# What's new — June 2026 (/docs/whats-new-2026-06) June 2026 was a heavy substrate month. Work landed across `@pleach/core`, `@pleach/gateway`, `@pleach/compliance`, `@pleach/replay`, `@pleach/eval`, `@pleach/coding-agent`, and `@pleach/recipes` — multi-tenant gateway primitives, replay-fork operations, real recipe bodies for the education, government, and cloud-mediated patterns, and the swarm spawn-event substrate. This page is the consumer-facing summary: what shipped per package and where to read more. ## `@pleach/gateway` — auth, BYOK, cost, region, failover, identity, swarm [#pleachgateway--auth-byok-cost-region-failover-identity-swarm] Multi-tenant routing got its substrate. * **Auth adapters.** Tenant identity resolves from JWT claims, the `X-Tenant-Key` header, Okta sessions, or Clerk sessions — without you writing the boilerplate. * **BYOK substrate.** `TenantCredentialStore` plus Postgres / Redis / external-secret-manager adapters. Per-tenant provider keys resolve at request time, and the gateway routes the call with the right credential. * **Cost adapters.** `CostEmitter` plus OTel, Postgres, Datadog, and Honeycomb sinks. Pick whichever observability stack you already run. * **Region routing.** `RegionRouter`, `RegionAwareCascade`, and `RegionDrPolicy` — region-aware routing, cascade-time region constraints, and DR policy in active-passive, active-active, or warm-standby modes. Deterministic ordering for replay safety. * **Failover.** `FailoverPolicy` (chain progression + linear backoff) and `FailoverMiddleware` (transient-error retry + `onExhausted` callback), with a `FailoverExhausted` event. * **Federated identity.** `IdentityProvider` (`kind: "federated"`, distinct from static BYOK) + `TokenCache` (LRU + TTL) + AWS STS, Azure managed identity, and GCP workload identity providers — all via structural peer interfaces, with no `@aws-sdk/*` / `@azure/identity` / `google-auth-library` runtime requirement. * **Swarm governance.** `RootTurnCostAggregator` + `CostCeilingMiddleware` (throws `CostCeilingExceededError` on breach) + `FailoverCoordinator` + `SwarmTopologyClassifier`. Read more → [`@pleach/gateway`](/docs/gateway). ## `@pleach/coding-agent` — file tools + sandbox facade + policy [#pleachcoding-agent--file-tools--sandbox-facade--policy] The vendor-neutral file/diff/exec tool surface. * **Read tools.** `read_file`, `write_file`, `apply_diff`, `search_files`, `list_files` — vendor-neutral, working against any provider that supports tool calls. * **Exec tools.** `run_tests`, `git_clone`, `git_diff`, bound to the runtime-adjacency contract that controls when a tool fires. * **Sandbox facade.** `SandboxProvider` facade + `SandboxComposite` for stitching multiple sandbox providers together. * **Policy + facade.** `createCodingAgentPolicy({ maxSynthesizePerTurn: 5 })` ships the opinionated coding-agent default — five synthesizes per turn, matching the `plan → diff → verify → retry → verify` loop. `createPerCallClassRouting({ routes })` layers per-CallClass model overrides on top. Read more → [`@pleach/coding-agent`](/docs/coding-agent) and [Multi-synthesize](/docs/coding-agent/multi-synthesize). ## `@pleach/eval` — divergence, benchmarks, parity [#pleacheval--divergence-benchmarks-parity] * **Divergence reporting.** `DivergenceReporter` + distance utilities * heatmap visualization. Compare model-A vs model-B outputs at the row level. * **Benchmarks + cost estimation.** MMLU, SWE-bench, HumanEval, and custom-domain loaders, plus `CostEstimator` for projecting a benchmark run's spend before you fire it. * **Configuration parity.** `runParitySuite` + `computeDivergence` — a model-swap matrix where each run is a different configuration over the same scenarios. Sibling of the within-swarm `runSwarmParity`. Read more → [`@pleach/eval`](/docs/eval) and [Parity](/docs/eval/parity). ## `@pleach/replay` — cache adapters, fork, strict [#pleachreplay--cache-adapters-fork-strict] * **Cache adapters.