server: v1.3.2

1.3.2 (2026-07-27)

Bug Fixes

• broker: report cross-viewer draft eviction to the victim (#257) (de353bc)
• cli: make local npm setup actionable (#232) (e677b78)
• conjure_screen: escape the provenance note at all three comment sinks (#288) (49cb0a9)
• delete_files: gate the plan kitId on the shared isSafeKitId rule (053a0db)
• server: align kit ids with the routing key and the safety gate across both stores (#282) (f8cf030)
• server: gate create_project kit bindings (#296) (#298) (e7c6109)
• server: gate kitId on containment, not create_kit shape (#276) (23c281e)
• server: re-check kit existence before write_files commits (#269) (210e050)
• server: surface transport failures in GitHostProjectStore instead of reporting them as absence (#287) (cfb837b)
• server: unify the kitId gate on isSafeKitId across the tool layer (#277) (812838b)
• server: validate kitId at plan time (#252) (1ddccb3)
• store: reject a .kit.json missing a required KitMeta field (d79a516)
• viewer: honour eviction notices on discarded refine replies (#257) (d14895a)
• viewer: split Browse workbench out of viewer.js to clear the store read cap (#253) (51b46b8)