chore: version packages

[gram-bot]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@gram/[email protected]

Minor Changes

• d6923b6: Enable asset upload to gram via gram upload

Patch Changes

• 38e7b8f: Release CLI with properly prefixed tags.
• 40f0565: Increase client timeout to 10 minutes

@gram/[email protected]

Minor Changes

• e956b16: feat: temperature slider in the playground
• fbdc9bd: feat: add @ symbol tool tagging syntax to playground
• 0e83d56: add new mcp configuration section for setting up install pages

Patch Changes

• 90daf89: fix: prevent asset names from being cut off in deployments overview
• f312721: fix: only capture cmd-f in logs when logs section is focused
• Updated dependencies [8972d1d]
  • @gram/[email protected]

@gram/[email protected]

Minor Changes

• 276d265: Support API key validation (/rpc/keys.verify)
• 7912397: Add endpoint to expose a project's active deployment

Patch Changes

• e76199f: fill default schema for prompt templates
• 004e017: fix: consistent environment overrides"
• 148c86f: install page reflects pure toolset name
• 85ceb4c: Add JSON schema validation to tool schema generation
• 6a331ac: feat: connection function tools to toolset concept
• 6f11e8e: add ability to configure install pages and render configurations onto pages
• ae5a041: Add clickhouse dependency
• 094c3ee: Extract tools concurrently from incoming specs.
• 5a32fd7: fix: ensure custom domain ingress has proper regex annotation
• 41b5a22: feat: add consistent trace id to tool call requests
• 4fd085a: Update sanitization logic to properly coerce into the regex
• 8d7852e: add table for install page metadata
• 40ef4c9: feat: add project id to function tools model
• 663c572: omit access token which overrides intended oauth behavior
• 36454a3: patch nil dereference
• c40d9c0: fix: adjust cors policy for mcp oauth routes
• 180bfca: restore old location for install page (no /install)
• dcd0055: feat: billing usage tracking federation

@gram/[email protected]

Patch Changes

• 8972d1d: feat: update client to account for function tool types"

@gram/[email protected]

Patch Changes

• caee968: Harden function runner images by:

  • Add basic safety checks after image builds to screen out setuid/setgid and check fs permissions.
  • Remove most unnecessary system binaries
  • Using root to bootstrap the filesystem of the runner then starting the runner as a non-root user. This ensures code is tamper proof. Alpine's exec-su is used to drop privileges.
  • Moving from /srv/app to /var/task as the working directory to following aws lambda conventions and making all created files and directories owned by root and read-only.
  • Allowing only a minimal set of headers to be sent from functions and especially preventing any headers related flyio's replay feature ¹.
  • Removing debug symbols and trimming paths from the binary to reduce size and have stable paths in stack traces.
  • Setting build info in the binary and implementing a flag, gram-runner -version to print it. We also set the version in a Gram-Runner-Version header on all outgoing responses.

Footnotes

1. https://fly.io/docs/networking/dynamic-request-routing/ ↩

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
gram	Ready	Preview	Comment	Oct 9, 2025 8:58pm
gram-docs	Ready	Preview	Comment	Oct 9, 2025 8:58pm
gram-landing-redirect	Ready	Preview	Comment	Oct 9, 2025 8:58pm