v0.1.0

What's Changed

⚠️ Breaking changes

• fix(query): enforce column allowlist on every structured-query clause by @EricAndrechek in #273

✨ Features

• fix(docs): real per-page Last-updated dates + open AI content signals by @EricAndrechek in #301

🔧 CI & build

• feat: add AI automation stack and OSS governance for open-source launch by @EricAndrechek in #55
• fix(ci): agent label gate, pull_request_target switch, minor cleanups by @EricAndrechek in #64
• feat(ci): workflow-driven admin approval + Task Board orchestration by @EricAndrechek in #65
• fix(ci): sweep errcheck, resolve hub and ingest test failures by @EricAndrechek in #66
• ci: dual-trigger pr-title + label workflows for fork-PR coverage by @EricAndrechek in #69
• ci: bundle CI hygiene fixes for #70 by @EricAndrechek in #71
• ci: rebuild task board state machine with composite actions + bidirectional sync by @EricAndrechek in #75
• test: restore 70% coverage threshold with new package tests by @EricAndrechek in #79
• chore: remove clustered mode and unscoped features by @EricAndrechek in #89
• fix(ci): unblock claude-review and coverage badge on main by @EricAndrechek in #105
• fix(ci): use REST check-runs for claude-review required-check gate by @EricAndrechek in #108
• fix(ci): claude-review on pull_request_target + orchestrator waits by @EricAndrechek in #109
• fix(ci): claude-review trigger pull_request_target → pull_request by @EricAndrechek in #110
• fix(ci): claude bot's own comment shouldn't cancel its in-flight review by @EricAndrechek in #111
• fix(ci): claude review as inline comments + native blocking by @EricAndrechek in #113
• refactor(ci): remove orchestrator; reviewer-assign in housekeeping by @EricAndrechek in #115
• fix(ci): silence two flavors of ghost-failure noise on PR pushes by @EricAndrechek in #117
• docs: add initial Astro-based documentation site by @jfwoods in #7
• fix(ci): only bypass admin review for dependabot patch/minor by @EricAndrechek in #134
• ci: kill coverage Docker pull on PR runs + tighten claude-review group by @EricAndrechek in #129
• build(pnpm): migrate to pnpm 11 + add minimumReleaseAge + pin Node 22 by @EricAndrechek in #165
• feat(docs): rebuild site with wavehouse logo and design tokens by @EricAndrechek in #142
• chore: claude code native improvements by @EricAndrechek in #147
• docs: prep docs for publishing by @EricAndrechek in #187
• refactor(sdk)!: remove WebSockets + consolidate tooling/coverage by @EricAndrechek in #190
• chore: remove Gemini Code Assist and on-repo Claude PR review workflow by @EricAndrechek in #207
• ci: publish @wavehouse/sdk to npm and relicense to Apache-2.0 by @EricAndrechek in #266
• fix(ci): publish SDK on Node 24 (Node 22.22.2 npm upgrade broken) by @EricAndrechek in #267
• fix(docs): final passes on docs before publish by @EricAndrechek in #193
• chore(agents): tighten pre-push gates, slim AGENTS.md, add /pm-triage by @EricAndrechek in #275
• feat(docs): prod-faithful dev loop, mermaid cache, favicon, doc fixes by @EricAndrechek in #277
• feat(docs): live-demo hero panel via @wavehouse/sdk by @EricAndrechek in #290
• ci: migrate workflows to ubuntu-latest runners by @EricAndrechek in #283
• ci: add build provenance for npm, go binaries, and the ghcr image by @EricAndrechek in #308
• ci: replace admin-approval workflow with native required_reviewers by @EricAndrechek in #310
• ci: drop housekeeping reviewer-request for native team assignment by @EricAndrechek in #311
• ci: split ci into a job dag and isolate docs deploys from pr code by @EricAndrechek in #312
• ci: drop the #312 transition guards and v1 cache fallbacks by @EricAndrechek in #329
• ci: publish Go coverage badge + GitHub Code Quality PR comments (#133) by @EricAndrechek in #334
• fix(ci): cache Go modules once, not once per compile flavor by @EricAndrechek in #446
• deps: clear 14 pnpm advisories and land the weekly dep groups by @EricAndrechek in #490
• ci(release): make every version tag-driven and fix the dev channel by @EricAndrechek in #485