** Disk / Redis / S3 cache adapters plus `CacheMiddleware`. Replay runs share inference results across re-runs, so an eval loop costs what one run costs. * **Fork + strict.** `forkAtEvent` branches replay at a specific event; `StrictReplay` is production-grade replay-with-tolerance; `captureSlots` captures replay slots; spawn-order serialization keeps swarm replay deterministic. Read more → [`@pleach/replay`](/docs/replay). ## `@pleach/compliance` — redaction, audit query, hash chain, erasure [#pleachcompliance--redaction-audit-query-hash-chain-erasure] * **Redaction pipeline.** `RedactionGate` + `RedactionPipeline` + Presidio / LLM / PHI scrubbers. * **Audit query + export.** `queryAudit` + `exportAuditPdf` + `DeterminismCertifier` + RLS templates — the surface a regulator queries against and the PDF export they read in a deposition. * **Hash-chain middleware.** `createHashChainMiddleware({ complianceRuntime, tenantId, chatId })` decorates each event with `rowHash` + `prevHash` before the host writer canonicalizes and persists; `verifyAfterBatch(rows)` returns `{ chainValid, failedIndex? }`. * **GDPR erasure.** `executeErasureRequest({ request, eventStore, rebuildChainFromGenesis })` is the structural primitive for GDPR Article 17 erasure. See [GDPR right-to-erasure](/docs/compliance/gdpr-erasure) for the honest scope-limits on crypto-shredding vs row-deletion + chain rebuild. Read more → [`@pleach/compliance`](/docs/compliance). ## `@pleach/core` — spawn substrate, multi-synthesize, fixes [#pleachcore--spawn-substrate-multi-synthesize-fixes] * **Canonical spawn.** The `spawn()` factory wraps a nested `SessionRuntime` via a `SpawnableParent` interface. Three fan-out caps ship with sensible defaults (`depth=4`, `perTurn=10`, `total=40`); a breach throws `SubagentFanOutExceeded` with a structural `.cap` shape. `SpawnEvent` canonical schema + `RootTurnRollup` + `recordSpawn`. * **Multi-synthesize contract.** `SessionRuntimeConfig.maxSynthesizePerTurn?: number` plus an optional `TurnSynthesizeCounter.setMaxPerTurn?(max)`. The singleton-seam invariant stays; only the per-turn invocation cap relaxes — the widening that unblocks the coding-agent reflection loop. * **Air-gapped substrate.** `AirGappedRuntimeOption` + `AirGappedHostRejectedError`, with fail-closed-on-empty-allowlist semantics and subdomain matching with leading-dot normalization. * **`generateClientId` jsdom/SSR fix.** Now guards `window.localStorage` consistently across jsdom and SSR, eliminating a hydration flake. * **Quickstart regression locks + plugin examples.** Regression tests covering `createPleachRoute()`, `useChat()`, and `providerDetection`, plus runnable plugin/observer examples — `empty-plugin`, `domain-entity-recognition`, `custom-event-channel`, a `dialect-normalization` stream-observer, and a `halt-on-pattern` observer. Read more → [`@pleach/core`](/docs/core) and [Subagents](/docs/subagents). ## `@pleach/recipes` — real bodies for three patterns [#pleachrecipes--real-bodies-for-three-patterns] The previously-stubbed recipe bodies now compose real pieces. * **`educationAgent`.** Composes the student-safety scrubber with a per-tenant cost cap. * **`governmentAgent`.** Composes the air-gapped runtime + IAM federated identity + audit export. * **`cloudMediatedAgent`.** Composes AWS / Azure / GCP identity providers with region routing + failover. Read more → [Recipes](/docs/recipes-pleach-recipes). ## Publishing prep [#publishing-prep] CI scaffolds for SBOM emission and npm publish with provenance attestations landed, plus a license matrix covering every SKU's FSL-1.1-Apache-2.0 transition surface — the groundwork for government procurement conversations and ISV SBOM-conformance requirements. ## Where to read more [#where-to-read-more]