Recent Platform Changes

This page is a rolling changelog of user-visible OSC platform changes, organized by feature area and updated weekly. Entries are ISO-dated and link to the merged PR or release. For a date-ordered view of all deployed releases, see the Platform Changelog. For repo-level release notes, see the respective GitHub releases pages.

My Apps

  • 2026-07-25: MyJob manual trigger now updates lastRunStatus once the run completes, matching scheduled-run behavior. See osaas-deploy-manager#1186.
  • 2026-07-23: Edit job modal added — scheduled My Jobs can now be updated in place (cron schedule, source URL, worker command, parameter store binding) from the web console without deleting and recreating the job. See osaas-app#4943.
  • 2026-07-22: Generate non-expiring scheduler PAT for MyJob runs — previously short-lived tokens caused auth expiry on long-running or delayed job executions. See osaas-deploy-manager#1167.
  • 2026-07-22: Store MyJobs credentials as K8s service secrets with Elastx fan-out — jobs running on Elastx now reliably receive their access token and config API key at trigger time. See osaas-deploy-manager#1170.
  • 2026-07-21: OAuth token endpoint now returns RFC 6749 JSON on all authorization code grant error paths — headless OAuth clients receive structured errors instead of HTML redirects. See osaas-app#4937.
  • 2026-07-20: PAT expiry reminders now fan out to all sub-workspace admins, not just the primary account holder. See osaas-app#4929.
  • 2026-07-16: Workspace secrets are now selectable as an OSC access token source when creating agent tasks. See osaas-app#4902.
  • 2026-07-16: MyApp creation modal now detects crash-at-startup: shows "Startup failed" status and a log prompt when an app stays in a building state for more than 2 minutes. See osaas-app#4855.
  • 2026-07-11: Add personal-use-only note for Claude OAuth token in agent task setup — warns users that subscription tokens are for personal use and recommends an API key for automated tasks. See osaas-app#4858.
  • 2026-07-11: Jobs tab moved to second position in the My Apps navigation. See osaas-app#4838.
  • 2026-07-10: Replace env vars field in Create Job modal with a parameter store selector — jobs now bind to a parameter store instance for configuration instead of inline key/value pairs. See osaas-app#4840.
  • 2026-07-10: Add parameter store API key field to MyJobs create modal, allowing encrypted parameter stores to be bound to jobs. See osaas-app#4856.
  • 2026-07-09: Agent task credential type is now auto-detected from the pasted value — no need to manually select the token type when adding an OSC access token. See osaas-app#4839.
  • 2026-07-07: My Jobs API introduced — create, list, run, suspend, resume, and delete cron-scheduled background jobs running on ephemeral Python job runners. See osaas-deploy-manager#1110.

Databases (PostgreSQL, MongoDB, ClickHouse)

  • 2026-07-08: Added eyevinn-db-backuper supported-services documentation and a modal in the catalog, clarifying which databases and storage backends are supported. See osaas-catalog-manager#266.
  • 2026-07-07: Backup scheduler failures now emit Prometheus metrics and Slack failure alerts — admins are notified when a scheduled backup does not complete. See osaas-deploy-manager#1094.
  • 2026-07-08: Backup credential lookups for Elastx-hosted instances now route through the correct secondary orchestrator domain, fixing credential fetch failures on migrated databases. See osaas-deploy-manager#1125.

Parameter Stores (Valkey / app-config-svc)

  • 2026-07-15: Parameter store creation now supports an enableSecrets flag — stores can be created with encryption enabled from the start rather than requiring a separate key-rotation step. See osaas-deploy-manager#1145.
  • 2026-07-13: Parameter store API key and access token for MyJobs are now stored as K8s service secrets, replacing inline environment variable injection for improved security. See osaas-deploy-manager#1134.
  • 2026-07-06: Corrected Valkey service description — data IS persisted via PVC; the previous description incorrectly implied data loss on restart. See osaas-catalog-manager#261.
  • 2026-07-04: Valkey instances now provisioned with a password for the default user, improving out-of-the-box security for new parameter store deployments. See osaas-deploy-manager#1092.

Custom Domains

  • 2026-07-05: Custom domains now support an optional originPath — requests to the domain root are forwarded to the instance at the specified sub-path, enabling path-prefix routing for services like MinIO. See osaas-deploy-manager#1100.

