@novu/framework@v2.12.1

🚀 Features

• framework: add Hono serve adapter fixes NV-8283 (#11921)

🩹 Fixes

• framework: remove doubled separator in digest filter 3-item branch (#11925)

❤️ Thank You

• Dima Grossman @scopsy
• Rup Sarmah @sarmah-rup

@novu/framework@v2.12.0

v2.12.0 (2026-07-13)

🚀 Features

• framework,api-service: auto-report self-hosted agent turn errors fixes NV-8265 (#11889)
• root: Add Sendblue (iMessage/SMS) channel and agent integration fixes NV-8241 (#11882)
• providers: add Anypost email provider fixes NV-8270 (#11712)
• framework: support AI SDK v7 in @novu/framework/ai-sdk fixes NV-8222 (#11860)
• framework: add agent langchain adapter fixes NV-8208 (#11824)
• framework,api-service: self-hosted Slack-native tool approval cards fixes NV-8204 (#11805)
• framework,api-service: improve self-hosted tool approval card cleanup fixes NV-8199 (#11788)
• framework,api-service: expose delete message on self-hosted agent reply contract fixes NV-8197 (#11787)
• framework,api-service: self-hosted tool approval consistency and remove plan cards fixes NV-8164 (#11768)
• framework: self-hosted tool approval for the ai-sdk agent flavor fixes NV-8148 (#11733)
• dashboard: support actor variables in step content editor fixes NV-8143 (#11709)
• framework,api-service: unified plan progress via ctx.plan fixes NV-8129 (#11676)
• framework: self-hosted brain-controlled typing indicator fixes NV-8128 (#11671)
• framework: add @novu/framework/ai-sdk agent plugin fixes NV-8117 (#11656)
• api-service: on-demand MCP OAuth, per-session tools, and connect card UX fixes NV-8002 (#11567)

🩹 Fixes

• framework: use error.issues in ZodValidator for zod v4 compatibility (#11891)
• api-service: resolve windows build syntax and optimize empty subscriber search. (#11890)
• root: bump vitest devDependency range to ^4.1.0 to close advisories fixes NV-8196 (#11785)
• framework: apply controllerDecorators in NovuModule.registerAsync fixes NV-7543 (#11497)

❤️ Thank You

• Adam Chmara @ChmaraX
• Dan Stevens
• Dima Grossman @scopsy
• Mahin Anowar @MahinAnowar
• Nikita Grossman @nikitagrossman
• Pawan Jain
• Paweł Tymczuk @LetItRock
• Siddharth Pandey @Siddharth3011

