Issuer-gated OAuth from the playground, release-stage badges, and resilient assistant runtimes
This release wires the playground Connect button into the issuer-gated OAuth flow, surfaces Preview and Beta release-stage badges across the dashboard, and fixes assistant runtimes that hung after image upgrades.
Features
Preview and Beta release-stage badges#2882 - Adds Preview and Beta release-stage badges so pre-GA features are clearly labeled wherever their name appears. The same badge renders inline on the sidebar nav entry (with a hover tooltip explaining the stage), the page section title, sub-route tabs, and raw
headings. Tagged in this release: Assistants as preview; Risk Overview and Risk Policies as beta; Insights → Employees and Insights → Costs as preview. The Policy Center nav entry is renamed to Risk Policies to match its page heading and URL, the Risk Overview empty state now uses the same dashed-border box treatment as Risk Policies, and a handful of pages that were missing a top-level title (SDKs, Integrations, Roles & Permissions, Audit Logs) now have one. (Author: @simplesagar )
Issuer-gated OAuth from the playground Connect button#2883 - The playground's Connect button now drives the issuer-gated OAuth flow when a toolset is bound to a user-session issuer, so connecting to MCP servers like
lands an upstream session that the runtime can resolve. The connection-status badge and the 401 challenge on
both read from the issuer-gated session store for these toolsets, and the security-check fallback now always emits a non-empty
Assistant JWT on issuer-gated MCP servers#2879 - Issuer-gated MCP servers now accept an assistant-runtime JWT and use the assistant owner's linked upstream account, so the runtime can call
without re-prompting for login. Requests with no linked upstream still return a 401 plus WWW-Authenticate as before. (Author: @danielkov )
Bug fixes
Recover assistant runtimes after image recycle#2877 - Assistant runtimes no longer get stuck unresponsive after a Gram release. When the assistant runtime image was upgraded in place, the underlying VM was being left stopped, so the next chat turn timed out and the assistant stopped responding. Subsequent turns now bring the runtime back up cleanly. (Author: @danielkov )
Preserve inline JSON in audit log outbox entries#2880 - Fixes a bug where snapshot and metadata fields in audit log outbox entries were being base64-encoded instead of preserved as inline JSON objects. (Author: @disintegrator )
