Control-plane only. The agent stays at 0.61.139.

The API contract no longer lies about what can be empty (#479).
The spec declared OpenAPI 3.1 while using the removed 'nullable' keyword in
163 places. The TypeScript generator ignored it silently, so those fields
generated as always-present when they can be null. 159 became the 3.1 union
form; the remaining 4 were $ref shapes needing an anyOf null branch. The
generator was moved to client-only generation, which also materialised two
live-progress endpoints that had been documented but generated nothing.

A non-human principal can now be granted least privilege (#510).
API keys carried a rank-ordered role, so granting an assistant permission to
read files transitively granted managing members, minting API keys, reading the
audit log and logging into sites as a user. Keys now carry an explicit
capability set and can be restricted to named sites. Existing keys are
unchanged. Site selection for such a key is enforced in the application, not
the database; the migration says so, and database-level scoping is separate
future work.

make gen regenerates both client trees or fails loudly (#511).
It previously printed a message about being wired in a future phase and exited
0 without generating anything, so editing the spec and running the documented
command left a stale generated tree that looked correct. It now proves each
generator wrote, bounds each with a deadline, and a CI job fails when the
committed trees do not match a fresh generation.

The plugin declares compatibility with WordPress 7.1 (#514). This reaches the
public listing only when the plugin is next published to wordpress.org, which
this release does not do.

Tagged at the commit that was built, deployed and QA'd.