v0.1.65

0.1.65 - 2026-08-18

Features

• pricing: dynamic-pricing audit follow-ups — margin audit trail, cost passthrough, media vendor-cost ledger (#3041)
• close the content feedback loop end-to-end (#3045)
• content: prepare scheduled SEO article rollout (#3053)
• release: add public monorepo hosted SaaS deploy lane (#3088)
• release: parameterize hosted SaaS from GitHub environment vars (#3110)
• workers: purge soft-deleted agent transcripts after 30 days (#3130)

Fixes

• agent: agent surface audit — org context, duplicate response, reconnect churn, thread-switch remount, first-card blank (#2994)
• messages: social-inbox sync partial failure, X cursor, LinkedIn timeout (#3049)
• workflows: wire content-loop analytics hooks, avoids, and posting times (#3047)
• optimization: query real worst performers and feed them as anti-patterns (#3037)
• agent: do not restore a snapshot over a live local run on reconnect (#3055)
• agent: invalidate the thread list from the store instead of window events (#3039)
• e2e: unblock Playwright full-tier admin 404s and stale IA (#3048)
• seo: preserve launch articles in sitemap (#3054)
• optimization: apply suggestion payloads instead of only logging BrandMemory (#3043)
• e2e: dedicated authenticated Playwright banner marker (#3044)
• default local and e2e to cheapest image, video, and chat models (#2993)
• telemetry: explicit Sentry replay mask and no default PII (#3028)
• images: document trained-model safety-checker bypass (#3031)
• agent: keep scope guardrail on every prompt path (#3033)
• agent: rate-limit turns and bound prompt length (#3035)
• agent: fence untrusted prompt input on the chat path (#3036)
• release: pin marketplace deployment SHA (#3067)
• agent: add jailbreak and prompt-extraction hardening (#3038)
• content: serve article cards from CDN (#3069)
• seo: close remaining crawl correctness gaps (#3073)
• e2e: clean leftover Playwright full-tier failures (#3074)
• e2e: close remaining full-tier leftover specs (#3077)
• app: close Demo / FUD News QA blockers for sell-this-week (#3083)
• auth: await email provider acceptance (#3084)
• voices: surface catalog when org library is empty (#3089)
• clear unresolved Sentry production errors (#3090)
• release: run hosted SaaS deploy in the public repo (#3105)
• release: accept provided marketplace SHA without private API (#3107)
• release: run hosted SaaS deploy fully in the public repo (#3108)
• api: assert StripeCoreModule import graph in spec (#3112)
• ranking: exclude soft-deleted posts before LLM selection (#3114)
• admin: require trusted env for Playwright admin bypass (#3115)
• queues: identify and harden recurring BullMQ stalls (#3119)
• models: restore cloud-production fallback defaults (#3120)
• infra: unblock tofu init variable description (#3127)
• realtime: isolate socket identity across token rotation (#3118)
• e2e: align leftover full-tier locators with current IA (#3117)
• release: validate marketplace SHA and stop secret inherit (#3131)
• api: set OpenRouter zdr and deny data collection (#3129)
• ci: use GITHUB_TOKEN only and allowlist transcript purge (#3139)
• ci: preserve full-tier shard reports (#3147)
• ci: scan merge-queue entries with the gitleaks CLI (#3152)
• files: keep remotion pins, catalog, and patches on one version (#3157)
• e2e: restore authed onboarding and execution history (#3160)

Refactoring

• content-performance: delete unused generateNextBatchPrompts (#3042)
• billing: open-source billing under AGPL and drop ee/ (#3093)
• api: drop one-way Nest forwardRef wrappers (#3095)
• api: split remaining Nest rings to zero forwardRef (#3102)
• api: use ModuleRef in model controller specs (#3121)
• brands: share controller access assertion (#3123)
• articles: extract input boundary guards (#3135)
• server: extract artifact material canonicalization (#3133)
• workers: extract scheduled-post publish error policy (#3142)
• agent: split cloud tool registry extensions (#3151)

Documentation

• oss: Contributor-ready document set — glossary, ADRs, community files, README/CONTRIBUTING rewrite (#3003)
• record agent prompt moderation stance (#3032)
• oss: resolve review follow-ups on contributor docs and CI Node default (#3079)
• oss: adopt FLA 2.1 CLA via CLA Assistant, retire DCO (#3092)
• oss: version CLA acceptance once per account per CLA version (#3128)
• oss: rewrite README hero, quick start, and agents section (#3137)

Tests

• generate spec entity ids with testId() and guard high-entropy literals (#3015)
• app: lock Agents settings href to /settings/policy (#3085)
• app: lock /admin/organization redirect to live org analytics (#3086)
• content: drop duplicate launch articles from artwork fixture (#3111)
• content: assert both optimization-cycle findMany scopes (#3113)
• restore client function and models branch coverage (#3116)

Build and CI

• declare least-privilege token permissions in every workflow (#3075)
• run required checks on merge_group for the master merge queue (#3145)

Dependencies

• deps: bump the patch-and-minor group across 1 directory with 34 updates (#3124)
• deps: replace Dependabot with deps:update Action bumps (#3136)
• deps: bump workspaces to latest and move the PGlite pin to 0.5.5 (#3150)

Maintenance

• media: discard orphan prod media dataset (#3046)
• automation: ignore local SEO reports (#3051)
• worktrees: pin agent worktrees to /.worktrees/ (#3004)
• oss: exempt org members from the DCO check (#3068)
• memory: one closing keyword per issue in PR bodies (#3076)
• bypass Vercel image optimization (#3078)
• de-slop the monorepo (unused imports, dead lint comments, commented-out code) (#3081)
• bump repo version to 0.1.65 (#3104)
• oss: unify issue-form EARS wording and intake labels (#3138)