Changelog
What changed, when
Every notable change ships here. The project follows SemVer; the format follows Keep a Changelog.
0.3.0 — April 2026
Added
- Knowledge ingestion + RAG with citations injected into chat.
- Real OIDC discovery + PKCE; SAML / SCIM next.
- Pluggable KMS interface with envelope encryption (local, AWS KMS, Vault, HSM).
- Stripe-style metering aggregator + Studio
/usagedashboard. - Live updates via SSE (audit + chat events fan out to subscribers).
- Cost router picks cheap / balanced / premium model tier per turn.
- Replay tool — reconstruct compiled prompt and re-run any past turn.
- Outbound webhook delivery with HMAC, exponential backoff, dead-letter queue.
- Email channel via SMTP relay (Postmark-shaped); IMAP poll scaffold.
- Edge runtime MVP — single-binary
pmesh-edgewith SQLite + sync queue. - Air-gap installer + license JWT verifier + distroless image variant.
- Persona templates library — five archetypes with one-click instantiate.
- Studio:
/templates,/usage,/replay/[id], AuthGuard, one-click demo accounts, edit tab on persona detail page. - Demo launcher (
pnpm demo) with single-URL gateway proxy. - Comprehensive docs: ARCHITECTURE.md, REQUIREMENTS.md, RUNBOOK.md, SECURITY.md, CONTRIBUTING.md.
Changed
- Scope check honors
:rw⇒:rimplication. - Cookie
Secureflag now follows the request'sX-Forwarded-Proto.
Fixed
- Window.fetch binding error on Safari and similar browsers.
- File-store flush on close so the seed never loses the last batch.
0.2.0 — April 2026
Added
- Storage abstraction with file (dev) + Postgres+pgvector (prod) adapters and versioned migrations.
- Real embeddings via Voyage; deterministic stub fallback.
- Workspaces, users, memberships, invites, RBAC.
- Hash-chained audit log + verify endpoint.
- Per-tenant Redis token-bucket rate limits + per-IP flood guard.
- OpenTelemetry SDK + structured logs + Prometheus metrics.
- Durable autonomy queue (BullMQ + Redis or in-process).
- Tool registry with JSON Schema arg validation, egress allowlist, sandbox timeouts.
- Pluggable safety classifier (regex + model fallback).
- Hierarchical memory summarization.
- Channels: webhook receiver + Slack inbound (HMAC verified).
- Studio: login, persona authoring, chat, memory, PoL, autonomy, members, keys, world view, audit, conversations.
- TypeScript SDK + Python SDK +
pmeshCLI + YAML eval harness. - Helm chart with API + Worker + Postgres + Redis + ServiceMonitor + HPA + CronJobs (backup, vector reindex) + NetworkPolicy.
- CI pipeline: typecheck, vitest (incl. cross-tenant isolation), builds, migrations, eval suite, Helm lint, hadolint, Python SDK build, cosign signing, CycloneDX SBOM, attestation.
0.1.0 — April 2026
Added
- Marketing site, Studio, docs.
- Persona schema (Zod) + deterministic prompt compiler.
- REST API: personas, chat (streaming), memory, PoL, autonomy.
- TypeScript SDK + Python SDK + CLI + eval harness.
- Multi-stage Dockerfiles + Docker Compose.
- Helm chart skeleton.
- Initial GitHub Actions CI.