📚 Documentation

• feat(mq): make nats stream name configurable by @taitelee in #68
• fix(api): always set Content-Type: application/json on error responses by @EricAndrechek in #78
• feat(mq)!: thread context through Ack/Nak with synchronous DoubleAck by @taitelee in #88
• feat(observability): add otel pipeline and system tracing by @taitelee in #116
• fix(api): drop CORS credentials + skip same-origin decoration by @EricAndrechek in #123
• fix(ingest): break infinite-Nak loop on permanent delete errors by @EricAndrechek in #122
• fix(boot): non-fatal schema discovery, /health 503 with diagnostic by @EricAndrechek in #125
• chore(api)!: drop hub wildcard fan-out; SSE/WS use ?table= (closes #100) by @EricAndrechek in #124
• refactor(ingest)!: insert-only pipeline; mutations via /v1/query by @taitelee in #164
• refactor(table names): handle unsafe table names by @EricAndrechek in #174
• feat: caching for local table/scope invalidation by @EricAndrechek in #177
• feat(deploy): local dev o11y stack (#121) by @jfwoods in #137
• feat(rbac)!: fail-closed authorization + default_role public access by @taitelee in #172
• refactor: full api --> ingest --> clickhouse --> dlq refactor by @EricAndrechek in #182
• fix(hooks): tree-keyed ci-passed marker + auto-seed new worktrees by @EricAndrechek in #170
• feat(api): structured WARN logging on authorization denials by @taitelee in #189
• docs: add guides for access control and named pipes by @taitelee in #205
• feat(api): add /version build-info endpoint by @taitelee in #206
• feat(api): add /healthz + /readyz probes, deprecate /health + /ready by @taitelee in #213
• refactor(ingest): per-table batching + pipelined flushes by @EricAndrechek in #192
• feat(sse): allow Last-Event-ID for cross-origin stream resumption (#215) by @EricAndrechek in #216
• fix(sdk): stop hardcoding received_timestamp in default query order by @EricAndrechek in #272
• feat(api): multi-format ingest (object/array/NDJSON) + SDK helpers by @EricAndrechek in #217
• fix(query): accept d/w suffixes in time_range, reject bad input by @taitelee in #292
• feat(sdk): ship browser/no-build distribution (iife, cdn, codegen bin) by @EricAndrechek in #297
• docs: fix stale error bodies and document missing internal packages by @taitelee in #300
• fix(docs): fix homepage NO_LCP while keeping the hero fade-in by @EricAndrechek in #307
• fix(docs): keep SPA transitions via astro-vtbot so search survives nav by @EricAndrechek in #309
• feat(docs): view-transition polish, branded search + 404, chrome pass by @EricAndrechek in #313
• feat(branding): add 512×512 avatar.png for org/team avatars by @EricAndrechek in #331
• docs(readme): trim badges to coverage, report card, license by @EricAndrechek in #336
• fix(api): cap /v1/query & /v1/pipes request bodies; reverse-proxy docs by @EricAndrechek in #332
• feat(observability): direct-to-cloud OTLP with TLS + auth headers by @taitelee in #218
• docs(deploy): document JetStream SyncAlways durability vs throughput by @EricAndrechek in #338
• ci: consolidate Dependabot npm updates to the pnpm workspace root by @EricAndrechek in #340
• fix(pipes): escape non-scalar param values by @taitelee in #330
• fix(query): enforce ClickHouse resource caps server-side by @EricAndrechek in #335
• feat(docs): export diagrams as PNG (copy/download in zoom view) by @EricAndrechek in #345
• feat(docs): add transparent-background PNG export for diagrams by @EricAndrechek in #348
• fix(stream): emit SSE heartbeats so idle streams survive proxy timeouts by @taitelee in #346
• feat(dedupe): observe or reject ingest rows missing the id_field by @taitelee in #364
• perf(stream): project SSE frames once per role, not per subscriber by @EricAndrechek in #353
• fix(policy): enforce _in on filter and check paths by @taitelee in #358
• feat(auth): non-JWT operator key for admin + break-glass access by @EricAndrechek in #378
• fix(docs): order the live demo feed by event_ts, not SSE arrival by @EricAndrechek in #379
• feat(docs): override Starlight header with a top-level site nav by @taitelee in #368
• fix(sdk): keep a baseURL path prefix instead of discarding it by @EricAndrechek in #448
• fix(ingest): canonicalize DateTime column values to RFC 3339 UTC by @taitelee in #402
• fix(test): enforce e2e poll budgets and stop reusing idle connections by @EricAndrechek in #455
• feat(sdk)!: add options.headers, fetchOptions, and fetch by @EricAndrechek in #456
• fix(policy): fail closed on unresolvable row-filter claims by @taitelee in #457
• fix(stream): apply policy row-filter per subscriber on SSE by @taitelee in #381
• refactor(api)!: merge all admin-gated endpoints under /v1/ops by @taitelee in #479
• feat(sdk)!: stream over fetch so SSE authenticates by header by @EricAndrechek in #470
• deps: hold eventsource-parser at v3, take the rest of the npm group by @EricAndrechek in #493
• build(docs): cloud referrals, standard fmt, and markdown lint rules by @EricAndrechek in #489

