v1.0.0-beta.287

Released to production on October 28, 2026 at 17:39 CDT. See every commit in this release on GitHub

New

• Permissions: booking payments and refunds are bookings keys
• Permissions: payment methods and shipping apps are commerce keys
• Commerce: warn billing managers the day a 4G charge goes unpaid
• Outreach: possible-reply task for a colleague or other-inbox answer
• Permissions: site import and everyone's Sequences are plugin keys
• Commerce: 4G turns off after an unpaid grace, needs billing to turn on
• Permissions: five workspace acts get keys of their own
• Marketplace: the starter seed holds its pages to the starter rule
• Marketplace: check a built-in starter theme as the site wears it
• Redirects: keep the visitor's query string on a site redirect
• Waivers: the paired display authorizes signing on it, no grant or timer
• Permissions: co-editing and the edit bar ask Edit site content per site
• Commerce: orders and gift cards are keys with site-role presets
• Permissions: site routes and writers ask the site keys, not the site role
• Permissions: core site keys whose preset is the site role
• AI: chat builds propose a theme change and search photos with business words
• AI: chat sees open AI jobs and the plan, reads docs in English, 2,048 ceiling
• AI: one plan reminder a day after a plan is ready, never a second
• Permissions: walk-ins and stays are keys whose preset is the site role
• Waivers: match a rider by the birth date on their CRM contact
• Waivers: e-sign consent v2, the business contact and a copy to download
• Commerce: booth buyers accept the terms of sale on the display or tablet
• Commerce: request a return of a shipped online reader order; S710 4G copy
• Marketplace: publish a site as a site starter, the publish-starter door
• Marketplace: the core.site-starters source, search and resolve
• Platform: the site starter node rule, a whole site kept safe
• Marketplace: site starter listing fields, rules deny-list and search indexes
• Commerce: turn on 4G for a store's Stripe Reader S710s, billed monthly
• Waivers: display signing lasts until closed; screens draw apart
• AI: sites you like is on — flag defaults on, guide drops its rolling-out note
• Sites: create a site from a starter picked from the marketplace
• Sites: the documents a site created from a starter starts with
• Platform: a site starter's theme, planned against the empty host it creates
• Marketplace: seed the platform's own site starter listings
• Legal: pin Legal v20, hardware sales and waivers
• AI: vary trades and fitness layouts; no three bare bands in a row
• Commerce: keep hardware buyers' name and address on the sale record
• Platform: an optional installed() on the site starter source seam
• Platform: site starter page links by slug across publish and install
• Commerce: booth shows the buyer's whole email and takes the store address
• Permissions: narrowing per site is a control on roles and members
• Commerce: in-store products' reviews show marked Sold in store, or hide
• Commerce: staff hardware cancels and refunds can email the buyer
• Commerce: warn before a closure cancels unshipped hardware orders
• Commerce: fold the operator's own sales into tax return Items 1-2
• Waivers: match riders by email, else name and birth date together
• Commerce: staff change a stay's guest count after booking
• Commerce: in-person reader returns: register, staff refund, buyer request
• Commerce: in-person readers onto the buyer's store, serials, booth, setup
• Commerce: look up and attach an in-person reader buyer, invite, claim
• Waivers: every signed waiver follows the store's retention period
• Commerce: record in-person hardware sales, To attach list, tax once
• Permissions: narrower site access narrows its register and waivers
• Commerce: in-person hardware model, kiosk offer choice, seller gates
• Waivers: sign on the customer display through a generic core seam
• Permissions: move API keys, privacy requests and holds to catalog keys
• Permissions: the register's keys decide alone; buying hardware stands on its own
• Commerce: a saved workspace logo reaches card readers at once
• Waivers: pick the waiver a Sign waiver element signs in the Besigner
• Commerce: check stays in once per stay or once per guest
• Waivers: adult age per waiver, keep waivers on erasure, store-site links
• Commerce: pass use dates and rain checks at the check-in window
• Commerce: hardware closure refunds, 7-year sale records, tax return
• Commerce: walk-ins need the reservations plan and say which roles book
• Commerce: let the store set when "Only N left" shows for a resource
• Commerce: count order-dialog and Stripe refunds of register sales in day totals
• Permissions: console gates and waivers ask permission keys, not roles
• Permissions: finer point of sale keys under managePos
• Permissions: per-member and per-site permission overrides

