# Changelog

<!--
  Entry conventions: docs/changelog-format.md - read it before adding entries here.

  The three rules that account for most review feedback:

  1. Every bullet needs an explicit grammatical subject. No "Provides support for ..." or "Misc.
     improvements to ...".
  2. Open with a past-tense verb (Added / Fixed / Removed / Renamed) when reporting an action on the
     codebase, or with the symbol itself (`Foo.bar` now ...) when a living API changed behavior.
  3. Plain ASCII punctuation only. Use " - " for in-sentence breaks, never an em dash.
-->

## 90.0.0-SNAPSHOT - unreleased

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW - `formatConfig`, `DateInput` props, mobile styling)
See [`docs/upgrade-notes/v90-upgrade-notes.md`](docs/upgrade-notes/v90-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

* Removed `NumberFormatOptions.formatConfig`, which took a numbro format. Use `precision`, `zeroPad`
  and `withCommas` instead.
* Desktop `DateInput` now renders its calendar with react-day-picker 10, as the mobile `DateInput`
  already did, and its time picker is Hoist's own 24-hour control. `dayPickerProps` now takes
  react-day-picker 10 props - see the upgrade notes for the renames from v8. Removed
  `timePickerProps`, which took Blueprint `TimePicker` options such as `useAmPm`.
* Mobile components no longer render Onsen UI custom elements. `Button`, `TextInput`,
  `NumberInput`, `SearchInput`, `Checkbox`, `SwitchInput`, `Dialog`, `DialogPanel`, `Toast`,
  `TabContainer` and `MenuButton` menus render plain elements under `xh-` class names. App SCSS
  that targeted Onsen's class names (`.button`, `.text-input`, `.dialog`, `.tabbar`, `.toast`,
  `.page__content` and others) or its CSS variables must target Hoist's instead.
* Mobile components now render in the app font. Onsen applied the system font to its buttons,
  dialogs, tabs, menus and toasts, so any of those an app had not styled change typeface.
* Removed the `modifier` prop from mobile `Button`, `TextInput`, `NumberInput`, `SearchInput`,
  `Checkbox` and `SwitchInput`. It passed an Onsen modifier string and has no equivalent.
* Mobile `Checkbox` and `SwitchInput` now put their `testId` on the native `<input>` rather than
  on a wrapper, as on desktop.

### 🎁 New Features

* Added `GridModel.headerContextMenu`, a context menu shown on right-click of a desktop grid column
  header. By default it sorts, pins, hides and autosizes the clicked column and opens the column
  chooser. Set `false` to show none. Grids that disable `contextMenu` get no header menu by default.
* Added `sort`, `pinColumn`, `hideColumn` and `autosizeColumn` grid menu tokens, which act on the
  clicked column, and `Column.availableSorts`. The `sort` token offers one item per sort the column
  offers.
* Added `genRandomId()` to `@xh/hoist/utils/js` for short random alphanumeric IDs.
* Mobile `TabContainer` now applies `${testId}-switcher` to its switcher and
  `${testId}-switcher-${tabId}` to each switcher button, as on desktop.
* Added "Purge Connections" buttons to the Admin Console Connection Pool Monitor, to close all
  pooled JDBC connections on one instance or across the cluster. Requires hoist-core v44+.

### 🐞 Bug Fixes

* Fixed column group borders not following their columns when reordered or hidden via the column
  chooser.
* Fixed grid row borders and the row drag drop line stopping at the last column when the columns
  do not fill the grid's width. Both now span the full row, as they did before AG Grid 36.
* Fixed a spec file in `@xh/hoist/test-support` failing with an unhandled error when it ended
  within 5 seconds of boot. The kit now sends pending pref, activity, metric and span pushes before
  it closes the fake hoist-core, and the fake's `xhSizingMode` default no longer makes boot save it.
* Fixed desktop `Select` waiting on its selected option after its menu closed or it unmounted. The
  wait could scroll another select's menu, or leave an unhandled rejection after five seconds.
* Fixed `ViewManagerModel` refreshes reverting a pin or auto-save change whose write was still
  debounced or in flight.
* Fixed `ViewManagerModel` sending overlapping user state writes, which could fail on the server
  and lose a pin, auto-save or current view change. It now sends one write per burst of changes.
* Fixed mobile `TabContainer` not rendering a tab with `excludeFromSwitcher`, so activating one
  showed nothing. Such tabs now render as on desktop, only without a switcher button.
* Fixed mobile `TextInput`, `NumberInput` and `SearchInput` applying `domAttrs` to a wrapper
  element rather than to the `<input>` itself.
* Fixed `Markdown` rendering "No model found" in place of its content when no Hoist model was in
  context, such as inside another React library's components.

### ⚙️ Technical

* Removed two runtime dependencies with security histories in favor of small Hoist
  implementations, each pinned by a spec recorded from the library it replaces:
    * `semver` - `checkVersion()` and friends compare versions with a numeric parser, with no
      regex over input. The `36.*.*` style maximums the ag-Grid and Highcharts kits use still work.
    * `ua-parser-js` - `UserAgentModel` classifies phone, tablet and desktop from the user agent,
      with the same iPadOS and Chromium `userAgentData` checks. Smart TVs and other agents that
      are neither phone nor tablet now count as desktop, where before none of `XH.isPhone`,
      `isTablet` and `isDesktop` was true.
* Desktop and mobile `DateInput` build their calendar props with one shared helper and share one
  react-day-picker theme, in `@xh/hoist/kit/react-day-picker`, for light and dark modes. Dropping
  Blueprint's date picker also drops the second copies of date-fns and react-day-picker it pulled
  into every app.
* Desktop `Select` now windows large option lists with react-window 2 directly, dropping
  react-windowed-select and the second copy of react-window it pinned into every app.
* `LocalStorageService` and `SessionStorageService` now read and write browser storage directly.
  Keys and JSON values are stored exactly as before.  Removed the unused `isFake` getter - when
  storage is unavailable the service logs a warning and holds values in memory, as before.
* Removed Onsen UI from the mobile toolkit, with the `@xh/hoist/kit/onsen` wrappers. Each mobile
  component now owns its DOM and styles.

### ✨ Styles

* Mobile apps no longer load Onsen UI's stylesheet or its icon fonts. Touch-device defaults that
  the Onsen stylesheet supplied - no tap highlight, no focus rings on controls, `touch-action:
  manipulation`, heading sizes, and a body sized to the viewport - are now set by the mobile
  `AppContainer` stylesheet.
* Mobile `Dialog` and `DialogPanel` render into a portal on the document body, so they cover the
  viewport wherever they sit in the component tree.

### 📚 Libraries

* router5 `7.0 → 8.0`
* router5-plugin-browser `7.0 → 8.0`
* mobx `7.0 → 7.1` - `toJS` now includes `@observable accessor` fields, which it previously left out
* react-window `2.3 → 2.4`
* react-windowed-select `removed`
* semver `removed`
* ua-parser-js `removed`
* http-status-codes `removed`
* inflection `added` - replaces lodash-inflection behind `pluralize`, `singularize` and `ordinalize`
* lodash-inflection `removed`
* short-unique-id `removed`
* store2 `removed`
* numbro `removed`
* @blueprintjs/datetime `removed`
* date-fns `removed`
* onsenui `removed`
* react-onsenui `removed`


## 89.3.1 - 2026-10-21

### 🐞 Bug Fixes

* Fixed pinned columns scrolling out of view in the summary row of mobile grids during horizontal
  scroll.

## 89.3.0 - 2026-10-21

### 🎁 New Features

* `fetchNdjson` streams are now aborted cleanly and fully via the `autoAbortKey` or if the reading
  consumer closes the connection early.

### 🐞 Bug Fixes

* Fixed a `FetchOptions.fetchOpts.signal` replacing `FetchService`'s own, which left `timeout` and
  `autoAbortKey` unable to abort the request. The two signals are now joined, and an abort with a
  custom reason reports as "Fetch Aborted".
* Fixed oversized pinned column zones in the desktop column chooser. They now fit their columns.


## 89.2.0 - 2026-10-20

### 🎁 New Features

* Added `FetchOptions.propagateTrace` and `FetchService.defaults.propagateTrace` to choose which
  requests carry a `traceparent` header, with `FetchService.isHoistServerUrl()` as the default.
* `DashViewSpec.groupName` now nests groups when it separates names with `/`, as in `Charts/Line`.
  The add view menus of `DashContainer` and `DashCanvas` show each level as a submenu, and
  `DashCanvasWidgetChooser` shows each as a card. Existing group names that contain `/` now nest.
* `DashCanvas` add view menus and `DashCanvasWidgetChooser` now list each group where its first
  view spec appears, as `DashContainer` does, not ahead of all ungrouped specs. To keep groups at
  the top, define grouped specs first.

### 🐞 Bug Fixes

* Fixed `ViewManagerModel` reinstalling the prior view when a save of it finished after the user
  selected another view. Auto-save could then write the new view's state into the prior view.
* Fixed `ViewManagerModel` installing an earlier selected view when it finished loading after a
  later one. A refresh also reloaded the prior view over a newer selection.
* Fixed `ViewManagerModel` dashboards picking up a change made in the prior view just before a
  switch, which marked the new view dirty. A destroyed `PersistenceProvider` now writes any pending
  change at once.
* Fixed desktop tab switcher context menus throwing for an `extraMenuItems` entry with a static
  `items` submenu. Items a `prepareFn` adds now also receive the tab in their `actionFn`.
* Fixed `XH.safeDestroy()` stopping at the first `destroy()` that threw, which left the remaining
  objects - and the rest of a model's managed children - undestroyed. It now logs the error.

### ⚙️ Technical

* Added protected `PersistenceProvider.cancelPendingWrite()`. `pushStateToTarget()` now drops any
  pending write. A custom provider that overrides it without calling `super` should call this
  method.
* `FetchService` now sends the `traceparent` header only to the app's own server, so cross-origin
  requests cannot fail a CORS preflight on it. Set `propagateTrace` to send it elsewhere.


## 89.1.0 - 2026-10-19

### 🎁 New Features

* `Column.DEFAULT_WIDTH` is now 100px, up from 60px, to reduce layout shift when autosizing.
* Added JsonBlob and ViewManager support to the fake hoist-core in `@xh/hoist/test-support`. App
  specs can now boot an app that creates `ViewManagerModel`s with no setup, and seed views and view
  state with `hoistCore.jsonBlobs`.
* `NumberInput.displayWithCommas` now accepts `'always'` to insert commas while the user types,
  on desktop and mobile. `'whenBlurred'` names the existing behavior, and `true` remains its alias.

### 🐞 Bug Fixes

* Fixed stale records in a `Store` rebound from one Cube `View` to another.
* Fixed `SelectEditor`, `DateEditor`, and `BooleanEditor` overwriting a cell's value when an edit
  was started by typing a character. `SelectEditor` now enters the character as search text,
  `DateEditor` as typed text, and `BooleanEditor` ignores it.
* Fixed `XH.jsonBlobService.findAsync()` finding only global blobs. It sent no owner, so it never
  returned a blob owned by the current user, as its docs describe.
* Fixed desktop `NumberInput` with `min` or `max` rendering blank on mount when its formatted value
  was not a plain number, as with `displayWithCommas` and a value of 1,000 or more, or a
  `valueLabel`. Changing `min` or `max` on such an input could also set its value to 0.
* Fixed a grouped `Grid` showing its grouped column again on any column state change, such as a
  resize, an autosize or a view restore. A header drag while grouped also saved the column as
  hidden, so it stayed hidden after ungrouping.
* Fixed `onShowLazy` tabs and other managed refresh contexts replaying a missed auto-refresh as a
  manual refresh when shown. The replay now stays an auto-refresh unless a missed refresh was manual.
* Fixed a model created with `creates()` re-running `onLinked()` on every render when its component
  had no Hoist model above it, as in a component test rendered at the root.

### ⚙️ Technical

* `fmtNumber` and the formatters built on it now format digits with a cached `Intl.NumberFormat` in
  place of numbro. This speeds up bulk formatting such as all-rows grid autosizing. Ordinary values
  render as before. Edge cases such as negative ties and `Infinity` changed - see the upgrade notes.

### 🤖 AI Docs + Tooling

* The hoist-react MCP server and `hoist-docs` CLI now serve docs from companion libraries that build
  on Hoist, such as `@xh/hoist-chat-kit` or a client firm's shared package. A library opts in with
  `"hoist": {"docRegistry": "<path>"}` in its `package.json`. Its doc ids take the package name as
  a prefix, and the server instructions name each library. A library can also add guidance for
  agents with `mcpInstructions`, for example which Hoist components it replaces, and keep its
  maintainer docs out of apps with `"mcpAudience": "maintainers"`. See
  [Companion Library Docs](docs/companion-library-docs.md).


## 89.0.1 - 2026-10-14

### 🐞 Bug Fixes

* `GridModel.setColumnState()` now drops repeated `colId` entries from saved column state, keeping
  the first. Saved state with a repeated column made the v87 column chooser silently error and break.
* Fixed desktop `DashCanvas` failing to render in v89.0.0.
* Fixed `XH.message()`, `XH.confirm()`, and `XH.prompt()` resolving to `null` when a route change
  or other forced close shut the dialog. Callers that tested `!== false` ran the confirmed action.
  A dialog closed without a choice now resolves to `false`, the same as a cancel. A dismiss with
  `cancelOnDismiss: false` also resolves to `false` - the flag now only skips `onCancel`.

### ⚙️ Technical

* The unit test kit now stubs `ResizeObserver`, which jsdom lacks, so app specs can render
  components that track their own size.

## 89.0.0 - 2026-10-13

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW - filter specs, app option presets, icon listing, grid defaults, grid options, badge spacing, column library config)

See [`docs/upgrade-notes/v89-upgrade-notes.md`](docs/upgrade-notes/v89-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

* `GridFilterModelConfig.fieldSpecs` is no longer an allow-list. Any `filterable` column it omits
  now gets a default filter - set `filterable: false` on columns that should have none.
* Desktop `themeAppOption()` and `sizingModeAppOption()` now pass `inputProps` to a
  `RadioCardInput`. Apps passing `SegmentedControl` props there should add `previewCards: false`.
* `Icon` now holds registration and lookup methods next to its factories. Apps that list icons via
  `Object.keys(Icon)` must switch to `Icon.getCatalog()`.
* Rendered icon elements carry their FA name as `props.faName`, not `props.iconName`.
* `GridModel.useVirtualColumns` now defaults to true. Set it to false on grids whose offscreen
  cells must be in the DOM, such as for test automation that reads them.
* Grid cells in columns without a `renderer` now render as plain text, with an `xh-cell--plain`
  class and no `xh-cell-inner-wrapper` span. Styles targeting that span in such columns should
  target `.ag-cell` instead.
* `Badge` no longer has a 5px left margin. Separate a badge from preceding text with a space, as in
  `span('Users ', badge(n))`, or with a `gap` on an enclosing `hbox`.
* Removed `ColLibraryConfig.autoExpandOnFilter`. The Column Library now expands every group with a
  match while a search is active. Remove the key from any `columnLibrary` config.
* `Grid` now ignores `agOptions.groupDefaultExpanded`. Set `GridModel.expandLevel` instead.
* Removed `GridExperimentalFlags.disableScrollOptimization`. The post-load row height pass it
  disabled now runs only for grids whose rows vary in height. Remove the key from grid configs.

### 🎁 New Features

* Added `WeightedAverageAggregator` for Cube fields averaged by the weight of a second field. Pass
  `{absolute: true}` to weight by magnitude.
* Added `Aggregator.dependsOn` for custom aggregators that read other leaf fields - a View now
  re-aggregates the field on changes to those as well.
* Reorganized the Admin Console for clarity. Its General tab now holds the former Servers and User
  Data tabs as sidebar groups, with their URLs moved under `/admin/general/...`.
* Added desktop `RadioCardInput`, a single-select input that shows each option as a card with a
  preview, label, and optional description.
* Desktop `themeAppOption()` and `sizingModeAppOption()` now show their choices as `RadioCardInput`
  cards with a mini preview of each theme or grid sizing mode. Pass `previewCards: false` for a
  `SegmentedControl`, now sized to its options.
* Added `Icon.register()` and `Icon.registerAll()` so apps can add their own FontAwesome icons as
  `Icon` factories. Apps that call FontAwesome's `library.add()` directly should switch to these.
  Added `Icon.get()` to render an icon by name and `Icon.getCatalog()` to list them all.
* Added `IconPicker`, a desktop input that picks from a searchable grid of all catalog icons. The
  Admin Console alert banner editor now uses it. Its grid renders only the rows in view, so it
  stays responsive with thousands of icons.
* Added `@xh/hoist/test-support`, a Vitest kit for app unit tests. `initTestAppAsync()` boots a
  headless app against an in-memory fake of hoist-core. Needs `configureVitest()` from
  hoist-dev-utils 16.1. Experimental in v89 - it may change.
* Added `testId` support to desktop `ViewManager`, with derived ids for its buttons, menu, views,
  and dialogs. See `docs/test-automation.md`.
* Added `MenuItem.testId` for desktop and mobile menus. Grid context menus now also render
  `RecordAction.testId`.
* Added `MenuItem.keepMenuOpen` to leave a menu open after a click. Open desktop menus now re-run
  `prepareFn` when the state it reads changes.

### 🐞 Bug Fixes

* Fixed `GridFilterModelConfig.fieldSpecs` disabling filters on all other `filterable` columns.
  See Breaking Changes above.
* Fixed the desktop `SegmentedControl` rendering 2px taller than adjacent buttons when `outlined`.
* `XH.message()`, `XH.confirm()`, and `XH.prompt()` now resolve to `null` when closed without a
  choice, instead of never settling.
* Fixed `Store.modifyRecords()` leaving `Store.isDirty` true after its only edit was undone.
* Fixed `Store.validateAsync()` skipping records changed just before the call, and `Store.isValid`
  reporting true while a changed record's first async validation was still running.
* Fixed `ViewManagerModel` overwriting the user's saved current view when views failed to load.
* Fixed `ViewManagerModel` dropping changes made while a save or auto-save was in flight.
* Fixed the desktop `ViewManager` menu button dropping its `xh-view-manager__menu-button` class.
* Fixed grid row backgrounds (stripes, tree / group colors, total row) and the hover and selection
  highlights stopping at the last column. Also fixed the total row highlighting on hover.
* Fixed spurious "Failed to convert GL to state" console warnings from `DashContainerModel`.
* Fixed `TrackService` sending the time an entry was queued in place of its `timestamp`.
* Fixed `HoistBase.addReaction()` letting a pending debounced `run` fire after its owner was
  destroyed or the reaction was disposed.
* Fixed `FormModel.allErrors` and `SubformsFieldModel.allErrors` omitting errors from nested
  subforms.
* Fixed the focused cell dropping its column border under `cellBorders`, and shifting its content
  under `rowBorders`, when `showCellFocus` is off (the default).
* Fixed `Store.updateData()` and `Store.modifyRecords()` dropping other summary records when one
  changed, and `Store.revert()` dropping default field values from summary records.
* Fixed `FieldFilter` text operators (`like`, `begins`, `ends` and their negations) matching blank
  values as the text "null" or "undefined".
* Fixed `FieldFilter.equals()` treating filters on equal `Date` values as different, for example a
  filter restored from JSON.
* Fixed `FilterChooserFieldSpec` and `GridFilterFieldSpec` dropping `0`, `false` and `''` from
  explicit `values`.
* Fixed `FilterChooserModel` cutting off a typed value at an operator word or symbol inside it, for
  example `Name = This Is Us`.
* Fixed `StoreSelectionModel` holding two records in `single` mode after `select()` with
  `clearSelection: false`.
* Fixed `StoreRecord.isDirty` returning `null` in place of `false` for an added record.
* Fixed the `validEmail` constraint failing blank values in place of leaving them to `required`.
* Fixed `GridModel.getSortedRecords()` ignoring a column's record-based `sortValue` before the grid
  renders.
* Fixed `GridFilterModel.mergeColumnFilters()` throwing for a `FieldFilter` instance and changing
  the filter specs passed to it.
* Fixed the grid column header filter logging a MobX reaction error on first open. Its Apply button
  also no longer turns on for an unchanged OR filter.
* Fixed `TabContainerModel.activatePrevTab()` wrapping to the last tab without `cycle: true`.
* Fixed `GroupingChooserModel.favoritesOptions` sorting favorites by only the first letter of their
  labels.
* Fixed `fmtNumberTooltip` and `precision: null` showing spurious digits for large values, for
  example `44,510,347.00000001`. Full precision now stops at 15 significant digits.
* Fixed `parseNumber` returning float artifacts for decimal shorthand, for example `'8.2m'` as
  `8199999.999999999`, which broke equality filters in `FilterChooser`.
* Fixed `fmtQuantity` adding `.00` to values of 1m or more left unscaled by `useMillions: false` or
  `useBillions: false`.
* Fixed `fmtCompactDate` ignoring `nullDisplay`, and formatting times on its near-future cutoff day
  differently depending on the time of day.
* Fixed `timestampReplacer` and `withFormattedTimestamps` ignoring their `format` option.
* Fixed `@sharePendingPromise` running a method twice when it threw synchronously.
* Fixed a cancelled `Timer` keeping its heartbeat alive, and a `Timer` with `delay: true` and a
  disabled interval scheduling a negative timeout.
* `FetchService` now sends every `PUT` without a `Content-Type` as form-encoded, as for `POST`.
  A `PUT` with `params` sent `text/plain`, so servers ignored the params.
* Fixed errors reported by `ExceptionHandler` omitting the type and number of a failed load.
  Arrays in these reports, such as the stack trace, are also no longer sent as objects.
* Fixed `XH.reloadApp()` re-encoding spaces in existing query params as `+`, and leaving its
  `xhCacheBuster` param in the URL after the reload.
* Fixed an explicit `rowHeight` on `AgGrid`, or in `Grid.agOptions`, being ignored when sizing rows.
* Fixed tree grid parent rows ignoring `Column.rowHeight`, and so sitting shorter than their
  children.
* Fixed `GridModel.expandToLevel()` ignoring intermediate levels in grids grouped by two or more
  columns. `expandToLevel(-1)` also collapsed every row - it now expands all levels, as
  `expandLevel: -1` does.
* Fixed desktop `Select` ignoring changes to its `leftIcon` prop after the first render.
* Fixed `Icon` factories not showing `title` as a tooltip since the FontAwesome 7 upgrade in v84.
  Titled icons also get the title as their `aria-label`, so screen readers announce them again.
* Fixed the Admin Console config differ flagging typed JSON configs as changed, based on their
  code-derived resolved and default values, and showing those values as `[object Object]`.
* Fixed `Badge` ignoring the `align` of its grid column. It now renders inline.
* Fixed `FormFieldSet` throwing a MobX cycle error when passed a `model`. Fields and nested sets
  register with the `FormFieldSet` that encloses them.

