mdbase connect v0.1.0-beta.142

Files containing UNSIGNED are preview builds, not trusted platform releases. Those Windows files may show Unknown Publisher or SmartScreen warnings; those macOS files require a manual Privacy & Security override and have not been notarized. Checksums and GitHub OIDC-backed Sigstore bundles establish build provenance but do not replace platform signing.

What's Changed

• Keep the desktop pairing restart notice until relaunch (fixes desktop suite flake) by @callumalpass in #582
• readMany without revisions, MCP metadata queries, link-resolution gate audit by @callumalpass in #571
• Add connection.observe(query) and move the editor onto it by @callumalpass in #578
• Prepare beta127 by @callumalpass in #583
• Describe how hosted writes are fenced across authority transfers by @callumalpass in #584
• Stop hosted mirrors from syncing a folder a newer runtime has claimed by @callumalpass in #585
• Bound the local activity log and list it without sorting by @callumalpass in #588
• Report and release local collections a newer runtime has claimed by @callumalpass in #586
• Sign mdbase-next policy items with a certified control-plane key by @callumalpass in #590
• Report unavailable local collections instead of an invalid token by @callumalpass in #587
• Back off SDK change polling in hidden browser pages by @callumalpass in #589
• Append mdbase-next policy items through a transactional outbox by @callumalpass in #591
• Add the free_v1 entitlement profile and an operator backfill by @callumalpass in #593
• mdbase-next daemon devices: registration, relay device_bind, Noise fields in the grant feed by @callumalpass in #595
• mdbase-next Noise pipes through the relay by @callumalpass in #596
• Register the app's Noise key at consent by attestation by @callumalpass in #599
• Collection-state directory for the mdbase-next hosted replica by @callumalpass in #597
• test: derive migration expectations from sorted SQL inventory by @callumalpass in #607
• next: revalidate open Noise pipes and close on revocation by @callumalpass in #604
• next: verify acknowledged policy positions and reissue lost batches by @callumalpass in #602
• mdbase-next opaque timer service, fired-timer events, sealed push targets by @callumalpass in #598
• Routing and collection list for mdbase-next apps (issue #167 C1, C2) by @callumalpass in #600
• Device approval reports for private grants, and the approval-aware check for notify by @callumalpass in #601
• LAB: bounded disposable private log fixture provisioning by @callumalpass in #606
• Prepare beta128 by @callumalpass in #609
• Refine account-scoped routing hints and target ordering by @callumalpass in #610
• Allow browser PUT preflight and check SDK request methods by @callumalpass in #611
• Add opt-in account identity to connector grant wires by @callumalpass in #612
• fix(hosted): order collection locks before projection generation locks by @callumalpass in #613
• Fix control-plane log HTTP request signing by @callumalpass in #614
• Serialize authority-transfer expiry and use bounded background recovery by @callumalpass in #620
• Prepare beta129 by @callumalpass in #622
• next: service-device records and role-0 log tokens (cloud-copy bootstrap C1) by @callumalpass in #615
• NEXT: canonical signed-release public trust payload by @callumalpass in #623
• next: cloud-copy collections — service-created, owner-device, and device join (cloud-copy bootstrap C2) by @callumalpass in #616
• next: device log-token refresh for synced collections by @callumalpass in #618
• Pin patched source-map and Vue transitive dependencies by @callumalpass in #627
• Authenticate release-linked LAB NEXT trust assets by @callumalpass in #628
• Account: explicit backend metadata for retained grants by @callumalpass in #626
• next: private collection create and device enrol by @callumalpass in #621
• Desktop bridge: respect runtime handoff and gate bundled daemon installation by @callumalpass in #605
• next: private approval-request (fresh SAS commitment) by @callumalpass in #624
• Recover original timer mutations with authenticated receipts by @callumalpass in #632
• next: cloud-copy join returns the log URL and genesis item by @callumalpass in #630
• fix(deps): refresh transport and configuration dependencies by @callumalpass in #636
• next: account keys (AK1 §5) — bundle storage, strict mode, recovery-device enrolment by @callumalpass in #635
• Mediate signed opaque device approval candidate metadata by @callumalpass in #634
• next: private device enrol returns the log URL and genesis item by @callumalpass in #631
• client: retained-app control-plane timers port by @callumalpass in #629
• fix(deps): update Sharp and MCP SDK to audited versions by @callumalpass in #642
