Configure and observe assistants from one panel, and see one person behind many accounts

The assistant detail panel is now the one place to run an assistant: name, model, concurrency, and warm TTL are editable in place, the Sessions tab shows cost and token stats over a selectable range, and triggers expand to show their recent traffic with each event linking to the conversation it routed to. Cost analytics also starts folding a person's work and personal AI accounts into one identity, so drill-downs report a whole person rather than a slice.

Features

• Assistant detail panel: edit in place, observe in place #5230 - Overview settings are editable behind an explicit edit mode, the Sessions tab aggregates sessions, messages, cost, and tokens over a selectable time range with per-session cost in the list, and each trigger expands to its recent dispatches. (Author: @danielkov)
• Work and personal accounts roll up to one person #5221 - Cost analytics email filters and user drill-down pages now include an employee's directory email and linked AI account emails, so the same totals appear whichever identity the telemetry arrived under. (Author: @daviddanialy)
• LiteLLM sessions keep their label #5187 - A session routed through LiteLLM stays matched to the LiteLLM filter and displays as its client via LiteLLM, even when the agent's own hook stream captures the transcript. (Author: @danielkov)
• Composer references become chips #5236 - Tool and skill references render as colored inline chips in the assistant composer, deleting a skill's token detaches it, and hyphenated tool names now match in autocomplete. (Author: @adaam2)
• Platform admin: model keys encrypted at rest #5201 - Visible to platform operators only. Platform OpenRouter keys are encrypted at rest, with an admin page listing each organization's keys, limits, live usage, and encryption state, and enable and disable actions audit-logged against the owning organization. (Author: @bflad)

Bug fixes

• LiteLLM-proxied sessions no longer duplicate turns #5152 - The proxy and the agent's own hook stream both reported the same assistant turn, and both rows survived. The duplicate is now dropped for sessions a hook stream already captured, and bare Claude adapter sessions resolve to the Claude Code surface instead of colliding with Claude desktop imports. (Author: @speakeasyforgebot)
• URL imports hardened against SSRF #5231 - OpenAPI-from-URL and image-from-URL fetches reject non-HTTPS targets and private address space, with redirects capped and re-checked so a hostile target can't chain into internal networks. (Author: @speakeasyforgebot)
• Typed dates work in the time range picker #5225 - Natural-language date parsing silently failed on most pages because the request was missing its project header. The picker now injects it everywhere, fixing the project home, security, and billing pages in one place. (Author: @simplesagar)