mmabrouk · Nov 4, 2026 · Nov 3, 2026 · Nov 3, 2026 · Nov 3, 2026 · Nov 3, 2026
diff --git a/.gitleaksignore b/.gitleaksignore
@@ -331,3 +331,16 @@ fa13fd6147bbdaa76fe42324e5e0da0025d2f275:api/oss/tests/pytest/unit/gateways/test
 6b7f6b127ae55c352b950cc39a63931641cdd0bf:api/oss/tests/pytest/unit/gateways/test_gateways_mcp_probe.py:generic-api-key:955
 # Fingerprint line added in 3f0b12cf87 for a test URL; not a credential.
 3f0b12cf8795131ca94d459aaa728070b92bd35f:.gitleaksignore:generic-api-key:333
+
+# Evaluation run test fixtures (#8042): evaluator, application and test set keys with a hex suffix trip generic-api-key. Not credentials.
+e4bd75902cfcbaa16e0d3db5e3262b57b991b1ff:web/packages/agenta-entities/tests/fixtures/evaluationRun/online-metrics.json:generic-api-key:31
+e4bd75902cfcbaa16e0d3db5e3262b57b991b1ff:web/packages/agenta-entities/tests/fixtures/evaluationRun/online-metrics.json:generic-api-key:53
+e4bd75902cfcbaa16e0d3db5e3262b57b991b1ff:web/packages/agenta-entities/tests/unit/evaluation-run-metrics.test.ts:generic-api-key:71
+e4bd75902cfcbaa16e0d3db5e3262b57b991b1ff:web/packages/agenta-entities/tests/fixtures/evaluationRun/auto-metrics.json:generic-api-key:48
+e4bd75902cfcbaa16e0d3db5e3262b57b991b1ff:web/packages/agenta-entities/tests/fixtures/evaluationRun/auto-metrics.json:generic-api-key:75
+e4bd75902cfcbaa16e0d3db5e3262b57b991b1ff:web/packages/agenta-entities/tests/fixtures/evaluationRun/auto-metrics.json:generic-api-key:105
+e4bd75902cfcbaa16e0d3db5e3262b57b991b1ff:web/packages/agenta-entities/tests/fixtures/evaluationRun/auto-metrics.json:generic-api-key:174
+e4bd75902cfcbaa16e0d3db5e3262b57b991b1ff:web/packages/agenta-entities/tests/fixtures/evaluationRun/auto-metrics.json:generic-api-key:184
+e4bd75902cfcbaa16e0d3db5e3262b57b991b1ff:web/packages/agenta-entities/tests/fixtures/evaluationRun/auto-metrics.json:generic-api-key:194
+e4bd75902cfcbaa16e0d3db5e3262b57b991b1ff:web/packages/agenta-entities/tests/fixtures/evaluationRun/auto-metrics.json:generic-api-key:204
+e4bd75902cfcbaa16e0d3db5e3262b57b991b1ff:web/packages/agenta-entities/tests/fixtures/evaluationRun/auto-metrics.json:generic-api-key:214
diff --git a/api/pyproject.toml b/api/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "api"
-version = "0.128.4"
+version = "0.128.5"
 description = "Agenta API"
 requires-python = ">=3.11,<3.14"
 authors = [

diff --git a/api/uv.lock b/api/uv.lock
diff --git a/clients/python/pyproject.toml b/clients/python/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "agenta-client"
-version = "0.128.4"
+version = "0.128.5"
 description = "Fern-generated Python client for the Agenta API."
 requires-python = ">=3.11,<3.14"
 authors = [

