v0.5.2

Fixed

• maestro version and maestro --version now report a real version for
  go install builds. Previously only GoReleaser release binaries carried a
  version and go install users saw dev. Version, commit, and build time now
  fall back to the binary's embedded build info.

v0.5.1

maestro moved to the Zagforge-Org organization and the module path is now
github.com/Zagforge-Org/maestro.

Changed

• Module path renamed to github.com/Zagforge-Org/maestro. Install with
  go install github.com/Zagforge-Org/maestro@latest. Scaffolded projects
  resolve their shared common/go imports under the new path.

v0.5.0

The auth release. Scaffolded auth-jwt services gain staff roles and RBAC, a new
internalauth capability secures service-to-service calls behind the gateway, and
maestro is now MIT licensed.

Added

• RBAC in the auth-jwt preset. A users.role staff tier flows into the
  access-token role claim and is enforced with ginx.RequireRole. Staff roles
  are MFA-gated: a role is only asserted when TOTP MFA is active, so a stolen
  password can never mint a staff token.
• internalauth capability. Gateway-to-service identity. The gateway mints a
  short-lived ES256 assertion in X-Internal-Auth, services verify it with the
  gateway's public key, and internal hops forward it. Includes zero-downtime key
  rotation and a boot self-test. Opt-in, delivered by the api-gateway preset.
• ginx.VerifyGateway and ginx.RequireRole middleware, plus gateway
  identity headers, so a service behind the gateway derives a trusted caller and
  staff tier from a verified assertion.
• jwtx gains Verifier.WithLeeway for clock-skew tolerance on short-lived
  cross-host tokens, flexible raw-or-base64 EC key parsing, and a role claim.
• mailer gains message attachments, for shipping a file such as a calendar
  .ics.

Fixed

• Generated main.go discards the log.Sync error explicitly, so a fresh
  project no longer fails its own scaffolded errcheck lint on the first CI run.
  Affects the http, grpc, and worker service shapes.
• The project init walker now rewrites cross-package imports in shipped starter
  packages, so a starter that imports a sibling resolves against the project
  module instead of maestro.

Changed

• Relicensed from proprietary to MIT.
• ginx.AuthMiddleware's verify callback now also returns the caller's staff
  role. The generated auth service was updated in lockstep, so new projects stay
  consistent.

Compatibility

• New projects scaffolded on 0.5.0 include the RBAC schema and middleware.
  Projects generated on 0.4.0 keep working as-is. There is no forced migration.

v0.4.0

Changelog

• 449faa6: fix: logout does not happen when /refresh is hit (@LegationPro)

v0.3.0

Changelog

• 9cabd26: chgore: integrate jwt fixes (@LegationPro)
• 7637620: feat: add rename flag (@LegationPro)
• 3203796: fix: ci fails, skip sqlc and goose (@LegationPro)
• 60687d1: fix: conditional air hotreload when hotreload=false (@LegationPro)
• 197667d: fix: logger, reinit, and rename (@LegationPro)
• 54931e8: fix: refresh bug (@LegationPro)

v0.2.0

Changelog

• 39a5959: ci: add workflow_dispatch as escape hatch (@LegationPro)
• 3cae195: ci: probe after re-enable (@LegationPro)
• 700934f: ci: probe trigger after rename (@LegationPro)
• 7cce029: ci: rename workflow file to tests.yml to force GitHub to re-register (@LegationPro)
• b129d5f: feat: implement ci,editor,golangci, and license (@LegationPro)
• 0c27124: fix (@LegationPro)
• 530c6cd: fix: database migrations (@LegationPro)
• 343c3ee: fix: http never got scaffolded (@LegationPro)
• 836de5b: rm test (@LegationPro)
• 4dfe716: test (@LegationPro)

v0.1.0

Changelog

• 6fd4202: - (LegationPro anze@anze.localdomain)
• 4860008: feat: implement doctor (LegationPro anze@anze.localdomain)
• 70bc2ff: feat: implement project.toml (LegationPro anze@anze.localdomain)
• 36bef78: feat: implement service flag (LegationPro anze@anze.localdomain)
• cd38356: feat: implement sql support (LegationPro anze@anze.localdomain)
• bc239a4: fix: fix grpc (LegationPro anze@anze.localdomain)
• 683f874: fix: remove .air from being created at top-level (LegationPro anze@anze.localdomain)
• 13512d9: fix: rename module path to file (LegationPro anze@anze.localdomain)
• 5d0942f: init (LegationPro anze@anze.localdomain)
• 4a3a34f: rm (LegationPro anze@anze.localdomain)
• 6c8651c: update ci.yml (LegationPro anze@anze.localdomain)