v2026.824.0 Breaking

August 24, 2026

Breaking Changes

Chat-style tasks are the default — The “Chat-Style Tasks” experiment toggle is gone. A “Classic Task Interface” preference restores the pre-chat page (chat-only features unavailable there).
Sandbox streaming is capability-driven — streamAgentSessionOutput, Daytona useSessions, and useLogStream are removed; verified provider capabilities decide streaming with poll fallback.
Managed runtimes default to Tailscale HTTPS — Eligible managed worktree runtimes expose as tailscale_https. Set NEURO_MANAGED_RUNTIME_HTTPS=off for the old loopback behavior.
Interaction resolver defaults to anyone — New interactions use one resolver-policy evaluator. Existing pending rows keep conservative renamed restrictions.
Decision-training surfaces removed — Training library route and drawer leave the Decisions desk; backend snapshot contract unchanged.

Chat-style tasks as the default experience — Conversation view for every task: searchable assignment, document comments in a gutter, live blockers in the thread, and chat-first onboarding into the first task.
HTTPS previews over Tailscale — Managed runtime previews reach phones and second machines via a least-privilege host broker with durable leases and fail-closed port mediation.
Sign in to Claude and Codex inside Neuro OS — New-agent page offers Claude subscription login and Codex sandbox device-login with owner-bound sessions and one-time token delivery.
Sandbox provider capability contract — Providers declare capabilities; the live worker verifies them; effective set is the fail-closed intersection of declared, verified, and configured.
Chunked, resumable company imports — Imports move as verified ~32 MB parts with a durable ledger — resume after dropped connections, refreshes, and restarts.

Onboarding meets you where you are — Companies with no agent enter onboarding automatically at the right step; Cloud signup seeds can activate a ready stack.
Review governance and secret catalog — Review verdicts are transactional; agents can look up secret names via read-only /secrets/catalog.
See your channel — neuro channels (CLI) shows every release lane and which one your install follows.

Auth-proxied deployments — Live-events WebSocket authenticates through auth-terminating proxies; service worker always returns a real Response.
Account-scoped caches — Invite checks, company selection, and query caches key to the signed-in account and clear on sign-out.
Runs, sandboxes, adapters — Sessions reuse across handoffs; stdin races closed; Claude/Codex/OpenCode/Grok reliability fixes; Windows adapter loading works.

Migrations 0212–0222 run on upgrade (onboarding first task, resumable transfers, device-login, runtime leases, and more).
Optional: NEURO_MANAGED_RUNTIME_HTTPS, Tailscale broker vars, CLAUDE_LOGIN_EDGE_TLS_TERMINATED, NEURO_ONBOARDING_SEED_ADAPTER_TYPE.
Agent JWT default TTL matches documented 48h (NEURO_AGENT_JWT_TTL_SECONDS=172800).
Remove inert streamAgentSessionOutput / Daytona streaming keys from saved configs when convenient.