2026.3.12-beta
Auth security upgrade, inbox polish, and DevAgent gains autonomous research and prospecting capabilities.
Auth Proxy
Authentication now uses server-side httpOnly cookies instead of localStorage tokens. The frontend proxies all API calls through a SvelteKit server route, which attaches the JWT from a secure cookie. This eliminates token exposure to client-side JavaScript.
Inbox Polish
Stabilized table column widths so they no longer shift when data loads. Unhid the search bar in the inbox toolbar. Softened dark mode borders and row hover states throughout. Status counts in the bottom bar now update optimistically when editors change a submission's status. The bulk selection bar (group actions) now uses a Svelte fly transition.
Design System
Refined the kit component library: Tabs reworked to a subtle ghost-style design with softer dark mode contrast. Badge dark borders toned down across all colors. Button gains consistent icon gap, smaller sm size. Checkbox shrunk to 15px. SearchInput made more compact. Dark surface tokens shifted to a more neutral charcoal.
Settings Sidebar
Organization settings now uses a sidebar navigation layout with separate subpages for General, Team, and Billing instead of inline tabs.
Calls Page
Redesigned with kit Tabs for status filtering, improved card layout showing absolute open/close dates, and a New Call button with icon.
DevAgent
The autonomous agent now supports three task types — Code, Research, and Prospect — running up to 3 tasks concurrently. Research tasks use Claude to investigate topics and produce structured reports. Prospect tasks discover and verify potential literary magazine partners. Sentry integration polls for new issues and triages them into Linear.
Everything Else
- Submissions can now transition directly from In Review to Accepted
- In Review badge color changed from brand to blue
- Footer updated with social links (Bluesky, Instagram, Substack) and version number
- CORS idempotency key header added to backend
- Notebook reorganized with clearer file naming
- Local Caddy config updated with mail inbox and S3 browser routes