v1.0.0-beta.131

Released to production on September 19, 2026 at 01:58 CDT. See every commit in this release on GitHub

New

• Tooling: a document named by an id the platform did not mint is refused
• Tooling: check:tenant-wire-weight budgets what a published page loads before settle
• Media library: library video can serve from a delivery provider through signed redirects
• Outreach: the transport reads threads whole and sends the engine's composed email
• Platform: plugin workspace erasers run before an org erasure deletes
• Tooling: a console-only server declarations surface for plugins
• Tooling: a plugin declares its activity mutation paths in plugins.config.json
• Platform: a plugin files org activity under its own namespaced target
• Outreach: the plugin declares its Google hosts and its token-endpoint use
• Platform: a plugin declares its other hosts and its uses of declared ones
• Outreach: the mailboxes panel connects, configures, tests and disconnects
• Outreach: connect a Google mailbox with a single-use state and a sealed grant
• Outreach: a fetch-based Gmail transport and a plain-text RFC 5322 writer
• Platform: a plugin API route may name the subject its release gate asks about
• Shared libraries: a generic AES-256-GCM secret box with key ids for rotation

Fixed

• Tooling: the emulator-guard sweep runs the Outreach plugin's emulator specs
• AI: a job and every draft it writes are named by a console resource id
• Tooling: the lifecycle backfill reads its stage table from crm-kinds.ts
• Video: the plugin's package carries the repo version, 1.0.0-beta.130
• AI: an automation draft's tool stays within every provider's schema limits
• Tooling: the AI page axe and width recordings are checked in CI, so a stale one fails
• Tooling: the probe-header sweep runs in CI, and the Stripe drill names no Aglyn host
• Platform: a property condition's pattern matches in linear time and never 404s a page
• AI: a page's call to action may go to a section of the same page
• AI: a Grid that is not a container is told what its own shape needs
• AI: a refused answer leaves its node ids and a copy-free outline on the job
• Platform: no server-only plugin registry on a published page
• Platform: the release gate finds a route-named staff account in any auth pool
• Outreach: the Mailboxes panel shows the limit the runtime enforces
• Outreach: an account erasure revokes and deletes the person's mailboxes
• Marketplace: a link or image a property feeds is published bound and rendered safe
• Console: an author's live-page save refreshes the page, and a refused refresh warns
• Outreach: no raw NUL bytes in source, firebase peers declared, barrel left alone

Performance

• Platform: the runtime singleton re-exports nothing, so a page's graph stops at it
• Media library: a JPEG or PNG gets a WebP at its own width, so ?w= at or above it is WebP
• Platform: the consent preferences panel is fetched when asked for, not with the banner
• Platform: the actions builder checks CRM kinds without the CRM record model

Changed

• Outreach: a pending connect lives under its organization

Documentation

• Dependencies: fuse.js still reaches every published page through the always-on plugin
• Marketing site: the Datasets deck carries the copy decided on 9/19
• Outreach: the README names the console-only entries and the mailbox modules
• Outreach: the Disconnected status, and what an erasure does to a mailbox

Behind the scenes

• AI: a crashed or retried step finds the draft its recorded id names
• AI: the cache ledger measures the tools the form and grader doors send
• Tooling: the Linear ceiling is 3113, read from the workspace
• Tooling: the Week-One pre-flight no longer checks for a founding offer
• Platform: the self-host allowlist drops the Stripe drill, which names no Aglyn host
• Tooling: the Linear ceiling is 3108, read from the workspace
• Outreach: the erasers against a real Firestore
• Console: the AI site-switch spec's server mock carries the route-subject reader
• Tooling: the Linear ceiling is 3106, read from the workspace
• Platform: the route-subject and activity-target seams name a fixture plugin