• next: complete strict mode from replica-applied witnesses by @callumalpass in #641
• next: activate cloud-copy hosted and escrow services after genesis by @callumalpass in #643
• next: wake hosted services after committed policy enrolment by @callumalpass in #644
• feat(next): first-party mobile and app-runtime device registration by @callumalpass in #645
• fix(next): deliver foreground policy service wakes immediately by @callumalpass in #646
• chore(next): add LAB service wake correlation logs by @callumalpass in #647
• fix(next): match canonical client fingerprint in consent by @callumalpass in #648
• feat(auth): approve first-party app installations as scoped devices by @callumalpass in #649
• Require same-account reselection after denied installation renewal by @callumalpass in #650
• Provide bounded original signed genesis for hosted bootstrap by @callumalpass in #651
• next: exact grant policy lifecycle and immutable log identities (C1) by @callumalpass in #653
• Show next consent as joint record and file capability groups by @callumalpass in #655
• Refuse legacy-backend installation device sign-in by @callumalpass in #656
• Expose next account UUIDs through grant-scoped people profiles by @callumalpass in #657
• next: staged hosted migration rollout (cohorts, pause, guarded account flip) by @callumalpass in #652
• Provider: migrating/migrated states and rollback support for the mdbase-next migration by @callumalpass in #592
• Fix pg-mem binary parameter corruption and lexer flake by @callumalpass in #658
• Prefer current enrolled hosted Noise targets in next route discovery by @callumalpass in #654
• C5: explicit installation collection/create consent and scoped member access by @callumalpass in #659
• Prepare local rollback bindings with immutable native-only receipts by @callumalpass in #661
• provider: track migration replica update ownership across rollback by @callumalpass in #660
• next: issue migration-source witnesses from current scoped source observations by @callumalpass in #662
• next: admit the fixed isolated LAB TaskNotes installation Origin by @callumalpass in #663
• next: persist permanent collection deletion denial facts by @callumalpass in #664
• test: qualify LAB loopback installation consent lifecycle by @callumalpass in #666
• next: consume generation-pinned permanent deletion floors by @callumalpass in #665
• next: refuse log tokens for known permanent deletion facts by @callumalpass in #667
• Gate every migration claim on current verified batch archive by @callumalpass in #668
• Scope legacy schema metadata checks to the active schema by @callumalpass in #669
• Freeze hosted migration topology before archive capture (0063) by @callumalpass in #670
• Add fenced local connector retirement by @callumalpass in #671
• test(server): qualify native UUID retirement inventory ordering by @callumalpass in #673
• Isolate approved PostgreSQL test-schema migration locks by @callumalpass in #674
• Use neutral PostgreSQL test fixture identifiers by @callumalpass in #675
• Add read-only native collection migration record producer by @callumalpass in #672
• Neutralize public migration commentary and backend documentation by @callumalpass in #676
• Add cloud-copy catalog display names and owner rename by @callumalpass in #677
• Refresh hosted rename permission under collection lock by @callumalpass in #678
• Preserve account suspension during service migration by @callumalpass in #679
• Enforce exact elapsed migration archive retention by @callumalpass in #680
• Enable cleartext labels for private synced collections by @callumalpass in #681
• Package bounded pre-freeze deletion drain in existing admin CLI by @callumalpass in #682
• Accept canonical legacy archive prefixes without relabeling receipts by @callumalpass in #683
• Clarify legacy archive timing and routine backup retention by @callumalpass in #685
• Apply current CP deletion and device revocation checks to hosted reads by @callumalpass in #684
• Add mdbase runtime (initial public import) by @callumalpass in #688
• Make installation pairing application-generic by @callumalpass in #695
• Publish native collection membership through the policy outbox by @callumalpass in #696
• Add current-claim hosted migration fence and source fronts by @callumalpass in #698
• Share service cloud-copy bootstrap for NEXT and migration SHADOW by @callumalpass in #699
• Record exact atomic hosted migration rollback receipts by @callumalpass in #701
• feat(people): authorize registered native device metadata by @callumalpass in #700
• Bind rollback provider transport to exact original receipts by @callumalpass in #702
• Compose canonical migration SHADOW target bootstrap by @callumalpass in #703
• Discover native collections in Connect management by @callumalpass in #704
