Administrators and Roles screens in the backend, with server-side privilege rules and protection for the last superuser.
Keyboard shortcuts across the admin: save on record forms, settings, My account and modals, Create and new, Esc, a search shortcut and a help overlay.
A first, opt-in look at MCP. The new pier module serves an MCP endpoint, but only in binaries built with the summercms_mcp build tag and with mcp.enabled turned on. It is off by default, so existing applications do not change. Account linking, OAuth consent and plugin tools follow in SummerCMS 0.5.
Per-record locked permission values and a field trigger for permission forms.
Record actions that span controllers, and prompted record actions that ask for input before they run.
My account contributions: plugins can add sections to the administrator's own account page.
The settings section panel lists only the sections of the current category.
For plugin authors: SDK-free pact contracts for MCP tools and prompts, streaming routes, an in-process dispatch marker with compiled handler lookup, and configurable authorize scopes.
pier: an MCP server module built on the official Go SDK, with Redis-backed sessions, event fan-out across instances, a stateless protocol path and protected resource metadata. Opt-in, as above.
Fixed
Bulk lifecycle actions now change every selected administrator.
The Administrators form enforces the 4-character password minimum.
Roles declared in code can no longer be captured from the admin.
Picked relation labels survive a form tab remount.