v0.10.59

Features

• ed4edb8 Caelo-operated intake that files one GitHub issue per defect (#903, #906) (#911)
• 8710edf forward AI bug reports to the Caelo team on the Owner's opt-in (#904, #905, #906) (#910)
• 677fd88 edit links, replace images and change shared content in place (#918) (#933)
• a5ab24d edit text in place in the preview, no AI round-trip (#917) (#931)

Refactors

• 056e10f delete the text-rewrite-on-move path (#724, rollout G) (#878)

v0.10.58

Features

• 1d7cb69 select text / right-click → Ask AI with a precise reference (#916) (#929)
• 9aaf55c reference integrity blocks Stage and Publish live (#724, rollout F) (#893)
• de80851 migrate literal internal links to references (#724, rollout E) (#880)
• 84d6984 one Google sign-in client for IAP login, IAP programmatic access and remote MCP (#914) (#932)
• 5e1407c link-resolve composition point; links resolve per language (#724, rollout D) (#877)
• 7ccd8dd canonicalise internal links at write time (#724, rollout C) (#873)

Fixes

• b77ce4b pin digests without listing the stack config; create a missing audit job (#938)
• 99ff5c8 bug_report says honestly where a report went (#902) (#907)
• 1a58cae keep serving the published build after Publish live; served channel never expires (#908) (#909)
• db5268a store each tool result once so a mixed invalid-call step cannot wedge the chat (#915)
• b8e8eb6 capture desktop at the operator's live preview size (#913)
• d02e46b wrap numeric typography sub-fields and merge siblings (#912)
• 9ffda1d build the notification bell's name from its content (#934)

v0.10.57

Fixes

• 757e624 let UPGRADER_SMOKE=off pass the release gate (#936)

v0.10.55

Features

• f04cfd5 resolve internal references in preview, live-edit and the static build (#724, rollout B) (#871)
• 30332d2 OAuth broker + streaming proxy for remote MCP (#806, part C) (#890)

Fixes

• cd69f09 install Chromium in the release gate; poll the real-AI run instead of gh run watch (#897)
• 905646c scope mcp_tokens to their owner unless the viewer is an Owner (#895)

v0.10.53

Features

• 373107a core links check on the staged build (#849) (#851)
• 99ae9e0 drop the gateway's former cms_admin login — contract (#635, 4/4, release after #767) (#775) ⚠ BREAKING
• 3b1785f core structure check + write-time hints for repeated free markup (#820) (#833)
• 6041066 release docs-sync prepare step + developer reference generator (#832)

Fixes

• 31d3c09 favicon 64px rendition (LCP) + no auto fix round after an operator decision (#685) (#853)
• 4404da9 staged GCS reads fall back to live only for files the build contains (#842) (#848)
• 32272c7 enforce auth_config, server-side captcha/honeypots, HTML escaping, and ai_moderate archival (#847)
• 09a1ef2 prevent X-Forwarded-For spoofing, bind PoW challenges, rate-limit challenge minting, and guard cross-site POSTs (#845)
• 4387310 scan content values for internal links by declared field kind (#846) (#850)
• e199ee9 harden AST validator, sandbox bootstrap, and schema UUID checks (#839)
• 92c1f67 GCS publish deletes live files the build no longer contains (#842) (#843)
• 2398af1 name a Caelo upgrade in the parity refusal and always offer Stage again (#834, #835) (#836)

Docs

• 2ce399a Claude Code Power-MCP example, good-first-issue and Discussions links (#840)
• 3fd78e8 fix the local dev loop (root .env, Bun 1.4.2, staging URL, importer allowlist) (#838)
• 8ca727d split developer docs (repo) from end-user docs (CMS seed), PR template + user-facing label (#826, #829) (#830)

v0.10.52

Features

• ae46074 ship the site's own 404 page on every provider (#802) (#805)
• fcd8f02 one "Fix all with AI" fixes until the target (#795)
• 0e319c8 coral decide for Publish live + Approve, Draft/Preview/Live state dots (#791)
• 2f82428 sky + relief plate on arrival screens and installer page (#781) (#790)
• 1b83132 live-edit overlay in Caelo blue, no emoji label (#780) (#785)
• d52f753 Caelatum tokens, night-blue dark mode, self-hosted Schibsted + Plex Mono (OFL for fonts only) (#789)
• c8fda6c Caelatum brand mark for favicon, touch icon and sidebar (#777) (#786)