### ⚙️ Technical

* Deprecated `IconProps.iconName` in favor of `faName`, and `SpinnerProps.iconName` in favor of
  `icon`. Support for both ends in v91.
* `XH.isDesktop`, `XH.isPhone`, and `XH.isTablet` now parse the user agent once at startup, not on
  every read.
* `Column.getAgSpec()` creates its renderer, tooltip, editor and comparator functions once per
  `Column`, sorting reads the comparator via `Column.getAgComparator()` instead of building a
  column def, and static `cellClass` and `editable` values replace per-cell callbacks.
* `AgGrid` now publishes its row and header heights to ag-Grid as `--ag-row-height` and
  `--ag-header-height`. `Grid` and `AgGrid` pass ag-Grid a `getRowHeight` function only when row
  heights vary, so uniform grids skip per-row height calls and the post-load row height pass.
* `Column` tooltips no longer mount for rows without a record, or for editable cells with no
  validation results, and the tooltip component is a plain function component.
* `Grid` now passes AG Grid only the pinned rows that changed. A summary row update redraws the
  grid's rows once, where it redrew them twice.
* Improved autosize performance on large grids. Column values are now ranked by cached
  per-character widths, and only the 500 widest are measured exactly.
* Made `GridModel.expandToLevel()`, `expandAll()` and `collapseAll()` faster on large tree and
  grouped grids.
* Added `installAgGridForTests()` to `@xh/hoist/test-support/agGrid`, so unit tests can render a
  `Grid` against ag-Grid's community modules.
* Added a Vitest unit test suite for the library, run with `pnpm test`. CI runs it on every PR and
  before publishing snapshot and release builds. See `docs/unit-testing.md`.
* Declared `vitest`, `msw`, `jsdom` and Testing Library as optional peer dependencies. Apps install
  them only to run unit tests.
* Updated Hoist to build with TypeScript 7. Apps can stay on 5.9 or move to 7, which needs two
  `tsconfig.json` overrides. See the upgrade notes.
* `creates()`, `uses()` and `useLocalModel()` now build and link their models untracked by MobX.
  Observable state read during model construction or `onLinked()` no longer triggers a
  spurious one-time re-render.
* `Store` now patches small changes by default (`experimental.maxPatchRatio` of 0.1). Records added
  by a change append rather than taking their source position. This may affect the sort ordering
  of unsorted grids when data changes. Filters that read state outside the record must call
  `Store.refreshFilter()` when that state changes.
* `Field` now skips DOMPurify for strings with no `<` when `enableXssProtection` is set. Such
  strings hold no markup, so large loads skip one DOMPurify call per string value.
* `Field` now parses every unparseable `date` value to one shared Invalid Date, preventing an
  unparseable Date from causing extra record allocation on every data load.

### ⚙️ Typescript API Adjustments

* `RowUpdate` passed to `Aggregator.replace()` now carries the leaf's full data before and after
  as `leafOldData` / `leafNewData`.
* Fixed `GridProps.agOptions` rejecting an `HTMLElement` for `popupParent` and other DOM-typed
  options under TypeScript 6 and later.
* Typed `@bindable`, `@bindableRef`, `@persist`, and `@persist.with()` as `accessor` decorators.
  `tsc` now reports a plain field under any of them, which compiled before and threw at runtime.

### 🤖 AI Docs + Tooling

* Indexed `@xh/hoist/test-support` in the symbol tools, so `hoist-search-symbols` and `hoist-ts`
  find the test kit for app agents.
* Added support for reference-style Markdown links (`[text][label]`) to the doc tools. Section reads
  now include the link definitions they use.

### ✨ Styles

* Widened the desktop Options dialog from 500px to 560px to fit the new theme and grid sizing cards.
* Restyled the desktop login form to match mobile - a centered card with the `loginPanelIcon`,
  labeled fields, and a full-width login button.
* Blueprint and grid tooltips now follow the app theme, styled by new `--xh-tooltip-*` vars. Apps
  can remove their own overrides of Blueprint's inverted tooltip colors.

### 📚 Libraries

* @auth0/auth0-spa-js `2.27 → 2.28`
* @azure/msal-browser `5.23 → 5.25`
* @blueprintjs/core `6.20 → 6.21`
* @blueprintjs/datetime `6.2 → 6.3`
* @fortawesome/fontawesome-pro `removed` (unused - icons come from the `pro-*-svg-icons` packages)
* react-grid-layout `2.2 → 2.3`
* swiper `12.2 → 14.3`
* ts-morph `27.0 → 28.0`
* typescript `5.9 → 7.0`

## 88.1.2 - 2026-10-06

### 🐞 Bug Fixes

* Restored the `MsalClient` defaults lost in v88: `enableSsoSilent` and `enableTelemetry` again
  default to `true`, and MSAL logs at `Warning` level. Also restored the 3000ms
  `system.iframeBridgeTimeout` that caps `ssoSilent` failures, dropped in the MSAL 5 upgrade.

### 🤖 AI Docs + Tooling

* Fixed the v88 `codemod-remove-makeObservable.mjs` deleting constructors that merged defaults into
  their `super()` call. It now removes only constructors it emptied itself, whose remaining
  `super()` passes through the constructor's own params. The v88 upgrade notes gain a grep to find
  constructors an earlier copy removed.

## 88.1.1 - 2026-10-06

### 🤖 AI Docs + Tooling

* Fixed the `@persist` ordering check in the v88 upgrade notes. It missed the stacked
  `@persist.with({...})` form and flagged fields that were already in the correct order. The check
  for removed `*Col` aliases now matches whole words only.
* Added a step to the v88 upgrade notes to restart the hoist-react MCP server after installing v88.
* The v88 codemods now print file paths relative to the working directory.

## 88.1.0 - 2026-10-01

### 🎁 New Features

* Both `StoreFilterField` and `GridFindField` now fully support `ZoneGrid`. Their `gridModel` prop
  accepts a `ZoneGridModel`, in which case they search the fields mapped to the grid's zones, not
  its two zone columns. With no prop, both bind to the nearest `GridModel` or `ZoneGridModel` in
  context. Both now also re-derive their searchable fields when columns are shown or hidden, not
  only when the grid's columns are replaced.
* `BaseOAuthClient.initAsync()` now accepts an optional `CallContextLike`, and tags its span with
  `xh.auth.method` (`acquireSilent`, `ssoSilent`, `loginPopup`, or `loginRedirect`) so auth latency
  can be broken down by token path. Both `MsalClient` and `AuthZeroClient` report the method, also
  available as `BaseOAuthClient.lastAuthMethod`. Apps opt in by passing the ctx from
  `HoistAuthModel.completeAuthAsync()` to `client.initAsync(ctx)`.

### 🐞 Bug Fixes
* Fixed `defaultReadonlyRenderer` reformatting plain strings that happen to parse as JSON scalars -
  e.g. a JsonBlob token like `3473e37` rendered as `3.473e+40` in read-only form fields. Only JSON
  objects and arrays are now pretty-printed, and other strings render as-is.
* Fixed `StoreFilterField` ignoring changes to its `gridModel` or `store` props after mount.
* Fixed app load tracking recording inflated load times for pages hidden at any point during load,
  such as a page opened in a background tab or switched away from while loading. These loads now
  omit `elapsed` and report `hiddenDuringLoad: true` in their data. This also drops them from the
  server's `xh.client.load.*` metrics.
* Fixed `DashContainer` views intermittently rendering blank until their tab was re-selected or
  dragged. Active state was set on a fixed timer that could fire before the view's model existed,
  most often on slower clients. Affected tabs could also miss their context menu and title updates.

### ✨ Styles

* Increased the default width of `GridFindField` from 180px to 240px, leaving room to type once its
  match count and nav buttons appear.

## 88.0.0 - 2026-09-29

### 💥 Breaking Changes (upgrade difficulty: 🔴 HIGH - TC39 decorators + Rsbuild, AG Grid 36, MobX 7, removals)

See [`docs/upgrade-notes/v88-upgrade-notes.md`](docs/upgrade-notes/v88-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

The changes below are grouped by area. The first two groups - the decorator and build migration,
and AG Grid 36 - affect every app. The rest apply only to apps using the named APIs.

#### Decorators and Build Tooling

* **Migrated to TC39 Stage 3 (2023-11) decorators**, retiring `experimentalDecorators`. The
  migration drops the `makeObservable(this)` boilerplate and gives Hoist per-property private
  storage. Apps add `accessor` to `@observable`/`@bindable` fields and run the codemods in
  `docs/codemod/v88/`. Hoist now requires `@xh/hoist-dev-utils >= 16`. Upgrade both packages
  together, because a legacy-decorator app built against the new dev-utils silently loses every
  `@observable` and `@bindable` field.
    * `@xh/hoist-dev-utils` 16 builds with Rsbuild only - `configureWebpack()` is gone. Apps replace
      `webpack.config.js` with an `rsbuild.config.mjs` calling `configureRsbuild()`, switch their
      scripts to `rsbuild dev` / `rsbuild build`, and pass build-time overrides as `XH_*`
      environment variables rather than `--env` flags. See the
      [dev-utils migration guide](https://github.com/xh/hoist-dev-utils/blob/develop/README.md#migrating-from-v15-webpack).
    * `@observable accessor` fields are now prototype getter/setters rather than own enumerable
      properties, which changes `Object.keys` and spread (`{...model}`) over model instances.
    * `@persist` must now come *after* the MobX decorator (`@bindable` then `@persist`).
      Reversed, provider creation fails and the field stops persisting:
      `PersistenceProvider.create()` logs the error to the console, but nothing throws and there
      is no type error. Decorator order was irrelevant under legacy decorators, and the codemods
      do not reorder them, so audit every `@persist` in app code by hand.

#### AG Grid 36

* Upgraded to AG Grid 36.
    * Apps must bump their `ag-grid-community`, `ag-grid-react`, and (if used)
      `ag-grid-enterprise` dependencies to `36.2` or later.
    * AG Grid Enterprise requires a license valid for releases on or after 2 June 2026. Apps with
      an older key see a watermark and console error after the bump.
    * AG Grid 36 restructures the grid into a single scrollable container and renames its internal
      layout classes. Apps with custom SCSS targeting AG Grid internals (for example
      `ag-floating-top`, `ag-center-cols-viewport`, `ag-body-viewport`) must migrate to the new
      names. Theme defaults now resolve against an inner `.ag-styled-root` element. See the
      [AG Grid 36 upgrade guide](https://www.ag-grid.com/react-data-grid/upgrading-to-ag-grid-36/).
    * Hoist now styles grids with AG Grid's JS Theming API rather than the legacy balham CSS theme.
      Legacy CSS themes are mutually exclusive with the `theme` grid option Hoist now supplies.
      Apps must therefore remove both the `provideGlobalGridOptions({theme: 'legacy'})` call and
      the `ag-grid-community/styles/ag-grid.css` / `ag-theme-balham.css` imports from their
      `Bootstrap`.
    * Hoist no longer applies the `.ag-theme-balham` / `.ag-theme-balham-dark` classes. Apps with
      custom CSS targeting either must retarget, using Hoist's own `.xh-ag-grid` wrapper class.
      Prefer the new `GridModel.theme` config (below) or the `--xh-grid-*` variables over CSS
      wherever they suffice.

#### Other

* Upgraded to MobX 7 and mobx-react-lite 5. MobX's dotted annotations and comparers are now named
  exports, re-exported from `@xh/hoist/mobx`: `@observable.ref` -> `@observableRef`,
  `@computed.struct` -> `@computedStruct`, `comparer.shallow` -> `compareShallow`, and so on.
  Hoist's `@bindable.ref` is likewise now `@bindableRef`. Apps declaring `mobx` directly must bump
  to `7.x`.
  Run `docs/codemod/v88/codemod-mobx7-rename.mjs` to apply the renames.
* Raised the `react` and `react-dom` peer dependency floor to `19.3`. Apps must bump both to
  `^19.3.0`. React 19.3 is a compatible minor with no breaking changes of its own.
* Routed `TabContainerModel` no longer passes a tab's own route params to the sibling tab being
  activated. Only params declared by the container's route or its ancestors now carry over, so
  apps with sibling tabs sharing a param must declare it once on their common parent route.

#### Scheduled Removals

* Removed `HoistBase.withSpan()`, deprecated in v86. Use `runner().span(...)` instead.
  `TraceService.withSpan()` remains available for advanced use.
* Removed the `FetchOptions.span` and `FetchOptions.loadSpec` fields, deprecated in v86. Pass a
  `CallContextLike` as a second argument - for example `XH.fetchJson({url}, {loadSpec})`.
* Removed `PersistenceProvider.mergePersistOptions()`, deprecated in v86. Use `persistOptions()`
  instead.
* Removed `PopoverFilterChooser`, deprecated in v86.3. Use `filterChooser({popover: true})`
  instead as the popover behavior is a built-in mode of `FilterChooser`.
* Removed the deprecated `LogSource` type alias. Use `NameSource`, exported from the same
  `@xh/hoist/utils/js` entry point, instead.
* Removed the long-deprecated `Col`-suffixed column spec aliases `boolCheckCol`, `numberCol`,
  `fileExtCol`, `dateCol`, `timeCol`, `dateTimeCol`, `compactDateCol`, and `localDateCol`. Use
  the un-suffixed spec of the same name - `boolCheck`, `number`, `fileExt`, `date`, and so on.

### 🎁 New Features

* `ViewManagerModel.manageGlobal` now defaults to the server's answer on whether the user may
  manage global views, set by the `xhJsonBlobConfig.globalWriteRoles` soft config in hoist-core
  v42+. Once on v42+, apps should stop setting `manageGlobal` and configure the role on the server
  only. An explicit `true` no longer grants access beyond the server's, and `false` remains
  available to hide global view management on a model that shares its `type` with another.
* Added a `CodeInput.extensions` prop to install additional CodeMirror extensions alongside Hoist's
  own - for example `autocompletion()` from `@codemirror/autocomplete`, `closeBrackets()`, or a
  custom keymap. `CodeInput` appends app extensions after Hoist's own, so Hoist wins on conflicts
  unless the app wraps its extension in `Prec.high()`.
* Added a `theme` config to `GridModel` and `AgGridModel` for grids that need to depart from the
  app's standard styling. It accepts AG Grid theme param overrides, for example
  `{headerBackgroundColor: 'navy', spacing: 4}`. Hoist applies overrides on top of its own theme,
  so grids keep their bindings to the `--xh-grid-*` variables. `AgGridModel.defaults.theme` sets a
  theme app-wide, and a per-grid `theme` merges with it rather than replacing it. Prefer this
  config over `agOptions.theme`.
    * `GridModel` reads its `theme` once, at construction. The theme cannot change thereafter,
      because each distinct set of params carries its own copy of AG Grid's generated stylesheet.
* Added `Column.cellFlag`, which renders a small triangular flag in a grid cell's top-right corner
  in the color of a Hoist `Intent`. The flag is a compact marker for values warranting attention.
  Hoist calls `cellFlag` per record, and it returns the `Intent` to draw, or null for no flag.
* Added support for collapsible grid column groups via a new `groupShowMode` config on
  `ColumnSpec` and `ColumnGroupSpec`. It shows a column or nested group only while its containing
  group is `'expanded'` or `'collapsed'`. Groups render expanded unless the new
  `ColumnGroupSpec.collapsed` is set.
* `GridModel` now tracks column group expand/collapse state as `columnGroupState`, with
  `isColumnGroupExpanded()`, `setColumnGroupExpanded()`, `setColumnGroupState()` and
  `getColumnGroups()` to read and drive it. `persistWith` persists this state by default - see the
  new `GridModelPersistOptions.persistColumnGroups`.
* Cube `Aggregator` implementations can now hold per-row state via the new
  `AggregationContext.setAggState()` / `getAggState()`. This lets aggregations that cannot be
  derived from their children's published values alone - for example a weighted average - compose
  from their direct children. See the [Cube README](data/cube/README.md#custom-aggregators) for
  an example.
* Added the desktop `Menu` and `MenuButton` components. `Menu` renders a menu from Hoist
  `MenuItem` configs, `'-'` tokens, and `MenuHeading` entries. It runs each `prepareFn`, drops
  hidden and omitted items, builds submenus, and tidies separators. `MenuButton` adds a trigger
  button and takes `ButtonProps` directly alongside `menuItems`. As with a `ContextMenuSpec`,
  `MenuButton` accepts `menuItems` as a function of the menu's context, called each time the menu
  opens. The mobile `MenuButton` gains the same `context` prop and function form.
    * Together they replace the popover and Blueprint menu that apps built by hand. They take the
      same input as `ContextMenu` and use the same underlying parsing.
* `MenuItem` now supports an `active` flag, to mark the current selection within a menu.
* Added `MenuHeading`, a non-interactive heading that labels and groups the items below it - for
  example `{heading: 'This Row'}`. Every menu that takes a `GridContextMenuItemLike` or
  `MenuItemLike` accepts it, so grid context menus, desktop menus and context menus, and mobile
  menus all support it. A `displayFn` can adjust the heading before each render. In a grid context
  menu it receives the same `ActionFnData` as the actions beside it.
    * A heading draws its own divider rule, so it needs no adjacent `'-'` separator. Hoist drops a
      heading with no items below it, either at the end of a menu or because its whole section hid
      itself.
* Added a public `Banner` component (desktop + mobile) for info, warning, and error states local
  to part of an app. It supports intents with default icons, `filled` and `compact` styles, an
  action button, and a close button via `onClose`. Messages wrap by default.
* Added a `Panel.banner` prop (desktop + mobile) to show one or more banners within a panel. It
  accepts a `PanelBannerSpec`, a message string, or an element. Banners render below `tbar` by
  default, or above `bbar` with `position: 'bottom'`.
* `TextInput` (desktop + mobile) and mobile `SearchInput` now trim leading/trailing whitespace from
  their committed value, committing null if nothing remains. Pass the new `trimWhitespace: false`
  prop to opt out - `password` type inputs do not trim by default.
* Added `TabConfig.group` to divide long vertical (`left` / `right`) desktop `TabSwitcher` rails.
  The switcher renders a display-only header above each contiguous run of tabs sharing a group,
  with titles and icons from the new `TabSwitcherConfig.groups`. Headers are not focusable or
  routable, and horizontal switchers ignore groups.
* Improved coverage of sensitive data redaction in exceptions. Matching keys are now redacted at any
  depth within request bodies, params, and headers, and common secret names are redacted by default.
  See `ExceptionHandler.defaults.redactPaths` and new `ExceptionHandlerOptions.redactPaths`, which
  replaces the now-deprecated `hideParams`.
* Routed `TabContainerModel` now remembers each tab's last route - including any child route and
  its params - and restores it when the user switches back to that tab. Set the new
  `restoreTabRouteParams: false` config to opt out.

### 🐞 Bug Fixes

* Fixed `PersistenceProvider` resurrecting cleared state. `clear()` wrote through synchronously
  without canceling any pending debounced write. That stale write then re-persisted state returned
  to its default within the debounce interval.
* Fixed desktop submenus closing as soon as the pointer left the parent item, which dismissed them
  mid-diagonal. Submenus now linger briefly, aligning with grid context menus, where AG Grid
  already does the same. Tune with `Menu.defaults.submenuHoverCloseDelay`.
* Fixed a right-click outside an open desktop `ContextMenu` showing the browser's own menu.
* Fixed a right-click on a desktop `MenuButton`, or on its open menu, falling through to a context
  menu on the component beneath.
* Fixed the mobile `MenuButton` menu rendering a `'-'` separator as a literal hyphen. It now draws a
  slim divider.
* Fixed `clipboardMenuItem()` misaligning with the items around it - it rendered a styled
  `ClipboardButton` rather than a true menu item. The function also now returns a proper `MenuItem`
  config and takes a `ClipboardMenuItemSpec`.
* Fixed inconsistent parsing of `Field.defaultValue` for a default that needs parsing, such as a
  string default on a `localDate` field. `StoreRecord.data` held the raw default when the source
  data omitted the key, but the parsed default when the source sent `null`. `Field` now parses its
  default once, at construction, so `Field.defaultValue` and record data always hold the typed
  value.
* Fixed `Mask` and `LoadingIndicator` ignoring changes to their `bind` prop after first render.
* Fixed desktop `DateInput` logging a date-fns locale load error in apps installed via npm.
* Fixed `TabContainer` ignoring a `switcher` props object that omitted `orientation`.
* Fixed routed `TabContainerModel` leaving the URL at its own route, without its active tab, when
  reached via a deep link, a lazily-rendered parent tab, or a forward more than one level deep.
* Fixed desktop `SegmentedControl` wrapping a multi-word option label onto two lines when the
  control was sized to its content.
* Fixed `checkboxRenderer()` throwing a `TypeError` when called with no argument. Its config is now
  optional.
* Fixed `HoistModel.matchesSelector()` throwing when a predicate selector returned `undefined`, as a
  duck-type check against a model lacking the marker property does. It now reads as no match.
* Fixed `DashCanvas` widgets rendering at a placeholder width on load, then visibly animating out
  to fill the canvas - a costly relayout of every widget while dashboards load. Widgets now render
  once at their final size. Note that widgets on a canvas that starts hidden now render when first
  shown.

### ⚙️ Technical

* Cube `AVG` and `AVG_STRICT` aggregations now compose from their direct children rather than
  walking their entire subtree of leaves. This makes views with averaged fields as cheap to build,
  regroup and update as those with `SUM` fields.
* Cube `View`s now diff only the fields a `Cube.updateDataAsync()` transaction declares via
  `StoreTransaction.changedFields` rather than every queried field. `StoreChangeLog` carries the
  set through for such transactions.
* Model lookup now subscribes only to slots that can affect resolution - the matched slot, or
  nullish accessor candidates if no match. It excludes computed getters and primitive observables.
  This is tighter than the prior walk, which subscribed indiscriminately and triggered needless
  re-renders.
* Deprecated `GridModel.enableFullWidthScroll`, now a no-op. AG Grid 36 natively renders a single
  full-width horizontal scrollbar spanning all columns, so Hoist removed its custom implementation.
* `Promise.linkTo()` no longer logs a spurious "Uncaught (in promise)" error when a linked promise
  rejects and the caller handles the rejection.
* Updated the vendored `public/msal-redirect-bridge.min.js` from MSAL 5.11 to 5.23 to match the
  installed `@azure/msal-browser`. Added a `check:vendored` CI step to catch future drift.
* Removed the no-op `@managed` decorator from `TaskObserver` fields across the framework. It needs
  no cleanup, and its JSDoc now says so.

### ⚙️ Typescript API Adjustments

* `RecordActionLike` is now just `RecordAction | RecordActionSpec`. `RecordAction.items` and
  `RestGridConfig.menuActions`, whose entries may also be a `'-'` separator, heading, or token, now
  use `GridContextMenuItemLike`.
* Added the `ViewRow` interface, documenting the row-level API passed to Cube `Aggregator`
  implementations and to the `lockFn`, `omitFn` and `bucketSpecFn` hooks. These previously typed
  their rows with unexported internal classes. `BucketSpec.bucketFn` now takes a `ViewRow` as
  well, and `BucketSpec` and `RowUpdate` are now exported from `@xh/hoist/data`.
* `Aggregator.forEachLeaf()` now types its callback's leaf as the new `ViewLeafRow` interface,
  which extends `ViewRow` with the leaf's source `cubeRecord` and `cubeRecordId`. Callbacks typed
  against the previous, unexported `LeafRow` class should switch to `ViewLeafRow`.
* `GridContextMenuItemLike` no longer accepts an open `string`, which collapsed the union and left
  `GridContextMenuToken` with no completions and no typo-checking. It now accepts the Hoist tokens
  in `GridContextMenuToken`, which gains `'-'`, and the AG Grid `DefaultMenuItem` tokens, newly
  re-exported from `@xh/hoist/kit/ag-grid`. Apps that build a menu from dynamic strings must
  annotate or cast the array as `GridContextMenuItemLike[]`.
* Added the `MessageButtonSpec` interface to type `MessageSpec.confirmProps` and `cancelProps`,
  previously `any`. Other props still pass through to the platform `button`. Apps passing a plain
  `string` as `intent` must narrow it to `Intent`.
* Added missing app-facing symbols to their package barrels, including `CardModel`,
  `FilterChooserFieldSpec`, `DashContainerViewModel` and `DynamicTabSwitcherModel`, plus a new
  `@xh/hoist/security` barrel exporting `BaseOAuthClient`.

