What's new
- Added the
connector.draft_runworker runtime for calling draft-only external agents such as gb-agent. - Validated connector responses are persisted through the existing connector draft-run finalizer and operator review surfaces.
- Added worker dispatch so connector draft-run jobs no longer fall through to the generic outbox executor.
Security and operations
- Requires trusted connector endpoint hosts before reading workspace Vault tokens.
- Sends only schema-validated redacted context and rejects unmasked phone context before secret reads.
- Restricts connector action surface to draft reply and human review paths.
- Rejects connector/run identity mismatches before persistence and keeps external connector output out of WhatsApp send/outbox/opt-out/tag/journey side effects.
- Bumps the worker build marker so Railway gets a fresh runtime bundle.