v3.18.0

API

🚀 Features

• api-service: enforce 512-char limit on custom subscription identifiers fixes NV-8216 (#11827)
• shared: migrate Slack agent manifest to agent_view fixes NV-8220 (#11833)
• api-service,dashboard: open subscriber access for email agents fixes NV-8212 (#11815)
• api-service: add SdkMethodName decorator for mobile link creation in integrations controller fixes NV-8203 (#11801)
• shared,api-service,dashboard: align agent name length on a single 60-char limit (#11808)
• dashboard: email agent whats-next guide and simplified setup fixes NV-8115 (#11706)
• framework,api-service: self-hosted Slack-native tool approval cards fixes NV-8204 (#11805)
• api: support Clerk OAuth (DCR) access tokens on opted-in endpoints fixes NV-8158 (#11802)
• framework,api-service: improve self-hosted tool approval card cleanup fixes NV-8199 (#11788)
• framework,api-service: expose delete message on self-hosted agent reply contract fixes NV-8197 (#11787)
• api-service: rolling secret key rotation behind feature flag fixes NV-8173 (#11770)
• dashboard, api-service: align managed and self-hosted conversation timeline fixes NV-8174 (#11771)
• framework,api-service: self-hosted tool approval consistency and remove plan cards fixes NV-8164 (#11768)
• framework: self-hosted tool approval for the ai-sdk agent flavor fixes NV-8148 (#11733)
• docs: add telegram provider doc page fixes DOC-385 (#11729)
• dashboard: support actor variables in step content editor fixes NV-8143 (#11709)
• js, react, api-service: add Telegram connect button (SDK peer to Slack/MS Teams) (#11661)
• dashboard: MS Teams multi-tenant distribution & subscriber-rollout onboarding fixes NV-8124 (#11654)
• framework,api-service: unified plan progress via ctx.plan fixes NV-8129 (#11676)
• framework: self-hosted brain-controlled typing indicator fixes NV-8128 (#11671)
• framework: add @novu/framework/ai-sdk agent plugin fixes NV-8117 (#11656)
• dashboard: improve agent onboarding setup UX and CLI auth fixes NV-8125 (#11655)
• api, application-generic: enhance workflow preferences retrieval with batch processing and caching improvements (#11646)
• api-service,js,react: Telegram subscriber-link SDK + shared linking module fixes NV-8095 (#11619)
• api-service: add get preferences kill switch to v2 endpoints fixes NV-8116 (#11644)
• dashboard: add Slack channel what's next guide to integration details fixes NV-8115 (#11645)
• agent-evals: add suite-based behavioral eval harness for agent onboarding fixes NV-8059 (#11589)
• api-service: stream agent replies per message via onMessage fixes NV-7420 (#11610)
• api-service: lazy-reconcile managed agent platform tools fixes NV-8073 (#11600)
• api-service: unify tool trust into agent_tool_trust with lazy MCP backfill fixes NV-8056 (#11594)
• api, dashboard, dal, shared: implement active conversation logic for billing fixes NV-8055 (#11582)
• api-service: lazy MCP OAuth keeps subscriber OAuth off agent definition fixes NV-8053 (#11584)
• api-service: on-demand MCP OAuth, per-session tools, and connect card UX fixes NV-8002 (#11567)
• novu: surface keyless claim link in connect onboarding flow fixes NV-8036 (#11530)
• api-service: send welcome email after email channel connection fixes NV-8029 (#11541)
• api, dashboard, shared: introduce entitlements for agents fixes NV-7427 (#11519)
• api, dal: implement agent integration disconnection handling and revival logic fixes NV-8019 (#11522)
• shared: onboard 22 MCP providers to DCR OAuth fixes NV-7959 (#11470)
• root: add PORTLESS URLS mprocs tab fixes NV-8010 (#11509)
• novu: secure setup links for Slack/Telegram secrets fixes NV-8008 (#11506)
• api-service,dashboard: agent suggestions based on org domain and industry fixes NV-7992 (#11486)
• api-service: unify inbound ack with hourglass liveness fixes NV-7818 (#11483)
• worker: emit step_created trace when step runs are created fixes NV-7949 (#11418)
• api-service: add thalamus session queue for sequential agent turns fixes NV-7742 (#11466)
• api-service: deploy step resolver to EU cluster fixes NV-7980 (#11458)
• api-service,dashboard,shared: keyless novu connect flow fixes NV-7968 (#11450)
• dashboard,api-service: onboarding managed agents preview fixes NV-7804 (#11315)
• shared: add 12 net-new DCR MCP catalog entries fixes NV-7959 (#11437)
• api-service: expand MCP DCR catalog and OAuth discovery polish fixes NV-7959 (#11435)
• api-service, framework: expose email raw payload and resolved routing in agent context (fixes NV-7951) (#11422)
• api-service: gate managed agent MCP permissions behind feature flag fixes NV-7946 (#11409)
• worker: surface inbound-email requests in activity log fixes NV-7927 (#11379)

🩹 Fixes

• api-service: discriminate unresolved subscriber resolution outcomes fixes NV-8238 (#11855)
• api-service: re-dispatch Telegram bot commands dropped by chat SDK slash-command routing fixes NV-8235 (#11849)
• api-service: stop NovuBridgeModule from shadowing ClickHouse DI fixes NV-8217 (#11826)
• api-service: use Slack mrkdwn links in Powered by watermark fixes NV-8206 (#11806)
• api-service: scope workflow reads and environment diff to API key environment fixes NV-8200 (#11789)
• providers: validate Infobip SMS baseUrl against SSRF fixes NV-8179 (#11778)
• api-service: block SSRF via SMTP check-integration and Sinch region fixes NV-8186 (#11784)
• api-service: scope env variable writes and environment deletes to API key environment fixes NV-8182 (#11781)
• api-service: disable Vercel partner integrations for Better Auth fixes NV-8181 (#11783)
• api-service: scope inbox snooze lookups to subscriber fixes NV-8175 (#11773)
• api-service: validate environment ownership for env variable values fixes NV-8172 (#11769)
• api-service: scope Vercel partner integration fixes NV-8171 (#11767)
• api-service: return v0 notification payload as data in inbox API fixes NV-8155 (#11750)
• api-service: handle null subscriber channels in retrieve response fixes NV-8159 (#11757)
• api-service: handle attachment validation, context race, and invalid subscriber cursor fixes NV-8039 (#11697)
• api-service: format agent powered-by branding as muted footnote fixes NV-8064 (#11719)
• api-service: cast request log source in activity e2e test (#11695)
• shared: self-hosted SSRF allow list for internal bridge URLs (#11702)
• api-service, dashboard, shared: enable and improve inbound mail UX on Self hosted EE fixes NV-8106 (#11652)
• **ap...