### 🤖 AI Docs + Tooling

* Rebuilt `hoist-search-docs` (and `hoist-docs search`) as ranked, section-level search. Results are
  individual `##` / `###` doc sections ranked by BM25, rather than whole docs matched by keyword
  count. Each hit carries its line range, token count, and a short excerpt. A default search
  returns a short ranked list of sections.
* Added `section` and `outline` options to `hoist-read-doc` (`--section` / `--outline` for
  `hoist-docs read`). A search hit now costs a few hundred tokens to read instead of the whole doc.
  Full reads are unchanged, with a one-line size note on large docs.
* Rebuilt `hoist-search-symbols` (`hoist-ts search`) as ranked search over symbols and members: one
  line per hit with its import path (the package barrel when one re-exports the symbol, otherwise
  the file), multi-word queries ranked by term coverage, and `impl/`, `admin/`, `inspector/`,
  `dynamics/` and non-exported symbols hidden unless `includeInternal` is set.
* `hoist-get-symbol` now shows an import line and a member summary. `hoist-get-members` gained
  `filter`, `include`, `memberKind`, and `detail`, and lists members inherited from non-Hoist types.
* Added `pnpm test:mcp`, run in CI. It runs every `mcp/**/*.spec.ts`: golden-set evals of doc
  search and symbol search ranking, plus MCP / CLI output parity specs. See `mcp/README.md`.

### ✨ Styles

* App-wide banners shown via `XH.showBanner()` now render with the new `Banner` component. The
  banner root is no longer a `Toolbar`, and `.xh-banner__click_target` is now
  `.xh-banner__content`. Apps with custom CSS targeting either must retarget.
* Moved grid styling from AgGrid.scss to AG Grid theme params, exported as `xhAgGridTheme` from
  `@xh/hoist/cmp/ag-grid`. Params remain bound to the same `--xh-grid-*` variables, so apps
  overriding those see no change. The stylesheet retains only what params cannot express.
* Grid cell flag styles are now keyed by `Intent` (`.xh-cell--flag-{intent}`), with size driven by
  the new `--xh-grid-cell-flag-size` custom property. The classes previously emitted for cell
  validation state - `.xh-cell--invalid`, `.xh-cell--warning`, and `.xh-cell--info` - are
  deprecated but still styled. Apps applying them directly therefore continue to render a flag.
  Retarget any CSS overriding these at the new class names.
* Added `.xh-grid-tooltip-frame`, a standalone utility class carrying Hoist's standard tooltip
  chrome. Hoist applies it to the tooltip content it renders itself, and apps can add it to a custom
  (element) tooltip's own root to match. Line-break handling moved alongside it to a
  `.xh-grid-tooltip--prewrap` modifier.
    * ⚠️ Removed the `.xh-grid-tooltip--default` and `--custom` classes. They carried the
      styling that now lives in the utility classes above, and nothing consumed them once it
      moved out.
      Apps with CSS targeting either should retarget `.xh-grid-tooltip`, still applied to every
      grid tooltip, or the new utility classes.
* Fixed validation tooltips on an editable column rendering without rounded corners or a max-width
  when that column also defined a custom (element) `tooltip`. Validation messages now always use
  the standard frame, because they supersede the column's own tooltip entirely.
    * ⚠️ `.xh-grid-tooltip--validation` now sits on the tooltip itself rather than the message
      list inside it, making it a true modifier of `.xh-grid-tooltip`. Renamed
      `--validation--single` to `--validation-single` to match. The list carries no class of its
      own.
* Added CSS variables to style the new `MenuHeading` in grid context menus, desktop menus, and
  mobile menus, so one override restyles all three. Blueprint's own `.bp6-menu-header` uses the
  same variables.
* Added `--xh-tab-switcher-vertical-group-*` custom properties to style the new `TabSwitcher`
  group headers (`.xh-tab-switcher__group-header`).

### 📚 Libraries

* @auth0/auth0-spa-js `2.24 -> 2.27`
* @azure/msal-browser `5.19 -> 5.23`
* @azure/msal-common `16.13 -> 16.14`
* @blueprintjs/core `6.18 -> 6.20`
* @types/react `19.2 -> 19.3`
* @types/react-dom `19.2 -> 19.3`
* @xh/hoist-dev-utils `15.x -> 16.x`
* ag-grid-community `35.3 -> 36.2`
* ag-grid-react `35.3 -> 36.2`
* date-fns `added @ 4.4`
* minisearch `added @ 7.2` (MCP / CLI doc search only - never bundled)
* mobx `6.16 -> 7.0`
* mobx-react-lite `4.1 -> 5.1`
* moment `2.30 -> 2.31`
* react `19.2 -> 19.3`
* react-dom `19.2 -> 19.3`
* type-fest `5.9 -> 5.10`
* zod `4.5 -> 4.6`

## 87.3.0 - 2026-09-10

### 🐞 Bug Fixes

* Fixed `SegmentedControl` clipping an option's label when `equalSegmentWidths` divided the tray
  too narrowly - options now hold their own content width, sharing equally only where there is room.
* Fixed `useHotkeys()` throwing a React hook-count error when its arguments changed across
  renders - a collapsible `Panel` given `hotkeys` no longer crashes when first expanded. Hotkeys
  may now also be changed after the first render.
* Fixed mobile `Navigator` back-navigation leaving the page stack and the route permanently out of
  sync when a stale `allowSlidePrev` caused Swiper to silently skip the transition.
* Fixed `RadioInput` and `Checkbox` options overhanging the top of the `Toolbar` - they
  are now centered within the compact item height, sharing one rule with `SwitchInput`.
* Fixed an unlabeled `Slider` (`labelRenderer: false`) sitting high in a compact `Toolbar`.
* Fixed `SegmentedControl` overflowing a compact `Toolbar` - it now takes its compact sizing from
  the toolbar, without needing its own `compact: true`.
* Fixed `dateEditor` crashing when opening its picker on a column backed by a `localDate` field -
  the editor now defaults its `valueType` from the Store field type.

## 87.2.0 - 2026-09-08

### 🎁 New Features

* Added `DateRangePicker` (`desktop/cmp/daterange`), a compact control for selecting a period as a
  preset (Today, MTD, Prev 30 Days, ...), a relative lookback, a calendar month or year, or a custom
  date range. Its `DateRangePickerModel` persists the selection as JSON and resolves it to date
  ranges and `FieldFilterSpec`s.
* Added `IntentInput` (desktop), a compact input for selecting a Hoist `Intent`.
* Added `SegmentedControl.showOptionDividers` and `SegmentedControl.showTrayBackground` (desktop and
  mobile) to provide more structure by default to the input control with easy options to customize.
* Added `SegmentedControl.equalSegmentWidths` to the desktop control, matching the existing mobile
  prop. Defaults to `true`, so a filled control now divides its width into equal segments rather
  than sizing each option to its own label.
* Added `HoistBase.xhName`, an optional developer-facing name for an instance, shown in log output,
  trace spans (new `xh.name` tag), and the Inspector. Set it on any Hoist model config to tell peers
  of the same class apart - instances log as `ClassName [xhName]`, or `ClassName [id]` when unnamed.
  Hoist names services, `XH.appModel`, and models created by a named parent automatically.
* Added read-only detail panels to the Admin Console's Config, User Preferences, and JSON Blobs
  tabs. The Config panel shows every view of a config's value - resolved, instance override,
  database, and typedClass defaults - and renders notes as Markdown. Editing is now confined to the
  grid's editor: double-click no longer opens a view-only dialog for read-only admins.
* Added `domAttrs`, a prop for applying arbitrary `data-*` and `aria-*` attributes to the primary
  DOM element a component renders - the same element that receives `data-testid` from `testId`.
  Supported by `Box` and the layout components built on it (and therefore `Panel`, `Toolbar`, and
  similar containers), `Button`, `ButtonGroup`, `Card`, `Badge`, `FormField`, and the desktop and
  mobile inputs.
* Added `enablePasswordManagers` to `TextInput`, `TextArea`, and `NumberInput` (desktop and mobile).
  Defaults to `false`, applying `data-1p-ignore`, `data-lpignore`, and `data-bwignore` so password
  managers stop offering saved logins on ordinary data-entry fields. Apps with hand-rolled login
  forms should set it `true` on their credential inputs - Hoist's own `LoginPanel` already does.

### 🐞 Bug Fixes

* Fixed `testId` being silently dropped by desktop `Slider`, desktop `FileChooser`, and mobile
  `Label` - all accepted the prop but never emitted a `data-testid` attribute.
* Fixed icon misalignment in desktop `DateInput` when a `leftIcon` is specified.
* Fixed `SegmentedControl.fill: false` leaving an empty run of tray to the right of its options -
  the control now sizes to its options.
* Fixed desktop `SegmentedControl` keeping the last clicked segment highlighted after its bound
  value was cleared programmatically - the control now renders no selection, with `aria-checked`
  cleared, whenever its value matches no option.
* Fixed desktop `Select` not reliably scrolling the selected option into view when opening its
  menu - a regression from the v86 react-select upgrade. Selects with `enableFilter: false` never
  scrolled; others did so intermittently.
* `Store` and `Cube` now throw a clear error at construction when given fields with duplicate
  names. Previously such a `Cube` failed later with a cryptic `Cannot redefine property` error when
  creating a `View` that exposes leaves.

### ✨ Styles

* Desktop `Button` active styling now also keys on Blueprint's `bp6-active` class, so any button
  that opens an *uncontrolled* popover renders in its `active` state while that popover is showing,
  with no per-component code. This brings Hoist's own menu triggers into line (`AppMenuButton`,
  `ExpandToLevelButton`, `DashCanvasAddViewButton`, `DashContainerMenuButton`, and the `Toolbar`,
  `TabSwitcher`, and `DashCanvas` overflow menus) and applies to app buttons as well. A button that
  needs full control of its appearance can opt out by taking ownership of its popover's `isOpen`.
* `SegmentedControl.outlined` now adds a border to the tray without also removing its background,
  and defaults to `true`. Pair with `showTrayBackground: false` for the previous appearance.
* Restyled the `SegmentedControl` tray to draw its background from `--xh-bg-alt` in both themes,
  replacing a bespoke blue-grey mix that read heavier than the surrounding theme.
* Added `--xh-date-range-picker-*` CSS variables for the new `DateRangePicker`.
* The desktop `GroupingChooser` trigger button now renders `outlined` when in button mode
  (`styleButtonAsInput: false`), matching the `ViewManager` trigger.

### 📚 Libraries

* @daypicker/react `added @ 10.0` (replaces react-day-picker under its new package name)
* react-day-picker `removed`

## 87.1.1 - 2026-09-02

### 🐞 Bug Fixes

* Fixed `GridModel.getSortedRecords()` throwing e.g. grid exports when grouped by a non-string
  field. Group values are now coerced to string keys before sorting.

## 87.1.0 - 2026-08-28

### 🎁 New Features

* Added new `MessageSpec.suppress` config for `XH.message()` and its `alert`, `confirm`, and
  `prompt` variants. Set to `true` (or a config object) to offer users a "Don't show this message
  again" checkbox. Confirmed responses are saved to browser local or session storage - optionally
  with an expiry - and returned immediately by future calls with the same `messageKey`.
* `FileChooser` now takes as many dropped files as its `maxFiles` limit allows, warning about only
  the surplus rather than discarding the entire drop.
* Added an opt-in `enforceValueInOptions` prop to the desktop and mobile `Select`, constraining the
  value to the current `options` and dropping any selection no longer found there. Enforced once
  `options` is non-null, so pass null while options load.

### ⚙️ Technical

* Upgraded `react-dropzone` to v20, which drops its UMD build and ships as an ESM + CJS package with
  an `exports` map. Requires Node >= 22 to install.
* Extended the package `sideEffects` declaration to cover the vendored golden-layout implementation
  and the barrels with registration or configuration side effects on import - icon, mobx, blueprint
  kit, golden-layout kit, and persist. ~~Required by the tree-shaking in hoist-dev-utils v15.~~
  (Tree-shaking reverted in dev-utils 15.0.1 - take 15.0.1+, see
  [#4640](https://github.com/xh/hoist-react/issues/4640).)
* Restructured `PersistenceProvider` provider registration to remove a base/subclass import cycle
  that breaks under tree-shaking bundlers' re-export optimization. No API change.

### ⚙️ Typescript API Adjustments

* `SelectOption` now admits custom fields alongside the standard `value`/`label`, so extra data
  carried on an option (and already passed through at runtime) can be read within `optionRenderer`,
  `filterFn`, and friends without a cast. Annotate the callback's argument with the app's own option
  type for fully typed access - e.g. `optionRenderer: (opt: MyOption) => ...`.

### 📚 Libraries

* react-dropzone `15.0 → 20.1`

## 87.0.0 - 2026-08-25

### 💥 Breaking Changes (upgrade difficulty: 🟠 MEDIUM - React 19, data layer, column chooser)

See [`docs/upgrade-notes/v87-upgrade-notes.md`](docs/upgrade-notes/v87-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

Hoist React v87 is a BIG release with a number of potentially breaking changes and many new features
and performance optimizations, grouped by topic below.

* Requires `hoist-core >= 40.5.0` for the `ViewManager` group rename and bulk-editing APIs, now
  correctly enforced at startup - apps on an older core will fail fast rather than start. Features
  that pair with hoist-core v41 endpoints degrade gracefully against earlier versions.

#### React 19 and Build Tooling

* Hoist v87 upgrades to React 19. Most apps need only minor adjustments, but test carefully.
    * Adjust types as needed to satisfy React 19's stricter typings. See
      https://react.dev/blog/2024/04/25/react-19-upgrade-guide#typescript-changes for details.
    * Both the desktop and mobile `Popover` components now render on Floating UI instead of
      Popper.js, which does not support React 19. The DOM structure and CSS classes for popovers
      have changed. Test all popover-based UI - menus, selects, date inputs, and filter choosers -
      and update any custom styles that targeted Blueprint or Popper CSS classes (e.g.
      `bp6-minimal`).
    * Removed the `popperOptions` escape-hatch prop from the mobile `Popover`.
    * Requires `@xh/hoist-dev-utils >= 14.0`, the build-tooling release tested with v87. It provides
      the matching `@types/react` 19.x and adds optional support for pnpm as the app package
      manager - yarn classic and npm remain fully supported.

#### Data - Cube, Store, and Records

* `View.result.leafMap` is now null unless the `Query` sets `includeLeaves` or `provideLeaves`. Set
  either flag if an aggregate-only view needs leaf access, or read source records from `Cube.store`.
* Leaf rows published by Cube `View`s now use the id of their source cube record. They no longer use
  a generated id that encodes the row's full dimension path. Review any code that parses leaf row
  ids - aggregate and bucket row ids are unchanged. `Store.idEncodesTreePath` can no longer be set
  on a View-connected store, as more effective performance optimizations have replaced it.
* Added an exported `getCubeLeaves()` helper to replace the `ViewRowData.cubeLeaves` getter,
  supporting important memory optimizations in this release. Update any code that reads
  `row.cubeLeaves` to call `getCubeLeaves(row)`.
* Removed the `Store.reuseRecords` config, replaced by the new `Store.digestSpec` (see New Features
  below). Reuse keyed on raw-object *reference* identity - the former `reuseRecords: true` - is no
  longer supported: have the provider stamp each row with a revision and set `digestSpec` to it, or
  drop the config and fall back to Hoist's default value-based reuse.
* `StoreRecord.data` must be read by field name only. Enumerating, spreading, or calling
  `JSON.stringify()` on this object does not reliably see default field values. Use
  `StoreRecord.getValues()` or `getModifiedValues()` instead. This never worked reliably, but the
  new memory optimizations in this release make it much more likely to cause a problem.
* `StoreChangeLog.remove` (returned by `Store.updateData()`) now holds the removed `StoreRecord`s
  instead of their ids. Removed records cannot be resolved against the Store after the fact, so the
  records themselves are the more useful report. Read `record.id` where you need ids.
* `AggregationContext.filteredRecords` now throws when read by a custom `Aggregator` that does not
  override `dependsOnChildrenOnly` to return `false`. Views with only children-based aggregators
  update incrementally without maintaining that collection - aggregators that read records beyond
  their own children must declare themselves.

#### Grid - New Column Chooser and Column State

* Re-implemented the desktop grid column chooser (see New Features below). Its UX is substantially
  improved yet also different - review before release to ensure key stakeholders are not surprised.
* Apps that register an explicit list of ag-Grid modules (instead of `AllCommunityModule`) must add
  `RowDragModule`. Without it, the chooser's drag-and-drop fails silently. Consider switching to
  `AllCommunityModule` - module registration does not affect shipped bundle size, and registering
  everything avoids this class of silent failure.
* `Column.chooserGroup` now groups columns only within the new, opt-in Column Library. Set
  `colChooserModel: {columnLibrary: true}` to keep a grouped presentation of hidden columns.
* Update or remove any custom styles that targeted the chooser's former `LeftRightChooser`- based
  DOM. The chooser now renders its own grids and CSS classes in a different layout.
* Columns newly added to the code are now hidden initially when column state persists to a
  `ViewManagerModel` or `DashViewModel`. This ensures that a software release does not add columns
  to views that users have curated and named. The columns remain available in the column chooser.
  Set the new `GridModelPersistOptions.hideNewColumns` config to `false` to restore the previous
  behavior.

#### Grid - Data Update Timing

* Grids now always apply `Store` data changes to ag-Grid in a fresh macrotask - pending UI updates
  (e.g. load masks) paint first, and rapid changes coalesce. This strengthens an existing
  requirement: grid reads after a data change were already subject to a minimal async debounce and
  should already route through `GridModel.whenReadyAsync()`, which now provides a hard guarantee
  that all store data has been applied to ag-Grid.
* Grids now pace update-driven re-sorts and managed autosizes off their own measured cost, instead
  of re-running them every tick. Managed autosize still runs immediately on a `Store` load or filter
  change. Tune via the `deferredSortFactor` and `deferredAutosizeFactor` experimental flags.

### 🎁 New Features

#### Data - Store and Records

Hoist v87 delivers a major round of performance work across the `data` package and `FetchService`,
substantially reducing memory use and load/update costs for apps working with large datasets.
Records, Cube `View` rows, and raw payloads all take leaner representations, alongside new opt-in
configs for zero-copy projection, digest-based record reuse, and streaming loads.

* Improved `Store` memory efficiency - record `data` objects now take one of two compact
  representations. `Store` picks the representation per record, based on how many fields hold
  non-default values: the established sparse form for lightly-populated records, and a fixed shape
  cloned from a shared per-Store template for wider records. This avoids V8's memory-hungry
  "dictionary" mode and substantially reduces per-record memory on stores with wide records.
* Improved Cube `View` memory efficiency across all row types - `ViewRowData` rows now share compact
  fixed shapes, and leaf rows read field values directly from their source cube records instead of
  holding copies. Substantially reduces per-row memory and speeds up view builds, with savings that
  scale with query width.
* Added an opt-in `Store.projectionOnly` config to mark a store as a read-only projection of data
  that its provider parses and owns. Use it for stores connected to a Cube `View`, or fed by an
  endpoint that returns data in its final client-side form. Records reference the provider's row
  object as their `data` instead of re-parsing and copying it, collapsing the usual two per-row
  objects to one and skipping the per-row parse on every load and update. Local modification APIs
  (e.g. `modifyRecords`) throw in this mode - see the `projectionOnly` config docs.
* Added a `Store.digestSpec` config, replacing `reuseRecords` and symmetrical with `idSpec` - name a
  raw data property or supply a function returning a primitive digest. `Store` reuses the existing
  record whenever an incoming raw object yields an unchanged digest, skipping parsing and record
  construction, and drops unchanged-digest `updateData()` rows as no-ops. Digests are exposed as
  `StoreRecord.digest`.
* Enhanced Cube `View`s to reuse their generated rows across data updates, reloads, regrouping, and
  filtering. Aggregate rows now reuse even when their children change - re-deriving in place and
  republishing only values that actually changed - so e.g. dropping a trailing dimension republishes
  nothing above the level that moved, and connected stores and grids skip the matching record
  rebuilds.
* Added `CubeConfig.store`, exposing `StoreConfig` options - notably `digestSpec` and
  `retainRaw` - on the Cube's internal Store. A source that supplies per-row digests can now
  preserve record identity across full `Cube.loadDataAsync()` reloads, extending View row reuse to
  wholesale refreshes.
* Added a `Store.retainRaw` config (default `true`). Set it to `false` to drop each record's
  reference to its raw source data object after parsing, reducing memory use on large stores that do
  not need `StoreRecord.raw`.
* Enhanced `Cube.loadDataAsync()` to detect reloads that leave the store's record collections
  unchanged, as already detected by `Store.loadData()`. Connected `View`s now sync their info and
  timestamp instead of regenerating all of their rows, so polled reloads of unchanged data cost
  nothing downstream.
* Added experimental support for patch-based record collections within `Store`, substantially
  improving performance for incremental changes to large datasets - transaction, filtering, and
  grid-sync costs scale with the size of the change rather than the size of the store. Enable via
  `Store` config `experimental: {maxPatchRatio: 0.1}` or app-wide via the
  `xhStoreExperimental` soft-config. The ratio may also be changed on a live `Store` at any time.

#### FetchService - ndjson + string interning

* Added `XH.fetchNdjson()` to consume an NDJSON (newline-delimited JSON) response incrementally.
  Returns a `lines` async iterable of parsed records - the natural streaming source for
  `Store.loadDataAsync()` - plus a `meta` promise for an optional leading metadata record.
  Optionally pairs with hoist-core v41's `BaseController.renderNdjson()`.
* Added `Store.loadDataAsync()` to load a complete dataset from a streaming source - a sync or async
  iterable that yields raw records. Creates records incrementally, without buffering the complete
  raw dataset in memory, then installs them in a single transaction once the source completes.
  `Cube.loadDataAsync()` also accepts a streaming source.
* Added `FetchOptions.internStrings` to intern (deduplicate) repeated string values within large
  JSON and NDJSON responses, reducing retained memory for high-volume tabular datasets.
  `FetchService` can also share interned values across successive fetches of the same logical
  dataset, which the app identifies with a required key, per a configurable `retainMode`. Skip known
  high-cardinality fields (e.g. UUID columns) via `excludeFields`.

#### Grid - New Column Chooser and Grid APIs

Hoist v87 introduces a new and much improved Grid Column Chooser, with drag-and-drop re-ordering of
columns.