diff --git a/clients/python/uv.lock b/clients/python/uv.lock
diff --git a/docs/blog/entries/agent-needs-setup.mdx b/docs/blog/entries/agent-needs-setup.mdx
@@ -0,0 +1,65 @@
+---
+title: "Know what an agent is missing before you run it"
+slug: agent-needs-setup
+date: 2026-10-30
+tags: [v0.128.0]
+description: "When a model, key, MCP server, secret or connected app an agent uses goes missing, the new app marks it Needs setup instead of letting the run fail. Invites now open in the new app."
+---
+
+<Summary>
+
+When something an agent uses goes missing, the new app now tells you before a run fails. The item shows **Needs setup** in the agent editor, with the reason under it. If the model can't run, a banner above the chat box says so, and Send stays off until you set it up.
+
+- A missing MCP server, secret or connected app no longer stops a run. The agent runs without it.
+- A scheduled or event run whose model needs setup is recorded once as skipped, instead of being retried five times.
+- Invite links open in the new app, and new teammates land in the project they were invited to.
+
+</Summary>
+
+{/* truncate */}
+
+## Know what an agent is missing
+
+An agent names the exact model, provider API key, subscription login, MCP server, secret and connected app it uses. Any of them can go missing later: someone deletes it, turns it off or stops sharing it with the project, or the model is no longer offered. Until now each kind failed in its own way. Some failed the run, an MCP server failed at its first tool call, and the editor showed nothing for a deleted MCP server or a missing key.
+
+The new app now checks the agent when you open it.
+
+- **In the editor**, each missing item shows **Needs setup** and the reason, such as **Not found in this project**, **Not shared with this project**, **Turned off** or **Sign-in expired**. Click the item to fix it.
+- **In chat**, when the model needs setup, a banner above the chat box reads **This agent needs setup** with the line **The model needs setup before this agent can run.** If you can fix it, a **Set up** button opens the model picker. You can keep typing, and Send turns on once the model is set up.
+- **Runs go on without a missing tool.** A missing MCP server, secret or connected app is left out, and the agent runs without it. Only a missing model, provider API key or subscription login stops a run, and it stops before the agent starts.
+- **Automations.** When a schedule or event fires and the model needs setup, the run is recorded once as **Skipped: agent needs setup**, and the schedule stays on. It used to be retried five times and recorded as failed. You can't turn on a schedule or trigger, or connect the agent to a channel, until its model is set up. Saving your changes is never blocked.
+
+## Improvements
+
+- **Choose who your Slack agent answers, and in which channels.** Under **Access**, set **Who can message it** to **Specific people** and find them by name or email. Under **Advanced**, set **Channels it answers in** to **Only these channels** and check the channels it should answer in. Each agent keeps its own list, even when several agents share one Slack app. Someone not on the list who messages the agent directly or mentions it gets one private note, at most once a day. Telegram agents get the same choice for groups. See [Connect an agent to Slack](/guides/connect-slack).
+- **Invites open in the new app.** An invited person signs in to the new app, accepts the invite and lands in the invited project. A new account answers the onboarding questions and skips the credits and first-agent steps. Invite links sent before this release still work. [See the change](https://github.com/Agenta-AI/agenta/pull/7940).
+- If your deployment doesn't send email, inviting someone from **Members** in the new app's Settings now shows the invite link with a **Copy** button, so you can share it yourself.
+- **An automation runs as whoever last saved it.** When you save a change to someone else's automation, even a new name, it runs with your access from then on. Pausing, resuming and deleting don't change who it runs as. See [Automations](/concepts/automations#an-automation-runs-as-whoever-last-saved-it).
+- Runs sent from your own app show their name and an external tag in **Analytics**, instead of **Unknown agent**.
+- Event automations include the event that started the run in the agent's message. In the editor, you can insert event fields into the instruction and preview what the agent will receive.
+- When you comment on a file preview, click a staged comment tile to jump to its comment. Element picking pauses while a note is open, and Alt+M turns comment mode on and off.
+- The **What's New** dialog groups features, improvements and fixes by release.
+- **Picking a template creates the agent right away** and opens its first chat. The agent asks for accounts in the chat when it needs one, and accounts already connected in the project are used automatically.
+- **Download a skill** as SKILL.md, or as a .zip with its bundled files, from the skill editor or the skill's **⋮** menu.
+- **Switching sessions is faster** in the new app. In our dev tests, switching session tabs took 1 to 18 ms, down from 1.25 to 6.1 seconds.
+- Once a run ends, the agent's in-between messages fold into the steps above the answer.
+- When the agent waits on a secret request or an approval, typing a message answers it and sends your message to the agent.
+- Files the answer links to, such as a zip built with a shell command, get a file card with **Download**.
+- Switching organization or project from Settings keeps you on the same screen and shows the new project's connections, schedules and subscriptions.
+- Organization admins can manage domains, OIDC SSO providers and the organization slug in **Settings > Access and security** in the new app. These were read-only there before.
+- On deployments with password sign-in, admins can create a one-time password reset link for a member from **Settings > Members** in the new app.
+- The agent menu has **Open in playground**, which starts a new chat with the agent.
+- **Self-hosting:** new Pi sessions in the local sandbox start faster. In our tests, a new session was ready in about 0.4 seconds instead of 1.3.
+
+## Bug fixes
+
+- Signing in with Google, GitHub or another provider finishes, instead of sending you back to the login page when your browser held data from an earlier session.
+- A failed sign-in stops loading so you can try again, and reloading a used sign-in link tells you to sign in again.
+- MCP servers that showed an OAuth error on their own page when you clicked **Connect** now connect, without you setting up an OAuth app.
+- Sent messages stay in the chat when you switch sessions, and messages sent from a connection or question card show up right away. A steered turn is no longer labeled **Stopped**.
+- After a failed MCP connection, closing the connect sheet shows the server as **Not signed in** without a reload.
+- Signed-out visitors who open a `/w` or `/auth` link reach the new sign-in page.
+- A Claude agent turn longer than 60 minutes no longer ends without its final message.
+- A queued message runs on its own when the turn before it stops responding and is closed.
+- Opening a skill no longer asks you to discard edits nobody made.
+- Archived agents on the **Agents** page show **Restore** in their menu instead of **Archive agent**.
diff --git a/hosting/kubernetes/helm/Chart.yaml b/hosting/kubernetes/helm/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: agenta
 description: A Helm chart for deploying Agenta (OSS or EE) on Kubernetes
 type: application
-version: 0.128.4
-appVersion: "v0.128.4"
+version: 0.128.5
+appVersion: "v0.128.5"
 keywords:
   - agenta
   - llm