@novu/react@v3.18.0

🚀 Features

• js, react, api-service: add Telegram connect button (SDK peer to Slack/MS Teams) (#11661)
• api-service,js,react: Telegram subscriber-link SDK + shared linking module fixes NV-8095 (#11619)

🩹 Fixes

• react: set preferences/schedule data directly on fetch to prevent undefined state on re-mount (#11756)
• js,react: keep inbox badge counts in sync after mark-as-read fixes NV-7398 (#11599)

❤️ Thank You

• Dima Grossman @scopsy
• George Djabarov @djabarovgeorge
• Shivam S @BIGSUS24

@novu/react-native@v3.18.0

This was a version bump only for @novu/react-native to align it with other projects, there were no code changes.

@novu/nextjs@v3.18.0

🚀 Features

• js, react, api-service: add Telegram connect button (SDK peer to Slack/MS Teams) (#11661)

❤️ Thank You

• George Djabarov @djabarovgeorge

@novu/js@v3.18.0

🚀 Features

• js, react, api-service: add Telegram connect button (SDK peer to Slack/MS Teams) (#11661)
• api-service,js,react: Telegram subscriber-link SDK + shared linking module fixes NV-8095 (#11619)

🩹 Fixes

• js: localize de-DE sub-minute inbox timestamps fixes NV-8169 (#11765)
• js,react: keep inbox badge counts in sync after mark-as-read fixes NV-7398 (#11599)
• js: dedupe notifications by id in cache.unshift (#10785)
• js: ensure notification instances in cache after cross-tab sync fixes NV-8092 (#11617)
• js: validate in-app redirect URLs in inbox API and client fixes NV-7971 (#11453)

❤️ Thank You

• Abhay J Nayak
• Dima Grossman @scopsy
• George Djabarov @djabarovgeorge

@novu/framework@v2.11.1

🚀 Features

• framework: allow passing a custom logger to the client fixes NV-7963 (#11440)
• api-service, framework: expose email raw payload and resolved routing in agent context (fixes NV-7951) (#11422)
• api-service: agent card+files delivery and portless agent fixes fixes NV-7721 (#11186)
• api-service, dashboard: new telegram provider agents (#11112)
• shared: add ctx.metadata.delete(), clear(), get(), and current fixes NV-7501 (#10971)
• framework: improve agent framework DX and starter template fixes NV-7451 (#11003)
• api: implement Slack quick setup endpoint and related UI components (#10967)
• js: add discriminated AgentContext types per handler fixes NV-7509 (#10974)
• framework: expose sourceMessageId on action events (ctx.action.sourceMessageId) fixes NV-7500 (#10973)
• framework: promise reply syntax — return value as reply fixes NV-7384 (#10887)
• framework: add ctx.addReaction() to the agent SDK fixes NV-7411 (#10882)
• api-service: implement ctx.trigger() workflow execution fixes NV-7388 (#10815)
• api-service,dashboard,dal,shared: implement domain management (#10793)
• dashboard,api: onboarding workflow suggestions fixes NV-7394 (#10805)
• novu: print next-steps guide after init scaffolding (#10776)
• api,framework: replace ctx.update with replyHandle.edit (#10773)
• api,shared,framework: add WhatsApp support for agent conversations fixes NV-7374 (#10751)
• dashboard,novu: pin CLI framework version and use rc tag for pre-release (#10747)
• api-service: per-agent bridge URL with dev/production toggle fixes NV-7373 (#10740)
• api-service,framework: agent onReaction event fixes NV-7370 (#10733)
• api-service,framework: add rich content support and onAction handler for agent cards fixes NV-7363 (#10727)
• framework: add agent support to @novu/framework SDK fixes NV-7358 (#10710)
• api-service: integrate system environment variables fixes NV-7312 (#10521)
• api-service,dashboard,novu,framework: extend step resolver support to delay, digest, and throttle step types fixes NV-7268 (#10507)
• api-service: add env parameter to framework resources fixes NV-7281 (#10489)
• api-service: implement environment variables management fixes NV-7234 (#10328)
• framework: export param types fixes NV-7261 (#10407)
• novu,framework: align step resolver handlers with framework steps fixes NV-7235 (#10286)
• api-service,dashboard,novu: extend step resolver to all steps fixes NV-7187 (#10271)
• api-service: implement HTTP destination step type fixes NV-7189 (#10183)
• api-service,dashboard,framework: align step resolver scaffolding with framework fixes NV-7116 (#10136)
• api-service: monthly usage digest email fixes NV-6933 (#10042)
• api-service, worker, dashboard: custom sender name in email step on new dashboard fixes NV-6950 (#9962)

