limit elevated access scope. The Agent Sandbox Proxy and IDE Agent now include direct Workspace preview capabilities, range request handling, path traversal protection, and session authentication to restrict unauthorized access. All service file-read timeouts were unified to eliminate inconsistent timeout configurations across file operations. Audit log retention policies were updated: instead of permanent deletion, logs are now moved to S3 cold archival storage for compliance and historical access. Automated validation and cleanup routines were added to admin configuration data to prevent invalid or stale settings from impacting platform performance. SSR rendering was removed from all account/* route pages to shift rendering entirely to client-side processes.
Workflow and Tooling Enhancements
The platform’s workflow orchestration and tool integration systems were optimized to improve user and developer experience. Core Workflow schemas were refined to reduce redundancy and improve consistency, while tool calls were unified to use a standardized form rendering system across all tool invocations. The supported data types for tool JSON Schema definitions were expanded to cover additional use cases not previously supported. A summary of key workflow and tooling updates is below:
| Component | Key Changes |
|---|---|
| Workflow Schemas | Optimized structure, reduced redundant code |
| Tool Calls | Unified form rendering for consistent user input |
| JSON Schema Support | Extended to additional data types |