Deploy Pipeline

  • 2026-07-25: Agentic SDLC auto-merge is now blocked when a CRITICAL security finding is open — blocked PRs receive an explanatory comment. See osaas-deploy-manager#1176.
  • 2026-07-16: Agentic SDLC bootstrap source ref is now pinned to a commit SHA so the configuration survives branch deletion. See osaas-deploy-manager#1154.
  • 2026-07-10: Fan out git credential updates to all associated app K8s secrets when a credential is rotated, so apps that share a credential stay in sync. See osaas-deploy-manager#1133.
  • 2026-07-10: Add retry-with-backoff to MyApp rebuild POST to prevent permanent deletion on transient orchestrator errors. See osaas-deploy-manager#1129.
  • 2026-07-05: Build status detection improved to prevent a false "ready" state when apps are still showing loading or building placeholder pages. See osaas-deploy-manager#1097.
  • 2026-07-03: Added repository sub-path field to the My Apps create form, enabling monorepo deployments where the app lives in a subdirectory. See osaas-app#4747.

MCP / Architect

  • 2026-07-25: Add update-published-skill and delete-published-skill MCP tools — AI agents can now update or delete skills that have been published to the community library. See osaas-ai#1388.
  • 2026-07-25: Add public GET /skills/:id endpoint for unauthenticated preview of published skills, enabling social sharing without authentication. See osaas-ai#1387.
  • 2026-07-25: Recency-awareness clause added to the ask-osc-architect system prompt — the architect now cites dated sources and acknowledges its RAG knowledge cutoff when answering questions about recent changes. See osaas-ai#1392.
  • 2026-07-23: create-service-instance MCP tool now supports a useLatest parameter — deploy the newest available image version without specifying an exact tag. See osaas-ai#1375.
  • 2026-07-22: list-my-apps and list-git-credentials now surface credential-to-app mappings — each app shows its bound git credential name; each credential shows which apps use it. See osaas-ai#1373.
  • 2026-07-22: diagnose-my-app now includes a git clone 403 credential-flow guardrail — the assistant detects authentication failures on private repos and walks through credential registration and linking. See osaas-ai#1372.
  • 2026-07-19: delete-service-instance now requires a nonce confirmation token before executing, preventing accidental deletion by AI agents. See osaas-ai#1348.
  • 2026-07-19: My App scale-to-zero and cold-start behavior documented in the architect system prompt — the assistant can now explain warm-up delays to users. See osaas-ai#1349.
  • 2026-07-15: get-security-report default format changed from summary to detailed — full finding details are now returned without requiring an explicit format argument. See osaas-ai#1310.
  • 2026-07-15: Service instance names now capped at 20 characters — names exceeding the limit return a clear error with guidance to choose a shorter name. See osaas-ai#1321.
  • 2026-07-13: Parameter values and connection-string passwords are now masked in MCP tool results before being returned to the AI client. See osaas-ai#1301 and osaas-ai#1302.
  • 2026-07-11: diagnose-my-app-orphan MCP tool added — diagnoses a vanished app by inspecting K8s state, last-known config, and parameter store bindings, bypassing the app registry. See osaas-ai#1293.
  • 2026-07-08: list-community-skills MCP tool added — AI agents can now browse the community skills library. See osaas-ai#1279.
  • 2026-07-07: MCP tools for My Jobs management added — create, list, run, suspend, resume, and delete scheduled background jobs directly from AI agents. See osaas-ai#1272.
  • 2026-07-03: Server-level instructions added to the MCP initialize response — AI tools like Claude Code and Cursor now receive OSC platform context for every tool session without requiring a chat session. See osaas-ai#1225.
  • 2026-07-03: rotate-parameter-store-key MCP tool added — rotates the parameter store API key and automatically updates all linked agent tasks and My Apps. See osaas-ai#1223.

Platform Infrastructure (Elastx, Linode)

  • 2026-07-19: Admin My Apps listing now aggregates results from both Linode and Elastx clusters, giving workspace admins a complete view across infrastructure regions. See osaas-deploy-manager#1156.
  • 2026-07-23: My Apps admin endpoint now deduplicates cross-cluster entries and resolves correct public DNS for all instances. See osaas-deploy-manager#1162.
  • 2026-07-05: Default ephemeral-storage request added to all container specs — prevents pods from being evicted on nodes under disk pressure. See osaas-deploy-manager#1096.