diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 222ac1720a0..c917188fd94 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "hyperframes",
   "description": "HyperFrames by HeyGen. Write HTML, render video. Compositions, GSAP and runtime adapter animations, captions, voiceovers, audio-reactive visuals, and website capture for HyperFrames.",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "author": {
     "name": "HeyGen",
     "email": "hyperframes@heygen.com",
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 60bd65621ea..1a33faeef33 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "hyperframes",
   "description": "Write HTML, render video. Compositions, Tailwind v4 styles, GSAP and runtime adapter animations, captions, voiceovers, audio-reactive visuals, and website capture for HyperFrames.",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "author": {
     "name": "HeyGen",
     "email": "hyperframes@heygen.com",
diff --git a/.cursor-plugin/plugin.json b/.cursor-plugin/plugin.json
index 3de4d9ba6dc..4bc65e55ca4 100644
--- a/.cursor-plugin/plugin.json
+++ b/.cursor-plugin/plugin.json
@@ -3,7 +3,7 @@
   "name": "hyperframes",
   "displayName": "HyperFrames by HeyGen",
   "description": "Write HTML, render video. Compositions, Tailwind v4 styles, GSAP and runtime adapter animations, captions, voiceovers, audio-reactive visuals, and website capture for HyperFrames.",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "author": {
     "name": "HeyGen",
     "email": "hyperframes@heygen.com"
diff --git a/docs/changelog.mdx b/docs/changelog.mdx
index 76ef72e9990..6e71c8e95b7 100644
--- a/docs/changelog.mdx
+++ b/docs/changelog.mdx
@@ -8,6 +8,24 @@ Recent HyperFrames releases, including user-facing features, fixes, and migratio
 
 {/* New release entries are prepended by `bun run changelog:draft <version> --write`. */}
 
+<Update
+  label="HyperFrames v0.9.30"
+  description="Released - 2026-11-10"
+  tags={["Release", "Reverse", "AWS Lambda", "Studio Server"]}
+>
+Studio stays responsive on large projects while it keeps history. The preview server now refuses writes from other sites and host names it does not serve, so a tunnel or remote setup may need one setting.
+
+## Fixes
+
+- **CLI:** When `hyperframes reverse` needs you to sign in, the agent now tells you why in one message with the link (and the device code on a remote terminal). The reverse skill also spots an outdated CLI install and runs the latest release instead ([007664e25](https://github.com/heygen-com/hyperframes/commit/007664e25a587c35da0ea104d7fc6a8550389446), [#7488](https://github.com/heygen-com/hyperframes/pull/7488)).
+- **AWS Lambda:** The Lambda handler ZIP installs its runtime from a committed lockfile, with install scripts turned off ([f9255e39a](https://github.com/heygen-com/hyperframes/commit/f9255e39a56de17fd86362c4558a918ad2a874ef), [#7485](https://github.com/heygen-com/hyperframes/pull/7485)).
+- **Studio Server:** On large projects, Studio's history checks no longer hold up the server ([61e720b0e](https://github.com/heygen-com/hyperframes/commit/61e720b0e7d6d68172466a3a72ea27d98f2ad58d), [#7491](https://github.com/heygen-com/hyperframes/pull/7491)).
+- **Gcp Cloud Run:** The Cloud Run image pins its base image and checks its browser and bun downloads by checksum ([c6d243a2d](https://github.com/heygen-com/hyperframes/commit/c6d243a2dee879e5f1fa2aeda544de8ecf91a998), [#7487](https://github.com/heygen-com/hyperframes/pull/7487)).
+- **Studio Server:** The preview server refuses writes from other sites and requests for host names it does not serve. Local use needs no change. If you open `hyperframes preview` or the Studio dev server through a tunnel, Codespaces or a remote dev host, that setup can now be refused with a 403: name the host in `HYPERFRAMES_PREVIEW_ALLOWED_HOSTS` (comma separated), for example `HYPERFRAMES_PREVIEW_ALLOWED_HOSTS=demo.tunnels.example hyperframes preview` ([f318d3d08](https://github.com/heygen-com/hyperframes/commit/f318d3d08a7dff5fb48d12e7604c73bf004af204), [#7490](https://github.com/heygen-com/hyperframes/pull/7490)).