🩹 Fixes

• api: bump chat SDK to 4.30.0 and enable WhatsApp typing fixes NV-7977 (#11473)
• shared: Properly parse signed bridge request timestamp to enable replay protection fixes NV-7568 (#11120)
• shared: preserve JSON-stringified control values containing quotes fixes NV-7638 (#11095)
• framework: remove duplicate message from AgentMessageContext fixes NV-7544 (#11010)
• api-service,dashboard,shared: support agent file delivery fixes NV-7457 (#10945)
• framework: clean up AgentDeliveryError message to avoid logging raw response bodies (#10907)
• root: resolve high liquidjs and moderate postcss vulnerabilities (#10874)
• framework: unify text and markdown making markdown the default fixes NV-7392 (#10880)
• api-service: surface provider delivery errors in agents flow fixes NV-7410 (#10877)
• root: resolve high/moderate liquidjs and nodemailer vulnerabilities (#10625)
• framework: Add error handling to mockSchema call (#10512)
• application-generic,framework,dashboard: disable AJV strict mode for user schemas and remove noisy console.error (#10426)
• root: resolve moderate lodash, ajv, and express vulnerabilities (#10360)
• root: resolve high liquidjs vulnerability (#10263)
• worker: Normalize malformed closing tags (#10251)

v3.17.0

v3.17.0

API

🚀 Features

• api-service: Slack MCP setup cards and tool approval UX fixes NV-7836 (#11402)
• api-service, dashboard: Slack Block Kit approval cards with MCP icons fixes NV-7921 (#11392)
• api-service: provider-managed MCP vault flow fixes NV-7930 (#11381)
• api-service: auto-provision agent subscribers for Slack/Teams mentions fixes NV-7681 (#11307)
• dashboard: instrument Connect onboarding analytics fixes NV-7923 (#11375)
• api-service: show flow-complete page after MCP/Connect OAuth instead of dashboard redirect or blank tab (#11372)
• dal: add createdBy field to agent entity fixes NV-7920 (#11373)
• api-service: use opaque Redis tokens for Telegram mobile setup QR links fixes NV-7914 (#11364)
• api-service: subscriber-scoped MCP tool trust approval fixes NV-7771 (#11339)
• dashboard: replace MCP toggles with Add/Remove buttons (fixes NV-7830) (#11329)
• api-service: gate managed-agent dispatch on MCP OAuth setup fixes NV-7771 (#11327)
• root: replace CLI loopback auth with device sessions fixes NV-7888 (#11322)
• api-service, dashboard, novu: Onboarding experiment (#11319)
• api-service: feature-flag api keys in list environments fixes NV-7881 (#11309)
• api-service: improve tool approval cards UX and plan card interaction (fixes NV-7743) fixes NV-7743 (#11292)
• dashboard: seperate novu platform and connect from each other fixes NV-7683 (#11281)
• worker, api-service: add AWS Claude managed runtime with API key auth fixes NV-7788 (#11264)
• api-service: integrate novu-app MCP auth mode (GitHub first) fixes NV-7782 (#11252)
• nextjs: fix keyless mode dev env fixes NV-7779 (#11248)
• api-service: add Novu-managed demo Claude provider fixes NV-7749 (#11247)
• api-service,dashboard: tool progress plan cards and activity timeline fixes NV-7741 (#11213)
• dashboard,api-service: agents - generate from prompt fixes NV-7738 (#11206)
• shared: OR/AND filtering for data in inbox useNotifications fixes NV-7666 (#11135)
• inbound-mail: offload email attachments to S3 to reduce Redis memory fixes NV-7616 (#11053)
• api-service: bump thalamus to alpha.7 and adapt to runId API changes fixes NV-7724 (#11203)
• api-service: MCP availability + MCP-spec OAuth flow with DCR for managed agents fixes NV-7679 fixes NV-7704 (#11142)
• worker: support replaceToRecipient email override fixes NV-7728 (#11195)
• api-service,dashboard: enable Vercel Domain Connect for inbound email fixes NV-7726 (#11192)
• dashboard,api-service: agents reuse integration credentials fixes NV-7709 (#11185)
• api-service: migrate managed agents from WebSocket to webhook delivery fixes NV-7699 (#11183)
