v2026.07.21.1 - 8 features, 5 fixes, and 3 internal changes

🎯 Features

• agent-bound embed completion endpoint w/ origin+CORS & metering (epic #41 - Phase B.1) (#635)
• add hearth core package with append-only event log, actors, cursors, channels (#695)
• inject the active brief into the opti loop's observations (#57) (#712)
• add public visibility for data lakes (#532)
• per-embed-key spend cap with pre-flight enforcement (epic #41) (#727)
• guided prompt builder + parameter guidance (#717)
• keyless offline RAG defaults and bundled secure-exposure profiles (#713)
• agent-scoped KB retrieval + hard tool gate for embed chat (#733)

🐛 Bug Fixes

• exclude unlistable lake files from knowledge-base retrieval (#643)
• harden refresh endpoint and tighten secret-rotation grace window (#715)
• scope over-exposing read endpoints (#618)
• render embedded HTML artifacts in the published reply viewer (#708) (#711)
• publish own reply as non-admin by checking session ownership (#740) (#743)

🔧 Internal

• remove redundant Agent Mode chip from the composer (#665)
• raise shared vitest timeout floor to de-flake Mongo-backed suites (#729)
• set b4m-overwatch overlay pin to 4afc25e5ab5844b3bfb61cc7994310fe9c966487 (#746)

---

Deployed: 2026-07-21 08:14:32 UTC | Commits: 19

Pull Requests: #41, #108, #532, #632, #635, #643, #695, #713, #715, #717, #727, #733, #741