HyperFrames v0.9.30

Released on 2026-11-10.

Studio stays responsive on large projects while it keeps history. The preview server now refuses writes from other sites and host names it does not serve, so a tunnel or remote setup may need one setting.

Fixes

• CLI: When hyperframes reverse needs you to sign in, the agent now tells you why in one message with the link (and the device code on a remote terminal). The reverse skill also spots an outdated CLI install and runs the latest release instead (007664e25, #7488).
• AWS Lambda: The Lambda handler ZIP installs its runtime from a committed lockfile, with install scripts turned off (f9255e39a, #7485).
• Studio Server: On large projects, Studio's history checks no longer hold up the server (61e720b0e, #7491).
• Gcp Cloud Run: The Cloud Run image pins its base image and checks its browser and bun downloads by checksum (c6d243a2d, #7487).
• Studio Server: The preview server refuses writes from other sites and requests for host names it does not serve. Local use needs no change. If you open hyperframes preview or the Studio dev server through a tunnel, Codespaces or a remote dev host, that setup can now be refused with a 403: name the host in HYPERFRAMES_PREVIEW_ALLOWED_HOSTS (comma separated), for example HYPERFRAMES_PREVIEW_ALLOWED_HOSTS=demo.tunnels.example hyperframes preview (f318d3d08, #7490).

Full changelog

v0.9.29...v0.9.30