• api-service: agent card+files delivery and portless agent fixes fixes NV-7721 (#11186)
• api-service: upload custom skills (github + inline) for managed agents fixes NV-7661 (#11126)
• api-service,worker: replace BullMQ managed agent pipeline with CF durable sessions fixes NV-7673 (#11156)
• dashboard,api-service: managed agents onboarding fixes NV-7700 (#11160)
• api-service: Telegram chatId channel endpoints and /start subscriber link fixes NV-7696 (#11154)
• api-service, dashboard: new telegram provider agents (#11112)
• api-service,worker,dashboard: auto-provision agent default shared inbox fixes NV-7671 (#11138)
• dashboard,api-service: managed agent details fixes NV-7665 (#11131)
• worker,api-service: managed agent runtime core flow integration fixes NV-7654 (#11116)
• api-service: default Inbox HMAC on for non-dev environments fixes NV-7593 (#11121)
• root: support 1Password Environments for local secrets fixes NV-7651 (#11108)
• api-service: managed-runtime mode with Claude Platform integration fixes NV-7618 (#11058)
• ⚠️ api: enhance validation for trigger event payloads and subscribers fixes NV-7623 (#11066)
• api-service, framework: wire email action buttons to onAction handler fixes NV-7422 (#11075)
• api-service,dashboard: WhatsApp agent onboarding overhaul fixes NV-7502 (#11059)
• shared,worker,api: inbound email attachment forwarding to agent webhook (#11022)
• shared: centralize outbound HTTP client fixes NV-7560 (#11039)
• api-service: add org_id filter (1d14f89230)
• framework: improve agent framework DX and starter template fixes NV-7451 (#11003)
• api-service,dashboard: send onboarding welcome DM and bridge-connected follow-up fixes NV-7450 (#10998)
• api: implement Slack quick setup endpoint and related UI components (#10967)
• api-service,dashboard: automate MS Teams onboarding fixes NV-7387 (#10958)
• api-service: resolve auth from bridge resolver (#10663)
• api-service: agent environment promotion (#10929)
• js,react,api-service: implement MS Teams connect and link-user components (#10870)
• framework: add ctx.addReaction() to the agent SDK fixes NV-7411 (#10882)
• api-service: add Domain Connect inbound email setup (#10867)
• dashboard: add raw JSON body mode to HTTP request step (#10638)
• api-service,dashboard,shared: multi-domain inbound email with data model consistency fixes NV-7406 (#10849)
• api-service: expand free/disposable email domain guard for brand enrichment (#10840)
• dashboard, api-service, shared: email integration for conversational agents fixes NV-7386 (#10824)
• dashboard,api-service,dal: novu copilot workflow suggestions fixes NV-7215 (#10508)
• api-service: implement ctx.trigger() workflow execution fixes NV-7388 (#10815)
• api-service: add permission requirements for domain management endpoints (#10814)
• api-service,dashboard,dal,shared: implement domain management (#10793)
• dashboard,api: onboarding workflow suggestions fixes NV-7394 (#10805)
• dashboard, api-service: enforce agent active toggle fixes NV-7393 (#10803)
• api,framework: replace ctx.update with replyHandle.edit (#10773)
• api-service: adopt Chat SDK emoji system for cross-platform agent reactions (#10764)
• api-service: Add cursor pagination to conversation repos (#10745)
• api-service: per-agent bridge URL with dev/production toggle fixes NV-7373 (#10740)
• api-service,framework: agent onReaction event fixes NV-7370 (#10733)
• api-service, dashboard: fix oauth scope for agents (#10732)
• api-service: add emoji reaction support to agent conversations fixes NV-7369 (#10726)
• api-service,framework: add rich content support and onAction handler for agent cards fixes ...

@novu/react@v3.17.0

🚀 Features

• js,react,api-service: implement MS Teams connect and link-user components (#10870)

❤️ Thank You

• George Djabarov @djabarovgeorge