🧹 Other changes

• Observability by @taitelee in #9
• fix(api): fail closed in RequireRole when auth is enabled by @taitelee in #54
• ci: migrate workflows to ARC runners on self-hosted infra by @EricAndrechek in #77
• fix(ci): coverage badge reads merged profile, not unit-only by @EricAndrechek in #112
• fix(flake): local cache tests wait for admission, not sleep by @EricAndrechek in #181
• fix: ingest worker test flake by @EricAndrechek in #276
• fix(query): format time_range bounds as ClickHouse DateTime by @taitelee in #278
• chore(pm-triage): add safe-auto 'all' routine mode + local state branch by @EricAndrechek in #303
• fix: code quality findings on sweeper test by @EricAndrechek in #304
• fix(pm-triage): board.sh bash-3.2 fix + merged-PR reconcile step by @EricAndrechek in #328
• feat(cache): namespace-versioned cache keys for queries and pipes by @taitelee in #314
• fix(policy): case-normalize aggregation before denied_aggregations check by @taitelee in #357
• fix(observability): bound OTel provider shutdown to keep exit fast by @taitelee in #366
• docs(changelog): fix _in entry's inaccurate pre-fix wording by @taitelee in #376

📦 Dependencies

• deps: bump the go-deps group across 1 directory with 17 updates by @dependabot[bot] in #53
• ci: bump docker/login-action from 3.7.0 to 4.1.0 by @dependabot[bot] in #59
• deps(tests): bump eventsource from 3.0.7 to 4.1.0 in /tests/sdk in the e2e-deps group by @dependabot[bot] in #62
• deps(sdk): bump the sdk-deps group across 1 directory with 2 updates by @dependabot[bot] in #63
• ci: bump goreleaser/goreleaser-action from 6.4.0 to 7.1.0 by @dependabot[bot] in #61
• ci: bump vladopajic/go-test-coverage from 2.18.4 to 2.18.7 by @dependabot[bot] in #80
• ci: bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by @dependabot[bot] in #81
• deps: bump the go-deps group across 1 directory with 4 updates by @dependabot[bot] in #90
• deps(sdk): bump the sdk-deps group in /clients/ts with 2 updates by @dependabot[bot] in #103
• ci: bump the actions-deps group across 1 directory with 3 updates by @dependabot[bot] in #106
• ci: bump the actions-deps group with 2 updates by @dependabot[bot] in #126
• deps: bump the go-deps group across 1 directory with 2 updates by @dependabot[bot] in #131
• ci: bump the actions-deps group with 2 updates by @dependabot[bot] in #161
• ci: bump the actions-deps group with 2 updates by @dependabot[bot] in #185
• ci: bump the actions-deps group across 1 directory with 2 updates by @dependabot[bot] in #208
• deps: bump the go-deps group across 1 directory with 18 updates by @dependabot[bot] in #299
• ci: bump actions/attest-build-provenance from 2.4.0 to 4.1.0 in the actions-deps group by @dependabot[bot] in #341
• deps: bump the npm-deps group with 6 updates by @dependabot[bot] in #342
• deps: bump the go-deps group across 1 directory with 24 updates by @dependabot[bot] in #438
• deps: bump the npm-deps group across 1 directory with 16 updates by @dependabot[bot] in #439
• ci: bump the actions-deps group across 1 directory with 10 updates by @dependabot[bot] in #412
• deps: bump golang.org/x/image from 0.38.0 to 0.41.0 by @dependabot[bot] in #380
• deps: bump astro from 6.3.7 to 7.1.1 by @dependabot[bot] in #416
• deps: bump eventsource-parser from 3.1.0 to 3.1.1 in the npm-deps group by @dependabot[bot] in #494

New Contributors

• @taitelee made their first contribution in #9
• @EricAndrechek made their first contribution in #55
• @dependabot[bot] made their first contribution in #53
• @jfwoods made their first contribution in #7

Full Changelog: https://github.com/Wave-RF/WaveHouse/commits/v0.1.0