Kern v0.6.0

core

Feat

• feat(invitations): make guestScopes grant the projects it names
• feat: host the meet module, switched off in every workspace

Fix

• fix(deps): move module-meet to ^0.4.0
• fix(deps): move module-meet to ^0.5.3
• fix(deps): move module-tracker to ^0.14.3
• fix(search): honour deny bindings instead of failing open
• fix(search): write the key separator as an escape, not a raw NUL

Docs

• docs: replace dangling ADR 0011 pointer with the MCP files

compare v0.5.0...v0.6.0

Kern v0.5.0

core

Feat

• feat: ask every module to fill a workspace created with seedDemo

Fix

• fix(workspaces): reserve the livekit slug the Caddyfiles route away

Docs

• docs(updates): drop the menu path from the update notifications

Test

• test(core): assert the schema's RLS exceptions against the catalogue

compare v0.4.0...v0.5.0

Kern v0.4.0

core

Feat

• feat(mail): send every email in the recipient's language

Fix

• fix(account): make the promised 30-day undo reachable
• fix(auth): hold an MCP token to its scopes in every service
• fix(auth): hold an MCP token to the scopes it was granted
• fix(auth): let only a real session reopen a closed account
• fix(auth): resolve the client IP behind a proxy and set our own limits
• fix(auth): stop an API key acting as a session on /api/auth
• fix(env): treat a blank environment variable as unset
• fix(files): stop an uploaded file executing on the app's origin
• fix(mail): stop reporting success when nothing can send
• fix(mcp): send the workspace where every module expects it
• fix(notifications): keep one refused address from ending the digest
• fix(permissions): stop a guest reading every project in the workspace
• fix(workspaces): make the 30-day deletion undo reachable
• fix(workspaces): reserve every slug the proxy and the app own

Docs

• docs(auth): keep the session-origin comment true after the plugin change
• docs(mail): say why core does not use the module's MJML templates

Test

• test(auth): show the suite's sign-ins never reach the limiter

compare v0.3.0...v0.4.0

Kern v0.3.0

core

Feat

• feat: take extra modules as a build argument instead of a fork

Fix

• fix(mail): call the mail module in the shape its contract accepts

compare v0.2.1...v0.3.0

Kern v0.2.1

core

Fix

• fix(worker): answer the image's health probe, so core-worker stops reporting unhealthy for ever

compare v0.2.0...v0.2.1

Kern v0.2.0

core

Feat

• feat(auth): enforce allowSignup and gate workspaces on a verified email
• feat(core): add data export, erasure and an operator access trail

Fix

• fix(core): stop two cross-tenant leaks through service-facing calls
• fix(migrations): make every core migration replay-safe

Test

• test: run object storage in CI, and stop asserting the release feed is unreachable

Ci

• ci: run the suite on release/** so the nightly reach is tested before it lands

compare v0.1.4...v0.2.0

Kern v0.1.0

First release of the Kern platform (v0.1.0).

See the commit history for how it got here.