Bind preview rows and published API base paths to the active module slug so cloned or stale state cannot address another module.
Co-authored-by: Cursor <cursoragent@cursor.com>
Keep agent-bound modules in per-app schemas and prevent stale frontend routes from displaying another module's blueprint or rows.
Co-authored-by: Cursor <cursoragent@cursor.com>
Complete permissions during every bind and token path, expose effective access in the console, and keep the platform return path globally available.
Co-authored-by: Cursor <cursoragent@cursor.com>
Allow display-name-only publish via host_meta; stop treating company conflicts 403 as a fault and ship rebuilt web dist.
Co-authored-by: Cursor <cursoragent@cursor.com>
Add HMAC restore-by-host for phone-less rebind; resolve gateway at request time and recreate web after stack up.
Co-authored-by: Cursor <cursoragent@cursor.com>
Phone/bind-code/ticket responses include rotated client_secret; SelfRegister reuses active sync_bound hosts instead of spawning pending; archive coop opinion and keep a living summary.
Co-authored-by: Cursor <cursoragent@cursor.com>
Ensure default channel and rebind Agent/Binding on list, ticket, agents/me, and ensure-binding so SyncPage does not stay on deleted-channel errors.
Co-authored-by: Cursor <cursoragent@cursor.com>
Ship ticket-exchange and bind/policy for Z13, keep trial binds SMS-free, allow shared company bindings, and align SyncPage plus sync docs.
Co-authored-by: Cursor <cursoragent@cursor.com>
Enable auto default sync channels on agent activate, bind-code/phone confirm flows, publish ALTER, and align admin/yuheng docs with the production bind path.