diff --git a/sdks/python/pyproject.toml b/sdks/python/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "agenta"
-version = "0.128.4"
+version = "0.128.5"
 description = "Agenta is the open-source workspace for your agents. Build agents through chat, improve them with feedback, and share them with your team."
 readme = "README.md"
 requires-python = ">=3.11,<3.14"

diff --git a/sdks/python/uv.lock b/sdks/python/uv.lock
diff --git a/services/pyproject.toml b/services/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "services"
-version = "0.128.4"
+version = "0.128.5"
 description = "Agenta Services (Chat & Completion)"
 requires-python = ">=3.11,<3.14"
 authors = [

diff --git a/services/uv.lock b/services/uv.lock
diff --git a/web/ee/package.json b/web/ee/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@agenta/ee",
-    "version": "0.128.4",
+    "version": "0.128.5",
     "private": true,
     "engines": {
         "node": "24.x"

diff --git a/web/mobile/package.json b/web/mobile/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@agenta/mobile",
-    "version": "0.128.4",
+    "version": "0.128.5",
     "private": true,
     "engines": {
         "node": "24.x"

diff --git a/web/mobile/scripts/speed/budget.json b/web/mobile/scripts/speed/budget.json
@@ -5,34 +5,44 @@
         "timingPercent": 15
     },
     "firstLoadGzipBytes": {
-        "shell": 1231906,
+        "shell": 972022,
         "routes": {
-            "/": 1234384,
-            "/404": 1233450,
-            "/auth": 1295712,
-            "/auth/callback/[[...provider]]": 1263818,
-            "/embed/[embedId]": 1312443,
-            "/invite": 1269549,
-            "/w": 1234386,
-            "/w/[workspace_id]": 1234435,
-            "/w/[workspace_id]/p": 1234438,
-            "/w/[workspace_id]/p/[project_id]": 1233373,
-            "/w/[workspace_id]/p/[project_id]/agents": 1375925,
-            "/w/[workspace_id]/p/[project_id]/agents/[agent_id]": 1904482,
-            "/w/[workspace_id]/p/[project_id]/agents/new": 1481035,
-            "/w/[workspace_id]/p/[project_id]/apps": 1406783,
-            "/w/[workspace_id]/p/[project_id]/apps/[app_id]/playground": 1356665,
-            "/w/[workspace_id]/p/[project_id]/automations": 1383244,
-            "/w/[workspace_id]/p/[project_id]/automations/[automation_id]": 1763948,
-            "/w/[workspace_id]/p/[project_id]/automations/new": 1430265,
-            "/w/[workspace_id]/p/[project_id]/observability": 1481855,
-            "/w/[workspace_id]/p/[project_id]/onboarding/[[...step]]": 1381673,
-            "/w/[workspace_id]/p/[project_id]/sessions": 1853763,
-            "/w/[workspace_id]/p/[project_id]/sessions/[session_id]": 1785188,
-            "/w/[workspace_id]/p/[project_id]/settings": 1368600,
-            "/w/[workspace_id]/p/[project_id]/skills": 1411554,
-            "/w/[workspace_id]/p/[project_id]/templates": 1364202,
-            "/w/[workspace_id]/p/[project_id]/templates/[template_key]": 1358846
+            "/": 974500,
+            "/404": 973588,
+            "/auth": 1037907,
+            "/auth/callback/[[...provider]]": 1003945,
+            "/embed/[embedId]": 1054407,
+            "/invite": 1009954,
+            "/w": 974502,
+            "/w/[workspace_id]": 974551,
+            "/w/[workspace_id]/p": 974554,
+            "/w/[workspace_id]/p/[project_id]": 973489,
+            "/w/[workspace_id]/p/[project_id]/agents": 1123635,
+            "/w/[workspace_id]/p/[project_id]/agents/[agent_id]": 1892167,
+            "/w/[workspace_id]/p/[project_id]/agents/new": 1243763,
