v0.4.2

New features

• An extra security layer, on by default: before your agent installs, activates, updates or deletes a plugin, or changes an account that runs your site, an administrator approves it under Delta → Approvals. You can turn it off under Context → Guardrails
• The dashboard lists the rules, skills, notes and Memory your agent changed, so you can keep or undo each change. Your own version of a rule is never lost: an undo puts it back from the trash
• The Front panel replaces images, featured images included, from your media library
• The icon library offers Tabler 3.50.0 and Lucide 1.62.0

Improvements

• The Front panel opens faster, shows that it is loading, and a second click cancels the open
• The Map in the Front panel counts links made by loops, menus and the template that draws a page
• Your agent asks where a user's posts and media go before deleting the user
• A new admin email set by your agent waits for WordPress's confirmation email
• Settings that hand out control of your site, such as Delta's guardrails, active plugins and the default role, stay yours to change in wp-admin
• Coming Soon now also closes the WooCommerce store to visitors, and leaves its own page out of Simply Static exports
• Fallback pages use your site's content width and spacing
• simply-static-check names other static exporters' folders
• All eleven bundled languages are fully translated
• After updating, reload any tab with the Front panel open, and purge a CDN or page cache that serves logged-in pages
• For developers: new filters 21press_delta_query_denied_types, 21press_delta_client_ip, 21press_delta_auth_failure_limit, 21press_delta_plugin_zip_hosts, 21press_delta_import_max_bytes and 21press_delta_coming_soon_ajax_gated. Values from 21press_delta_entry_placeholders no longer run shortcodes, Front panel tabs read location.href instead of page.pageUrl, and downloads use POST …/download-link

Fixes

• An excerpt you write in wp-admin stays yours, formatting included, after your agent edits the page
• Password-protected pages show the password form, laid out at your content width
• The Front panel loads one copy of its script, so an update never leaves an old one running
• The Map stays current when page HTML is removed or a template becomes the default
• A Gravity form that will not save no longer retries on every page load
• Smaller fixes to the Coming Soon page picker, Memory upgrades, uploads and simply-static-check
• Security: field values and titles go into your pages as text, so shortcodes typed into them no longer run
• Security: SVG files are cleaned on upload, and the ones already on your site are cleaned in the background after the update. Their colours stay, and each original is kept in a private folder
• Security: your agent no longer reads or writes passwords, secrets, logins or roles through meta and options
• Security: imports unpack only what a Delta pack holds, and Delta's private folders and your design notes are closed to the web
• Security: agent connections have rate limits, safer sign-in redirects and one-time download links
• Security: password-protected entries keep their fields hidden in lists