* Columns appear in true grid order across three zones - pinned-left, unpinned, and pinned-right.
  Drag within or across zones to reorder, pin, and unpin.
* Toggle the visibility of a column with a checkbox, a double-click, or the space key.
* Drag multiple selected rows, or an entire `ColumnGroup` row, in a single gesture.
* Drags respect `hideable`, `movable`, and `lockColumnGroups`. Drops that would split a locked group
  clamp to the nearest legal position, and refused drags explain themselves in the drag ghost.
* An optional Column Library presents a docked list of hidden columns, grouped by
  `Column.chooserGroup`. Drag a column out to show and position it, or drag one in to hide it.
  Enable the library with `ColChooserConfig.columnLibrary` and customize it with `ColLibraryConfig`.
* A new docked side-panel presentation stays open alongside the grid and always commits immediately.
  Select it with the new `ColChooserConfig.mode` config - `colChooserModel: 'docked'` for defaults -
  A grid has one chooser; `mode` chooses how it appears, and defaults to `'modal'` for the
  dialog/popover behavior of prior releases.
* Added a `modalTarget` prop to `ColChooserButton` to select the overlay a modal chooser opens in -
  `'popover'` (default) or `'dialog'`. Ignored by a docked chooser, which the button toggles.
* Columns that set a `chooserDescription` show an info icon, which reveals that description in an
  on-demand tooltip.
* Users can toggle the display of column groups and the Column Library. Hoist persists this choice
  as a browser-local user preference and syncs it live across every chooser in the app.
* In deferred-commit mode (`commitOnChange: false`), the chooser prompts before it discards unsaved
  changes - both when the user dismisses it and when an external change to column state arrives.
* Added `GridModel.isColumnHideable()` and `GridModel.isColumnMovable()` to report whether the user
  is permitted to hide or reorder a given column.
* Added a `position` option to `GridModel.ensureRecordsVisibleAsync()`,
  `ensureSelectionVisibleAsync()`, and `selectAsync()`. Callers can now request that a row be
  scrolled to the `top`, `middle`, or `bottom` of the viewport, instead of scrolling only the
  minimum amount required.
* Improved `Grid` data update performance with tiered ag-Grid transaction handling. Update
  transactions that provably cannot affect row order, grouping, or tree structure now skip ag-Grid's
  model refresh entirely, and transactions that would re-order rows apply their cell values
  immediately, with row order restored by a managed, idle-scheduled re-sort. New records still sort
  into place on arrival.
* Added `StoreTransaction.changedFields`, letting data producers assert exactly which fields a
  value-only update touched. Cube `View`s supply this automatically, extending the no-re-sort Grid
  fast path to view-connected stores. See the data package README for details.

#### Admin Console

* Enhanced the Admin Console config editor. JSON configs backed by a typed class, an active
  instance-config override, or both now present a tabbed value editor over the resolved,
  instance-override, database, and code-default views of their value, muting resolved entries that
  are not explicitly set. The grid's Value column shows the effective value - resolved, and honoring
  any instance override. Requires hoist-core v41.0.0 or later. Against earlier versions the editor
  degrades gracefully.
* Added a `View Surrounding Lines` right-click action to the Admin Console log viewer. Clears any
  active filter and reloads the log around the selected line, then re-selects that line and centers
  it in the viewport - useful for examining the context around a hit found by filtering.
* Enhanced the Roles admin module to resolve and display friendly names for directory groups, via
  the new `roleAdmin/directoryGroupsInfo` endpoint. Especially useful with hoist-core's new
  `EntraIdService`, where groups are stored as opaque object IDs (GUIDs), and also improves the
  display of LDAP DNs. Per-group lookup errors surface as warning icons on the affected rows.
* Added a search-based directory group picker to the Roles admin role editor, backed by the new
  `roleAdmin/searchDirectoryGroups` endpoint. Admins can find groups by partial name, with free-text
  entry of a known GUID or DN still supported. Requires hoist-core v41.0.0 or later - against
  earlier versions these features degrade gracefully to the previous identifier-based display.

#### Other Improvements

* Added an `icon` prop to `Badge`, rendered before the badge's content. The new `--xh-badge-gap` CSS
  variable controls the spacing between the icon and the content.
* Added a `CodeInput.lineStyles` prop to apply custom CSS class (es) to specific (1-based) lines,
  either as static groups or as a function of the current document text.
* Added a `RestGrid.formBbar` prop to replace the record editor form's default toolbar.
* Added JSON validation to `RestGrid` editor forms for `json`-type fields, including those
  dynamically typed via a `typeField`.
* `ViewManager` groups now support unlimited nesting, rendered as nested sub-menus in the
  ViewManager menu and as expandable tree grids in the Manage dialog. Groups and views support
  drag-and-drop reorganization within the personal and global tabs, and renaming a group cascades to
  every view nested beneath it. `ViewManager` also now supports bulk editing of views' pin and
  visibility state.
* `Select` now accepts a `valueRenderer` prop to customize how the selected value renders within the
  control.
* `TextInput` now accepts a `leftElement` prop, rendered inline at the left of the input.
* Hoist Inspector now pops out in a separate browser window, leaving the app's viewport to the app
  while ensuring Inspector itself is not covered by masks or other modal content.
* Hoist Inspector now tracks `Cube` and cube `View` instances alongside models, services, and
  stores, and adds a Diagnostics panel - a live readout of the data-pipeline `diagnostics`
  published by selected Stores, Cubes, Cube Views, and GridModels, with controls to reset counters
  and stream ops to the devtools console.
* Added `XH.getCubes()` and `XH.getViews()` to enumerate all active `Cube` and `View` instances, now
  registered with Hoist's instance registry.
* Added `useComposedRefs` - a hook variant of `composeRefs` that manages identity via `useCallback`
  and forwards React 19 ref-callback cleanups. Prefer it when composing refs within a component
  render function.
* Mobile `DateInput` now opens a themeable calendar picker (react-day-picker) within a dialog,
  replacing the OS-provided picker of the native `<input type="date">` element. Adds a
  `formatString` prop to control the in-input display of the value, and a `dayPickerProps` escape
  hatch to pass props (e.g. `disabled` day matchers) directly to the underlying calendar.
* Added `GridModel.getSortedRecords()`, returning the grid's records in the order it renders them -
  sorted by `groupBy` and `sortBy` and, for tree grids, flattened depth-first through each record's
  children. Does not require the grid to have been rendered. Grid export and `GridFindField` are
  both re-built on this more efficient implementation.

### 🐞 Bug Fixes

* Fixed `GridModel.beginEditAsync()` opening an inline editor that never took keyboard focus,
  requiring an extra click on the cell before the user could type.
* Fixed `View.getDimensionValues()` returning sets of `undefined` instead of the actual unique
  values for each dimension.
* Fixed stale `ViewRowData.cubeBuckets` values on rows reused across query updates. Hoist now
  re-derives bucket assignments from each row's current position on every View generation.
* Fixed `StoreRecord.getModifiedValues()` omitting fields modified locally back to their default
  value. It now reports every difference against committed data, regardless of how the record's
  `data` object represents defaults.
* Fixed Cube `View` forcing a full update, instead of an incremental one, on every data update when
  the `Query`'s fields did not also include a `BucketSpec.dependentFields` entry.
* Fixed `Grid` retaining an extra generation of records in memory indefinitely. ag-Grid's stored
  `rowData` pinned the record array from the last load into an empty grid, along with every
  `StoreRecord`, `data`, and retained `raw` object in it.
* Fixed `Query.clone()` retaining within its `fields` any dimensions dropped by a dimension-only
  update. Cube `View`s that changed dimensions via `updateQuery()` accumulated these stale fields
  and aggregated each one on every aggregate row, although nothing requested or displayed them.
* Fixed `SumAggregator`, `MinAggregator`, and `MaxAggregator` mishandling incoming `null` values on
  incremental Cube `View` updates, leaving aggregates that disagreed with a full rebuild.
* Fixed the default message shown for routine exceptions - Hoist no longer appends the underlying
  server-side cause, as a routine exception's own message is intended to be complete.
* Fixed `isValidJson` failing on blank values. Null and empty values now defer to `required`, as
  with Hoist's other constraints. Pair the two rules if a value must be present.
* Fixed `CodeInput` with `autoFormat` committing reformatted text back to its bound value, leaving
  forms dirty after a reset.
* Fixed an `O(n²)` option merge in async `Select` (v86.3.0 regression) that could block the main
  thread for seconds on large `queryFn` results. `Select` no longer accumulates and de-dupes the
  full query history.
* Fixed mobile app bundles pulling in all of Blueprint's JS and global CSS via the shared
  `utils/impl` barrel. The internal `parseMenuItems` util now lives at
  `@xh/hoist/desktop/cmp/menu/impl/MenuItems` - update any app imports of this `@internal` API.
* Fixed `GridFindField` on a tree grid permanently reordering the child arrays returned by
  `Store.getChildrenById()` - its sort now leaves Store state untouched.
* Fixed grid export ordering rows without regard to `GridModel.groupBy`, so exports of a grouped
  grid no longer diverge from the rendered row order.

### ⚙️ Technical

* Trimmed `static/polyfills.js` to import `core-js/stable` rather than the bare `core-js` root
  entry, which unconditionally injects shims for unfinished proposals. Apps shed those dead shims
  from every bundle on their next build, while the polyfill mechanism itself - auto-scaling to an
  app's configured `targetBrowsers` - is unchanged.
* Expanded the package `sideEffects` declaration to cover SCSS/CSS imports and the platform
  `register` modules, all previously (and incorrectly) marked pure. Inert under current dev-utils
  releases, which disable `sideEffects`-based tree-shaking - this is groundwork for a future
  dev-utils that re-enables it.
* Removed the deprecated webpack-only `~` prefix from bare-module SCSS imports and the `inter-ui`
  font-path URL in framework styles. Modern sass-loader and css-loader resolve the same package
  paths without it, and the prefix breaks under other bundlers.
* Replaced `GridExperimentalFlags.deltaSort` with `deltaSortRatio` - Hoist now manages ag-Grid delta
  sorting automatically, using it for re-sorts touching fewer than this percentage of rows (default
  50). See the Grid transaction handling entry under New Features.
* Added `GridExperimentalFlags.deferredSortFactor` to tune the pacing of the managed re-sort on
  updating grids - a re-sort costing E ms defers the next for `E * factor` (default 4). Set 0 to
  disable deferral and re-sort synchronously on every change.
* Added `diagnostics` to `Store`, Cube `View`, and `GridModel` - a slot per kind of op (e.g.
  `store.diagnostics.update`, `gridModel.diagnostics.autosize`) reporting work done, elapsed time,
  and the path taken. Note that diagnostics log by default under `debug` output, but users may set
  `diagnostics.logLevel = 'info'` on a particular instance to focus on the performance of a
  particular chain. This API is provided for app troubleshooting and benchmarking only, and is
  subject to change without notice at any release.

* Field XSS protection now returns unmodified strings by reference instead of a fresh copy, avoiding
  a duplicate in memory of every parsed string value.
* Migrated this repo's own package management from yarn classic to pnpm 11. Apps consuming the
  published `@xh/hoist` package require no change - pnpm, yarn classic, and npm all remain fully
  supported.
    * Developers who build against a local hoist-react checkout (`inlineHoist`) now need pnpm to
      install this repo's dependencies (`corepack enable pnpm`, then `pnpm install`). The app itself
      can remain on yarn or npm. Update any `startWithHoist`-style app scripts accordingly.
* `Store`s with no validation `Rules` on any `Field` now skip record validation entirely, no longer
  creating a `RecordValidator` per uncommitted record. Note that `StoreRecord.validationState` now
  reports `Valid` (rather than `Unknown`) for records in such a Store.

### ⚙️ Typescript API Adjustments

* Retyped `BaseRow.data` from `ViewRowData` to `PlainObject`. When reading row data, custom
  `Aggregator` implementations may rely only on queried field values, not on `ViewRowData` metadata.
  Use row-level getters such as `BaseRow.isLeaf` in place of `data.cubeRowType`.
* Corrected the `ChildRawData.rawData` type from `PlainObject[]` to `PlainObject`. The runtime has
  always expected a single raw record per object, and an array would throw on load.

### 📚 Libraries

* @auth0/auth0-spa-js `2.23 → 2.24`
* @azure/msal-browser `5.17 → 5.18`
* @blueprintjs/core `6.3 → 6.18`
* @blueprintjs/datetime `6.0 → 6.2`
* @codemirror/commands `6.10 → 6.11`
* @floating-ui/react `added @ 0.27`
* @fortawesome/* `7.2 → 7.3`
* @fortawesome/react-fontawesome `3.2 → 3.5`
* @modelcontextprotocol/sdk `1.26 → 1.30`
* @xh/hoist-dev-utils `13.x → 14.x`
* react `18.2 → 19.2`
* react-day-picker `added @ 9.14`
* react-popper `removed`
* react-window `2.2 → 2.3`
* swiper `12.1 → 12.2`
* tsx `4.21 → 4.23`
* zod `4.3 → 4.4`

## 86.4.2 - 2026-08-20

### 🎁 New Features

* Mobile `DateInput` now opens a themeable calendar picker (react-day-picker) within a dialog,
  replacing the OS-provided picker of the native `<input type="date">` element. Adds a
  `formatString` prop to control the in-input display of the value, and a `dayPickerProps` escape
  hatch to pass props (e.g. `disabled` day matchers) directly to the underlying calendar.

### 📚 Libraries

* react-day-picker `added @ 9.14`

## 86.4.1 - 2026-08-11

### 🐞 Bug Fixes

* Fixed `DashContainer` sizing regression introduced with the golden-layout fork in v86.0.0. CSS
  padding applied to the container element was incorrectly counted as available layout space,
  causing dashboard content to render oversized and cut off.
* Revert swiper library to previous version to address swiping regressions (#4559)

### 📚 Libraries

* swiper  `14.0 -> 12.1`

## 86.4.0 - 2026-07-15

### 🎁 New Features

* Added `PrefService.isSet()` to report whether the current user has an explicit value on file for a
  preference vs. receiving its server-side default - a distinction that cannot be reliably inferred
  by comparing the value to the default. Requires a hoist-core version that emits the backing
  `isSet` flag; against older servers all prefs report as unset.

### 🐞 Bug Fixes

* `PrefService.unset()` now performs a true server-side unset, clearing the user's stored value so
  the preference reverts to its (possibly changing) default and `isSet()` reports `false`.
  Previously it persisted the current default as an explicit user value. Falls back to the legacy
  behavior against hoist-core versions that predate the `xh/unsetPrefs` endpoint.
* Fixed `FilterChooser` popover mode to render an opaque background when expanded.

## 86.3.0 - 2026-07-10

### 🎁 New Features

* `Select` now accepts a `generateOptionFn` prop to resolve an option for a selected value that is
  not present in the current options list (e.g. with `queryFn`-based selects or readonly forms),
  ensuring such values render with their proper label rather than falling back to the raw value.
* `SegmentedControl` options (desktop and mobile) now accept a `testId`, emitted on the option's
  rendered button as `data-testid` for E2E targeting. If an option omits its own `testId` but the
  control has one, an id is auto-derived as `${controlTestId}-${value}` - restoring parity with the
  legacy `ButtonGroupInput` test-hook pattern for apps migrating between the two.

### 🐞 Bug Fixes

* Fixed grid columns configured as `hidden` becoming visible after being grouped and then ungrouped.
  `GridModel` now re-asserts each column's configured visibility whenever `groupBy`
  changes, keeping AG Grid's column state in sync with `columnState`.
* Fixed `StoreFilterField` and grid Find so an active quick-filter or find query no longer returns
  different results when the grid's `groupBy` changes.
* Fixed inline grid cell editors to reliably commit their value when editing ends, including popup
  editors (e.g. `textAreaEditor`) within a dialog, which previously dropped edits on Enter or
  click-away.
* Fixed `Select` to correctly handle non-primitive (object) values: selected-option matching and
  async query de-duplication now use deep equality, so object values no longer render as
  `[object Object]` or collide with one another.
* Hardened the grid column filter's Custom tab against filters it previously mishandled -
  multi-value clauses are now expanded into editable rows and recombined on commit, and filters it
  cannot represent are left untouched rather than corrupted.
* Fixed `FilterChooser` popover mode (formerly `PopoverFilterChooser`) so its collapsed control no
  longer disappears when opened - it now always occupies its place in the layout, so surrounding
  elements no longer shift. Its clear and favorites controls also respond to a single click rather
  than requiring the popover to be opened first. This mode is now enabled more naturally via a new
  option `filterChooser({popover: true})`, deprecating `PopoverFilterChooser`, which remains as a
  thin alias.
* Fixed "not a valid MIME type" console warnings from `FileChooser`. Accepted extensions are now
  passed under a dummy MIME type key, silencing the warnings while continuing to filter selected
  files by extension.

### ⚙️ Typescript API Adjustments

* Retyped `GridModel.colChooserModel` as the new cross-platform `IColChooserModel` interface,
  replacing the bare `HoistModel` type and exposing `isOpen`, `open()`, and `close()` directly.
* Added the exported `HoistRoute` type - Router5's `Route` extended with Hoist's `omit` key - and
  retyped `HoistAppModel.getRoutes()` to return it, so declarative route exclusion (e.g.
  `omit: !XH.getUser().isHoistAdmin`) now type-checks without a cast.

### 🤖 AI Docs + Tooling

* Fixed the MCP server and `hoist-ts` CLI TypeScript symbol tools (`search`, `symbol`, `members`)
  returning no results on Windows, where a path-separator mismatch left the symbol index empty. Path
  handling is now normalized so the developer tools work on Windows as well as macOS/Linux.

### 📚 Libraries

* @auth0/auth0-spa-js `2.21 → 2.23`
* @azure/msal-browser `5.14 → 5.16`
* swiper  `12.1 -> 14.0`

## 86.2.0 - 2026-06-25

### 🎁 New Features

* `CodeInput` / `JsonInput` now auto-format content for display via their configured `formatter`,
  controlled by a new `autoFormat` prop. On editable inputs, content is tidied automatically on blur
  (never mid-edit) - users get clean, consistently-formatted JSON without reaching for the format
  button. For `readonly` inputs it defaults to true, so applications can bind directly to raw source
  values and drop their pre-formatting logic, simplifying call sites substantially.
* Grid column filter specs now support a `sortValue` config, letting the Values tab of the filter
  dialog sort its entries the same way the underlying grid column sorts them. When not provided, the
  column's own `sortValue` is used.
* `GridModel.levelLabels` now accepts a partial array covering only the top levels of a tree or
  grouped grid. The "Expand to..." menu and `ExpandToLevelButton` offer one entry per labelled
  level, so deeper, unlabelled levels (e.g. system-managed) are no longer required and are omitted
  as expand-to targets - previously a too-short array disabled the feature entirely.
* Added a `lossless` option to `fmtQuantity` to compact values to millions / billions units only
  when doing so loses no precision, rendering the full value otherwise (e.g. `7,100,100` stays
  `7,100,100` rather than collapsing to `7.10m`).

### 🐞 Bug Fixes

* Fixed grid `NumberEditor` to allow starting an edit by typing `-`, `+`, or `.` (e.g. to enter a
  negative or decimal value), while reliably rejecting other non-numeric keypresses.
* `fmtNumber` now treats a `precision` of `null` as full, unrestricted precision rather than
  `'auto'`, aligning a `NumberInput` with `precision: null` so its blurred display matches its
  focused and committed (full-precision) value.
* Fixed inline grid editing not ending when clicking empty grid space to the right of the last
  column or below the last row - such clicks now commit the active edit.
* Fixed `Icon.placeholder()` to render with the correct width.
* `CheckboxButton` no longer leaks `HoistInputProps` into underlying HTML `<button>` element.
* Fixed `Select` (and `SelectEditor`) dropdown menu sizing: windowed menus now auto-size to their
  option labels instead of the control/cell width, and an explicit `menuWidth` is respected rather
  than overridden by content auto-sizing.

### ⚙️ Typescript API Adjustments

* `GridFilterFieldSpec.renderer` is now typed as a pure value transform (`GridFilterRenderer`),
  rather than a `ColumnRenderer`. This more accurately represents the existing run-time limitation
  that a complex column renderer would throw.

### ✨ Styles

* Vertical (left/right) `TabContainer` switchers now render a modern rounded-pill treatment by
  default, customizable via new `--xh-tab-switcher-vertical-*` CSS variables.

## 86.1.0 - 2026-06-22

### 🎁 New Features

* Added a mobile `SegmentedControl` input - the mobile counterpart to the desktop component, with a
  matching `options`-driven API for selecting a single value from a set of mutually exclusive
  choices. Built on Hoist's mobile `Button` (no Blueprint dependency).
    * The shared `SegmentedControlOption` option types now export from `@xh/hoist/cmp/input` rather
      than the desktop `SegmentedControl` module; update any direct type imports.
* Added a `leftIcon` prop to mobile `TextInput`.
* `FilterChooser` and grid column filters on a timestamp (`date`) field now filter by calendar day,
  comparing against full-day bounds for range and equality operators rather than midnight - e.g.
  `> 2023-05-31` excludes the 31st and `= 2023-05-31` matches any time that day. Filter specs now
  default a `date` source field to `fieldType: 'localDate'`; set `fieldType: 'date'` for exact
  timestamps. Applications using workarounds to provide similar behavior may be able to unwind that
  behavior and rely on Hoist default behavior.

### 🐞 Bug Fixes

* Fixed the "Is blank" / "Is not blank" grid column filters for `tags`-typed fields - empty tag
  arrays now correctly match "Is blank", and such filters are edited on the Custom tab rather than
  producing a phantom blank entry in the Values list.
* Fixed an issue where `Grid` column headers could fall out of sync with body content during
  horizontal scrolling when both `enableFullWidthScroll` and `useVirtualColumns` were enabled.
* Updated `DynamicTabSwitcher` to properly apply `testId` passed down by `TabContainer`.
* Ensure publication of `router5-plugin-browser` TS module augmentation.
* Set an explicit `%` unit on the `flex-basis: 0` of `TabContainer`'s flex shorthand to ensure that
  the `0` is not interpreted as a `0px` basis and that the container sizes as expected.
    * ⚠️Apps that upgrade to `hoist-dev-utils v13.x` and use `flex: 1 1 0` or `flex-basis: 0` should
      verify that their flex layouts continue to work as expected and add an explicit unit if not
      (e.g. `flex: 1 1 0%` or `flex-basis: 0%`).

### ⚙️ Technical

* `JsonBlobService` and `HoistAuthModel` now accept an optional `CallContextLike` argument on all of
  their public methods, allowing callers to nest their fetches within an existing trace.

### ✨ Styles

* Mobile `Button` now defaults to a more touch-friendly height (40px, up from 28px) and rounder
  corners for buttons in body content. Toolbar buttons derive their height from the toolbar size so
  a single token drives both, landing slightly taller than before (34px, up from 28px).
    * `SegmentedControl` adopts the same standard height for a consistent control row.
    * ⚠️ Mobile buttons outside toolbars are now taller - verify body / form / panel layouts that
      pair tightly with button dimensions.
* Mobile tab content (`TabContainer`) now takes the themed app background, so content reads
  correctly in dark mode rather than showing through to Onsen's light default page background.
* Applied the active theme's `color-scheme` onto `html` and added a `theme-color` meta tag matching
  the active theme's app-bar color, so browser chrome and overscroll / safe-area regions might
  better match the theme.

### 📚 Libraries

* @azure/msal-browser `5.13 → 5.14`

## 86.0.1 - 2026-06-16

### 🐞 Bug Fixes

* Fixed a circular import introduced in v86 that caused problems for apps using `@ComputeOnce`.
* Fixed a regression to favorites icon size for `FilterChooser.`

### ⚙️ Technical

* `TrackService`, `PrefService`, and `TraceService` now flush their pending entries reliably when
  the page is hidden or unloaded, reacting to `XH.pageState` and issuing the flush via
  `fetch({keepalive: true})` (replacing the less reliable `beforeunload` + normal-fetch approach).

