Product Updates - v3.76

This release is dominated by two platform themes: the Claude Runner / agentic app platform (containerised Claude Code with an API and app-scoped containers), and ACL Restructure Phase 1 (groups as first-class principals, laying the write-side foundation for the permissions rework). Alongside these: public distribution of the Rise-X toolchain (the rise-x-mcp plugin and @rise-x/apps-sdk published to public registries, plus MCP agent-configuration tooling), cross-ecosystem work enhancements, and a set of permissions and data-fidelity fixes across the API.

🪄 Feature Updates & Enhancements

ACL Restructure — Phase 1: structure & groups as first-class (Feature — Platform, Permissions)

The write-side foundation for the permissions rework is now in production. Reads still use the legacy ACL, so there is no behavioural change for users in this phase. Legacy fields are flagged pending-obsolete and the indexed search path (acl.principles.id) is established. (#1451 — rise-x-api #2063, plus #2087 renaming ACL principle → principal)

Public distribution of the Rise-X toolchain (Feature — Developer Platform)

Rise-X's agent and app tooling is now publicly consumable:

• rise-x-mcp plugin published to a new public marketplace (rise-x/rise-x-ai-public-marketplace, marketplace name rise-x-public) — both MCP servers (prod + test), the domain skill with folded-in integration-authoring reference, and a setup skill for first-time OAuth onboarding. The MCP server implementation and rise-x-agentic-sdlc stay private. Shipped with branch/tag rulesets requiring two approvals, Actions restrictions, secret scanning, Dependabot, private vulnerability reporting, and a custom Rise-X Source-Available License (#1525)
• @rise-x/apps-sdk published to public npm — publish target switched from GitHub Packages to registry.npmjs.org, MIT licence added, scaffolder template updated so npx @rise-x/apps-sdk init works without GitHub auth. (#1568 — rise-x-app )

MCP — agent-configuration CRUD tools (Feature — AI / MCP)

Five new MCP tools wrapping /api/v4/config/agent — list_agents, get_agent, create_agent, update_agent, delete_agent — closing the loop so Claude can create Rise-X AI agents on the platform and wire them into federated apps. Client-side validation mirrors the API's rules; stored apiKey and sensitive headers read back redacted and round-trip correctly on update; mutations verify writes by echo-diff and surface silently-dropped fields as warnings[]. The agent runtime also moves its MCP-server and hosted-tool caps to env-configurable settings and gains support for the image_generation hosted tool. (#1526 — rise-x-ai #401)

Cross-Ecosystem Work — fan-out and related-work panel (Feature — Platform)

Two enhancements to the cross-ecosystem capability:

• Start N target works per submission — StartCrossEcosystemWork gains an IterationCountDataPath, so one submission can start many target works in the remote ecosystem instead of exactly one. Iterations run sequentially (the shared transaction isn't thread-safe), the allow-list consent check and relationship creation run per iteration, notifyOnCreate fires per created work, and there's a hard ceiling of 100 iterations. Behaviour is unchanged when no count path is configured. (#1545 — rise-x-api #2073)
• Related-work panel layout and click behaviour updated for cross-ecosystem works, to the agreed side-peek design. (#1372)

Apps & Dashboards — sharing model refinements (Feature — Platform)

The Apps and Dashboards sharing model is standardised on one visibility mode (Public or Private) and a two-role model (Owner / Viewer) — the Editor role is removed from both surfaces, with a one-time migration promoting existing Dashboard Editors to Owner. "Ecosystem" visibility is renamed Public; setting Public stays environment-owner-only. Under Private, an owner can share per user (Owner/Viewer), per company (Viewer only) and per subscription (View / No access). Granted companies surface in the Viewers table rather than a separate tab, and owners-only sharing plus clearer error surfacing land on the Access tab. (#1535 — rise-x-app #2488)

Attachments — unsupported file types no longer fail the whole AI run (Enhancement — AI / Attachments)

Uploading a mix of supported and unsupported files to an AI-enabled attachment component previously failed the entire AI extraction run — a .json alongside a .pdf meant neither was processed. Unsupported types are now filtered out silently and the valid files process normally; the run only fails when no supported files were provided. (#1541 — rise-x-app #2476)

Data-grid — filter a thing column by a sibling cell in the same row (Enhancement — Builder)

A data-grid thing column can now filter its asset search against another cell in the same row — e.g. a Project column that only offers projects belonging to the Customer picked in that row — by resolving {@row.X} tokens in entityDataFilter against the editing row before the search runs. This matches the {@row.X} convention already supported for optionsDataPath and readOnlyWhen. Unresolvable tokens now drop the filter key rather than emitting it unresolved (which the API treated as no filter and answered with every asset). (#1560 — rise-x-app #2487)

🐞 Bug Fixes

Permissions

Access denied to layout despite being Ecosystem Orchestrator (#1208)

An Ecosystem Orchestrator (and therefore Workflow Owner) could see the Edit Workflow and Builder buttons but hit "Access denied to the layout … for user" on clicking through, and had to re-invite themselves as Workflow Owner to get into the builder. Layout publish permissions are repaired and the grain ecosystem load made async, so an orchestrator can now move to Builder mode for anything in their ecosystem. (rise-x-api #2061)