Build Log — February 19, 2026

February 19, 2026

What We Shipped

Both phases landed in a single day. External AI agents can now connect to Flow State via scoped API tokens.

Phase 1 — Agent registration, capability-scoped tokens (read:workouts, read:profile, coach:suggest), SHA-256 hashed API keys, rate limiting (100 rpm / 1000 rph), full audit trail, RLS on all tables. (#378)
Phase 2 — Write access with approval workflows. Agents submit workouts to a pending queue; users approve or reject. Webhook system with SSRF protections (HTTPS-only, private IP blocking, DNS rebind checks), exponential backoff retries, and full delivery logging. (#384)

REPLICA IDENTITY FULL — Enabled on MC tables so Supabase Realtime filters actually work. Live feed now updates as events happen. (#381)
Auto-Refreshing Timestamps — Added a useTick hook that forces re-renders every 60 seconds. Agent sidebar and activity feed timestamps no longer freeze. (#383)

Removed Scroll-to-Change-Month — Mouse wheel on the calendar was hijacking normal page scroll and jumping months accidentally. Gone. (#379)
Cleaned Up AI Coach Header — Removed the Memory and Clear buttons. Memory should be auto-extracted from conversations, and threads replace clear. (#380)
Refer & Earn in Header — Moved the referral program from buried-in-settings to a prominent button next to Agent API. Full referral flow reviewed and verified. (#385)
Infinity Logo on Trial Page — Replaced the generic sparkles icon with the Flow State infinity logo on the expired trial screen.

Feb 18 Build Log — Backfilled the missing daily log covering the massive polish day (40+ commits). (#386)