• test: settle seeded application reconciliation before lifecycle diagnostics assertions by @callumalpass in #705
• Recognize explicit LAB cohort archive verifier metadata by @callumalpass in #706
• feat: confirm native sign-in account and collection selection by @callumalpass in #707
• Read current hosted migration claim without effects by @callumalpass in #708
• Fix installation sign-in confirmation for linked account emails by @callumalpass in #711
• Authenticate hosted own-collection migration claim reads by @callumalpass in #710
• Allow GitHub device confirmation without an email by @callumalpass in #712
• feat(next): fixed-run LAB PITR control-plane isolation by @callumalpass in #687
• Simplify device approval to one named collection picker by @callumalpass in #713
• Keep approval popup linked to its app and clarify enabled Approve by @callumalpass in #714
• feat(next): signed CP-only pre-key original admission source by @callumalpass in #716
• feat(protocol): share canonical application authorization intent compiler by @callumalpass in #718
• feat: native installation reminders through shared timer engines by @callumalpass in #719
• feat(server): bind pre-key v2 data to committed HTTP nonce registration by @callumalpass in #720
• fix: require nonempty frozen cohorts for archive acceptance by @callumalpass in #721
• feat(server): complete staging migration receiving facts by @callumalpass in #722
• feat(server): limit signup IP override to staging and lab by @callumalpass in #723
• Make canonical manifest hashing browser-safe by @callumalpass in #724
• ci: avoid native packaging for protocol and UI bundle changes by @callumalpass in #727
• feat(client): configure upload attempts and automatic abort policy by @callumalpass in #728
• Fly the flock onto the mark when the editor launches by @callumalpass in #730
• fix: allow device pairing for self-registered applications by @callumalpass in #731
• feat: preselect approvable collection hints in device pairing by @callumalpass in #732
• perf(server): background committed policy service wakes by @callumalpass in #733
• Update runtime to current mdbase runtime source by @callumalpass in #734
• Explain cutover refusals to old clients by @callumalpass in #736
• next route: grant and authorization ID in client_key_required by @callumalpass in #737
• Next collections: owner delete (soft delete, access revoked) by @callumalpass in #740
• next: grant web apps access to Private collections, with route availability by @callumalpass in #741
• Installation pairing: exact Chrome extension origins and declared return URLs by @callumalpass in #738
• Next collection delete: rerun context for the native deletion floor by @callumalpass in #742
• next: owner delete revokes native grants on a Private collection by @callumalpass in #743
• next: people metadata for web-app grants on Private collections by @callumalpass in #745
• Report the account's role on Private collections in the app collection list by @callumalpass in #744
• Server tests: resolve connect-protocol from source by @callumalpass in #747
• SDK registration: accept the registered ID for a changed manifest, with a Postgres end-to-end test by @callumalpass in #746
• protocol: precompile manifest validators by @callumalpass in #748
• Tell old clients when mdbase-next took over their desktop collection by @callumalpass in #750
• Update runtime to current mdbase runtime source by @callumalpass in #752
• Add bounded content-free legacy timer import origin schema by @callumalpass in #751
• Native starter collection seam for moved accounts (unmounted) by @callumalpass in #749
• MCP: serve tool calls through mdbase-next (cloud copy + Private) and one-time client key attach by @callumalpass in #739
• Fix a Windows CLI crash when the daemon stops during a request by @callumalpass in #753
• desktop: renderer UX tests serve on an OS-assigned port by @callumalpass in #755
• Require exact redirect URIs for installation hand-back by @callumalpass in #754
• desktop: run on the bundled mdbase daemon by @callumalpass in #735
• Recover from refused device sign-in steps on the approval page by @callumalpass in #756
• New accounts follow MDBASE_NEW_ACCOUNT_BACKEND (default legacy) by @callumalpass in #759
• Plain upgrade status on a not-yet-upgraded app sign-in refusal by @callumalpass in #760
• Optional file actions for installations, asked at the moment of use by @callumalpass in #758
• Tidy the device approval's extra-access and reminder controls by @callumalpass in #761
• Read legacy hosted timers losslessly in bounded pages; close the lossy copy-hosted command by @callumalpass in #762
• LAB fixture migration start profile; guard original invitation acceptance across migration by @callumalpass in #763