### 📚 Libraries

* @azure/msal-browser `5.11 → 5.13`
* mobx `6.15 → 6.16`

## 86.0.0 - 2026-06-12

### 💥 Breaking Changes (upgrade difficulty: 🟠 MEDIUM - library upgrades + component API changes)

See [`docs/upgrade-notes/v86-upgrade-notes.md`](docs/upgrade-notes/v86-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

* Deprecated `HoistBase.withSpan()` and the `FetchOptions.span` / `loadSpec` fields, in favor of the
  `Runner` chain (`runner().span()`) and the new `CallContext` argument to fetch methods (see below
  for more details). Both log a warning and are scheduled for removal in v88.
* Upgraded `CodeInput` to CodeMirror v6 (upgraded from v5).
    * Removed `editorProps` prop - most use cases now supported via first-class `CodeInput` props
      such as `readonly`, `language`, `lineNumbers`, and `lineWrapping`.
    * Replaced the `mode` prop with `language`. See
      [language-data](https://github.com/codemirror/language-data/blob/main/src/language-data.ts)
      for valid language strings (aliases and names are both accepted).
* Redesigned `FileChooser`, moving configuration from component props to the `FileChooserModel`
  constructor config and adding a fully customizable display API.
    * Options such as `accept` and the file-size limits are now set on `FileChooserModel` rather
      than as `FileChooser` props.
    * Renamed `maxSize` / `minSize` to `maxFileSize` / `minFileSize`.
    * Removed `enableMulti` / `enableAddMulti` - use `maxFiles` (set to `1` for single-file
      selection).
    * Removed `targetText` and `showFileGrid` - customize via the new `emptyDisplay` / `fileDisplay`
      content props. The default `fileDisplay` is a file grid, or a compact card with replace /
      remove actions when `maxFiles` is 1.
    * Removed the `onFilesChange()` model hook - react to the observable `files` array or use the
      new `onFileAccepted` / `onFileRejected` callbacks.
* `DashContainerModel` no longer persists per-view `icon` in its layout state, aligning with
  `DashCanvasModel`. Icons now always come from the `DashViewSpec`. Apps that set
  `DashViewModel.icon` at runtime still see it render, but the override is no longer saved.
* Removed the `serializeIcon()` / `deserializeIcon()` helpers from `@xh/hoist/icon`, which existed
  only to support the above.
* Replaced the mobile `DateInput`'s picker with the browser's native `<input type="date">`, dropping
  the abandoned `react-dates` dependency. Removed the obsolete `formatString`,
  `initialMonth`, `placeholder`, and `singleDatePickerProps` props from `DateInputProps`.

### 🎁 New Features

* `FileChooser` gained extensive new capabilities as part of its redesign: a `maxFiles` limit, fully
  customizable `emptyDisplay` / `fileDisplay` content, `onFileAccepted` / `onFileRejected`
  callbacks, configurable rejection toasts, `maskOnDrag` / `maskOnDisabled` options, and a
  programmatic `openFileBrowser()` method. In multi-file mode a persistent drop target sits
  alongside the grid - placement set via the `dropTargetPlacement` prop (`left`, `top`, or
  `hidden`) - so users can keep adding files until the limit is reached.
* Added the `Runner` API - a fluent builder (via `HoistBase.runner()`) that composes spanning,
  logging, activity tracking, metrics, and task-linking around async work and fetch calls. It
  threads a shared `CallContext` (trace + load state) across call boundaries, which fetch methods
  now accept as an optional argument.
* Added a client-side `MetricsService` (`XH.metricsService`) for recording timers and counters,
  batched to the server's Micrometer registry. Recording requires `hoist-core >= 40.0.1`.
* Trace spans can now chain onto a remote `traceparent` received off-channel (e.g. a WebSocket, SSE,
  or queue message), in addition to a local parent span.
* Desktop `DateInput` now supports a `commitOnChange` prop (default `true`). Set to `false` to defer
  parsing and value commit until blur, Enter, or picker selection. Useful when configuring
  `parseStrings` such that one format is a prefix of another (e.g. `MM/DD/YY` and `MM/DD/YYYY`),
  where the eager default would reformat the user's text mid-typing.
* `SegmentedControl` now supports a per-option `intent`, with an option's own intent taking
  precedence over the control-level default. Its control-level `intent` prop was widened from
  `'none' | 'primary'` to `'none' | Intent`, now accepting `success` / `warning` / `danger` as well
  (a backward-compatible widening).
* Added `pathPrefix` to `PersistOptions` - an inheritable prefix prepended to the resolved `path`,
  concatenated through `persistOptions()`. Enables hierarchical namespacing of persistence so a
  parent model can scope all descendants (`@persist` properties, `markPersist` calls, child
  `GridModel` / `PanelModel` / etc.) under a single shared key in one backing store. See
  [`docs/persistence.md`](docs/persistence.md#hierarchical-namespacing-with-pathprefix).
* Added exported `persistOptions()` function for merging one or more `PersistOptions` objects, with
  later arguments overriding earlier ones. Replaces the now-deprecated
  `PersistenceProvider.mergePersistOptions`.

### 🐞 Bug Fixes

* Updated the chart right-to-left "zoom out" gesture to activate for charts configured with the
  modern `chart.zooming.type` Highcharts option, in addition to the legacy `chart.zoomType`.
* Improved desktop `Select` to no longer hijack `Home`/`End` keys, allowing native caret movement in
  the input. See [#3930](https://github.com/xh/hoist-react/issues/3930).
* Fixed `GridFilter` column header values tab crashing with a duplicate-ID error when re-opened for
  a `tags`-typed field with an active filter.
* Fixed `RelativeTimestamp` ignoring an explicitly passed `model` prop when resolving its `bind`
  source - the prop is now honored, falling back to the context model only when unset.
* Fixed `UniqueAggregator` permanently caching `null` on grouped cube rows after a diverge →
  reconverge sequence of child updates; the aggregator now falls back to a sibling re-scan when the
  cache could be transitioning.
* Fixed a set of view title-handling bugs in the Dash components: `DashCanvasModel.loadState()`
  wiped titles omitted from state entries, `DashContainerModel` ignored incoming titles when
  reloading state over existing views (e.g. failing to reset renames on `restoreDefaultsAsync()`),
  and `DashContainer` tab headers lost renames after a drag. Omitted titles now reset to the
  `DashViewSpec` default in both components.
* Fixed `DashCanvasModel` not publishing layout-only state changes - e.g. `restoreDefaults()` after
  a user had only moved or resized widgets - leaving persisted state stale.
* Fixed `GridModel.beginEditAsync()` ignoring a specified `record` with the id `0`.
* Fixed the `DashCanvas` view menu showing a `Replace` option with an empty fly-out when no view
  specs remain available - the option is now hidden, matching the handling of `Add`.

### 🤖 AI Docs + Tooling

* Added a `hoist-read-doc` MCP tool that reads a full document by exact ID, giving MCP parity with
  the `hoist-docs read` CLI and `hoist-core`'s `hoist-core-read-doc`.
* `hoist-read-doc`, the `hoist://docs/{id}` resource, and `hoist-docs read` now tolerate common
  doc-ID shortenings (e.g. `grid`, `core`, `v85`), resolving to the canonical ID or suggesting
  candidates when ambiguous.
* Added a `hoist-docs ping` CLI subcommand mirroring the `hoist-ping` MCP tool; both now report the
  indexed `@xh/hoist` library version.
* MCP/CLI symbol JSDoc is no longer truncated at the first `@`-prefixed line inside a fenced code
  block (e.g. an `@observable.ref` in a usage example), recovering example code, "SEE ALSO" lists,
  and trailing prose that were previously dropped.

### 📚 Libraries

* @azure/msal-browser `4.29 → 5.11`
    * Major upgrade with broad architectural changes. Hoist no longer hard-codes
      `system.iframeHashTimeout`; apps that override MSAL `system` / `cache` / `auth` options via
      `msalClientOptions` on `MsalClient` must review
      the [v4 → v5 migration guide](https://learn.microsoft.com/en-us/entra/msal/javascript/browser/v4-migration)
      for renamed or removed keys.
* @codemirror `5.x → 6.x`
    * Replaces the v5 monolithic `codemirror` package, with several new direct dependencies now
      managed by hoist-react to maintain all supported functionality.
    * See breaking change note above for `CodeInput` prop changes.
* @seznam/compose-react-refs `removed`
    * Replaced by a Hoist-owned `composeRefs` utility exported from `@xh/hoist/utils/react`.
      Behavior unchanged.
* @xh/hoist-dev-utils `12.x → 13.x`
* ag-grid `34.x → 35.x`.
    * Apps must bump their `ag-grid-community`, `ag-grid-enterprise`, and `ag-grid-react`
      dependencies to `35.x`. See
      the [AG Grid v35 upgrade guide](https://www.ag-grid.com/javascript-data-grid/upgrading-to-ag-grid-35/);
      no Hoist API changes required.
* clipboard-copy `removed`
    * Replaced by a Hoist-owned `copyToClipboard` utility exported from `@xh/hoist/utils/js`.
      Behavior unchanged (async Clipboard API with `execCommand` fallback).
* debounce-promise `removed`
    * Replaced by a Hoist-owned `debouncePromise` utility exported from `@xh/hoist/promise`.
      Behavior unchanged for the trailing-edge / shared-promise usage Hoist relies on; leading-edge
      and accumulate modes were not used and have been omitted.
* golden-layout `removed`
    * Forked the unmaintained `golden-layout` 1.5.9 into `kit/golden-layout/`, removing unused code,
      porting jQuery usage to native DOM, and folding existing monkey-patches into the source.
      See [#4336](https://github.com/xh/hoist-react/issues/4336).
* jquery `removed`
    * Was included due to golden-layouts consumer, which now no longer needs the library.
    * Apps with previously required `"jquery": "3.x"` pin in package.json `resolutions` should now
      be able to remove that pin.
* react-beautiful-dnd `removed`
    * Replaced by `@hello-pangea/dnd` 18.0, a maintained, React 19-ready, drop-in fork. The
      now-archived `react-beautiful-dnd` will receive no further updates. No Hoist or app API
      changes - drag-and-drop behavior is unchanged.
* react-dates `removed`
    * The mobile `DateInput` now uses the browser's native `<input type="date">`. See the breaking
      change note above.
* react-dropzone `10.x → 15.x`
    * See the `FileChooser` redesign note under Breaking Changes above.
* react-select `4.3 → 5.10`
* react-windowed-select `3.1 → 5.2`
* semver `7.7 → 7.8`

## 85.0.0 - 2020-04-30

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW)

See [`docs/upgrade-notes/v85-upgrade-notes.md`](docs/upgrade-notes/v85-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

Note that `hoist-core >= 39.0` is recommended (not required) to pair with the span-sampling and
app-load span changes in this release.

* `XH.installServicesAsync()` no longer accepts the spread-args form. Callers must pass an array of
  service classes plus the current phase's `InitContext`:
  ```ts
  // before
  await XH.installServicesAsync(MyServiceA, MyServiceB);
  // after
  await XH.installServicesAsync([MyServiceA, MyServiceB], ctx);
  ```
  The `ctx` is the one passed to your `AppModel.initAsync(ctx)` override. Forwarding it ensures
  service-init spans nest under the current phase's root span (e.g. `xh.client.appInit`
  for app-level services, `xh.client.hoistInit` for Hoist-internal services).
* `HoistService.initAsync()` and `HoistAppModel.initAsync()` signatures now take an
  `InitContext` argument. Override signatures must be updated to `initAsync(ctx: InitContext)` - the
  upgrade notes cover the mechanical changes and recommended ways to forward `ctx.span`
  into init-time fetch and async work.
* `HoistBase.withSpan()` / `withSpanAsync()` have been removed in favor of the new
  `HoistBase.span()` builder. Replace `this.withSpanAsync(cfg, fn)` with
  `this.span(cfg).run(fn)`. The underlying `XH.traceService.withSpan()` API remains for advanced
  use - now a single async method (the prior sync `withSpan` and async
  `withSpanAsync` on `TraceService` have been merged).
* `TraceService` no longer supports the `alwaysSampleErrors` flag, which was deemed inappropriate
  for head-based sampling. This change is consistent with a similar update in hoist-core v39. Apps
  requiring full visibility into error spans for a particular set of errors should ensure they are
  sampled via the existing rules.
* Removed several APIs that had been deprecated for one or more prior versions - including
  `loadModel` getters across model/service/store classes, static defaults setters on `GridModel`/
  `ChartModel`/`ExceptionHandler`/`FetchService`, and the legacy `withFilterByField`/
  `withFilterByKey`/`replaceFilterByKey`/`withFilterByTypes` filter helpers. See the v85 upgrade
  notes for the full list and replacements.

### 🎁 New Features

* Added `Span.setTag()`/`setTags()`. Span passed to spanned functions is now non-nullable, matching
  the server-side API.
* `LoadSpecConfig.span` lets callers seed the parent trace context for a managed load via loadAsync
  (). This span will be made available on the LoadSpec and automatically picked up by FetchService
  for properly nesting fetch calls.
* `HoistService.initAsync()` and `HoistAppModel.initAsync()` now receive an `InitContext`
  argument carrying the current phase's `span`, so service init spans can nest under the caller's
  span. Pass it along to any `loadAsync()` calls via `LoadSpecConfig.span` to continue the chain.
* `sampleRules` in `xhTraceConfig` now support matching against the span's name via the reserved
  `name` key (same syntax as tag-value patterns). Matches addition in hoist-core.
* Added the `user.name` tag to all spans. New `xh.impersonating` tag on spans shows impersonated
  user, if any.
* Improved, properly nested spans for app loading: `xh.client.load`, `xh.client.hoistInit`, and
  `xh.client.appInit`.
* Added `Picker` props for richer multi-select trigger rendering: `multiSelectButtonStyle: 'values'`
  shows comma-separated selected labels (overflow-ellipsed) instead of the default summary count,
  and `multiSelectShowCount` adds a small selection-count badge to the left of the text. Both are
  app-wide overridable via `Picker.defaults`.

### 🐞 Bug Fixes

* Updated `HoistBase.withSpan` to auto-populate `caller` with `this`, ensuring emitted spans
  correctly stamp `code.namespace`.
* Fixes to built-in fetch CLIENT span:  install `http.response.status_code` and `url.full` tags.
* Fixed downstream app type-check failures on hoist-react asset imports by adding triple-slash
  references to `assets.d.ts` from the files that import PNGs. The ambient declarations were not
  reachable from consumer tsconfigs with narrower `include` patterns.
* Upgraded Swiper `11 → 12` to resolve CVE-2026-27212, a critical prototype pollution vulnerability
  in `Swiper.extendDefaults()`. Apps consuming Swiper's own SCSS should update imports from
  `swiper/scss` to `swiper/css` - Swiper 12 ships CSS sources only.

### 🤖 AI Docs + Tooling

* MCP/CLI symbol and member search now support multi-word queries combining class and member names
  (e.g. `"StoreRecord raw"`).
* Expanded member-index coverage to every exported class and every exported `*Config` interface.
* Added an `@mcpHint` JSDoc tag for attaching short hints to indexed classes/interfaces.
* All MCP tools now expose structured output via `outputSchema` / `structuredContent`; matching CLI
  subcommands gained a `--json` flag.
* `hoist-get-members` surfaces `@param` and `@returns` JSDoc, including via `implements` fallback.
* Added a disk-persisted index cache at `node_modules/.cache/hoist-mcp/`, dropping cold CLI search
  invocations from multi-second builds to sub-second loads. `HOIST_MCP_NO_CACHE=1` to bypass.
* Added MCP server `instructions` and disambiguating language to tool descriptions.
* Fixed a member-index collision where same-named owners clobbered each other's `memberNames`.

### ⚙️ Technical

* Improvements to the naming and tagging of hoist-created spans for consistency with hoist-core and
  easier tag-based sampling.
* Suppressed `Trace ID` display in exception dialogs/toasts for routine or unsampled exceptions.

### 📚 Libraries

* swiper `11.2 → 12.1`
* @onsenui/fastclick `removed`
* @popperjs/core `removed`
* react-transition-group `removed`
* resize-observer-polyfill `removed`

Removed dependencies were obsolete or no longer used by hoist-react internals. No app impact
expected - none were part of the public API surface. Apps that imported these directly (relying on
them as transitive hoist-react dependencies) must add their own direct dependencies.

## 84.0.2 - 2026-05-13

### 🐞 Bug Fixes

* Fixed downstream app type-check failures on hoist-react asset imports by adding triple-slash
  references to `assets.d.ts` from the files that import PNGs. The ambient declarations were not
  reachable from consumer tsconfigs with narrower `include` patterns. Backport of the fix originally
  shipped in v85.0.0.

## 84.0.1 - 2026-04-20

### 🐞 Bug Fixes

* Fixed an unrecoverable crash when calling `XH.prompt()` (and any other `FormField` rendered
  without an explicit `model` prop). `InstanceManager.registerModelWithTestId()` dereferenced a null
  model when a `testId` was supplied, introduced by the v84 expansion of `testId` coverage on
  built-in appcontainer components.

## 84.0.0 - 2026-04-15

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW)

See [`docs/upgrade-notes/v84-upgrade-notes.md`](docs/upgrade-notes/v84-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

* Requires `hoist-core >= 38.0`.
* Removed the `getClassName()` utility from `@xh/hoist/utils/react`. This function had no remaining
  usages in the framework — the `className` spec field on `hoistCmp.factory()` /
  `hoistCmp.withFactory()` handles base class merging automatically.

### 🎁 New Features

* Updated FontAwesome to v7, bringing subtle visual tweaks and performance optimizations to Hoist's
  icon library. All previously supported icons remain and no app changes should be required.
* Replaced animated PNG `Spinner` with a FontAwesome icon-based spinner, making it scalable,
  themeable, and consistent with the rest of the icon system. The icon and weight can be configured
  globally via `Spinner.defaults` or per-instance via props. A `usePng` flag is available to
  preserve the original PNG appearance if desired.
* Added client-side span sampling to `TraceService`. Evaluates `xhTraceConfig.sampleRules` at span
  creation, with child spans inheriting their parent's decision. The `traceparent` header now
  propagates the sampling flag to the server.
* `FetchOptions.span` now accepts a `string` or `SpanConfig` in addition to an existing `Span`. When
  a string or config is provided, `FetchService` creates and manages the parent span internally,
  simplifying a common tracing pattern for fetch calls.

### 🤖 AI Docs + Tooling

* Added JSDoc to ~60 exported Config/Spec interfaces and improved class-level docs on key framework
  classes. Added README cross-references, when-to-use guidance, and `@see` navigation links
  throughout.
* Split Cube documentation into dedicated `data/cube/README.md` with expanded query patterns
  covering grand totals, leaf drill-down, dynamic updates, and `executeQuery()`.
* Enhanced MCP/CLI symbol search to match JSDoc content with multi-word AND queries (e.g.
  `"panel modal"` finds `ModalSupportModel`). Added disambiguation hints for duplicate symbol names
  and fixed resolution of symbols shadowed by dynamics stubs.

### ⚙️ Technical

* Added support for a typed `defaults` object on `hoistCmp` components — static config that apps can
  override at bootstrap (e.g. `Button.defaults.minimal = false`). Instance props take precedence.
  Added initial defaults to `Button`, `Panel`, `Spinner`, and `Toolbar`.
* Added `suppressStackTrace` and `includeStartMessages` fields to the Log Levels admin panel,
  supporting the new hoist-core per-logger logging behavior overrides.
* Added `assets.d.ts` type declarations for image and markdown imports (`*.png`, `*.gif`, `*.jpg`,
  `*.svg`, `*.md`), removing the need for `@ts-ignore` on asset imports.
* Added hardcoded `xh-` prefixed `testId` props to all desktop and mobile appcontainer components
  for Playwright testing support.
* Namespaced auto-installed `TraceService` span and metric tags with an `xh.` prefix, aligning with
  OTEL semantic conventions.

### ✨ Styles

* Improved default grid tooltip styling — long strings now wrap at a configurable max-width (`400px`
  default) using `pre-wrap`. New `--xh-grid-tooltip-*` CSS variables added for app-level
  customization of background, border, border-radius, padding, and max-width.

### 📚 Libraries

* @auth0/auth0-spa-js `2.17 → 2.19`
* @fortawesome/* `6.0 → 7.2`
* @fortawesome/react-fontawesome `0.2 → 3.2`
* dompurify `3.3 → 3.4`
* lodash `4.17 → 4.18`

## 83.1.0 - 2026-04-07

### 🐞 Bug Fixes

* Fixed `EnvironmentService.ensureVersionRunnable()` to correctly detect client/server version
  mismatches on startup. The previous check compared two values both sourced from the server
  response, making it a tautology that could never fail. Now compares the webpack-baked
  `clientVersion` against the server-reported `appVersion`.

### 🤖 AI Docs + Tooling

* Improved MCP/CLI TypeScript symbol tools to surface full JSDoc documentation in search results and
  resolve a discoverability gap around component Props interfaces. `hoist-search-symbols`
  now includes JSDoc snippets with each result. Props interfaces (e.g. `PanelProps`) without their
  own JSDoc inherit documentation from their companion component via naming convention.
  `hoist-get-symbol` now cross-references between Props interfaces and their components.

## 83.0.2 - 2026-03-30

### ⚙️ Technical

* Updated `WebSocketService` to support same-origin `baseUrl` values (e.g. `/api/`). Previously
  assumed a cross-origin `baseUrl` in dev mode. Required for compatibility with the new
  webpack-dev-server proxy in `@xh/hoist-dev-utils` v12.

## 83.0.1 - 2026-03-25

### ⚙️ Technical

* Update upgrade notes skill to properly register upgrade note

## 83.0.0 - 2026-03-24

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW)

See [`docs/upgrade-notes/v83-upgrade-notes.md`](docs/upgrade-notes/v83-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

* Requires `hoist-core >= 37.0` (paired major release — tracing and metrics features depend on new
  server-side infrastructure).
* Deprecated ad-hoc static properties on `GridModel`, `ChartModel`, `ExceptionHandler`, and
  `FetchService` in favor of the new `static defaults` pattern. Old properties log warnings and are
  scheduled for removal in v85.
* Removed `downloadjs` dependency. Apps that imported `downloadjs` directly (relying on it as a
  transitive hoist-react dependency) must replace those usages. Use the new
  `downloadBlob(blob, filename)` or `downloadViaUrl(url, filename?)`
  utilities from `@xh/hoist/utils/js` instead.

### 🎁 New Features

* Added `TraceService` — client-side distributed OTEL tracing, configurable via `xhTraceConfig`.
    - `withSpan()` and `withSpanAsync()` wrap operations with automatic timing and error capture.
    - `Promise.span()` provides a chainable API for tracing promise-based operations.
    - `FetchService` auto-creates CLIENT spans and injects `traceparent` headers.
    - Exceptions thrown during traced operations include a top-level `traceId` for correlation.
    - Automated app-load spans covering pre-auth, hoist init, and app init phases.
* Added `SegmentedControl` desktop input component — a toggle group for mutually exclusive options
  with strong visual differentiation of the active selection. Consider as replacement for
  `ButtonGroupInput`.
* Added `CheckboxButton` desktop input component — a button-based boolean toggle matching the
  existing mobile component. Added `checkedIcon` and `uncheckedIcon` props to both desktop and
  mobile versions for custom icon support.
* Added publish controls to the Admin Metrics tab, supporting the new opt-in metrics export feature
  in `hoist-core >= 37.0`.
* Added `activeFilterIcon` config to `GridFilterModel` to customize the icon displayed in column
  headers when a filter is active. Accepts any `Icon` element, enabling use of a different icon,
  prefix (e.g. solid), or intent (e.g. warning).

### ⚙️ Technical

* Introduced a standard `static defaults` pattern for app configuration overrides across several
  core models. `GridModel.defaults` is the prime example — see `GridModelDefaults` for the full set
  of visual, behavioral, and structural props now available. Apps should review available defaults
  and set them at startup to reduce per-instance boilerplate. Instance-level config always takes
  precedence. Previous ad-hoc static properties (e.g.
  `GridModel.DEFAULT_AUTOSIZE_MODE`) are deprecated — update to the new
  `ModelClassName.defaults.propName` form.
* Added `TabContainerModel.setActiveTabId()` for programmatic tab activation, suitable for use as a
  `bind` target (e.g. with `SegmentedControl`). Previously required calling `activateTab()`.
* Switched `sizingModeAppOption` and `themeAppOption` app option control presets to use new
  `SegmentedControl` and set new `refreshRequired: false` flag to avoid data refresh when changed.
* Made `DashCanvasModel.loadState()` public, allowing applications to restore canvas state directly
  from a `DashCanvasItemState[]` array without wrapping as `PersistableState`.
* Updated `FieldFilter` to log console warning for any field not found in linked `Store`.

