This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
Affected surfaces
ReleasePort's take
Moderate signalRelease v2.51.0 introduces an operator invitation system with invite links and hardens token‑based authentication to block role escalation via URL parameters.
Why it matters: The new invitation workflow (fact 49447) enables controlled onboarding, while the security fix (fact 49448) blocks privilege escalation—a critical safeguard for all operators.
Summary
AI summaryInvite links minted for licensed operators restrict them to a specific role and tenant.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Critical |
Token-based authentication prevents role escalation via URL parameters. Token-based authentication prevents role escalation via URL parameters. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Medium |
Adds operator invitation system with invite links. Adds operator invitation system with invite links. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Low |
Admin Team panel now supports creating, listing, and revoking operator invites. Admin Team panel now supports creating, listing, and revoking operator invites. Source: llm_adapter@2026-06-07 Confidence: low |
— |
| Feature | Low |
Admin Team panel can create, list (pending/accepted), and revoke operator invites. Admin Team panel can create, list (pending/accepted), and revoke operator invites. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Bugfix | Medium |
Restricts invite creation to admin users only (prevents 403 for non-admins). Restricts invite creation to admin users only (prevents 403 for non-admins). Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Low |
Invite store rejects unknown or admin roles during invite creation. Invite store rejects unknown or admin roles during invite creation. Source: llm_adapter@2026-06-07 Confidence: high |
— |
Full changelog
The CTO/admin gets full access and invites a licensed operator into an industry: pick a role (which fixes the vertical scope) + a tenant + a name → mint an invite link to send. The operator opens it and is locked to that role + tenant — no role picker, no Build board.
- Invite store (
scripts/lib/operators.mjs) — create / resolve / accept / revoke; rejects unknown or admin roles. - The token is the operator's credential, resolved server-side and authoritative — an operator can't escalate by passing
role=admin(the token wins; verified). A non-admin can't create invites (403). - Admin Team panel in the console — create an operator → copy the invite link · list (pending/accepted) · revoke. Admin-only.
- Operator session —
?invite=<token>→ 'Signed in as … · role · tenant' banner, queue scoped to their vertical(s) + tenant, sign-out.
280 lib tests.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About great_cto
Engineering-management layer of 34 specialist AI agents covering the full SDLC (architect, PM, senior-dev, reviewer, QA, security, devops, L3-support + 18 archetype-specific reviewers) with auto-detected archetypes and compliance gates (PCI-DSS, HIPAA, FedRAMP, GDPR, EU AI Act). Runs in Claude Code, Cursor, Codex CLI, Aider, and Continue via AGENTS.md + MCP. MIT.
Related context
Related tools
Earlier breaking changes
- v2.72.2 Removes Autopilot sidebar item and Operate topbar button from dev board.
- v2.55.0 Hard-gates the Build board; redirects invite sessions to Operate for operators.
- v2.43.0 Runtime now blocks autonomous execution of irreversible actions without prior human checkpoint.
- v2.43.0 Adds reversible and blastRadius fields to every flow step.
- v2.32.0 Removed AgentShield scanner and its CLI commands.
Beta — feedback welcome: [email protected]