+            "/w/[workspace_id]/p/[project_id]/annotations": 1110012,
+            "/w/[workspace_id]/p/[project_id]/annotations/[queue_id]": 1412184,
+            "/w/[workspace_id]/p/[project_id]/apps": 1151458,
+            "/w/[workspace_id]/p/[project_id]/apps/[app_id]/playground": 1097379,
+            "/w/[workspace_id]/p/[project_id]/apps/archived": 1108411,
+            "/w/[workspace_id]/p/[project_id]/automations": 1128690,
+            "/w/[workspace_id]/p/[project_id]/automations/[automation_id]": 1756030,
+            "/w/[workspace_id]/p/[project_id]/automations/new": 1423666,
+            "/w/[workspace_id]/p/[project_id]/endpoints": 1108024,
+            "/w/[workspace_id]/p/[project_id]/evaluators": 1112799,
+            "/w/[workspace_id]/p/[project_id]/evaluators/archived": 1110815,
+            "/w/[workspace_id]/p/[project_id]/evaluators/playground": 1103974,
+            "/w/[workspace_id]/p/[project_id]/observability": 1240244,
+            "/w/[workspace_id]/p/[project_id]/onboarding/[[...step]]": 1121181,
+            "/w/[workspace_id]/p/[project_id]/prompts": 1114362,
+            "/w/[workspace_id]/p/[project_id]/sessions": 1839662,
+            "/w/[workspace_id]/p/[project_id]/sessions/[session_id]": 1777253,
+            "/w/[workspace_id]/p/[project_id]/settings": 1112716,
+            "/w/[workspace_id]/p/[project_id]/skills": 1405273,
+            "/w/[workspace_id]/p/[project_id]/templates": 1112483,
+            "/w/[workspace_id]/p/[project_id]/templates/[template_key]": 1104319,
+            "/w/[workspace_id]/p/[project_id]/testsets": 1114363,
+            "/w/[workspace_id]/p/[project_id]/variants": 1130117
         }
     },
     "timing": {

diff --git a/web/mobile/src/features/annotations/AnnotationEvaluatorSection.tsx b/web/mobile/src/features/annotations/AnnotationEvaluatorSection.tsx
@@ -2,14 +2,18 @@ import type {AnnotationMetricField} from "@agenta/annotation"
 
 import {AnnotationField} from "./AnnotationField"
 
-/** The metrics one evaluator asks for, one field each. */
+/** The metrics one evaluator asks for, one field each, with an error line under a field. */
 export const AnnotationEvaluatorSection = ({
     slug,
     fields,
+    readOnly = false,
+    errors,
     onChange,
 }: {
     slug: string
     fields: Record<string, AnnotationMetricField>
+    readOnly?: boolean
+    errors?: Record<string, string>
     onChange: (slug: string, fieldKey: string, value: unknown) => void
 }) => {
     const entries = Object.entries(fields)
@@ -21,12 +25,19 @@ export const AnnotationEvaluatorSection = ({
     return (
         <div className="flex flex-col gap-4">
             {entries.map(([fieldKey, field]) => (
-                <AnnotationField
-                    key={fieldKey}
-                    fieldKey={fieldKey}
-                    field={field}
-                    onChange={(value) => onChange(slug, fieldKey, value)}
-                />
+                <div key={fieldKey} className="flex flex-col gap-1">
+                    <AnnotationField
+                        fieldKey={fieldKey}
+                        field={field}
+                        readOnly={readOnly}
+                        onChange={(value) => onChange(slug, fieldKey, value)}
+                    />
+                    {errors?.[fieldKey] ? (
+                        <p role="alert" className="m-0 text-xs text-destructive">
+                            {errors[fieldKey]}
+                        </p>
+                    ) : null}
+                </div>
             ))}
         </div>
     )