+
+[View the full commit range](https://github.com/heygen-com/hyperframes/compare/v0.9.29...v0.9.30).
+</Update>
+
 <Update
   label="HyperFrames v0.9.29"
   description="Released - 2026-11-10"
diff --git a/gemini-extension.json b/gemini-extension.json
index f0db69aa1c0..f6fc54bf569 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,5 +1,5 @@
 {
   "name": "hyperframes",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "HyperFrames by HeyGen. Write HTML, render video. Compositions, GSAP and runtime adapter animations, captions, voiceovers, audio-reactive visuals, and website capture for HyperFrames."
 }
diff --git a/packages/aws-lambda/package.json b/packages/aws-lambda/package.json
index 7165af10f75..d16209305e8 100644
--- a/packages/aws-lambda/package.json
+++ b/packages/aws-lambda/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/aws-lambda",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "AWS Lambda adapter for HyperFrames distributed rendering — handler, client-side SDK, and CDK construct.",
   "repository": {
     "type": "git",
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 0ba61296be6..61578b74211 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/cli",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "Make videos with code and AI agents: write HTML, render MP4. Open source.",
   "keywords": [
     "ai-agents",
diff --git a/packages/core/package.json b/packages/core/package.json
index bba30412b7d..a352ba30985 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/core",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "",
   "repository": {
     "type": "git",
diff --git a/packages/engine/package.json b/packages/engine/package.json
index 0b47065f475..fb98e0cb384 100644
--- a/packages/engine/package.json
+++ b/packages/engine/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/engine",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "Seekable web page to video rendering engine (Puppeteer + FFmpeg)",
   "repository": {
     "type": "git",
diff --git a/packages/gcp-cloud-run/package.json b/packages/gcp-cloud-run/package.json
index cca8061f67e..e2751cba06d 100644
--- a/packages/gcp-cloud-run/package.json
+++ b/packages/gcp-cloud-run/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/gcp-cloud-run",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "Google Cloud Run + Workflows adapter for HyperFrames distributed rendering — request handler, client-side SDK, and Terraform module.",
   "repository": {
     "type": "git",
diff --git a/packages/inspector/package.json b/packages/inspector/package.json
index 443a82dd16d..161410f5d34 100644
--- a/packages/inspector/package.json
+++ b/packages/inspector/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/inspector",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "repository": {
     "type": "git",
     "url": "https://github.com/heygen-com/hyperframes",
diff --git a/packages/lint/package.json b/packages/lint/package.json
index 82919ded81a..caa603dddfa 100644
--- a/packages/lint/package.json
+++ b/packages/lint/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/lint",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "repository": {
     "type": "git",
     "url": "https://github.com/heygen-com/hyperframes",
diff --git a/packages/parsers/package.json b/packages/parsers/package.json
index b570136657a..9c05505519f 100644
--- a/packages/parsers/package.json
+++ b/packages/parsers/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/parsers",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "repository": {
     "type": "git",
     "url": "https://github.com/heygen-com/hyperframes",
diff --git a/packages/player/package.json b/packages/player/package.json
index 1ef873f25f2..15280d66323 100644
--- a/packages/player/package.json
+++ b/packages/player/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/player",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "Embeddable web component for HyperFrames compositions",
   "repository": {
     "type": "git",
diff --git a/packages/producer/package.json b/packages/producer/package.json
index b61d6553892..b1c83a6de1e 100644
--- a/packages/producer/package.json
+++ b/packages/producer/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/producer",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "HTML-to-video rendering engine using Chrome's BeginFrame API",
   "repository": {
     "type": "git",
diff --git a/packages/sdk/package.json b/packages/sdk/package.json
index 6eda9f69c54..92e3276b662 100644
--- a/packages/sdk/package.json
+++ b/packages/sdk/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/sdk",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "Headless, framework-neutral HyperFrames composition editing engine",
