docs: daily update 2026-07-24

[deco-cms]

Daily docs update — 2026-07-24

Covers commits merged to main in the last 24h (2026-07-23 09:00 UTC → 2026-07-24 09:00 UTC).

Note: this PR is stacked on the still-open docs/auto-update-2026-07-03 (#4297), which is itself stacked on docs/auto-update-2026-06-30 (#4188). Please merge #4188, then #4297, then this one, in order — merging out of order will reintroduce conflicts.

Commits that warranted doc changes

• 533988c feat(billing): self-serve checkout + prorated seat changes (3.2/3.3 backend) (feat(billing): self-serve checkout + prorated seat changes (3.2/3.3 backend) #5155)
• a65a05e fix(billing): harden Stripe webhook (fix(billing): harden Stripe webhook — ordering, replay, checkout guards #5156)
• 2e57494 feat(billing): Stripe webhook intake (feat(billing): Stripe webhook intake — subscription state + monthly allowance clock #5154)
• 88a805c feat(billing): syncOrgBenefits (feat(billing): syncOrgBenefits — gateway allowance rides every seat change #5149)
• 7c3f867 fix(orgs): disable seat toggle while a batch apply is in flight (fix(orgs): disable seat toggle while a batch apply is in flight #5153)
• c964f4b feat(billing): seat toggle + staged apply on the members page (feat(billing): seat toggle + staged apply on the members page #5147)
• 42aba34 feat(billing): seat management tools + change-log (invoiced orgs) (feat(billing): seat management tools + change-log (invoiced orgs) #5128)
• ebe558c feat(billing): per-seat foundation — org billing tables + seat gate (dormant) (feat(billing): per-seat foundation — org billing tables + seat gate (dormant) #5117)
• c8cf40a feat(sandbox): use shared staging branch (feat(sandbox): use shared staging branch #5132)
• e859cba feat(sandbox): share agent sandboxes by branch (feat(sandbox): share agent sandboxes by branch #5112)
• e7b3793 refactor(sandbox): always share agent sandboxes (refactor(sandbox): always share agent sandboxes #5116)

Commits reviewed and skipped

• 9af5d61 feat(shell): top-bar redesign (feat(shell): top-bar redesign with per-panel headers and responsive header #5055) — visual/layout only, no doc references match the changed elements
• 28ceae0 feat(github): add repository setup empty state (feat(github): add repository setup empty state #5090) — onboarding UX polish, not a new capability
• 2c6b9df feat(studio-pack): streamline API Key Manager agent (feat(studio-pack): streamline API Key Manager agent, cut confirmation friction #5131) — internal agent prompt tuning; api-keys.mdx doesn't document that agent's confirmation flow
• 4f85a2f, 0c3483e, 82c6bb0 feat(reports): SEO/share image, avatar, viewer-language slide (feat(reports): dynamic per-report SEO + share image #4897, feat(reports): add user avatar with sign-out to signal deck header #5125, feat(reports): render pre-connect report slide in the viewer's language #5121) — "Reports"/Signal Deck isn't part of the deco-studio doc set yet; flagged below instead of scoped in
• All fix(sandbox), fix(settings), fix(i18n), fix(chat), fix(auth), fix(sections-editor) commits (fix(sandbox): return 400 instead of 500 for non-string entries in git/discard filepaths #5150, fix(sections-editor): cancel pending page-rule autosave before section CRUD #5152, fix(chat): process window-dropped files in order, not racing on a stale position #5151, fix(sections-editor): cancel pending rule autosave before page-variant restructuring #5148, fix(web): open EventSource for first subscriber without crossTab leader #5145, fix(sandbox): return 400 instead of 500 when the rebase base branch isn't on origin #5144, fix(threads): skip chat_started analytics on an id-collision replay #5143, fix(sandbox): return 400 instead of 500 when the diff base branch isn't on origin #5142, fix(task-board): prompt to connect GitHub on every Super Agent assignment #5140, fix(cms-tour): only tour visible anchors; gate start on the toolbar #5139, fix(registry): guard Enter-key token save against duplicate submission #5137, fix(settings): validate CLICKHOUSE_MAX_MEMORY_USAGE instead of silently ignoring invalid values #5135, fix(home): enforce HOME_LIMIT inside the writer transform, not a stale pre-check #5138, fix(chat): only show copied checkmark after clipboard write succeeds #5136, fix(sandbox): return 409 instead of 500 for a blocked rebase #5134, fix(cms-tour): only anchor the submit step on the create-PR state #5133, fix(settings): validate PORT instead of silently defaulting to 3000 #5129, fix(auth): stop reflecting arbitrary origins in credentialed CORS #5127, fix(virtual-mcp): require org context for id-scoped legacy MCP requests #5126, fix(sandbox): stop discard from deleting renamed files with no recovery #5124, fix(settings): validate DATABASE_POOL_MAX instead of silently defaulting #5123, fix(runtime): validate redirect_uri on OAuth /authorize requests #5122, refactor(chat): dedupe the four mode-dismiss pill buttons in ChatInput #5119, fix(sandbox): serialize git/discard on the same claim lock as publish/rebase #5118, fix(sandbox): serialize publish/rebase per claim to stop shared-sandbox races #5114, fix(sections-editor): scope multivariate rule-schema cache per site meta #5113, fix(sandbox): return 409 instead of 500 for publish refusals on detached HEAD/protected branch #5109, fix(i18n): translate not-supported-tab fallback strings in dependency selection dialog #5110, fix(mcp-clients): log the actual error when configuration token issuance fails #5111, fix(sandbox-preview): surface a toast when opening a file in the explorer fails #5108, fix(auth): require organizationId to match the authenticated org in ORGANIZATION_MEMBER_REMOVE #5106, fix(chat): guard mention-metadata parsing against malformed/non-object shapes #5107, fix(sandbox): return 400 for path-traversal in git discard #5105, fix(organization): fail closed on unresolved org in ORGANIZATION_SETTINGS_UPDATE #5104, fix(sandbox-preview): translate the catch-all path-param placeholder #5103, feat(i18n): translate the agent instructions prompt-template insert #5098, fix(chat): translate the tool-call propose-plan card #5100, fix(sandbox-env): raise sandbox memory request 1Gi → 2Gi to stop node-pressure evictions #5101, fix(sandbox-preview): translate the file explorer delete confirmation dialog #5099, fix(registry): add aria-label to the cancel-replace-token button in the QA monitor panel #5096, fix(sandbox): show original content in the diff for a renamed file #5095, fix(helm): add missing CPU limits to nginx and worker containers #5094, fix(i18n): make others-thread state card copy business-friendly #5092, feat(i18n): translate hardcoded question/answer strings in UserAskPart #5141, feat(sandbox): user-provided git submodule credentials per virtual MCP #4885) — bug fixes, status-code hardening, i18n copy, or internal refactors with no user-facing behavior change
• b7c7ee fix(docs): repair broken legacy-admin quickstart links in deco-chat docs (fix(docs): repair broken legacy-admin quickstart links in deco-chat docs #5102) — touches apps/docs/ directly (deco-chat content, different doc set) and is already a direct doc edit

