• New Number blueprint field type, with integer/decimal configuration, driven by BlueprintField.allowed_types
• URL redirects for entries

Security

• Updated Rails to 8.1.3.1, fixing a libvips untrusted-loader security issue
• Installed libvips in CI

Fixes

• Fixed the Number field's icon and color to use currentColor consistently
• Added the missing blueprint_field_number summary partial

• Constituent identity layer: shared principals with a per-account CRM, central auth origin, constituent portal, OAuth, form ingestion, and CSV import
• Merge review and provisioning policy tooling, plus security hardening across the constituent identity flows
• Member portal added to starter accounts
• {% doc %} Liquid tag, mirrored in CMS and Liquiditor
• Admin MCP tools for managing support requests
• --include-unpublished flag for Liquiditor's download_database/download_theme

Fixes

• Fixed admin dashboard stats being scoped to the wrong tenant
• Fixed asset blob replacement not cascading to dependent attachments
• Fixed TemplatePreviewService drift by sharing real SEO logic and adding navigation/events
• Fixed etag never changing on field-only entry updates
• Fixed account export to include the published flag and preserve entry ordering
• Set reply-to on form submission notifications from the submitted email field

• Added a /content admin UI for managing Events and Event Tickets
• Added validations, optimistic locking, and an audit trail to Event/EventTicket
• Rebuilt the default starter site with vanilla CSS, a contact form, and event signup

Fixes

• Fixed silent failures in entries upsert and account export

• Replaced the Trix editor with Lexxy across the admin, including asset tracking for Lexxy uploads
• Added MCP tools for Events and EventTickets
• Unpublished entry pages now correctly return 404

Changes

• Upgraded Avo 3 → 4 and Pagy 9 → 43
• Replaced the Pagy nav partial with a Tailwind UI pagination partial matching the app's design system
• Upgraded core dependencies including Rails to 8.1.3 and Stripe/Pay

Fixes

• Fixed blueprints_save rejecting hyphenated handles on update
• Fixed a Pagy page=0 error to default to page 1
• Fixed the asset picker dialog's z-index, centering, and button styling

• Bumped Avo to 3.32.1, patching CVE-2026-55518
• Upgraded Ruby gems and npm dependencies to patch several security vulnerabilities

Changes

• Unified API v1 and Liquiditor client response shapes
• Hardened CMS upsert validations
• Standardized on Caddy route targeting by @id instead of positional index

Fixes

• Fixed the {% query %} tag's entity filter, position sort, and a crash when the context page is an entry hash
• Fixed the paginate tag crashing when a page collection entry is in context
• Fixed image field values not accepting AccountAsset in entries_save
• Fixed BlueprintValue not being destroyed (and text values not persisting) when a field type changes
• Fixed navigation children not being imported in the Liquiditor YAML-to-SQLite import
• Fixed a Liquiditor entity ref import and trailing-slash routing bug
• Fixed a pi session log sync race condition

• Per-entry routing_override to support custom URL patterns
• Entity field placeholders in collection URL patterns, communicated to AI agents via tool descriptions and AGENTS.md
• Markdown-based scraper for importing existing websites
• Chat token-window safeguards and repair tooling
• Admin Pi session log explorer and export

Fixes

• Fixed the thinking indicator for assistant tool-call messages
• Fixed CollectionDrop being passed as a collection handle in the query tag
• Fixed entity field value= to handle ActionController::Parameters and clear/nil data, and hardened entity field value normalization overall
• Fixed navigation item upsert (wrong association names and a blueprint_id constraint)
• Fixed CMS tool object/array parameters to have explicit type declarations
• Fixed creator-mode instance issues

• AI Contexts: user-facing UI and auto-generated content model for grounding the AI assistant
• Model benchmark system, with provider filtering
• {% query %} Liquid tag ported to Liquiditor for local preview parity
• theme_generate_liquid_docs MCP tool for accurate Liquid variable docs
• API/MCP flow for account creation and Stripe subscriptions, plus bin/airogelcms commands for the same
• New raw_html blueprint field type
• AI-based spam classification for form submissions
• Stop button for chat streaming
• Pi session logs now ship periodically and flush before instance termination

Changes

• Flash notifications converted to toast-style panels
• Removed the account_id parameter from CMS RubyLLM tools

Fixes

• Fixed the {% query %} tag: added filter: support, aliases, and corrected AI docs
• Fixed a blank chat screen by saving the user message before job enqueue
• Fixed the support-request "sent" count on the admin dashboard

• Configurable Pi model via SSM Parameter Store
• Git-based Liquiditor deploys that don't require an AMI rebuild
• Drag-and-drop folder support
• Internal Git repository browser under Content for the Creator plan
• Leave-account feature for non-owner members

Fixes

• Fixed rsync deleting AMI-installed bin/ scripts
• Fixed the default theme template and added Liquiditor docs
• Fixed account deletion
• Fixed video upload on the dashboard
• Stopping a creator instance now returns to the start editor screen

• Warm instance pool for Creator Mode, cutting instance startup time
• Account reset feature with automatic backup
• Cloudflare tunnel refactor for Creator Mode instances
• Default site now built with Tailwind
• Migrated instance tooling from rbenv/nvm to mise, and from foreman to direct process management for the Liquiditor systemd service
• Creator Mode now requires explicit activation

Fixes

• Fixed the video/image picker: selection, modal dismiss, and save
• Fixed video rendering and restored default markdown rendering
• Fixed CMS iframe response headers for the website viewer
• Fixed warm pool provisioning and the instance claim flow
• Fixed instance termination and added the ability to turn instances off
• Fixed the refresh/disconnect flow and non-sudo user handling
• Fixed brakeman and linting errors

• Creator Mode: an AI-assisted site building workflow, implemented across several phases
• Plan swapping, including a dedicated setup price for upgrades
• Prefix IDs added for clearer resource identification

Fixes

• Fixed double base64 encoding, a failed-state race condition, async termination handling, and ALB priority retry issues in Creator Mode provisioning
• Fixed Liquiditor CSP issues and several other Liquiditor bugs
• Fixed environment variable handling and a provisioning error