Fixes

• 50b40c3 PWD is the working directory, not a database password (#821)
• 74228ff unblock v0.10.52 real-AI suite (pinned-font preview 404s, 404-page detour in homepage turn) (#823)
• 0ccd78b bump INFRA_CONTRACT_VERSION to 6 for the upgrader's ops-bucket list role (#799) (#812)
• 219bbde stop annotating site-data tool results on the Power-MCP surface (#801)
• c4feb70 license gate checks the full tree; LGPL only for sharp-libvips, notice shipped in images (#796)
• f80afe0 Caelatum epic follow-ups (docs links, admin manifest) (#800)
• de26cfd let the upgrader list its ops bucket; stop reporting access failures as "busy" (#799)
• b717c17 stop installing the AWS and Azure Pulumi SDKs with the CLI (#798)

Docs

• 6fff9c7 repo front door with the new positioning, brand assets, retire docs-site/ (#782) (#787)

Other

• 6b2f28a operator-configurable variable-axis delivery for pinned fonts (#793)

v0.10.51

Features

• e5a979a public → admin data is untrusted — boundary audit and fixes (#635, 3/4) (#768)
• 02fdf74 no cms_admin login in any adapter + guardrails (#635, 2/4) (#767)
• 03ea174 serve /api/* from cms_public only — published projection (#635, 1/4) (#766)
• df200dd the shim pins itself to the admin's release (#764) (#765)
• 7d56284 recover a locked-out Owner without email — cms-provision owner-reset + honest /forgot (#769) (#774)

Fixes

• 30f61e3 owner-reset hardening follow-ups (#769) (#784)
• e1306ed audits survive long finding lists; agents fix problems instead of reporting them (#771)
• 0ade6b8 an accepted quality finding never reappears on the card; typecheck the e2e suites (#788)
• 4a281c3 calibrate Lighthouse's CPU slowdown to the audit host (#773)
• f968d24 quality-gate accept loop no longer hangs when the gate opens mid-loop (#783)

v0.10.50

Features

• 88f7543 confirm update actions with the Caelo password, not a Google OAuth client (#757) (#760)
• b72310b keep AI work in the Power-MCP agent — hand back work items instead of spending the install's AI (#741) (#744)
• eeb4f39 optimum target, no grandfathering, bulk Owner decisions (#727) (#743)
• 4ea3bfa show when the release check ran and add "Check now" (#742)
• e860681 store Lighthouse Performance metrics per page and expose them to the AI and MCP (#738)

Fixes

• e69b716 serve the redirects table on every provider (#587) (#756)
• a96b331 one-command Compose install that actually comes up (#566, #707) (#755)
• 3f00331 take public_role out of cloudsqlsuperuser on GCP (#633) (#752)
• 518e581 set caelo_visitor_id only with analytics consent (#677) (#753)
• 1814cb1 footer scenario primes a branded theme; cold-start gate stops inviting a question when identity is on record (#740)

v0.10.49

Features

• 5781a62 check framework — page checks on every Stage, Lighthouse as one registered check (#727 PR A) (#731)
• 0327be2 automatic Caelo updates — policy UI, scheduler, Owner emails (#696 Phase 5) (#726)

Fixes

• 1c0bea0 no page reaches staging or production without a meta description (#730)

Other

• 0d65706 ship pinned registry faces as WOFF2 unicode-range slices (#728)

v0.10.48

Features

• d340cec caelo-agent — Install update for self-hosted installs (#696) (#721)
• 3ee152f Install update with Google step-up and a live timeline (#696) (#719)
• 2d4c4f4 set up the upgrader job with scoped grants (#696) (#717)
• 573cdb6 the in-cloud upgrader job (caelo-ops upgrader) (#696) (#714)
• 2d2bd69 platform update requests, policy + Google step-up ops (#696) (#713)
• 77feeba install-job mode — GCP install runs as a Cloud Run job, terminal tails it (#696) (#715)

Fixes

• 59b6ed5 fail fast on a refused AI provider key (#720)
• 9de7909 root-cause the quality-fix-offer and live-edit click flakes (#722)

Docs

• 35bdda4 "Open in Cloud Shell" install buttons, pinned per release (#696) (#716)