• Fence legacy notification delivery for collections being migrated by @callumalpass in #765
• Serve GET /v1/next/rollout from the flipped-account predicate by @callumalpass in #766
• Keep native collections consistent when an account is deleted by @callumalpass in #764
• Settle failed legacy runs, carry the watermark, retain legacy at cutover by @callumalpass in #767
• next: let an installation end its own session (DELETE /v1/next/installation) by @callumalpass in #768
• next: claim-bound migration replica, unfence and cutover-policy routes by @callumalpass in #770
• server: cache CORS preflights for 2 hours by @callumalpass in #769
• server: assert the installation collection list is never HTTP-cached by @callumalpass in #771
• Add shared collection UI to @mdbase-dev/ui by @callumalpass in #772
• Collection UI follow-ups from app adoption by @callumalpass in #775
• portal: Cancel closes an app's sign-in window instead of opening the Editor by @callumalpass in #773
• next: queue claim-bound member policy for a migrating collection's target by @callumalpass in #776
• Row menus for app section items in @mdbase-dev/ui/collections by @callumalpass in #777
• Import hosted timers strictly in pages and gate the account flip on them by @callumalpass in #778
• Complete a LAB fixture cohort from its verified flips, in environment lab only by @callumalpass in #779
• Refuse the account flip when the starter reservation drifted since start by @callumalpass in #780
• Clean up a rolled-back run's imported timers in LAB by @callumalpass in #781
• Front the provider's receipted rollback and receipt read with claim-bound migration routes by @callumalpass in #782
• Wrap long collection names in @mdbase-dev/ui/collections by @callumalpass in #783
• Accept a recorded rollback's epoch on rollback re-reads only by @callumalpass in #784
• Run and route back one LAB fixture account's hosted migration from the operator CLI by @callumalpass in #785
• Re-plan setup review on transient refusals in @mdbase-dev/ui/collections by @callumalpass in #786
• Mark Private collections in @mdbase-dev/ui/collections by @callumalpass in #787
• Send storage placement timezones on next create_log by @callumalpass in #788
• Forward the log's recorded region to the hosted Worker by @callumalpass in #789
• Rate limit hosted service calls per service, not per IP by @callumalpass in #790
• Give hosted migration-claim calls a service rate-limit budget by @callumalpass in #791
• Keep the app opener through the authorization redirect by @callumalpass in #792
• Copy the app-ui vendored SDK into the MCP image build by @callumalpass in #793
• Give the other migration routes a service rate-limit budget by @callumalpass in #794
• Make native Private grants approvable on the desktop by @callumalpass in #795
• next: isolate LAB migration hosted routing by account by @callumalpass in #796
• Omit incompatible optional permissions from next authorization by @callumalpass in #797
• Use account consent alone for Private app access by @callumalpass in #798
• Bound app preparation and offer a read-only retry by @callumalpass in #799
• release: verify independent staging trust context without enabling publication by @callumalpass in #801
• Clarify application grant permissions and origins by @callumalpass in #802
• Distinguish and filter registered computers and browser sessions by @callumalpass in #804
• Add explicit LAB migration pause and sequence-bound resume by @callumalpass in #805
• release: prepare fixed staging trust publication with no asset fallback by @callumalpass in #803
• next: bounded pre-acceptance migration inventory data by @callumalpass in #807
• Dismiss obsolete reauthorization notices on explicit grant removal by @callumalpass in #811
• fix(server): keep LAB migration client routing scoped by @callumalpass in #809
• fix: adapt fresh V1 consent to exact next permission subsets by @callumalpass in #800
• fix: manage accounts and real app access on the Connect portal by @callumalpass in #808
• Pin approved publisher and canonical staging trust bytes by @callumalpass in #810
• Keep approval popovers opaque during entrance by @callumalpass in #812
• fix(portal): searchable collection choice and grouped access by @callumalpass in #813
• fix: give old tabs safe cutover reload guidance by @callumalpass in #814
• Constrain hosted installation recovery to its original collection by @callumalpass in #816
• Bind Private credential completions to their original approval by @callumalpass in #817
• fix(portal): keep browser sign-out above session history by @callumalpass in #818
• Pin LAB migration reader TLS identity without verification bypass by @callumalpass in #821
• LAB owner read-only source fallback (HOLD unmerged) by @callumalpass in #822
• Fix timer source journal scope against real legacy schema by @callumalpass in #823
