Changelog

What changed, when

Every notable change ships here. The project follows SemVer; the format follows Keep a Changelog.

0.3.0 — April 2026

Added

  • Knowledge ingestion + RAG with citations injected into chat.
  • Real OIDC discovery + PKCE; SAML / SCIM next.
  • Pluggable KMS interface with envelope encryption (local, AWS KMS, Vault, HSM).
  • Stripe-style metering aggregator + Studio /usage dashboard.
  • Live updates via SSE (audit + chat events fan out to subscribers).
  • Cost router picks cheap / balanced / premium model tier per turn.
  • Replay tool — reconstruct compiled prompt and re-run any past turn.
  • Outbound webhook delivery with HMAC, exponential backoff, dead-letter queue.
  • Email channel via SMTP relay (Postmark-shaped); IMAP poll scaffold.
  • Edge runtime MVP — single-binary pmesh-edge with SQLite + sync queue.
  • Air-gap installer + license JWT verifier + distroless image variant.
  • Persona templates library — five archetypes with one-click instantiate.
  • Studio: /templates, /usage, /replay/[id], AuthGuard, one-click demo accounts, edit tab on persona detail page.
  • Demo launcher (pnpm demo) with single-URL gateway proxy.
  • Comprehensive docs: ARCHITECTURE.md, REQUIREMENTS.md, RUNBOOK.md, SECURITY.md, CONTRIBUTING.md.

Changed

  • Scope check honors :rw:r implication.
  • Cookie Secure flag now follows the request's X-Forwarded-Proto.

Fixed

  • Window.fetch binding error on Safari and similar browsers.
  • File-store flush on close so the seed never loses the last batch.

0.2.0 — April 2026

Added

  • Storage abstraction with file (dev) + Postgres+pgvector (prod) adapters and versioned migrations.
  • Real embeddings via Voyage; deterministic stub fallback.
  • Workspaces, users, memberships, invites, RBAC.
  • Hash-chained audit log + verify endpoint.
  • Per-tenant Redis token-bucket rate limits + per-IP flood guard.
  • OpenTelemetry SDK + structured logs + Prometheus metrics.
  • Durable autonomy queue (BullMQ + Redis or in-process).
  • Tool registry with JSON Schema arg validation, egress allowlist, sandbox timeouts.
  • Pluggable safety classifier (regex + model fallback).
  • Hierarchical memory summarization.
  • Channels: webhook receiver + Slack inbound (HMAC verified).
  • Studio: login, persona authoring, chat, memory, PoL, autonomy, members, keys, world view, audit, conversations.
  • TypeScript SDK + Python SDK + pmesh CLI + YAML eval harness.
  • Helm chart with API + Worker + Postgres + Redis + ServiceMonitor + HPA + CronJobs (backup, vector reindex) + NetworkPolicy.
  • CI pipeline: typecheck, vitest (incl. cross-tenant isolation), builds, migrations, eval suite, Helm lint, hadolint, Python SDK build, cosign signing, CycloneDX SBOM, attestation.

0.1.0 — April 2026

Added

  • Marketing site, Studio, docs.
  • Persona schema (Zod) + deterministic prompt compiler.
  • REST API: personas, chat (streaming), memory, PoL, autonomy.
  • TypeScript SDK + Python SDK + CLI + eval harness.
  • Multi-stage Dockerfiles + Docker Compose.
  • Helm chart skeleton.
  • Initial GitHub Actions CI.