Device Agent is out of preview, with a one-step signed macOS installer

Device Agent leaves preview. macOS installs from a single signed, notarized package, so rolling it out to a fleet is one installer run or a normal MDM push instead of a download-and-chmod sequence. MCP server pages also gain a Clients and Sessions tab showing who is connected, and public skill share links now use your custom domain. One breaking change below: the legacy OAuth proxy system is removed.

Breaking changes

• The legacy OAuth proxy system is removed #3465 - Toolsets have migrated to user session issuers, so the proxy serving path, its management endpoints, and its migration helpers are gone. Clients still holding proxy refresh tokens receive invalid_grant and re-authorize against their session issuer instead of exchanging stale tokens indefinitely. The "Configure OAuth" wizard keeps its structure but now provisions a session issuer on the custom path. (Author: @qstearns)

Features

• Device Agent is out of preview #4888 - macOS now installs from a single signed, notarized package that sets up the daemon, CLI, and menu-bar UI together, so setup is one installer run or a normal MDM push instead of a download-and-chmod sequence. Device Agent is also the default choice on the instrumentation onboarding step. (Author: @mfbx9da4)
• See the clients and sessions connected to an MCP server #4797 - MCP server detail pages gain a Clients and Sessions tab listing the OAuth clients registered against the server alongside its active sessions, with catalog-resolved clients distinguished from dynamically registered ones. (Author: @bflad)
• Skill share links use your custom domain #5023 - Public skill share pages and raw SKILL.md downloads are served from your verified custom domain, and the dashboard copies links with that domain automatically. (Author: @simplesagar)
• One plugin package for Cursor and Codex #5063 - Compatible Cursor and Codex plugins publish from a shared Agent Plugins 1.0 package, with compatibility status and portable ZIP downloads shown on plugin pages (#5071) while marketplace entries keep their native formats (#5075). (Author: @danielkov)
• opencode joins the managed tools list #5054 - The device-agent fleet configuration page now offers opencode with the same off, user, and managed enforcement options as the other supported tools. (Author: @bradcypert)
• A 14-day enterprise trial on every signup #4881 - A new organization gets the enterprise feature set for 14 days, with $50 of chat credits and the same ceiling applied to inference the platform runs on your behalf (#5073). The billing page shows your organization's credit ceiling. Trials that end without converting return to the free plan automatically, with every demotion audit-logged (#4983). (Author: @svadrutk)
• A redesigned dashboard #5046 - The whole dashboard moves to a new editorial design language: flat square surfaces with hairline borders, serif display titles with area micro-labels, unified table headers, colorized metric tiles, and a restrained chart palette with a proper dark-mode ramp. (Author: @adaam2)
• Opt-in automatic session refresh (hidden until enabled) #4705 - Users can opt in to automatic remote session token refresh. The organization settings for it stay hidden until the capability is enabled for your organization. (Author: @ThomasRooney)
• Platform admin: consolidate duplicate identity providers #5060 - Visible to platform operators only. A Convergence tab lists organizations running their own provider for the same upstream and re-points their clients onto the shared catalog entry without anyone signing in again. (Author: @bflad)

Bug fixes

• Codex and ChatGPT costs no longer double count #5021 - The compliance cost feed repeats event ids across log files, and each repeat was imported as its own row, inflating every token and cost aggregate downstream. Repeats are now dropped, and re-polling a window is idempotent. (Author: @daviddanialy)
• Organization names that produce an empty URL are rejected #5039 - A name made entirely of punctuation previously passed validation and produced an organization with an empty URL slug. Names now need at least two letters or numbers. (Author: @alx-xo)
• Marketplace Git installs accept compressed requests #5080 - Compressed Git upload-pack requests through marketplace URLs are now supported. (Author: @danielkov)
• Integration poll labels match reality #5064 - AI integration cards now state their actual sync cadence, such as every five minutes for the Anthropic compliance feed rather than the "every 10m" it claimed. (Author: @mfbx9da4)
• Sessions without an organization no longer fail #5009 - Organization-less login sessions no longer trip access-control grant preparation. (Author: @tgmendes)
• Trigger delivery telemetry carries real identifiers #4694 - Delivery logs record a proper trigger-instance URN and the active trace context instead of an empty placeholder. (Author: @danielkov)
• Tables work from the keyboard #4989 - Clickable table rows are focusable and activate with Enter or Space. Smaller polish landed alongside: a cleaner bulk-actions toolbar on risk tables (#4783), Policy Center rows that stop repeating themselves (#4970), and the brand-mesh treatment extended to the chat landing page (#5087). (Author: @alx-xo)
• Internal cleanups #5045 - Legacy deny-effect access grants are removed in favor of allow-only rows with explicit exclusion scopes, the badge marking staff-only UI now reads "Internal Admin" instead of "Dev" (#5068), and hook installations are served an updated binary (#5038). (Author: @tgmendes)