v1.13.0

Released to production on November 5, 2026 at 12:07 CST. See every commit in this release on GitHub

New

• Commerce: add a quote proof from the media library, and send one before a price
• Sharing: rules freeze the all-sites-except marker, no one-site verdict on it
• Data: hub Import switches off naming the key; a dataset's asks its placement
• Sites: a site's role picker, Remove and Add also open for site.manage
• Media library: upload, folders, replace, file info, usage scan answer to the library key
• Sharing: sweep keeps all-except sharing current as sites change
• Data: hub's dataset Import switches off naming the key rather than hiding
• Sites: a site's Permissions button also opens for site.manage, as its route does
• Email: sending domain actions ask org.sendingDomains, as the domains route does
• Media library: org library writes switch off naming org.media; temporary link stays on
• Sharing: pure helpers for sharing with all sites except some
• Permissions: the other nine integrations ask keys, not site roles
• Permissions: integrations and gift card import ask keys, not site roles
• AI: the import reads a form defined in data
• Data: dataset Import switches off naming the key rather than hiding
• Marketing site: empty-list Create and row Delete switch off naming the key
• Settings: workspace export moves to Import & export so a key holder reaches it
• Workflows: org webhooks list asks site.sensitive per site, as the rule does
• Media library: sharing controls switch off naming the media key; default sharing names its key
• Native: an order says it was rung offline and what to check
• Native: stays set Only N left and guests; a stored 1 stays a number
• Native: per-site permissions and the register asks managePos
• Native: download and email an order's invoice on iOS and Android
• Native: register and kiosk price modifiers on the picked variant
• Native: inbox quote requests and files, named notifications
• Native: content, media, sites and shell gates ask their permission keys
• Native: the erase card prints plugin notes, and kiosks search the menu
• Native: settings, billing and plugin screens ask their permission keys
• Native: crm, email and inbox gates ask their permission keys

Fixed

• Native: a stay's Only N left follows Sleeps, as the console's dialog has it
• Native: the contracts' role grants carry the four dataset keys
• Plugins: a refused integration card keeps its help link
• Native: order, shift and message times show device time, not UTC
• Sharing: a scope sweep document is named by a resource id, as every platform document is
• Permissions: card specs read the refusal; a locked connect form keeps its label
• AI: an element's --primary or --secondary says its button; a skip link is no call to action
• AI: a bare read never leaves an imported site in the stock theme
• AI: the import reads every stylesheet a site links, to a byte budget
• AI: a page placed on a grid reads in the order and columns a visitor sees
• Permissions: copy names the permission, not a role; rename useCanManageSite
• Workflows: Add on a site stays as it was; the create route asks its own key
• Native: a refusal stays on an iOS spec screen until dismissed
• Inbox: the workspace leads screen stops its member read when it goes away
• Besigner: saving stays closed until the page has loaded

Documentation

• media, site users and import pages say which permission each control takes
• AI: the import's stylesheet budget, look fallback and data forms
• Permissions: name the permission; state a site member's reach, spec it true
• Permissions: catalog says row deletes ask Manage data, whole deletes the erase key

Behind the scenes

• Build checks: the issue ceiling reads AGL-4184; the changelog lists this sync and fixes
• Console: setup mocks gain the entitlements subscription; nav spec reads screens
• Permissions: the refusal sweep pairs each site door's key with the key it names
• Permissions: refusal specs read the permission's name, not a role
• sharing rules freeze ready to land
• gates round 3 ready to land
• AGL-4047: say what the bare org media URL serves now
• AGL-4047: media URLs keep working under all sites except, and legacy paths name the site
• gates round 2 ready to land
• Documentation: regenerate the Assist docs index
• AGL-4047: a narrowed editor keeps sharing, as today; the schema shows off with the reason
• AGL-4047: fixture declarations carry their descriptions
• wip: the other nine integrations ask keys
• AGL-4047: stripping a reference asks what writing that dataset asks; docs name the site keys
• AGL-4047: spec the site placement seam
• AGL-4047: the site's fallback asks no role name; export key is a workspace key on any route
• AGL-4047: regenerate the assist docs index
• AGL-4047: specs, fixtures and docs for dataset placement, export and record-read keys
• AI: the job spec's site exists, since the look pass always draws it a theme
• AGL-4047: a dataset on one site answers to that site, with export and record-read keys