### 🤖 AI Docs + Tooling

* Refactored documentation indexing to better support both MCP (LLM) and the Toolbox Docs viewer.
* Improved MCP/CLI TypeScript tools: `hoist-get-members` now walks both class and interface
  inheritance chains, shows constructor config types, indexes Promise prototype extensions, and
  filters `_`-prefixed internal members.
* Fixed MCP/CLI TypeScript symbol indexing for destructured exports (e.g.
  `export const [Button, button] = hoistCmp.withFactory(...)`). Individual binding names are now
  indexed as separate symbols, enabling exact-match lookups via `hoist-ts symbol`.

## 82.0.4 - 2026-03-23

### 🐞 Bug Fixes

* Fixed `Store.getFieldValues()` to include `null` in its returned set when records contain
  null/undefined values. Previously these were silently excluded, preventing grid column filters
  from offering a [blank] option.
* Fixed `FilterChooser` `QueryEngine` to handle null values in suggestion generation without
  throwing. Added error logging so failures in `queryAsync` surface in the console rather than
  silently killing the dropdown. The 'is' pseudo-operator is now listed in the e.g. operator hints,
  and 'is blank' / 'is not blank' suggestions are offered when a field contains null values.

## 82.0.3 - 2026-03-02

### 🐞 Bug Fixes

* Fixed bug where `DashCanvasModel.state` returned stale data when persisted state was restored
  during construction.
* Fixed bug preventing selection of favorites in the `GroupingChooser`.

## 82.0.2 - 2026-03-02

### 🐞 Bug Fixes

* Fixed TS compilation errors caused by missing `.d.ts` declaration files in published build.

## 82.0.1 - 2026-02-28

### 🐞 Bug Fixes

* Fixed a CSS issue causing desktop submenus to clip.

### 🤖 AI Docs + Tooling

* Enhanced the MCP server's `hoist-search-symbols` tool to also search public members (properties,
  methods, accessors) of 18 key framework classes. The TypeScript index is now built asynchronously
  after server startup so the first tool call doesn't pay the initialization cost.

## 82.0.0 - 2026-02-27

Note that a server-side upgrade to `hoist-core >= 36.3` is recommended to support new Admin Metrics
tab, but is not strictly required.

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW)

See [`docs/upgrade-notes/v82-upgrade-notes.md`](docs/upgrade-notes/v82-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

* Converted `FetchService` correlation ID properties (`autoGenCorrelationIds`, `genCorrelationId`,
  `correlationIdHeaderKey`) from instance to static. These can now be configured in the app's
  `Bootstrap` module to ensure correlation IDs are active from the very first request, including
  early hoist core init calls. Apps that configure these properties should update references from
  `XH.fetchService.<prop>` to `FetchService.<prop>`.
* Added additional `div` with `xh-dash-tab__content` class around `DashContainerView` content. Apps
  with custom CSS targeting `xh-dash-tab` may need to adjust their selectors.
* Removed the `xh-popup--framed` CSS class. Apps applying this class to popovers should remove it —
  popover borders are now themed globally via the `--xh-popup-border-color` CSS variable.

### 🎁 New Features

* Added `DashCanvasWidgetChooser` component — a draggable widget well for adding views to a
  `DashCanvas` via drag-and-drop from an external container. Added `allowsDrop`, `onDropDone`, and
  `onDropDragOver` config options to `DashCanvasModel` to support this, along with
  `showGridBackground` and `showAddViewButtonWhenEmpty` configs and a `'wrap'` compaction strategy.
* Added `Picker` desktop input component — a popover-based option picker for space-constrained areas
  like toolbars. Renders a trigger button that opens a dropdown checklist, with support for single
  and multi-select modes, built-in filtering, custom option and button renderers, and virtualized
  scrolling for large option lists.
* Added new Admin Console Cluster > Metrics tab, providing a cluster-wide view of all registered
  Micrometer meters, part of Hoist's ongoing observability updates.
    * Feature requires `hoist-core >= 36.3`.
* Added `description` property to `Field` and `Column`. `Column.description` defaults from
  `Field.description` and serves as the default for both `headerTooltip` and `chooserDescription`
  when those are not explicitly set, providing a single point of configuration for supplementary
  descriptive text that flows from the data layer through to the grid UI.
* Added `bind` config to `GroupingChooserModel` for two-way syncing of the selected grouping to a
  `GridModel` (via `setGroupBy()`) or Cube `View` (via `updateQuery({dimensions})`). When `bind` is
  provided, dimensions can be omitted and will be auto-populated from the target's fields where
  `isDimension: true`. Explicitly provided dimensions are validated against the target's fields.
    * Promoted `isDimension` from `CubeField` to the base `Field` class (defaults to `false`),
      allowing Store fields to be marked as groupable dimensions.
* Added `testId` support to mobile `Button`, `FormField`, `TabContainer`, and all mobile input
  components (`Checkbox`, `DateInput`, `NumberInput`, `SearchInput`, `Select`, `SwitchInput`,
  `TextArea`, `TextInput`).

### 🐞 Bug Fixes

* Fixed `testId` generation in `RadioInput` (use option `value` instead of `label`) and `RestGrid`
  action buttons (scope by parent `testId` to prevent collisions across multiple grids).
* Fixed `parseFieldValue` for `'date'`-typed fields to detect `LocalDate` inputs and convert via
  `.date` rather than passing through `new Date()`.
* Fixed `Panel` content styling to `display: block` when `scrollable` is `true`.
* Fixed `DynamicTabSwitcher` to consume the `onContextMenu` event on its tabs.
* Improved `DashCanvas` and `DashContainer` persistence such that individual `ViewModel` state can
  be updated without reloading the entire dashboard and owned views.
* Fixed `GroupingChooser` to support multiple instances sharing the same `GroupingChooserModel`.
  Transient UI state (e.g. editor open/closed, pending value) is now held per-component, so opening
  one chooser no longer opens all others bound to the same model.

### ⚙️ Technical

* Added instance methods to the `Filter` class hierarchy for removing child filters by type or
  field, plus a new `appendFilter()` utility for composing filters via AND. These replace the
  standalone `withFilterByField`, `withFilterByKey`, and `withFilterByTypes` utilities, which have
  been deprecated. Internal callers have been migrated to the new API.
* Transitioned the hoist-react build itself to GitHub Actions (from our previous Teamcity build). No
  change to library consumers - Hoist continues to be published to npm.
* Catches and logs an occasional, non-fatal race condition error on `DashContainer` state changes.

### 🤖 AI Docs + Tooling

* Added an embedded MCP (Model Context Protocol) server that gives AI coding tools structured access
  to hoist-react documentation and TypeScript type information. Includes tools for keyword search
  across docs, symbol lookup, and class/interface member inspection. See [
  `mcp/README.md`](mcp/README.md) for setup and usage details.

### ✨ Styles

* Overrode Blueprint's hardcoded popover border and arrow colors to use Hoist's themed
  `--xh-popup-border-color` CSS variable. Popover borders and arrows now match the rest of the Hoist
  theme in both light and dark modes.

### 📚 Libraries

* @azure/msal-browser `4.26 → 4.29`
* @auth0/auth0-spa-js `2.9 → 2.17`
* react-grid-layout `2.1 → 2.2.2`
* react-window `2.2` (new — windowed rendering for `Picker` virtual option lists)
* qs `6.14.0 → 6.15.0`

## 81.0.2 - 2026-02-12

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW)

See [`docs/upgrade-notes/v81-upgrade-notes.md`](docs/upgrade-notes/v81-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

* Requires `hoist-core >= 36.1`.
* Renamed the CSS class on Panel's outer structural wrapper from `xh-panel__content` to
  `xh-panel__inner`. The `xh-panel__content` class is now used on the new inner frame wrapping
  content items (the target of `contentBoxProps`). Update any app CSS selectors targeting the old
  `xh-panel__content` class accordingly.
* Changed the signatures of some `HoistAuthModel` methods to return `IdentityInfo` rather than a
  `boolean`. For most apps this will require a trivial change to the signature of the implementation
  of `HoistAuthModel.completeAuthAsync`.
* Renamed Blueprint `Card` exports to `BpCard` and `bpCard`.

### 🎁 New Features

* Added `Card` component, a bordered container for grouping related content with an optional inline
  header and collapsible content.
* Added `FormFieldSet` component for grouping `FormFields` with aggregated validation state.
* Added `contentBoxProps` to desktop and mobile `Panel`, providing direct control over the inner
  frame wrapping content items. Use to apply padding, change flex direction, enable scrolling, or
  add custom classes without extra nesting. Matches the existing `contentBoxProps` API on `Card`.
* Added `scrollable` prop to desktop `Panel`, matching the existing mobile `Panel` API. Sets
  `overflowY: 'auto'` on the content area.
* Enhanced layout props `padding`, `margin` (and their directional variants), and `gap` to accept a
  boolean shorthand: `true` - resolves to the standard app padding CSS variable (`--xh-pad-px`,
  default 10px), with `false` treated as unset.

### 🐞 Bug Fixes

* Fixed bug where inline editable `Grid` with `groupDisplayType` other than `groupRows` would throw.
* Fixed bug where attempting to access validation errors on subforms would throw.

### ⚙️ Typescript API Adjustments

* Updated `GridFilterModel.setFilter` signature to accept `FilterLike` rather than `Filter`.
* Added `ResolvedLayoutProps` type alias. `getLayoutProps()` and `splitLayoutProps()` now return
  `ResolvedLayoutProps` (with boolean values resolved) instead of `LayoutProps`.

### ⚙️ Technical

* Improved the efficiency of initialization by reducing the number of fetch requests required to
  load user identity.

## 80.0.1 - 2026-01-28

### ⚙️ Technical

* Added `Cube.lastUpdated` and `View.cubeUpdated` properties to support more efficient updating of
  connected cube views.

## 80.0.0 - 2026-01-27

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW)

See [`docs/upgrade-notes/v80-upgrade-notes.md`](docs/upgrade-notes/v80-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

* Modified several CSS classes related to `FormField` to better follow BEM conventions.
    * ⚠️The commonly targeted `xh-form-field-label` class is now `xh-form-field__label`, although
      please review new CSS vars (below) and consider using those instead of class-based selectors.
    * Modifier classes now follow BEM conventions (e.g. `xh-form-field-invalid` is now
      `xh-form-field--invalid`).
* Completed the refactoring from `loadModel` to `loadObserver` started in v79:
    * Renamed `XH.appLoadModel` to `XH.appLoadObserver`. The prior getter remains as an alias but is
      deprecated and scheduled for removal in v82.
    * Renamed `AppContainerModel.loadModel` to `loadObserver`. This is primarily an internal model,
      so there is no deprecated alias. Any app usages should swap to `XH.appLoadObserver`.
    * Removed additional references to deprecated `loadModel` within Hoist itself.
* Removed the following instance getters - use new static typeguards instead:
    * `Store.isStore`
    * `View.isView`
    * `Filter.isFilter`
* Replaced `LeftRightChooserFilter.anyMatch` with `matchMode`. Changes are not expected to be
  required as apps typically do not create this component directly.

### 🎁 New Features

* Enhanced `Field.rules` to support `warning` and `info` severity. Useful for non-blocking
  validation scenarios, such as providing guidance to users without preventing form submission.
* Added new `AppMenuButton.renderWithUserProfile` prop as a built-in alternative to the default
  hamburger menu. Set to `true` to render the current user's initials instead or provide a function
  to render a custom element for the user.
* Added `AggregationContext` as an additional argument to `CubeField.canAggregateFn`.
* Added `filterMatchMode` option to `ColChooserModel`, allowing customizing match to `start`,
  `startWord`, or `any`.
* Added support for reconnecting a `View` to its associated `Cube`.

### 🐞 Bug Fixes

* Fixed error encountered when attempting to `store.revert()` on a store with summary records.

### ⚙️ Typescript API Adjustments

* Introduced new `FilterBindTarget` and `FilterValueSource` interfaces to generalize the data
  sources that could be used with `FilterChooserModel` and `GridFilterModel`. Both `Store` and
  `View` implement these interfaces, meaning no changes are required for apps, but it is now
  possible to use these models with alternate implementations.
* Added new static typeguard methods on `Store`, `View`, and `Filter` + its subclasses.
* Removed `RecordErrorMap` + reorganized validation types (not expected to impact most apps).

### ✨ Styles

* Applied the app-wide `--xh-font-family` to `input` elements. Previously these had continued to
  take a default font defined by the browser stylesheet.
    * Customize for inputs if needed via `--xh-input-font-family`.
    * Note that the switch to Hoist's default Inter font w/tabular numbers might require some inputs
      w/tight sizing to be made wider to avoid clipping (e.g. `DateInputs` sized to fit).
* Updated + added validation-related `FormField` CSS classes and variables to account for new `info`
  and `warning` validation levels. Additionally validation messages and the `info` text element no
  longer clip at a single line - they will wrap as needed.
* Added new CSS variables for `FormField` to allow easier customization of commonly adjusted styles,
  with a focus on labels. See `vars.scss` for the full list. Consider replacing existing class-based
  CSS overrides with overrides to variables where possible.
* Added new CSS variables `--xh-intent-danger-text-color` (and others). Consider using these when
  styling text with Hoist intent colors to enhance legibility in dark mode.
* Tweaked styling of `DashContainer` tab controls, adding a left border to the control surface and
  improving the visibility of the tab overflow dropdown.

### 📚 Libraries

* Added a direct dependency and forced resolution to pin to `jquery@3.x`. This is a transitive
  dependency of the `golden-layout` library and is specified by that library very loosely as `*`,
  causing a break if upgraded to jQuery's new 4.x release.
    * ⚠️Apps will need to add their own resolution to ensure they stay on the last 3.x version.

## 79.0.0 - 2026-01-05

### 💥 Breaking Changes (upgrade difficulty: 🟠 MEDIUM)

See [`docs/upgrade-notes/v79-upgrade-notes.md`](docs/upgrade-notes/v79-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

Note that a server-side upgrade to `hoist-core >= 35` is recommended to support several changes in
this release, but is not strictly required.

* Upgraded Blueprint from version 5 to version 6. Most apps will not need to change, but
  see https://github.com/palantir/blueprint/wiki/Blueprint-6.0 for more details.
    * ⚠️ Note that any custom CSS overrides to BP classes will need to replace the `bp5` prefix with
      `bp6` and should be reviewed for accuracy/neccessity.
* Renamed `LoadSupport.loadModel` to `LoadSupport.loadObserver` for clarity. This property is a
  `TaskObserver` instance, not a `HoistModel`.
    * The getter methods `HoistModel.loadModel` and `HoistService.loadModel` remain as aliases but
      are deprecated and scheduled for removal in v82.
    * Apps should update their code to use `loadObserver` instead of `loadModel`.
* Renamed `GridModel.applyColumnStateChanges()` to `updateColumnState()` for clarity and better
  symmetry with `setColumnState()`.
    * The prior method remains as an alias but is deprecated and scheduled for removal in v82.
* Moved `TabSwitcherProps` to `cmp/tab/Types.ts` but maintained export from `cmp/tab/index.ts`. Some
  apps may need to update their imports.
* Repurposed `TabContainerConfig.switcher` to accept a `TabSwitcherConfig`. To pass
  `TabSwitcherProps` via a parent `TabContainer`, use `TabContainerProps.switcher`.
* Tightened the typing of `LocalDate` adjustment methods with new `LocalDateUnit` type. Some less
  common or ambiguous units (e.g. `date` or `d`) are no longer supported. Also typed the adjustment
  `value` args to `number` where applicable.
* Your app must update `compilerOptions.moduleResolution` to "bundler" in `tsconfig.json`
* If using the `DashCanvas.rglOptions` prop, you might have to update it to reflect changes in
  `react-grid-layout` v2+ (not common).
* Modified `DashCanvasModel.containerPadding` to apply to the `react-grid-layout` div created by the
  library, instead of the Hoist-created containing div. This may affect printing layouts.

### 🎁 New Features

* Added new `DynamicTabSwitcher` component, a more user-customizable version of `TabSwitcher` that
  allows for dynamic addition, removal, and drag-and-drop reordering of tabs with the ability to
  persist "favorited" tab state across sessions. Additionally, existing static `TabSwitcher` now
  supports context-menu items. See `TabContainerConfig.switcher`.
* Enhanced `LocalDate` with `addWeekdays` and `subtractWeekdays` methods.
* Upgraded `DashCanvas` with support for a gridded background to match widget sizing/snapping
  settings, plus two compacting strategies: 'vertical' and 'horizontal'.
* Changed the icon used for the Grid autosize buttons and menu option (to 🪄).
* Added `clientAppCode` to Activity Tracking logs. Requires `hoist-core >= 35`.

### 🐞 Bug Fixes

* Fixed the column chooser to display columns in the same order as they appear in the grid.
* Defaulted Highcharts font to Hoist default `--xh-font-family`.
* Restored previous behavior of Highcharts treemap labels with regard to visibility and positioning.
* Tweaked `GridFindField` to forward a provided `ref` to its underlying `TextInput`.
* Fixed bug where `SelectEditor` with `queryFn` would not commit on enter keydown.
* Enabled deletion of larger numbers of log files via Admin Console. Requires `hoist-core >= 35`.

### ⚙️ Technical

* Removed the following previously deprecated configs as planned:
    * `AppSpec.websocketsEnabled` - enabled by default, disable via `disableWebSockets`
    * `GroupingChooserProps.popoverTitle` - use `editorTitle`
    * `RelativeTimestampProps.options` - provide directly as top-level props
* Improved the efficiency and logging of `MsalClient`.
* Improved protections against server/app version mismatches (i.e. a stale client app version cached
  and restored by the browser).
* Introduced opt-in `Grid` performance optimizations on an experimental basis with
  `GridExperimentalFlags.deltaSort` and `GridExperimentalFlags.disableScrollOptimization`

### 📚 Libraries

* @blueprintjs/core: `5.10 → 6.3`
* @blueprintjs/datetime: `5.3 → 6.0`
* react-grid-layout `1.5 → 2.1`

## 78.1.4 - 2025-12-05

### 🐞 Bug Fixes

* Fixed logging during `MsalClient` creation.

## 78.1.3 - 2025-12-04

### 🐞 Bug Fixes

* Fixed Highcharts timezone handling regression from version 77.
    * Note that Highcharts has deprecated the `time.useUTC` option and its functioning seems
      suspect - set `time.timezone` instead. See https://api.highcharts.com/highcharts/time.useUTC.

### ⚙️ Technical

* Enabled cross-tab persistence of client logging-level customizations.

## 78.1.0 - 2025-12-02

### ⚙️ Technical

* Added new property `MsalClientConfig.enableSsoSilent` to govern use of MSAL SSO API.
* Changed default for `MsalClientConfig.enableTelemetry` to `true`.
* Improved use of MSAL client API to maximize effectiveness of SSO, along with updates to docs and
  logging.
    * Note that Iframe attempts will now time out by default after 3s (vs. 10s). Customize if needed
      via `MsalClientConfig.msalClientOptions.system.iFrameHashTimeout`.

### 📚 Libraries

* @auth0/auth0-spa-js `2.7 → 2.9`
* @azure/msal-browser `4.25 → 4.26`

## 78.0.0 - 2025-11-21

### 💥 Breaking Changes (upgrade difficulty: 🎉 TRIVIAL)

See [`docs/upgrade-notes/v78-upgrade-notes.md`](docs/upgrade-notes/v78-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

* `GridModel.setColumnState` no longer patches existing column state, but instead replaces it
  wholesale. Applications that were relying on the prior patching behavior will need to call
  `GridModel.applyColumnStateChanges` instead.
* `GridModel.cleanColumnState` is now private (not expected to impact applications).

### 🎁 New Features

* Added new `FieldFilter` operators `not begins` and `not ends`.
* Added new optional `BucketSpec.dependentFields` config to the Cube API, allowing apps to ensure
  proper re-bucketing of rows during data-only updates where those updates could affect bucketing
  determinations made by the spec.

### 🐞 Bug Fixes

* Fixed `GridModel` not appending children to the parents correctly when recs have numeric IDs.
* Fixed issue where newly added columns would appear in the Displayed Columns section of the column
  chooser after loading grid state that was persisted before the columns were added to the grid.
* Removed a minor Cube `Query` annoyance - `dimensions` are now automatically added to the `fields`
  list and do not need to be manually repeated there.

### ⚙️ Technical

* Improved documentation on `BucketSpec` class.
* Enhanced `FetchService` to recognize variants on the `application/json` content-type when
  processing failed responses and decoding exceptions - e.g. `application/problem+json`.

## 77.1.1 - 2025-11-12

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW)

* Upgraded Highcharts to v12.
    * Refer to Toolbox's `Bootstrap.js` for required changes to imports and chart initialization.
    * Visit https://www.highcharts.com/blog/changelog/ for additional details on the upgrade.

### 🎁 New Features

* Added `StoreRecord.getModifiedValues()` to return an object with edited field values only.

### 🐞 Bug Fixes

* Improved `StoreRecord.isModified` to not return `true` after a field has been edited but then
  returned to its original value in a subsequent edit.
* Restored support for `TabModel.content` set to `null`, to support dynamic tab content.
* Fixed an issue where stray context menus could appear when clicking on column group headers and
  other grid empty space.

## 77.0.1 - 2025-10-29

### 💥 Breaking Changes

* Removed the `disableXssProtection` flag supported by `AppSpec` and `FieldSpec` and replaced with
  its opposite, `enableXssProtection`, now an opt-in feature.
    * While store-based XSS protection via DomPurify is still available to apps that can display
      untrusted or potentially malicious data, this is an uncommon use case for Hoist apps and was
      deemed to not provide enough benefit relative to potential performance pitfalls for most
      applications. In addition, the core change to React-based AG Grid rendering has reduced the
      attack surface for such exploits relative to when this system was first implemented.
    * Apps that were previously opting-out via `disableXssProtection` should simply remove that
      flag. Apps for which this protection remains important should enable at either the app level
      or for selected Fields and/or Stores.

### 🐞 Bug Fixes

* Fixed regressions in grid context menus for filtering and copy/paste introduced by AG Grid v34.
    * Note: AG Grid v34+ no longer supports HTML markup in context menus. Applications setting the
      `text` or `secondaryText` properties of `RecordGridAction` to markup should be sure to use
      React nodes for formatting instead.
* Fixed `AgGridModel.getExpandState()` not returning a full representation of expanded groups - an
  issue that primarily affected linked tree map visualizations.

### ⚙️ Technical

* Added support for Grails 7 service name conventions in admin client (backward compatible).

## 76.2.0 - 2025-10-22

### ⚙️ Technical

* Implemented minor performance improvements within `Store` for large data sets.
* Added new `ViewRowData.cubeRowType` property to support identifying bucketed rows.
* Improved `waitFor` to accept a `null` value for its timeout.

## 76.1.0 - 2025-10-17

### 🎁 New Features

* Added a public `@bindable titleDetails` config to `DashViewModel` to support displaying additional
  information in the title bar of dashboard widgets. The new property is not persisted, allowing
  apps to programmatically show dynamic info in a widget header without perturbing its saved state.
* Enhanced grid column filtering to support sorting the list of available values.