   "repository": {
     "type": "git",
diff --git a/packages/shader-transitions/package.json b/packages/shader-transitions/package.json
index bb30be061c9..ac421efd34f 100644
--- a/packages/shader-transitions/package.json
+++ b/packages/shader-transitions/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/shader-transitions",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "WebGL shader transitions for HyperFrames compositions",
   "repository": {
     "type": "git",
diff --git a/packages/share/package.json b/packages/share/package.json
index c139d2a9ae9..3eee22f1112 100644
--- a/packages/share/package.json
+++ b/packages/share/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/share",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "Shared review identity, version upload and sharing state for HyperFrames hosts",
   "license": "Apache-2.0",
   "repository": {
diff --git a/packages/studio-server/package.json b/packages/studio-server/package.json
index 4001fcc8475..68af180027e 100644
--- a/packages/studio-server/package.json
+++ b/packages/studio-server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/studio-server",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "repository": {
     "type": "git",
     "url": "https://github.com/heygen-com/hyperframes",
diff --git a/packages/studio/package.json b/packages/studio/package.json
index 6faccb39c62..a5f90acb8ef 100644
--- a/packages/studio/package.json
+++ b/packages/studio/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hyperframes/studio",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "description": "",
   "repository": {
     "type": "git",
diff --git a/plugin.json b/plugin.json
index cabc4037892..649272d65dc 100644
--- a/plugin.json
+++ b/plugin.json
@@ -2,7 +2,7 @@
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "hyperframes",
   "description": "HyperFrames by HeyGen. Write HTML, render video. Compositions, GSAP and runtime adapter animations, captions, voiceovers, audio-reactive visuals, and website capture for HyperFrames.",
-  "version": "0.9.29",
+  "version": "0.9.30",
   "author": {
     "name": "HeyGen",
     "email": "hyperframes@heygen.com",
diff --git a/releases/v0.9.30.md b/releases/v0.9.30.md
new file mode 100644
index 00000000000..cd86b45208c
--- /dev/null
+++ b/releases/v0.9.30.md
@@ -0,0 +1,17 @@
+# HyperFrames v0.9.30
+
+Released on 2026-11-10.
+
+Studio stays responsive on large projects while it keeps history. The preview server now refuses writes from other sites and host names it does not serve, so a tunnel or remote setup may need one setting.
+
+## Fixes
+
+- **CLI:** When `hyperframes reverse` needs you to sign in, the agent now tells you why in one message with the link (and the device code on a remote terminal). The reverse skill also spots an outdated CLI install and runs the latest release instead ([007664e25](https://github.com/heygen-com/hyperframes/commit/007664e25a587c35da0ea104d7fc6a8550389446), [#7488](https://github.com/heygen-com/hyperframes/pull/7488)).
+- **AWS Lambda:** The Lambda handler ZIP installs its runtime from a committed lockfile, with install scripts turned off ([f9255e39a](https://github.com/heygen-com/hyperframes/commit/f9255e39a56de17fd86362c4558a918ad2a874ef), [#7485](https://github.com/heygen-com/hyperframes/pull/7485)).
+- **Studio Server:** On large projects, Studio's history checks no longer hold up the server ([61e720b0e](https://github.com/heygen-com/hyperframes/commit/61e720b0e7d6d68172466a3a72ea27d98f2ad58d), [#7491](https://github.com/heygen-com/hyperframes/pull/7491)).
+- **Gcp Cloud Run:** The Cloud Run image pins its base image and checks its browser and bun downloads by checksum ([c6d243a2d](https://github.com/heygen-com/hyperframes/commit/c6d243a2dee879e5f1fa2aeda544de8ecf91a998), [#7487](https://github.com/heygen-com/hyperframes/pull/7487)).
+- **Studio Server:** The preview server refuses writes from other sites and requests for host names it does not serve. Local use needs no change. If you open `hyperframes preview` or the Studio dev server through a tunnel, Codespaces or a remote dev host, that setup can now be refused with a 403: name the host in `HYPERFRAMES_PREVIEW_ALLOWED_HOSTS` (comma separated), for example `HYPERFRAMES_PREVIEW_ALLOWED_HOSTS=demo.tunnels.example hyperframes preview` ([f318d3d08](https://github.com/heygen-com/hyperframes/commit/f318d3d08a7dff5fb48d12e7604c73bf004af204), [#7490](https://github.com/heygen-com/hyperframes/pull/7490)).
+
+## Full changelog
+
+https://github.com/heygen-com/hyperframes/compare/v0.9.29...v0.9.30