Commits reviewed: 66 (11 warranted doc changes across 3 feature clusters, 55 skipped)

Changed doc files

• studio/agents.mdx — added a callout under Sandbox noting that cloud sandboxes are now shared per branch across authorized collaborators on the same agent (was previously per-user/per-agent isolated)
• studio/user-management.mdx — added a Billing & seats section describing per-seat billing for invoiced orgs (Members page Seat column, staged apply), and a note that self-serve seat billing is rolling out; updated the "Members page" bullet in "Where to manage access"

pt-br counterparts of both files were updated with the same content, machine-translated (product terms — agent, connection, automation, MCP, seat, etc. — left in English per convention).

Consistency notes

• The "Reports"/"Signal Deck" feature (dynamic per-report SEO, share images, avatar/sign-out in the header, viewer-language rendering — feat(reports): dynamic per-report SEO + share image #4897, feat(reports): add user avatar with sign-out to signal deck header #5125, feat(reports): render pre-connect report slide in the viewer's language #5121) has no coverage anywhere in apps/docs/client/src/content/deco-studio/. It's unclear whether this is meant to be a publicly documented Studio feature or an internal/growth surface. Flagging for a human call — if it should be documented, it likely needs a new page rather than a patch to an existing one.
• feat(billing): self-serve checkout (feat(billing): self-serve checkout + prorated seat changes (3.2/3.3 backend) #5155) is explicitly "3.2/3.3 backend" and the seat UI only renders for invoiced orgs today (per feat(billing): seat toggle + staged apply on the members page #5147's own commit message) — the new user-management.mdx section is scoped to reflect that; will need a follow-up once self-serve checkout ships in the UI.

---

Summary by cubic

Updates Studio docs to cover per‑seat billing for invoiced orgs, shared cloud sandboxes by branch, and sections editor improvements (variant management and Location map). Includes EN and pt‑BR pages.

• New Features
  • Billing & seats (invoiced orgs): Seat column on Members lets you toggle paid seats. Changes stage, then apply in one batch. Updated Members page note. Self‑serve checkout is rolling out.
  • Cloud sandboxes: Shared per Git branch across authorized teammates on the same agent. Local runtime via deco link stays on your machine.
  • Sections editor – variants: Reorder to set priority, click to preview, save as a global section. Preview scroll position is preserved.
  • Location matcher: Interactive map to pick include/exclude areas. Falls back to manual entry if no Google Maps API key.

^{Written for commit 1cb1214. Summary will update on new commits.}