### ⚙️ Technical

* Autofocus the user input when the impersonation bar is shown.

### 📚 Libraries

* @auth0/auth0-spa-js `2.4 → 2.7`
* @azure/msal-browser `4.23 → 4.25`
* dompurify `3.2 → 3.3`
* mobx `6.13 → 6.15`

## 76.0.0 - 2025-09-26

### 💥 Breaking Changes (upgrade difficulty: 🟠 MEDIUM - AG Grid update, Hoist React upgrade)

* Hoist v76 **upgrades AG Grid to v34** (from v31), covering three major AG Grid releases with their
  own potentially breaking changes.
    * Fortunately, internal Hoist updates to our managed API wrappers mean that most apps will see
      very minimal changes, although there are required adjustments to app-level `package.json` to
      install updated grid dependencies and `Bootstrap.ts` to import and register your licensed grid
      modules at their new import paths.
    * Applications implementing `groupRowRenderer` should note that the `value` property passed to
      this function is no longer stringified, but is instead the raw field value for the group.
    * See AG's upgrade guides for more details:
        * [Upgrade to v32](https://www.ag-grid.com/react-data-grid/upgrading-to-ag-grid-32/)
        * [Upgrade to v33](https://www.ag-grid.com/react-data-grid/upgrading-to-ag-grid-33/)
        * [Upgrade to v34](https://www.ag-grid.com/react-data-grid/upgrading-to-ag-grid-34/)
* Modified the `TabModel` constructor to take its owning container as a second argument.
    * Apps very rarely create `TabModels` directly, so this unlikely to require changes.
* Moved the `Exception` class and `HoistException` type from `@xh\hoist\core` to a new lower-level
  package `@xh\hoist\exception` to reduce the risk of circular dependencies within Hoist.
    * Apps rarely interact with these directly, so also unlikely to require changes.

### 🎁 New Features

* Added `extraConfirmText` + `extraConfirmLabel` configs to `MessageOptions`. Use these new options
  to require the specified text to be re-typed by a user when confirming a potentially destructive
  or disruptive action. Note their usage within Hoist's Admin Console when deleting a role.
* Updated grid column filters to apply on `Enter` / dismiss on `Esc`. Tweaked the filter popup
  toolbar for clarity.
* Added new ability to specify nested tab containers in a single declarative config. Apps may now
  provide a spec for a nested tab container directly to the `TabConfig.content` property.
* Improved `ViewManager` features:
    * Enabled globally sharing a new view directly from the 'Save/Save As' dialog.
    * Simplified presentation and management of view visibility via new "Visibility" control.
    * Removed support for the `isDefaultPinned` attribute on global views. All global views will be
      pinned (i.e. show up in user menus) by default. Users can still explicitly "unpin" any global
      views to remove them from their menus.
* Added a `validEmails` constraint rule to validate one or more email addresses in an input field.
* Added `DashCanvas.rglOptions` prop - passed through to the underlying `react-grid-layout`.
* Promoted experimental grid feature `enableFullWidthScroll` to a first-class `GridModel` config.
  Set to true to ensure that the grid will have a single horizontal scrollbar spanning the width of
  all columns, including any pinned columns.

### 🐞 Bug Fixes

* Handled an edge-case `ViewManager` bug where `enableDefault` changed to `false` after some user
  state had already been persisted w/users pointed at in-code default view. The manager now calls
  its configured `initialViewSpec` function as expected in this case.
* Updated `XH.restoreDefaultsAsync` to clear basic view state, including the user's last selected
  view. Views themselves will be preserved. Requires `hoist-core >= 32.0`.
* Fixed bug where `GridModel.persistableColumnState` was not including default column `widths`. This
  led to columns not being set to their expected widths when switching `ViewManager` views.
* Fixed bug where a `Grid` with managed autosizing was not triggering an autosize as expected when
  new column state was loaded (e.g. via `ViewManager`).

### ⚙️ Technical

* Added a new `@sharePendingPromise` decorator for returning a shared Promise across concurrent
  async calls. Calls made to a decorated method while a prior call with the same args is still
  pending won't kick off a new call, but will instead receive the same Promise as the first call.
* Added `XH.logLevel` to define a minimum logging severity threshold for Hoist's client-side logging
  utilities. Defaulted to 'info' to prevent possible memory and performance impacts of verbose
  logging on 'debug'. Change at runtime via new `XH.setLogLevel()` when troubleshooting. See
  `LogUtils.ts` for more info.
* Added control to trigger browser GC from app footer. Useful for troubleshooting memory issues.
  Requires running chromium-based browser via e.g. `start chrome --js-flags="--expose-gc`.

### ⚙️ Typescript API Adjustments

* Corrected `ColChooserConfig.width` and `height` types.

### 📚 Libraries

* @auth0/auth0-spa-js `2.3 → 2.4`
* @azure/msal-browser `4.16 → 4.23`
* typescript `5.8 → 5.9`

## 75.0.1 - 2025-08-11

### 🎁 New Features

* Added new `GridModel.expandLevel` config to control the expansion state of tree/grouped grids.
    * Replaces the use of the `agOptions.groupDefaultExpanded` on the component.
    * The most recently expanded level is persistable with other grid state.
    * The default grid context menu now supports a new item to allow users to expand/collapse out to
      a specific level/depth. Set `GridModel.levelLabels` to activate this feature.
    * A new `ExpandToLevelButton` menu component is also available for both desktop and mobile.
      Provides easier discoverability on desktop and supports this feature on mobile, where we don't
      have context menus.
* Enhanced `FilterChooser` to better handle filters with different `op`s on the same field.
    * Multiple "inclusive" ops (e.g. `=`, `like`) will be OR'ed together.
    * Multiple "exclusive" ops (e.g. `!=`, `not like`) will be AND'ed together.
    * Range ops (e.g. `<`, `>` ) use a heuristic to avoid creating a filter that could never match.
    * This behavior is consistent with current behavior and user intuition and should maximize the
      ability to create useful queries using this component.
* Deprecated the `RelativeTimestamp.options` prop - all the same options are now top-level props.
* Added new `GroupingChooserModel.sortDimensions` config. Set to `false` to respect the order in
  which `dimensions` are provided to the model.
* Added new `ClipboardButton.errorMessage` prop to customize or suppress a toast alert if the copy
  operation fails. Set to `false` to fail silently (the behavior prior to this change).
* Added new `Cube.modifyRecordsAsync` for modifying individual field values in a local uncommitted
  state. Additionally enhanced `Store.modifyRecords` to return a `StoreChangeLog` of updates.
* Cube Views now emit data objects of type `ViewRowData`, rather than an anonymous `PlainObject`.
  This new object supports several documented properties, including a useful `cubeLeaves` property,
  which can be activated via the `Query.provideLeaves` property.

### 🐞 Bug Fixes

* Fixed bugs where `Store.modifyRecords`, `Store.revertRecords` and `Store.revert` were not properly
  handling changes to `SummaryRecords`.
* Fixed minor `DashCanvas` issues with `allowAdd: false`, ensuring it does not block additions made
  via `loadState()` and hiding the `Add` context menu item in views as intended.
* Updated `DashCanvas` CSS to set `position: relative;`, ensuring that the empty state overlay is
  positioned as intended and does not extend beyond the canvas.
* Improved the core `useContextModel` hook to make it reactive to a change of an (observable)
  resolved model. Previously this value was cached on first render.
* Fixed framework components that bind to grids (e.g. `ColChooserButton`, `ColAutosizeButton`,
  `GridFindField`), ensuring they automatically rebind to a new observable `GridModel` via context.

### ⚙️ Technical

* WebSockets are now enabled by default for client apps, as they have been on the server since Hoist
  Core v20.2. Maintaining a WebSocket connection back to the Hoist server enables useful Admin
  Console functionality and is recommended, but clients that must disable WebSockets can do so via
  `AppSpec.disableWebSockets`. Note `AppSpec.webSocketsEnabled` is deprecated and can be removed.
* Hoist now sets a reference to an app's singleton `AuthModel` on a static `instance` property of
  the app-specified class. App developers can declare a typed static `instance` property on their
  model class and use it to access the singleton with its proper type, vs. `XH.authModel`.
    * The `XH.authModel` property is still set and available - this is a non-breaking change.
    * This approach was already (and continues to be) used for services and the `AppModel`
      singleton.

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW - removing deprecations)

* Removed deprecated `LoadSupport.isLoadSupport`
* Removed deprecated `FileChooserModel.removeAllFiles`
* Removed deprecated `FetchService.setDefaultHeaders`
* Removed deprecated `FetchService.setDefaultTimeout`
* Removed deprecated `IdentityService.logoutAsync`
* Change to the row objects returned by `View`: the undocumented `_meta` and `buckets` properties
  have been removed. Use the documented properties on the new `ViewRowData` class instead.

### ✨ Styles

* Upgraded the version of Hoist's default Inter UI font to a new major version, now v4.1. Note that
  this brings slight differences to the font's appearance, including tweaks to internal spacing and
  letterforms for tabular numbers. The name of the font face has also changed, from
  `Inter Var` to `InterVariable`. The default value of the `--xh-font-family` CSS variable has been
  updated to match, making this change transparent for most applications.

### 📚 Libraries

* @auth0/auth0-spa-js `2.1 → 2.3`
* @azure/msal-browser `4.12 → 4.16`
* filesize `6.4 → 11.0`
* inter-ui `3.19 → 4.1`
* mobx-react-lite `4.0 → 4.1`
* qs `6.13 → 6.14`
* react-markdown `9.0 → 10.1`
* regenerator-runtime `0.13 → 0.14`
* semver `7.6 → 7.7`
* short-unique-id `5.2 → 5.3`
* ua-parser-js `1.0 → 2.0`

## 74.1.2 - 2025-07-03

### 🐞 Bug Fixes

* Fixed `GroupingChooser` layout issue, visible only when favorites are disabled.

## 74.1.1 - 2025-07-02

### 🎁 New Features

* Further refinements to the `GroupingChooser` desktop UI.
    * Added new props `favoritesSide` and `favoritesTitle`.
    * Deprecated `popoverTitle` prop - use `editorTitle` instead.
    * Moved "Save as Favorite" button to a new compact toolbar within the popover.

### 🐞 Bug Fixes

* Fixed a bug where `TrackService` was not properly verifying that tracked `data` was below the
  configured `maxDataLength` limit.

## 74.1.0 - 2025-06-30

### 🎁 New Features

* Updated the `GroupingChooser` UI to use a single popover for both updating the value and
  selecting/managing favorite groupings (if enabled).
    * Adjusted `GroupingChooserModel` API and some CSS class names and testIds of `GroupingChooser`
      internals, although those changes are very unlikely to require app-level adjustments.
    * Adjusted/removed (rarely used) desktop and mobile `GroupingChooser` props related to popover
      sizing and titling.
    * Updated the mobile UI to use a full-screen dialog, similar to `ColumnChooser`.
* Added props to `ViewManager` to customize icons used for different types of views, and modified
  default icons for Global and Shared views.
* Added `ViewManager.extraMenuItems` prop to allow insertion of custom, app-specific items into the
  component's standard menu.

## 74.0.0 - 2025-06-11

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW - minor changes to ViewManagerModel, ChartModel)

See [`docs/upgrade-notes/v74-upgrade-notes.md`](docs/upgrade-notes/v74-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

* Removed `ViewManagerModel.settleTime`. Now set via individual `PersistOptions.settleTime` instead.
* ️Removed `ChartModel.showContextMenu`. Use a setting of `false` for the new
  `ChartModel.contextMenu` property instead.

### 🎁 New Features

* Added `ViewManagerModel.preserveUnsavedChanges` flag to opt-out of that behaviour.
* Added `PersistOptions.settleTime` to configure time to wait for state to settle before persisting.
* Support for grid column level `onCellClicked` events.
* General improvements to `MenuItem` api
    * New `MenuContext` object now sent as 2nd arg to `actionFn` and `prepareFn`.
    * New `ChartModel.contextMenu` property provides a fully customizable context menu for charts.

### 🐞 Bug Fixes

* Improved `ViewManagerModel.settleTime` by delegating to individual `PersistenceProviders`.
* Fixed bug where grid column state could become unintentionally dirty when columns were hidden.
* Improved `WebsocketService` heartbeat detection to auto-reconnect when the socket reports as open
  and heartbeats can be sent, but no heartbeat acknowledgements are being received from the server.
* Restored zoom out with mouse right-to-left drag on Charts.

## 73.0.1 - 2025-05-19

### 🐞 Bug Fixes

* Fixed a minor issue with Admin Console Role Management.

## 73.0.0 - 2025-05-16

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW - upgrade to Hoist Core)

See [`docs/upgrade-notes/v73-upgrade-notes.md`](docs/upgrade-notes/v73-upgrade-notes.md) for
detailed, step-by-step upgrade instructions with before/after code examples.

* Requires `hoist-core >= 31` with new APIs to support the consolidated Admin Console "Clients"
  tab and new properties on `TrackLog`.
* Apps with a custom `AppModel` for their admin app that extends `@xh/hoist/admin/AppModel` must
  ensure they call `super.initAsync()` within their override of that lifecycle method, if
  applicable. This did not previously have any effect, but is required now for the superclass to
  initialize a new `ViewManagerModel`.
    * [Here is where Toolbox makes that call](https://github.com/xh/toolbox/blob/f15a8018ce36c2ae998b45724b48a16320b88e49/client-app/src/admin/AppModel.ts#L12).
* Requires call to `makeObservable(this)` in model constructors with `@bindable`. Note that there is
  a new dev-only runtime check on `HoistBase` to warn if this call has not been made.

### 🎁 New Features

* Updated and improved Grid column based filtering to better match the behavior of Excel.
    * `GridFilterModel.commitOnChage` now `false` by default
    * Added ability to append terms to active filter *only* when `commitOnChage:false`
* Added new `PopoverFilterChooser` component - wraps `FilterChooser` in a `Popover` to allow it to
  expand vertically when used in a `Toolbar` or other space-constrained, single-line layout.
* Enhanced OAuth clients with a new `reloginEnabled` config. Set to true to allow the client to do a
  potentially interactive popup login mid-session to re-establish auth if its refresh token has
  expired or been invalidated. Strongly recommended for all OAuth usages.
* Significantly upgraded the Admin Console "User Activity" tab:
    * Consolidated client error reports and user feedback into Activity Tracking.
    * Added support for custom views via `ViewManager`.
    * New ability to promote data in `data` block to grids for aggregation, reporting and charting.
    * Enhanced track messages with new `tabId` and `loadId` properties, to disambiguate activity for
      users across multiple browser tabs + loads of the app.
* Added a new Admin Console "Clients" tab - a consolidated view of all websocket-connected clients
  across all instances in the cluster, with integrated activity detail viewer.
* Updated `FormModel` to support `persistWith` for storing and recalling its values, including
  developer options to persist only a subset of fields.
* Added new `XH.openWindow()` util to ensure that new windows/tabs are opened without an unintended
  `opener` relationship with the original window.

### 🐞 Bug Fixes

* Fixed drag-and-drop usability issues with the mobile `ColChooser`.
* Made `GridModel.defaultGroupSortFn` null-safe and improved type signature.
* Disabled `dashCanvasAddViewButton` if there are no `menuItems` to show.
* Hardened `@bindable` and `@persist` to handle lifecycle-related bugs. Note that previously
  `@bindable` would work even if `makeObservable()` was not called, but this is no longer the case.
  Please ensure you call `makeObservable(this)` in your model's constructor when using `@bindable`!
* Improved client `WebSocketService` heartbeat to check that it has been receiving inbound messages
  from the server, not just successfully sending outbound heartbeats.

### ⚙️ Technical

* Updated the background version checking performed by `EnvironmentService` to use the app version
  and build information baked into the client build when comparing against the latest values from
  the server. Previously the versions loaded from the server on init were used as the baseline.
    * The two versions *should* be the same, but in cases where a browser "restores" a tab and
      re-inits an app without reloading the code itself, the upgrade check would miss the fact that
      the client remained on an older version.
    * ⚠️ NOTE that a misconfigured build - where the client version is not set to the same value as
      the server - would result in a false positive for an upgrade. The two should always match.
* Calls to `Promise.track()` that are rejected with an exception will be tracked with new severity
  level of `TrackSeverity.ERROR`.

### ⚙️ Typescript API Adjustments

* Corrected `GridGroupSortFn` param types.
* Corrected `StoreCountLabelProps` interface.
* Corrected `textAlign` type across several `HoistInput` prop interfaces.

### 📚 Libraries

* @azure/msal-browser `4.8 → 4.12`

Note that all of the below are `devDependencies`, so they will not directly affect your application
build. That said, we *strongly* recommend taking these same changes into your app if you can.

* @xh/hoist-dev-utils `10.x → 11.x`
* eslint `8.x → 9.x`
    * Apps making this update must also rename their `.eslintrc` file to `eslint.config.js`. See the
      configuration found in Toolbox's `eslint.config.js` as your new baseline.
* eslint-config-prettier `9.x → 10.x`
* typescript `5.1 → 5.8`

## 72.5.1 - 2025-04-15

### 🐞 Bug Fixes

* Allow the display of very long log lines in Admin log viewer.

## 72.5.0 - 2025-04-14

### 🎁 New Features

* Added option from the Admin Console > Websockets tab to request a client health report from any
  connected clients.
* Enabled telemetry reporting from `WebSocketService`.
* Updated `MenuItem.actionFn()` to receive the click event as an additional argument.
* Support for reporting App Build, Tab Id, and Load Id in websocket admin page.

## 72.4.0 - 2025-04-09

### 🎁 New Features

* Added new methods for formatting timestamps within JSON objects. See `withFormattedTimestamps`
  and `timestampReplacer` in the `@xh/hoist/format` package.
* Added new `ViewManagerConfig.viewMenuItemFn` option to support custom rendering of pinned views in
  the drop-down menu.

### ⚙️ Technical

* Added dedicated `ClientHealthService` for managing client health report. Additional enhancements
  to health report to include information about web sockets, idle time, and page state.

## 72.3.0 - 2025-04-08

### 🎁 New Features

* Added support for posting a "Client Health Report" track message on a configurable interval. This
  message will include basic client information, and can be extended to include any other desired
  data via `XH.clientHealthService.addSource()`. Enable by updating your app's
  `xhActivityTrackingConfig` to include `clientHealthReport: {intervalMins: XXXX}`.
* Enabled opt-in support for telemetry in `MsalClient`, leveraging hooks built-in to MSAL to collect
  timing and success/failure count for all events emitted by the library.
* Added the reported client app version as a column in the Admin Console WebSockets tab.

### 🐞 Bug Fixes

* Improved fetch request tracking to include time spent loading headers as specified by application.

### 📚 Libraries

* @azure/msal-browser `3.28 → 4.8`

## 72.2.0 - 2025-03-13

### 🎁 New Features

* Modified `TabContainerModel` to make more methods `protected`, improving extensibility for
  advanced use-cases.
* Enhanced `XH.reloadApp` with new argument to clear query parameters before loading.
* Enhanced exception handling in `FetchService` to capture messages returned as raw strings, or
  without explicit names.
* Added dedicated columns to the Admin Console "Client Errors" tab for error names and messages.
* `BaseOAuthClient` has been enhanced to allow `lazy` loading of Access Tokens, and also made more
  robust such that Access Tokens that fail to load will never prevent the client from
  initialization.

### 🐞 Bug Fixes

* Prevented native browser context menu from showing on `DashCanvas` surfaces and obscuring the
  `DashCanvas` custom context menu.

## 72.1.0 - 2025-02-13

### 🎁 New Features

* Introduced a new "JSON Search" feature to the Hoist Admin Console, accessible from the Config,
  User Preference, and JSON Blob tabs. Supports searching JSON values stored within these objects to
  filter and match data using JSON Path expressions.
    * ⚠️Requires `hoist-core >= 28.1` with new APIs for this (optional) feature to function.
* Added new getters `StoreRecord.isDirty`, `Store.dirtyRecords`, and `Store.isDirty` to provide a
  more consistent API in the data package. The pre-existing `isModified` getters are retained as
  aliases, with the same semantics.

### 🐞 Bug Fixes

* Tuned mobile swipe handling to prevent horizontal swipes on a scrolling grid view from triggering
  the Navigator's back gesture.
* Prevented the Admin Console Roles grid from losing its expand/collapse/scroll state on refresh.
* Fixed bug when merging `PersistOptions` with conflicting implicit provider types.
* Fixed bug where explicit `persistGrouping` options were not being respected by `GridModel`.

## 72.0.0 - 2025-01-27

### 💥 Breaking Changes (upgrade difficulty: 🎉 TRIVIAL - minor changes to mobile nav)

* Mobile `Navigator` no longer supports `animation` prop, and `NavigatorModel` no longer supports
  `swipeToGoBack`. Both of these properties are now managed internally by the `Navigator` component.

### 🎁 New Features

* Mobile `Navigator` has been rebuilt to support smooth swipe-based navigation. The API remains
  largely the same, notwithstanding the minor breaking changes detailed above.

### 🐞 Bug Fixes

* Fixed `ViewManagerModel` unique name validation.
* Fixed `GridModel.restoreDefaultsAsync()` to restore any default filter, rather than simply
  clearing it.
* Improved suboptimal column state synchronization between `GridModel` and AG Grid.

### ⚙️ Technical

* Added support for providing custom `PersistenceProvider` implementations to `PersistOptions`.

### ⚙️ Typescript API Adjustments

* Improved signature of `HoistBase.markPersist`.

## 71.0.0 - 2025-01-08

### 💥 Breaking Changes (upgrade difficulty: 🟠 MEDIUM - Hoist core update, import adjustments)

* Requires `hoist-core >= 27.0` with new APIs to support `ViewManager` and enhanced cluster state
  monitoring in the Admin Console.
* `ErrorMessage` is now cross-platform - update imports from `@xh/hoist/desktop/cmp/error`
  or `@xh/hoist/mobile/cmp/error` to `@xh/hoist/cmp/error`.
* `Mask` is now cross-platform - update imports from `@xh/hoist/desktop/cmp/mask` or
  `@xh/hoist/mobile/cmp/mask` to `@xh/hoist/cmp/mask`.
* `LoadingIndicator` is now cross-platform - update imports from
  `@xh/hoist/desktop/cmp/loadingindicator` or `@xh/hoist/mobile/cmp/loadingindicator` to
  `@xh/hoist/cmp/loadingindicator`.
* `TreeMap` and `SplitTreeMap` are now cross-platform and can be used in mobile applications. Update
  imports from `@xh/hoist/desktop/cmp/treemap` to `@xh/hoist/cmp/treemap`.
* Renamed `RefreshButton.model` prop to `target` for clarity and consistency.

### 🎁 New Features

* Major improvements to the `ViewManager` component, including:
    * A clearer, better organized management dialog.
    * Support for persisting a view's pending value, to avoid users losing changes when e.g. an app
      goes into idle mode and requires a page refresh to restore.
    * Improved handling of delete / update collisions.
    * New `ViewManagerModel.settleTime` config, to allow persisted components such as dashboards to
      fully resolve their rendered state before capturing a baseline for dirty checks.
* Added `SessionStorageService` and associated persistence provider to support saving tab-local data
  across reloads. Exact analog to `LocalStorageService`, but scoped to lifetime of current tab.
* Added `AuthZeroClientConfig.audience` config to support improved flow for Auth0 OAuth clients that
  request access tokens. Specify your access token audience here to allow the client to fetch both
  ID and access tokens in a single request and to use refresh tokens to maintain access without
  relying on third-party cookies.
* Updated sorting on grouped grids to place ungrouped items at the bottom.
* Improved `DashCanvas` views to support resizing from left/top edges in addition to right/bottom.
* Added functional form of `FetchService.autoGenCorrelationIds` for per-request behavior.
* Added a new `Cluster›Objects` tab in Admin Console to support comparing state across the cluster
  and alerting of any persistent state inconsistencies.