Fixed

• Dependencies: upgrade Next.js to 16.4.3 for two critical RCE advisories and a DoS
• Platform: a question about the workspace's own balance never deflects
• Commerce: the readers-to-set-up card opens a docs section of its own
• Waivers: the at-window staff name is looked up across every sign-in pool
• Console: staff site page and preview show loading, not empty
• Commerce: the hardware terms module is proven pure for the receipts
• AI: a build's plan says what it leaves out, and why
• Abuse: refuse site names that read as our servers, like www-2 and com
• Marketplace: a starter publish asks Publish site content, not a site role
• Platform: the starter theme planner names its input source, not listing
• Commerce: the 4G monthly charge id comes from a named key function
• Commerce: register refund record ids come from named key functions
• Tooling: the staged docs-registry hook reads a large merge's diff
• Notifications: name a workspace by its orgName, not as one you left
• Waivers: name the waiverTitles path literally so the host sweeps see it
• AI: settle dead links and repeated styles instead of stopping a job
• AI: a question about the workspace's own plan or AI jobs is never a docs quote
• AI: hand the business words to a build's pages only, never its layout or items
• Tooling: carry the posHardwareSales TTL policy in the declared list
• Console: one provisioning reader per new account
• AI: job photo and logo reads ask the plugins' image function
• Console: closure notices answer a locked workspace's 423
• AI: a band "in pictures" or "in photos" is a gallery of picture slots
• Marketplace: the starter seed takes --org with a space, as documented
• AI: photos fit the trade and no empty gallery bands
• AI: a row's icons follow its items' meaning; towns share one marker
• AI: fit a hero eyebrow around its town, never through a name
• AI: a store's newsletter band is the platform's sign-up field, never a form
• AI: a store whose brief names only kinds of product starts with marked samples
• AI: seed AI starts with marked sample rows, never placeholders, one list per value
• Marketplace: the seeds' browsability copy reviews site starters too
• Commerce: offline card fee flag names the monthly invoice, not a brand
• Commerce: flag an offline sale whose discount the member's role does not allow
• Commerce: offline card sync checks the account, settles fees, refunds and alerts
• Commerce: a changed logo reaches card readers without opening the POS devices card
• CRM: a waiver signer's source reads "Waiver signed", not the raw word
• Commerce: a new product keeps its quick key and modifier groups
• Commerce: a new product keeps its check-in setting
• Commerce: offline card mode writes the site's one reader configuration safely
• Commerce: the Buy now door refuses a draft or archived product, as the cart does
• Commerce: the hardware shop lists all 14 Stripe items and flags the WisePOS E

Performance

• Commerce: re-baseline the mui copies the use-day picker re-cut
• AI: the insight step's two calls send one tool list, so the answer reads the cache
• Commerce: keep the check-in window and POS helpers out of commerce's eager bytes

Changed

• Themes: font read and write move to shared-util-tools so the core can set fonts

Documentation

• AI: the site dataset step names who stamps its records' index
• AI: a question about your own workspace gets a written answer
• add a WhatsApp button guide, and say who on your side is told about an order
• AI: chat answers in your language, sees AI jobs; right-to-left not supported yet
• AI: photos fit the business and empty picture bands are left out
• AI: name the AGL-4065 decisions by their question, not by who made them
• AI: sample rows and sample products in AI starts, the newsletter band
• Waivers: matching a rider by name and date of birth at check-in
• Commerce: change a stay's guests after booking
• Commerce: the in-person reader sale at the register and for staff
• Permissions: register keys, hardware buyers, settings keys, reader logos
• Commerce: stays checked in per stay or per guest, and guest counts
• Commerce: passes for a day the buyer picks, and rain checks
• Commerce: cards taken offline in the Aglyn POS app settle like online cards
• Commerce: what's new for reader logos, waiver sources, product fields and Buy now

Behind the scenes

• Console: the closure-notices spec mocks the lockdown verdict
• Console: the org Plugins specs mock the permissions hook
• Console: the folder-preview spec answers the org.media key
• Console: the org-profile spec's core mock has runPluginEventHandlers
• Marketplace: starter-source fixtures are publisher listings
• Console: name the three new live AI specs in the key gate
• AI: re-baseline the AI eager budget for the ai.import key
• Console: provisioning a site starter is a screen-create door that stamps
• AI: the bundled capability list includes the theme op
• AI: the AI permissions spec reads the AI keys of each per-site map
• Console: the tax return's own-sales breakdown is a bounded table
• AI: the left-out live spec also plans where a site has no function
• AI: run the left-out live spec in the node environment
• raise the Linear id ceiling to AGL-4086
• Permissions: the export and sending-domain doubles answer the new keys
• Permissions: re-anchor three rules and field guards on the site keys
• Tooling: raise the linear id ceiling to 4081, which exists
• Console: stock photo job-title words count 4 in the role-name ratchet
• Commerce: the AI guided start's sample mark is a server-stamped product field
• Native: regenerate contracts for the product sample flag
• AI: a live spec that the insight answer call reads the cache
• Marketplace: tax return source spec reads its one section
• Commerce: gift cards surface spec holds the commerce.giftCards key gate
• Commerce: checkout specs seed an active product, as Buy now now requires
• Tooling: raise the linear id ceiling to 4080, which exists
• Console: the site-switch spec mocks the permissions hook the switchboard reads
• AI: a live check of the chat's honest answers, run only when asked
• raise the Linear id ceiling to AGL-4078
• AI: re-render the four style previews the new layout choices change
• AI: replay the booth kit's eyebrows, icons, layouts and bare bands offline
• Commerce: spec the register card reader buyer step
• Tooling: raise the linear id ceiling to 4074, which exists
• Billing: health fixtures carry the offline card payment_intent events