• fix(migration): retain initial Worker run reply diagnostics by @callumalpass in #824
• feat: scoped zero-hosted archive admission for LAB and staging by @callumalpass in #825
• Capture finite Worker readiness stage in LAB migration CLI by @callumalpass in #826
• Capture LAB migration Worker errors privately by @callumalpass in #827
• Retain bounded LAB custody sub-causes in private capture by @callumalpass in #828
• LAB-only legacy fixture backend on individual invitations by @callumalpass in #829
• Fix normal Sign in chooser for Private collections by @callumalpass in #830
• fix(lab): prepare canonical custody target before Worker Run by @callumalpass in #831
• Route bounded explicit LAB rehearsal accounts to the migration Worker by @callumalpass in #832
• fix(lab): retain private target preparation sub-causes by @callumalpass in #833
• Add explicit local-only migration transport build by @callumalpass in #834
• fix: restore completed-migration next operations without thawing archives by @callumalpass in #835
• Push committed Private grants before Native first open by @callumalpass in #836
• Keep computer presence current on verified relay renewals by @callumalpass in #837
• fix(provider): return persisted migration timestamps by @callumalpass in #838
• Publish committed Private requests before Native first open by @callumalpass in #839
• Admit scoped archives in compiled local rehearsal servers by @callumalpass in #840
• fix: route LAB hosted rehearsals by DB cohort membership by @callumalpass in #841
• Fix Windows runtime residency shutdown regression assumptions by @callumalpass in #842
• Allow exact local installation origins in compiled-local servers by @callumalpass in #844
• Fix Private declared setup permission projection by @callumalpass in #843
• Unify Add collection and enrolled-computer badges using the original creation intent by @callumalpass in #845
• Authorize original prearchive source H6 before account start by @callumalpass in #846
• Fix local pairing and timer environment codecs across Setup by @callumalpass in #848
• feat: hand off accepted scoped archive original H6 without provider refence by @callumalpass in #849
• feat: verify scoped recovered file bytes through existing native legacy codec by @callumalpass in #850
• Fix same-site client relay admission with ambient session cookies by @callumalpass in #851
• fix(server): admit full-cohort migration archive acceptance by @callumalpass in #852
• next: LAB completion read-back accepts an archive-completed cohort by @callumalpass in #853
• next: give Hosted service activation a 30s bound by @callumalpass in #854
• Account erasure removes the account's installation Native choices by @callumalpass in #856
• Treat a hosted Worker's 409 activation refusal as terminal for that batch by @callumalpass in #857
• migration-lab: cap the Worker status poll backoff at 5 s by @callumalpass in #858
• Update runtime to mdbase runtime source 004c642e by @callumalpass in #859
• hosted-provider: catch up stale projection rebuilds and bound batch lock hold by @callumalpass in #860
• Admit a staging deployment in the migration rehearsal job by @callumalpass in #861
• Route migrated owners to the staging hosted migration Worker; add LAB route retirement by @callumalpass in #862
• Print a per-step Worker status timeline from the migration job by @callumalpass in #863
• Update runtime to mdbase runtime source 10bbcb5a by @callumalpass in #864
• Move the pg-mem memory database setup out of db.ts by @callumalpass in #865
• Prepare beta130 by @callumalpass in #866
• Explain local collections awaiting the desktop upgrade by @callumalpass in #868
• deps: update rustls to 0.23.46 for RUSTSEC-2026-0346..0349 by @callumalpass in #869
• Add fixed production NEXT trust publication by @callumalpass in #867
• Fix proof-bound Node device-flow access to hosted collections by @callumalpass in #870
• Prepare beta131 staging candidate by @callumalpass in #871
• Avoid throttling consumed migration claim challenges by @callumalpass in #873
• Prepare beta132 claim-cap candidate by @callumalpass in #875
• Fix receipted rollback owner namespaces with a v2 provider boundary by @callumalpass in #878
• Explain account readiness before app sign-in by @callumalpass in #880
• Keep management overview refreshes single-flight by @callumalpass in #883
• Batch management inventory reads across collections by @callumalpass in #885
• Emit rollback-only signed AppendBase abort barriers by @callumalpass in #882
• Prepare beta133 management and rollback candidate by @callumalpass in #886
• Reduce migration claim SQL round trips without reusing current facts by @callumalpass in #887
• Use shared opening screens in collection gates by @callumalpass in #888
