v1.49.0

1.49.0 (2026-09-29)

⚠ BREAKING CHANGES

• client: client module paths moved (no shims). client/lib/dom.js is now client/lib/dom/index.js. The view entry shims client/views/{editor,follow,list,notes,presenter,settings,share-viewer}.js are gone: import client/views/<x>/index.js (the editor entry is views/editor/index.js, formerly views/editor/render-editor.js; settings exports renderSettings, renderSettingsPage is gone). views/editor/{editor-form,slide-list,topbar,imagekit-picker,share-dropdown,fields}.js, views/editor/modals/settings-modal.js and views/follow/interactions.js are now <name>/index.js; the shims views/editor/slide-type-picker.js, views/editor/fields/images.js and views/editor/modals/share-modal.js are gone (import the folder's index.js).

Added

• auth: instance admins see the claims of recent SSO logins (B551) (#1374) (9b9eb60)
• auth: OIDC_EXTRA_SCOPES for claims behind their own scope (B552) (#1373) (1eb42a1)
• auth: SSO onboarding - redirect-URI check, first login, OIDC_GROUPS_CLAIM (B427) (#1372) (b78d928)
• fork: a fork declares what it owns; fork:seams and a stable CLAUDE.md (B426) (#1370) (852ac64)
• ops: multi-org operator runbook and npm run org:create (B425) (#1368) (c2b8885)

Fixed

• export: inline image url()s from the fork CSS seam (B554) (#1375) (5080079)

Changed

• client: no eponymous file beside a folder under client/ (B526) (#1371) (ac19263)
• keep the next release in 1.x during beta (bcfa526)