This release includes 3 security fixes for security teams reviewing exposed deployments.
Published 9d
AI Agents & Assistants
✓ No known CVEs patched
This release patches 3 known CVEs
Topics
ai-agents
email
livekit
mcp
sms
telephony
+2 more
twilio
voice-ai
Affected surfaces
auth
rbac
Summary
AI summaryThis release touches the voicebot agent tools, API caps enforcement, abuse mitigation, contacts directory updates, and web telephony UI.
Full changelog
hail CLI v0.13.0
Universal communication platform for AI agents — hail CLI binaries.
Install via Homebrew:
brew install hail-hq/tap/hail
Or download a binary below.
Changelog
- 9f09d0e9e05fc1c9c11fff7b59c9ece78637b25d Merge pull request #35 from hail-hq/chore/release-0.14.0
- f4052f520224fc5b72e4bd14a7c2811b7278b3d4 chore(release): 0.14.0 — fix duplicate 0.13.0 changelog entry, bump sdk to 0.10.0
- 1e7c47ced74340a11e0c1ffae38d2283ebf20168 Merge pull request #34 from hail-hq/feat/client-tools-flag
- 0846e47cd03d2a69ab1b668ad6d225a3cf5369f3 docs(changelog): 0.13.0 — voicebot agent tools
- e089a216f4f4f26afd6a23f4d9540cdeede14d69 feat(sdk,cli): expose per-call agent tools opt-out
- 4f4f52445418ea1842b65cd8e72fdc681dad66d2 Merge pull request #33 from hail-hq/fix/agent-caps-on-voicebot-sends
- 4cbc4e72d5535732b8b202de456bf57a3a5758c0 fix(api): voicebot agent sends honor platform agent caps and kill switch
- b48757828a190ae34c87bc608a0807e715584826 Merge pull request #32 from hail-hq/feat/contacts-v2
- 0d950f4cf56461cdc55a8b070cf15d28eee4fae3 Merge pull request #31 from hail-hq/fix/end-call-hangup
- 2ebe2fbddf59e6b91858818de6bb5dd557e3c9cc feat(directory): include manual contacts + member phones in the voicebot directory
- 6693ea269d1e2345723d6a71c5022a18c6c51f48 fix(migrations): renumber contacts migrations to 0035/0036 after merge
- ee9b9fd2ac6ce12cf9997ffd9dc35a8db3285c4f merge: main into contacts-v2 (adopt agent-tools framework, keep contacts backend)
- 53d7a698988c3a8c093e28422b36640bd27a2e2a fix(voicebot): end_call must delete the room, not just end the agent job
- 500f13949c89d4e461adadcd582133d033b75954 docs: contacts planning
- 2f6a45b09772fb221286ac5521e46a0a2b247560 Merge pull request #29 from hail-hq/feat/voicebot-agent-tools
- 8a7811addcbbc16fb3d3b84544c710c18879f7e2 Merge remote-tracking branch 'origin/main' into feat/voicebot-agent-tools
- 5a80345ada5d1fa8e092081907b1171ff2022775 Merge pull request #28 from hail-hq/feature/agent-self-signup
- 3a7d73a0f976acb876a3b51ee981ac44e4ba0251 fix(api): declare agent 429 on create routes so openapi regen matches CI
- c99067f37b175c0275da4efdf3d391df832caf75 Merge pull request #27 from hail-hq/feature/agent-self-signup
- e7b92cfa88f4b7dbd6f39bfc2e011a7d94c18212 Merge pull request #26 from hail-hq/feat/sms-console-ui
- bba32ccdca319670437e572d3145b0fb214d821f docs(abuse): document agent 429 in openapi, AGENT_ env vars, runbook notes
- e1cfdd1e24159fa5d4d7e619469a8cd48887d3d9 fix(abuse): kill switch covers inbound-forward relay; one-query org caps
- 2974e544fbee8901dcd2c168618a2ba8ce1ab09d fix(sms-billing): apply code-review fixes to tier list, schema, and types
- 069bc031c1a0558e0cc12bc257bee1ccc73ae4f9 docs(ops): agent outbound runbook — kill switch, caps, launch checklist
- 32a99b5221d4f83cd96c1c15f99ad9951ed6ad2e feat(abuse): enforce per-recipient agent caps on /emails, /sms, /calls
- 85ea6598b0dd1b96cfb201095adb31c34808b944 feat(abuse): agent velocity caps + kill switch (agent_caps)
- 89bfaaadf02d7cc74ce76653a28ea900bc511d29 feat(db): agent_send_log + platform_flags tables, Organization read model
- 57a754c688bb377f0b96ff332b5882ab8a17d97f fix(web): correct telephony section count noun and page description
- a40ddfc219b985d9797af2d410c80543453082cc docs(costs): document the telephony category and its two-array shape
- 56b052c2bac9a3786404bc7e46c941373e8e7357 fix(core,api,voicebot): apply max-effort code-review findings to agent sends
- e67d2c052310b70e4b1d4eb458b78fea3c896194 feat(web): serve telephony schema at its $id url
- 213eb91c8ec7a0e0d42dec51e6c28815467f2e61 feat(web): render telephony section on the costs page
- 28eab0cee3a3f438fcf4e470d2a163271bf377f6 feat(web): telephony numbers render section
- 9529916104ac54c8a396cb3d273347f243125675 feat(web): telephony types and costs exports