• Show SDK opening progress in collection gates by @callumalpass in #889
• Keep collection search usable in small approval windows by @callumalpass in #891
• fix(ui): remove ring from noninteractive gate headings by @callumalpass in #892
• feat(portal): approve app access from the collection picker by @callumalpass in #893
• Fence policy drain ownership without idle transactions by @callumalpass in #894
• Queue policy steps before shared database pool checkout by @callumalpass in #896
• Restore shared collection warning and Private entry compatibility by @callumalpass in #895
• Sanitize and attribute policy emission failures by @callumalpass in #898
• Explain sign-out progress after the signed-out screen appears by @callumalpass in #899
• Stop pinning the rotating LAB internal PostgreSQL certificate by @callumalpass in #900
• Extend the reserved invitation fixture constraint for staging by @callumalpass in #905
• Make cutover rollback, refresh and takeover states honest for users by @callumalpass in #877
• Fix bounded hosted query transaction retries by @callumalpass in #906
• Portal: one searchable collection consent picker by @callumalpass in #904
• Use one shared Add a collection entry by @callumalpass in #902
• Import an old hosted mirror's unsent edits at takeover instead of refusing by @callumalpass in #876
• Allow reserved staging migration fixture invitations by @callumalpass in #903
• Confirm native collection member changes before completion by @callumalpass in #907
• Release collection directory handles after runtime shutdown by @callumalpass in #908
• Prepare v0.1.0-beta.134 by @callumalpass in #901
• Prepare source-bound beta134 staging trust by @callumalpass in #910
• Admit production through shared managed archive profiles by @callumalpass in #912
• Admit fixed production identity in shared migration CLI by @callumalpass in #913
• Prepare existing-custody production trust asset for beta134 by @callumalpass in #915
• Admit managed legacy-only local custody in native scoped recovery by @callumalpass in #917
• Add pre-archive unfence for never-started accounts after a failed archive by @callumalpass in #919
• Prepare v0.1.0-beta.135 by @callumalpass in #920
• Prepare source-bound beta135 staging trust by @callumalpass in #921
• Skip migration-frozen accounts in active-hosted entitlement reconciliation by @callumalpass in #922
• Prepare v0.1.0-beta.136 by @callumalpass in #923
• Prepare source-bound beta136 staging trust by @callumalpass in #925
• Keep migrated owners' new collections on the CP Workers by @callumalpass in #926
• Prepare v0.1.0-beta.137 by @callumalpass in #927
• Prepare source-bound beta137 staging trust by @callumalpass in #928
• Let unfreeze supersede an accepted, never-started zero-hosted cohort revision by @callumalpass in #929
• Prepare v0.1.0-beta.138 by @callumalpass in #930
• Prepare source-bound beta138 staging trust by @callumalpass in #931
• Editor: stop main pushes overwriting the native staging Editor by @callumalpass in #932
• Accept suspended owners in the migration job's completion readback by @callumalpass in #933
• chore(release): prepare 0.1.0-beta.139 by @callumalpass in #934
• chore(release): prepare source-bound beta139 staging trust by @callumalpass in #937
• Admit production migration routing by @callumalpass in #916
• Merge release/native-staging into main: native-SDK Editor by @callumalpass in #935
• Register the Editor's offline shell after first usable by @callumalpass in #938
• Let the native Editor alias settle before failing publication by @callumalpass in #936
• Prepare 0.1.0-beta.140 by @callumalpass in #940
• Prepare 0.1.0-beta.141 by @callumalpass in #942
• Prepare source-bound beta.141 staging trust by @callumalpass in #943
• Prepare beta.141 production trust asset by @callumalpass in #944
• Turn on Private sync after a desktop takeover and carry app grants over by @callumalpass in #945
• Embed the reviewed production trust asset in the production daemon by @callumalpass in #946
• Explain the takeover wait, record takeovers and show sync errors in place by @callumalpass in #947
• Keep named queries compatible with legacy desktop daemons by @callumalpass in #949
• Fix Editor note restoration across collection switches by @callumalpass in #953
• Pin Editor SDK to original production beta141 trust by @callumalpass in #954
• Fix automatic desktop takeover and preserve paused folders by @callumalpass in #956
• Reuse Editor intake for original beta141 production packet by @callumalpass in #955
• Finish desktop takeover automatically when legacy daemon is running by @callumalpass in #958
• Managed migration: drive the complete held collection set by @callumalpass in #948
• chore(release): prepare beta.142 by @callumalpass in #960

Full Changelog: v0.1.0-beta.126...v0.1.0-beta.142