v0.9.4

Changes since v0.9.3:

• auth-server test: no redundant borrows in format!
• auth-client device: a short first doc paragraph
• auth-client: the device sign-in protocol, for any client to drive

v0.9.3

Changes since v0.9.2:

• auth: a device with no browser signs in over the AuthService — device/code, device/token

v0.9.2

Changes since v0.9.1:

• cargo fmt
• crdt: the presence refresh takes the poison-tolerant lock
• EventSink::send: Sync events, so the send is Send
• EventSink::send: a producer that streams on its own waits for its reader

v0.9.1

Changes since v0.9.0:

• derive(Entity): the HTTP handlers are built with vox

v0.9.0

Changes since v0.8.2:

• crdt: presence keeps a still peer and drops a gone one
• crdt: a presence host's own writes reach its peers
• fleet: facet/vox/phon to rc.7, caret ranges
• rpc: an argless subscription can introduce itself
• fix(auth-server): linked tokens refresh instead of going stale (#19)
• fix(telemetry): the OTLP trace layer obeys the log filter (#17)
• fix(auth-db): a migration for auth_agent_links on databases that predate it (#16)
• feat(auth): a linked agent inherits its owner's organizations, up to a cap (#15)
• feat(auth): an OIDC access token can list the organizations it belongs to (#14)
• fix(auth-server): a dead cookie is judged on the session, not on the engine's error (#13)
• fix(auth-server): a stale session cookie on /oauth2/authorize is a sign-in, not a 401 (#12)
• feat(auth): the issuer is a portal you can actually walk into (#11)
• feat(auth): leave an organization, and remove a member (#10)
• feat(architect): a method may declare its HTTP path (#9)
• fix(auth): the organization surface belongs under /auth (#8)
• #[architect::error]: the status attribute says it is HTTP (http_status = 404)
• example, scaffold, README: errors opt into Eq like every other wire type
• #[architect::error]: a service error with nothing left to write
• architect generates every wire, and the DX to match
• Organizations over HTTP, starting with the read side (#7)
• feat(auth-ui): the settings chassis is the design system's now
• feat(auth-ui): serve the design system's stylesheet
• fix(mock-oauth): drop on a Copy value does nothing
• feat(mock-oauth): a stand-in for GitHub, Google and TONE3000
• fix(auth-server): sqlite::memory: gave every connection its own database
• feat(auth-ui): a settings application, not ten more cards
• feat(auth)!: real Sign-In With Ethereum, and the OIDC consent screen
• feat(auth-ui): start as a guest, and attach a phone number
• feat(auth-ui): connect a device, and hold several accounts at once
• fix(auth)!: two-factor guarded the password form and nothing else
• feat(auth-ui): sign in with a code, a link, or a username
• feat(auth-ui): passkey pages, and the one script in this UI
• feat(auth)!: real WebAuthn — the assertion is verified now
• test(auth-ui): browser cover for the new pages, and two shared-state bugs
• fix(auth)!: passkey sign-in was an authentication bypass; fail it closed
• feat(auth-ui): API keys and the operator screen
• feat(auth-ui): two-factor, and the two bugs under it
• test(auth): browser tests, and the message they found
• feat(auth): a fresh local server, and a safe copy of a real one
• feat(auth-ui): the pages, in a crate anything can mount
• feat(auth): the organization management the engine was missing
• chore(auth): bring the auth server under the no-panic lints
• chore: adopt the no-panic clippy config, and fix what it found

v0.8.11

Changes since v0.8.9:

• fix(telemetry): the OTLP trace layer obeys the log filter (#17)

v0.7.4-subscribe-intro

Changes since v0.7.4:

• rpc: an argless subscription can introduce itself

v0.8.10

Changes since v0.8.9:

• fix(telemetry): the OTLP trace layer obeys the log filter (#17)

v0.8.9

Changes since v0.8.8:

• fix(auth-db): a migration for auth_agent_links on databases that predate it (#16)

v0.8.8

Changes since v0.8.7:

• feat(auth): a linked agent inherits its owner's organizations, up to a cap (#15)