Release notes.

Unreleased · 23 August 2026

• Added serialized, checksum-verified migration history and startup rejection for changed or removed applied files.
• Added a PostgreSQL-backed idempotency primitive with processing leases, request-hash conflicts, exact HTTP response replay, stale-owner protection, expiry cleanup, and database acceptance tests.
• Added multi-replica background workers with SKIP LOCKED leasing, abandoned-work recovery, bounded exponential retry with jitter, dead-lettering, and state-revalidating Support Case retention purge.
• Added payload-free job inspection, audited dead-letter replay, and recurring bounded maintenance cleanup for expired transient authentication, OAuth, idempotency, rate-limit, invitation, email, session, and job records.
• Replaced process-local login counters with shared, expiring PostgreSQL limits for console and Project login surfaces, including keyed identifiers and concurrent-replica tests.
• Added Tenant roles, API permission enforcement, idempotent invitations, one-time acceptance, final-owner protection, member administration, session inventory, and corresponding console flows.
• Added non-enumerating email verification and password recovery, encrypted asynchronous email delivery, emailed invitation proofs hidden from administrators, one-time token invalidation, and full session/OAuth revocation after reset.
• Replaced Tenant Member password sessions with non-enumerating login attempts and bootstrap/strong assurance, mandatory user-verified passkeys or attested security keys, ETag-protected credential lifecycle, and explicit lost-authenticator recovery.
• Added versioned AES-256-GCM encryption keys, encrypted durable OAuth signing keys, configured issuer discovery, retiring-key JWKS publication, and multi-replica signing-key initialization.
• Added public and confidential OAuth Applications, expiring overlap client secrets, exact redirects, authorization code with mandatory S256 PKCE, pairwise OpenID subjects, explicit consent, ID/access tokens, UserInfo, revocation, and account grant management.
• Added Tenant Resource Servers, immutable delegated scopes, explicit OAuth Application grants, RFC resource indicators, resource-bound JWTs, and token-derived scope-v1 authorization decisions with stable denial reasons.
• Replaced Project API keys with stable scoped service accounts and nested expiring credential versions, including ETags, idempotent issuance, two-version overlap, fingerprints, last-use observation, independent revocation, and immediate workload attribution.
• Added Tenant-owned Support Cases with Project-scoped customer access, operator triage, append-only public and internal correspondence, encrypted attachments, generic external references, immutable lifecycle events, retention scheduling, and browser acceptance.
• Added console Resource Server, scope, OAuth grant, consent, credential, session, and account surfaces, plus black-box browser acceptance for identity and delegated OAuth.
• Added the standalone baseline roadmap and documented the migration and retry contracts before exposing them through new operations.
• Removed legacy password-only and passkey-only session endpoints and added password-verified first-FIDO enrollment so newly provisioned users can bootstrap safely.
• Added excludeCredentials to management and Project User registration ceremonies so a second enrollment cannot silently replace a discoverable credential the server still trusts.
• Corrected health-route security and Project User passkey response documentation.
• Added authored summaries and behavior descriptions for all 116 API operations, all 130 shared schemas, credentials, and common parameters.
• Added a shared Redis-backed BFF reference store.
• Added CI for SDKs and examples, and fixed SDK source-and-test typechecking.
• Expanded the Astro portal with SDK API reference, operational guides, search, screenshots, and release gates.

Compatibility policy

Until 1.0, minor SDK versions may contain breaking changes. Pin exact versions in production candidates, regenerate types from the matching OpenAPI contract, and review this page before upgrading.