### 🐞 Bug Fixes

* Fixed sizing and position of mobile `TabContainer` switcher, particularly when the switcher is
  positioned with `top` orientation.
* Fixed styling of `ButtonGroup` in vertical orientations.
* Improved handling of calls to `DashContainerModel.loadStateAsync()` when the component has yet to
  be rendered. Requested state updates are no longer dropped, and will be applied as soon as the
  component is ready to do so.

### ⚙️ Technical

* Added explicit `devDependencies` and `resolutions` blocks for `@types/react[-dom]` at v18.x.
* Added workaround for problematic use of SASS-syntax-in-CSS shipped by `react-dates`. This began
  throwing "This function isn't allowed in plain CSS" with latest version of sass/sass-loader.

### ⚙️ Typescript API Adjustments

* Improved accuracy of `IconProps` interface, with use of the `IconName` and `IconPrefix` types
  provided by FontAwesome.
* Improved accuracy of `PersistOptions.type` enum.
* Corrected the type of `ColumnSpec.editor`.

### 📚 Libraries

* @azure/msal-browser `3.27 → 3.28`
* dompurify `3.1 → 3.2`
* react-grid-layout `1.4 → 1.5`

## 70.0.0 - 2024-11-15

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW - changes to advanced persistence APIs)

* Upgraded the `PersistenceProvider` API as noted in `New Features`. Could require updates in apps
  with advanced direct usages of this API (uncommon).
* Updated `GridModel` persistence to omit the widths of autosized columns from its persisted state.
  This helps to keep persisted state more stable, avoiding spurious diffs due to autosize updates.
  Note this can result in more visible column resizing for large grids without in-code default
  widths. Please let XH know if this is a noticeable annoyance for your app.
* Removed the following persistence-related model classes, properties, and methods:
    * `GridPersistenceModel` and `ZoneGridPersistenceModel`
    * `GridModel|ZoneGridModel.persistenceModel`
    * `GridModel.autosizeState`
    * `Column.manuallySized`
    * `GroupingChooserModel|FilterChooserModel.persistValue`
    * `DashModel|GroupingChooserModel|FilterChooserModel|PanelModel|TabContainerModel.provider`
    * `PersistenceProvider.clearRaw()`
* Renamed `ZoneGridModelPersistOptions.persistMappings`, adding the trailing `s` for consistency.
* Changed signature of `JsonBlobService.listAsync()` to inline `loadSpec` with all other args in a
  single options object.
* Changed signature of `waitFor()` to take its optional `interval` and `timeout` arguments in a
  single options object.

### 🎁 New Features

* Introduced a new `ViewManager` component and backing model to support user-driven management of
  persisted component state - e.g. saved grid views.
    * Bundled with a desktop-only menu button based component, but designed to be extensible.
    * Bindable to any persistable component with `persistWith: {viewManagerModel: myViewManager}`.
    * Detects changes to any bound components and syncs them back to saved views, with support for
      an autosave option or user-driven saving with a clear "dirty" indicator.
    * Saves persisted state back to the server using Hoist Core `JSONBlob`s for storage.
    * Includes a simple sharing model - if enabled for all or some users, allows those users to
      publish saved views to everyone else in the application.
    * Users can rename views, nest them into folders, and mark them as favorites for quick access.
* Generally enhanced Hoist's persistence-related APIs:
    * Added new `Persistable` interface to formalize the contract for objects that can be persisted.
    * `PersistenceProvider` now targets a `Persistable` and is responsible for setting persisted
      state on its bound `Persistable` when the provider is constructed and persisting state from
      its bound `Persistable` when changes are detected.
    * In its constructor, `PersistenceProvider` also stores the initial state of its bound
      `Persistable` and clears its persisted state when structurally equal to the initial state.
* Updated persistable components to support specifying distinct `PersistOptions` for individual bits
  of persisted state. E.g. you can now configure a `GroupingChooserModel` used within a dashboard
  widget to persist its value to that particular widget's `DashViewModel` while saving the user's
  favorites to a global preference.

### ⚙️ Typescript API Adjustments

* Tightened `FilterChooserFilterLike` union type to remove the generic `Filter` type, as filter
  chooser supports only `FieldFilter` and `CompoundFilter`.
* Improved `HoistBase.markPersist()` signature to ensure the provided property name is a known key
  of the model.
* Expanded the `JsonBlob` interface to include additional properties present on all blobs.
* Corrected `DashViewSpec.title` to be optional - it can be defaulted from the `id`.
* Corrected the return type for `SelectProps.loadingMessageFn` and `noOptionsMessageFn` to return
  `ReactNode` vs `string`. The component supports rendering richer content via these options.

## 69.1.0 - 2024-11-07

### 🐞 Bug Fixes

* Updated minimum required version of FontAwesome to 6.6, as required by the `fileXml()` icon added
  in the prior Hoist release. The previous spec for FA dependencies allowed apps to upgrade to 6.6,
  but did not enforce it, which could result in a build error due to an unresolved import.

### ⚙️ Technical

* Deprecated `FileChooserModel.removeAllFiles()`, replaced with `clear()` for brevity/consistency.
* Improved timeout error message thrown by `FetchService` to format the timeout interval in seconds
  where possible.

### 📚 Libraries

* @azure/msal-browser `3.23 → 3.27`
* @fortawesome/fontawesome-pro `6.2 → 6.6`
* qs `6.12 → 6.13`
* store2 `2.13 → 2.14`

## 69.0.0 - 2024-10-17

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW - Hoist core update)

* Requires `hoist-core >= 24` to support batch upload of activity tracking logs to server and new
  memory monitoring persistence.
* Replaced `AppState.INITIALIZING` with finer-grained states (not expected to impact most apps).

### 🎁 New Features

* Optimized activity tracking to batch its calls to the server, reducing network overhead.
* Enhanced data posted with the built-in "Loaded App" entry to include a new `timings` block that
  breaks down the overall initial load time into more discrete phases.
* Added an optional refresh button to `RestGrid`s toolbar.
* Updated the nested search input within Grid column filters to match candidate values on `any` vs
  `startsWith`. (Note that this does not change how grid filters are applied, only how users can
  search for values to select/deselect.)
* Support for persisting of memory monitoring results

### ⚙️ Typescript API Adjustments

* Improved typing of `HoistBase.addReaction` to flow types returned by the `track` closure through
  to the `run` closure that receives them.
    * Note that apps might need to adjust their reaction signatures slightly to accommodate the more
      accurate typing, specifically if they are tracking an array of values, destructuring those
      values in their `run` closure, and passing them on to typed APIs. Look out for `tsc` warnings.

### ✨ Styles

* Reset the `--xh-popup-bg` background color to match the primary `--xh-bg` color by default.

### 🐞 Bug Fixes

* Fixed broken `Panel` resizing in Safari. (Other browsers were not affected.)

## 68.1.0 - 2024-09-27

### 🎁 New Features

* `Markdown` now supports a `reactMarkdownOptions` prop to allow passing React Markdown props to the
  underlying `reactMarkdown` instance.

### ⚙️ Technical

* Misc. Improvements to Cluster Tab in Admin Panel.

## 68.0.0 - 2024-09-18

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW - Hoist Core update)

* Requires `hoist-core >= 22.0` for consolidated polling of Alert Banner updates (see below).

### 🎁 New Features

* Added expand/collapse affordance in the left column header of ZoneGrids in tree mode.

### ⚙️ Technical

* Updated Admin Console's Cluster tab to refresh more frequently.
* Consolidated the polling check for Alert Banner updates into existing `EnvironmentService`
  polling, avoiding an extra request and improving alert banner responsiveness.

### ⚙️ Typescript API Adjustments

* Corrected types of enhanced `Promise` methods.

### 📚 Libraries

* @azure/msal-browser `3.17 → 3.23`
* mobx  `6.9 → 6.13`,
* mobx-react-lite  `3.4 → 4.0`,

## 67.0.0 - 2024-09-03

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW - Hoist Core update)

* Requires `hoist-core >= 21.0`.

### 🎁 New Features

* Added support for Correlation IDs across fetch requests and error / activity tracking:
    * New `FetchService` members: `autoGenCorrelationIds`, `genCorrelationId` and
      `correlationIdHeaderKey` to support generation and inclusion of Correlation IDs on outbound
      request headers.
    * Correlation IDs are assigned via:
        * `FetchOptions.correlationId` - specify an ID to be used on a particular request or `true`
          to use a UUID generated by Hoist (see `FetchService.genCorrelationId()`).
        * `TrackOptions.correlationId` - specify an ID for a tracked activity, if not using the new
          `FetchOptions.track` API (see below).
    * If set on a fetch request, Correlation IDs are passed through to downstream error reporting
      and are available for review in the Admin Console.
* Added `FetchOptions.track` as streamlined syntax to track a request via Hoist activity tracking.
  Prefer this option (vs. a chained `.track()` call) to relay the request's `correlationId` and
  `loadSpec` automatically.
* Added `FetchOptions.asJson` to instruct `FetchService` to decode an HTTP response as JSON. Note
  that `FetchService` methods suffixed with `Json` will set this property automatically.
* Added global interceptors on `FetchService`. See `FetchService.addInterceptor()`.
* `GridModel` will now accept `contextMenu: false` to omit context menus.
* Added bindable `AppContainerModel.intializingLoadMaskMessage` to allow apps to customize the load
  mask message shown during app initialization.
* Enhanced `select` component with new `emptyValue` prop, allowing for a custom value to be returned
  when the control is empty (vs `null`). Expected usage is `[]` when `enableMulti:true`.
* Added `GroupingChooserModel.setDimensions()` API, to support updating available dimensions on an
  already constructed `GroupingChooserModel`.

### 🐞 Bug Fixes

* Fixed Admin Console bug where a role with a dot in its name could not be deleted.
* Fixed inline `SelectEditor` to ensure new value is flushed before grid editing stops.
* `WebSocketService` now attempts to establish a new connection when app's server instance changes.

### ✨ Styles

* Added CSS variables to support customization of `Badge` component styling.

### 📚 Libraries

* short-unique-id `added @ 5.2`

## 66.1.1 - 2024-08-01

### 🐞 Bug Fixes

* `HoistException` now correctly passes an exception message to its underlying `Error` instance.
* Fixed `GridModel.cellBorders` to apply top and bottom cell borders, as expected.
* Fix to new `mergeDeep` method.

## 66.1.0 - 2024-07-31

### 🎁 New Features

* Enhanced `markdown` component to support the underlying `components` prop from `react-markdown`.
  Use this prop to customize markdown rendering.
* New `mergeDeep` method provided in `@xh/hoist/utils/js` as an alternative to `lodash.merge`,
  without lodash's surprising deep-merging of array-based properties.
* Enhanced Roles Admin UI to support bulk category reassignment.
* Enhanced the number formatters' `zeroPad` option to take an integer in addition to true/false, for
  finer-grained control over padding length.

### 🐞 Bug Fixes

* Fixed `Record.descendants` and `Record.allDescendants` getters that were incorrectly returning the
  parent record itself. Now only the descendants are returned, as expected.
    * ⚠️ Note that apps relying on the previous behavior will need to adjust to account for the
      parent record no longer being included. (Tree grids with custom parent/child checkbox
      selection are one example of a component that might be affected by this change.)
* Fixed `Grid` regression where pinned columns were automatically un-pinned when the viewport became
  too small to accommodate them.
* Fixed bug where `Grid` context-menus would lose focus when rendered inside `Overlay` components.

### ⚙️ Typescript API Adjustments

* ⚠️ Please ensure you update your app to `hoist-dev-utils >= v9.0.1` - this ensures you have a
  recent version of `type-fest` as a dev dependency, required to compile some recent Hoist
  typescript changes.
* The `NumberFormatOptions.precision` arg has been more strictly typed to `Precision`, a new type
  exported from `@xh/hoist/format`. (It was previously `number`.) Apps might require minor
  adjustments - e.g. typing shared format configs as `NumberFormatOptions` to satisfy the compiler.

### ⚙️ Technical

* Enhanced beta `MsalClient` and `AuthZeroClient` OAuth implementations to support passing
  app-specific configs directly into the constructors of their underlying client implementation.

## 66.0.2 - 2024-07-17

### 🐞 Bug Fixes

* Improved redirect handling within beta `MsalClient` to use Hoist-provided blank URL (an empty,
  static page) for all iFrame-based "silent" token requests, as per MS recommendations. Intended to
  avoid potential race conditions triggered by redirecting to the base app URL in these cases.
* Fixed bug where `ContextMenu` items could be improperly positioned.
    * ⚠️ Note that `MenuItems` inside a desktop `ContextMenu` are now rendered in a portal, outside
      the normal component hierarchy, to ensures that menu items are positioned properly relative to
      their parent. It should not affect most apps, but could impact menu style customizations that
      rely on specific CSS selectors targeting the previous DOM structure.

## 66.0.1 - 2024-07-10

### 🐞 Bug Fixes

* Fixed bug where inline grid edit of `NumberInput` was lost after quick navigation.

## 66.0.0 - 2024-07-09

### 💥 Breaking Changes (upgrade difficulty: 🟢 LOW - minor adjustments to client-side auth)

* New `HoistAuthModel` exposes the client-side authentication lifecycle via a newly consolidated,
  overridable API. This new API provides more easy customization of auth across all client-side apps
  by being easily overrideable and specified via the `AppSpec` passed to `XH.renderApp()`.
    * In most cases, upgrading should be a simple matter of moving code from `HoistAppModel` methods
      `preAuthInitAsync()` and `logoutAsync()` (removed by this change) to new `HoistAuthModel`
      methods `completeAuthAsync()` and `logoutAsync()`.

### 🎁 New Features

* Added option to `XH.reloadApp()` to reload specific app path.
* Added `headerTooltip` prop to `ColumnGroup`.

### 🐞 Bug Fixes

* Updated `.xh-viewport` sizing styles and mobile `dialog` sizing to use `dvw/dvh` instead of prior
  `svw/svh` - resolves edge case mobile issue where redirects back from an OAuth flow could leave an
  unexpected gap across the bottom of the screen. Includes fallback for secure client browsers that
  don't support dynamic viewport units.
* Updated mobile `TabContainer` to flex properly within flexbox containers.
* Fixed timing issue with missing validation for records added immediately to a new `Store`.
* Fixed CSS bug in which date picker dates wrapped when `dateEditor` used in a grid in a dialog.

## 65.0.0 - 2024-06-26

### 💥 Breaking Changes (upgrade difficulty: 🎉 TRIVIAL - dependencies only)

* Requires update to `hoist-dev-utils >= v9.0.0` with updated handling of static/public assets. This
  should be a drop-in change for applications.
* iOS < 16.4 is no longer supported, due to the use of complex RegExes in GFM parsing.

### 🎁 New Features

* Enhanced `markdown` component to support GitHub Flavored Markdown (GFM) syntax.

### ✨ Styles

* Refactored CSS classnames applied to the primary application (☰) menu on desktop and mobile. On
  both platforms the button itself now has an `xh-app-menu-button` class, the popover has
  `xh-app-menu-popover`, and the menu itself has `xh-app-menu`.

### ⚙️ Technical

* Improved popup behavior of (beta) `MsalClient` - uses recommended `blank.html`.
* Added new convenience method `XH.renderAdminApp()` - consider replacing the call within your
  project's `src/apps/admin.ts` file with this new method and removing any duplicate config values
  if the defaults introduced here are suitable for your application's Hoist Admin console.
* Prop types for components passed to `elementFactory` and `createElement` are now inferred from the
  component itself where possible.

### 📚 Libraries

* @xh/hoist-dev-utils `8.x → 9.x`
* react-markdown `8.0 → 9.0`
* remark-breaks `3.0 → 4.0`
* remark-gfm `4.0`

## 64.0.5 - 2024-06-14

### 🐞 Bug Fixes

* Added a workaround for a mobile-only bug where Safari auto-zooms on orientation change if the user
  had previously zoomed the page themselves.

### ⚙️ Technical

* Improved logout behavior of (beta) `MsalClient`.

### 📚 Libraries

* @azure/msal-browser `3.14 → 3.17`

## 64.0.4 - 2024-06-05

### ⚙️ Typescript API Adjustments

* Improved `ref` typing in JSX.

## 64.0.3 - 2024-05-31

### 🐞 Bug Fixes

* Restored previous suppression of Blueprint animations on popovers and tooltips. These had been
  unintentionally (re)enabled in v63 and are now turned off again.

### ⚙️ Technical

* Adjusted (beta) APIs of OAuth-related `BaseOAuthClient`, `MsalClient`, and `AuthZeroClient`.

## 64.0.2 - 2024-05-23

### ⚙️ Technical

* Adjusted (beta) API of `BaseOAuthClient`.
* Improved `FetchService.addDefaultHeaders()` to support async functions.

## 64.0.1 - 2024-05-19

### ⚙️ Technical

* Adjusted (beta) API of `BaseOAuthClient` and its approach to loading ID tokens.

## 64.0.0 - 2024-05-17

### 💥 Breaking Changes (upgrade difficulty: 🟠 MEDIUM - major Hoist Core + AG Grid updates)

#### Hoist Core v20 with Multi-Instance Support

Requires update to `hoist-core >= 20.0.0` with multi-instance support.

* See the Hoist Core changelog for details on this major upgrade to Hoist's back-end capabilities.
* Client-side application changes should be minimal or non-existent, but the Hoist Admin Console has
  been updated extensively to support management of multiple instances within a cluster.

#### AG Grid v31

Requires update to `@ag-grid >= 31.x`, a new major AG Grid release with its own breaking changes.
See AG's [What's New](https://blog.ag-grid.com/whats-new-in-ag-grid-31/)
and [Upgrade Guide](https://www.ag-grid.com/javascript-data-grid/upgrading-to-ag-grid-31/?ref=blog.ag-grid.com)
for more details.

* AG Grid removed `ColumnApi`, consolidating most of its methods to `GridApi`. Corresponding Hoist
  update removes `GridModel.agColumnApi` - review and migrate usages to `GridModel.agApi` as
  appropriate.
* Many methods on `agApi` are replaced with `agApi.updateGridOptions({property: value})`. Review
  your app for any direct usages of the underlying AG API that might need to change.
* All apps will need to update their `@ag-grid` dependencies within `package.json` and make a minor
  update to their `Bootstrap` registration as per
  this [Toolbox example](https://github.com/xh/toolbox/pull/709/files/5626e21d778e1fc72f9735d2d8f011513e1ac9c6#diff-304055320a29f66ea1255446ba8f13e0f3f1b13643bcea0c0466aa60e9288a8f).
    * `Grid` and `AgGrid` components default to `reactiveCustomComponents: true`. If your app has
      custom tooltips or editors, you should confirm that they still work with this setting. (It
      will be the default in agGrid v32.)
    * For custom editors, you will have to convert them from "imperative" to "reactive". If this is
      not possible, you can set `reactiveCustomComponents: false` in your `GridModel` to continue
      using the old "imperative" mode, but note that this will preclude the use of upgraded Hoist
      editors in that same grid instance. (See the links below for AG docs on this change.)
    * For custom tooltips, note AG-Grid's deprecation of `getReactContainerClasses`.
    * Consult the AG Grid docs for more information:
        * [Updated docs on Custom Components](https://ag-grid.com/react-data-grid/cell-editors/#custom-components)
        * [Migrating from Imperative to Reactive components](https://ag-grid.com/react-data-grid/upgrading-to-ag-grid-31-1/#migrating-custom-components-to-use-reactivecustomcomponents-option)
        * [React-related deprecations](https://ag-grid.com/react-data-grid/upgrading-to-ag-grid-31-1/#react)

#### Other Breaking Changes

* Removed support for passing a plain object to the `model` prop of Hoist Components (previously
  deprecated back in v58). Use the `modelConfig` prop instead.
* Removed the `multiFieldRenderer` utility function. This has been made internal and renamed to
  `zoneGridRenderer` for exclusive use by the `ZoneGrid` component.
* Updated CSS variables related to the `ZoneGrid` component - vars formerly prefixed by
  `--xh-grid-multifield` are now prefixed by `--xh-zone-grid`, several vars have been added, and
  some defaults have changed.
* Removed obsolete `AppSpec.isSSO` property in favor of two new properties `AppSpec.enableLogout`
  and `AppSpec.enableLoginForm`. This should have no effect on the vast majority of apps which had
  `isSSO` set to `true`. For apps where `isSSO` was set to `false`, the new flags should be used to
  more clearly indicate the desired auth behavior.

### 🎁 New Features

* Improved mobile viewport handling to ensure that both standard pages and full screen dialogs
  respect "safe area" boundaries, avoiding overlap with system UI elements such as the iOS task
  switcher at the bottom of the screen. Also set background letterboxing color (to black) when in
  landscape mode for a more resolved-looking layout.
* Improved the inline grid `selectEditor` to commit its value to the backing record as soon as an
  option is selected, rather than waiting for the user to click away from the cell.
* Improved the display of Role details in the Admin Console. The detail panel for the selected role
  now includes a sub-tab listing all other roles inherited by the selected role, something that was
  previously accessible only via the linked graph visualization.
* Added new `checkboxRenderer` for rendering booleans with a checkbox input look and feel.
* Added new mobile `checkboxButton`, an alternate input component for toggling boolean values.
* Added beta version of a new Hoist `security` package, providing built-in support for OAuth flows.
  See `BaseOAuthClient`, `MsalClient`, and `AuthZeroClient` for more information. Please note that
  package is being released as a *beta* and is subject to change before final release.

### ✨ Styles

* Default mobile font size has been increased to 16px, both for better overall legibility and also
  specifically for input elements to avoid triggering Safari's auto-zoom behavior on focus.
    * Added new mobile-only CSS vars to allow for more granular control over font sizes:
        * `--xh-mobile-input-font-size`
        * `--xh-mobile-input-label-font-size`
        * `--xh-mobile-input-height-px`
    * Increased height of mobile toolbars to better accommodate larger nested inputs.
    * Grid font sizes have not changed, but other application layouts might need to be adjusted to
      ensure labels and other text elements fit as intended.
* Mobile App Options dialog has been updated to use a full-screen `DialogPanel` to provide a more
  native feel and better accommodate longer lists of app options.

### 🐞 Bug Fixes

* Fixed poor truncation / clipping behavior of the primary (right-side) metric in `ZoneGrid`. Values
  that do not fit within the available width of the cell will now truncate their right edge and
  display an ellipsis to indicate they have been clipped.
* Improved `RestGridModel.actionWarning` behavior to suppress any warning when the provided function
  returns a falsy value.
* Fixed mobile `Toast` intent styling.

### ⚙️ Technical

* NumberEditor no longer activates on keypress of letter characters.
* Removed initial `ping` call `FetchService` init.
* Deprecated `FetchService.setDefaultHeaders` and replaced with new `addDefaultHeaders` method to
  support independent additions of default headers from multiple sources in an application.

### 📚 Libraries

* @ag-grid `30.x → 31.x`
* @auth0/auth0-spa-js `added @ 2.1`
* @azure/msal-browser `added @ 3.14`
* dompurify `3.0 → 3.1`
* jwt-decode `added @ 4.0`
* moment `2.29 → 2.30`
* numbro `2.4 → 2.5`
* qs `6.11 → 6.12`
* semver `7.5 → 7.6`

---

For versions prior to v64, see [CHANGELOG-archive.md](./docs/archive/CHANGELOG-archive.md).