v1.3.0

1.3.0 (2026-07-25)

Added

• auth: bind each request to the organization its session resolved to (#356) (ddab92f)
• auth: make the presentation authorization layer organization-aware (#359) (2f8e823)
• auth: resolve identity independently of organization (#349) (20cb58f)
• slide-types: make alignment a property of the block, not of each field (#365) (a1c8349)

Fixed

• api: route optimistic-lock errors through the canonical envelope (#361) (b4de3a3)
• card-stack: derive the fallback palette from theme tokens (#364) (676135e)
• client: stop listeners, timers and streams outliving their view (#343) (76ea389)
• i18n: default a new deck's language to the UI locale (#360) (d5df6ed)
• list: guarantee the deck-grid shimmer always reaches a terminal state (#363) (4f28aff)

Security

• escape user-authored content in editor innerHTML sinks (B8 slice 1) (#370) (1e6267c)