- fa56f0dc449fe9c38f725a8e8d722fc64b1d605a feat(costs): staleness-check telephony arrays, error on unknown files
- 8d781d1a09b0c46c330f357da85ee2856cae94d2 ci(costs): validate telephony.json on PR and via costs:validate
- 9bfa8d6191fc00ed20287a884889c1a1926ef768 feat(costs): add telephony category schema and seed data
- ae49d1896d4bd1e43a4d0ce987941e218d20c9aa docs(billing): SMS billing-model correction spec and implementation plans
- e52b8eec745c3dec368270f8ce595b0237177421 fix(core): correct SMS pricing-tier classification
- 0cd8009b553ce23604eededa478a3e9824c44090 git commit -m "feat(core,api): embed sms pricing tier into usage_events ref"
- f0bc0ceff5a3cb10f44e95ebe92f0942dce4e909 Merge branch 'main' into worktree-contacts-v2
- d6395b160568fad5548b72af86b1824d8ddd4f68 chore(api): regenerate openapi for contacts routes
- 61002d885ff3af006900a7b8fcf83ea15119f5d5 fix(voicebot): harden lookup_contact output and blank queries
- 1ad765cb59aea55cca694d1eac641a2d016972a6 fix(dsar): report contact deletions and bulk-delete matches
- ec5a9768a24161e21f96e5c6e8b10e19ef221511 fix(contacts): fair union search with cursor pagination and literal-match queries
- 7762bad2c3917be0faef040e2a8417ca7530826b fix(voicebot,api,core): close whole-branch review gaps in agent-send routes
- 2c7287a831eec15b1d84a956edd9590a3e094f59 feat(contracts): tools field on place_call across openapi, cli, and mcp
- e7e62ab62e9b3500af04878c3ee935d4ccf68645 test(voicebot): cover tool-setup failure degradation via build_tools_safely
- de8c59d19a774f690720bb5a1cd90ba852a88c75 feat(voicebot): wire agent tools into the call session + confirm-before-send guardrail
- 8daf1610ffbabc8ea7fb3563437aeed90200d2ae fix(voicebot): rollback poisoned availability session; guard malformed org id
- ac3c43445e57dd5ec657b3d9925276e7fb1d6030 feat(voicebot): adapt core agent-tool registry to livekit function tools
- 645887c5825f69a8a59f2e6edc6120b8daa248b7 test(api): pin tools [] and omitted passthrough on POST /calls
- bd3a9bbb4d15b3540aa4ba2df55c948c2dbedcd1 feat(api): per-call agent tools opt-out + billed stamp on POST /calls
- 7e1b288828a194164eaee38ed6f5ae65d72cddac fix(api): serialize agent sends per call and fix replay status handling
- 1a49e2219d916f484734479fcea5024d0c16a562 feat(api): internal agent-send routes for voicebot sms/email tools
- c9ed6173b7338bc2525545fe5be0126bbe84358c refactor(api): extract deliver_sms for reuse by the internal agent route
- d3fe55ece1d62b3e8e50e08d771ffb746ff0fb91 docs(specs): voicebot agent tools design + implementation plan
- 4063ceeb78f3c790ca42fc9c9648c27e785c3868 refactor(api): extract deliver_email for reuse by the internal agent route
- 2d02fb9df8e4ed93628de9371ba8d3f56c9b1883 feat(core): agent-tool registry with end_call, list_contacts, send_sms, send_email
- 86c9d8c27121e252198e1fddaf65422a0717417b feat(core): users mirror + org-scoped recipient directory
- 653b75fd47ccc7c4ac3cc28197b332dfe9b59fcb docs(retention): correct shared-Postgres wording in contacts purge note
- f4bed088d1f7f93a7853ae47ffb8624db960b836 fix(contacts): dsar + retention coverage, patch null-name 422, name length cap
- e247516155d1c32dc9a691100c03630f5f305a32 fix(voicebot): tolerate db errors during org lookup — never block the call
- b805c4163a6487dac4355b46c211f488be9d6dc6 feat(voicebot): org-scoped lookup_contact function tool
- 80d37855895df0000c3f6c0357665e56e08ad7ab feat(mcp): list_contacts / lookup_contact / create_contact tools
- 7f017794e961df067a72036d3b7dca4588d97d87 fix(contacts): drop created_by FK — users is website-owned, keys outlive owners
- 39c156a2216b0e4194c39f6ceec4cbdce23bdb5d feat(api): /contacts union CRUD + member phone routes
- 2a8c7a75cd3b0729f6a3e25d221bc8a6e1d6a681 feat(auth): surface caller user_id on Principal
- a7c480254ab5ff5e424570d0d1ff7a51321ba9f2 feat(contacts): search_contacts union + contact schemas
- 004abc200a1ffd5dc7a45ddeca50b720ba9ed2e2 feat(contacts): users.phone_number + contacts table, mapped models
Security Fixes
- feat(abuse): enforce per-recipient agent caps on /emails, /sms, /calls
- feat(abuse): agent velocity caps + kill switch (agent_caps)
- fix(abuse): kill switch covers inbound‑forward relay; one‑query org caps
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Hail.so
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]