2609.2.0

Changes since v2609.1.0

• docs(readme): say what this is for before listing what it has
• feat(chat): let the composer stay open while the model is working
• feat(browser): let a conversation act in the user's own browser
• fix(browser): take extension updates, and explain a policy-blocked debugger
• feat(browser): everything the extension needs to be published
• refactor(chat): make a sent message a fact about the conversation
• chore(browser): keep one packaged extension in target/, not every build
• chore(ci): hold the Web Store identifiers as variables, not secrets
• feat(ci): a three-second check that the Web Store credentials work
• feat: proxy TypeSafe System One requests
• feat: add automatic model routing
• chore(ui): remove the orphaned Datastar-era frontend
• rename: croit LLM Gateway is now croit AIplane
• chore(deps): take the RustCrypto 0.11 generation, and lumis 0.13
• chore(deps): update everything that can move without a migration
• chore(deps): drop what nothing uses — 85 crates, starting with lumis
• feat(browser): everything the store listing needs, in the tree
• fix(db): restore migration 13, and pin every checksum so this cannot recur
• fix: keep system one models out of chat discovery
• fix: show shared backend health per pool
• Fix System One model isolation and usage accounting; address security findings
• Organize model administration into tabs
• Fix exempt model quotas and edit limits
• Fix RAG collection status ownership
• fix: honor the MCP tool contract
• feat: add policy-driven content guard
• feat: pick grants from a list instead of typing them
• fix: address review findings on the grant pickers
• refactor: de-duplicate the grant pickers and their validation
• feat: grant ComfyUI and MCP tool families, and narrow MCP per tool
• feat: give group admin tabs, a grant matrix, and an identity view
• feat: group the grant matrix, and translate the category headings

Artifacts

All stamped 2609.2.0, published by this pipeline:

Artifact	Reference
Gateway	ghcr.io/croit/aiplane:v2609.2.0
Sandbox gold image	ghcr.io/croit/aiplane-sandbox:v2609.2.0
Sandbox runner	ghcr.io/croit/aiplane-sandbox-runner:v2609.2.0
OCR sidecar	ghcr.io/croit/aiplane-ocr-sidecar:v2609.2.0
Helm chart	oci://ghcr.io/croit/charts/aiplane version 2609.2.0

Every image also carries :production, which this release moved.
Installations with autoUpdate.enabled (the default) pick this up at
their next nightly restart — see docs/kubernetes.md.

helm install aiplane oci://ghcr.io/croit/charts/aiplane