v0.87.2
September 10, 2026
**Full close-out of September's verification round:** sessions with a ceiling that truly applies everywhere, shareable exports with no secrets and addresses preserved, document search that reveals nothing about protected files, scheduled items that no longer skip their initial checks, Event configuration errors that are finally clear, and text extraction diagnostics.
-
Security
The session ceiling applies everywhere
A session's maximum duration now also applies when you impersonate an organization, leave it, switch between organizations or change your password: past the ceiling you need to sign in again, and none of these operations can stretch the session. Requests from external assistants over MCP count toward the per-credential limit on the message channel too.
-
Security
Shareable export: no secrets, addresses preserved
When you export a flow in shareable form, keys, tokens, signatures and passwords are recognised in headers and parameters with compound names too, while an address with embedded credentials loses only the credentials and keeps scheme, host and path, so importing restores the integration without rewriting it. The export report lists exactly what was masked.
-
Security
Document search with no leaks
For read-only users, document search no longer reveals anything about files uploaded to protected fields, not even through page counts: searching a protected name gives the same result as searching a name that does not exist.
-
Improvement
Scheduled items: initial checks are never skipped
Starting a scheduled item early now really runs the initial phase's tasks, with history attributed to whoever started it; an administrative override also leaves a trace of the skipped tasks. A deleted document stays downloadable by an administrator only while it can still be restored, and the viewer tells every role what it can do.
-
Improvement
Clearer configuration and errors
An Event task with a wrong template fails with a fixable message instead of being retried as an outage; its content is protected like a webhook's JSON body. A Document field configured with an invalid "multiple" value is rejected instead of being read as "no". The MCP data-update tool describes the real merge behaviour, and the Library always shows the text extraction status.
-
Feature
Text extraction diagnostics
In Settings → Diagnostics a new card shows the status of your organisation's document text extractions: pending, processing, stale, retrying, failed or exhausted, with the list of documents involved and the cause. Item title previews also no longer show internal technical properties.