v0.4.0

0.4.0 (2026-07-06)

⚠ BREAKING CHANGES

• api: consolidate ConnectRPC surface (#1306)
• api: clean up server assets calls and includes (#1303)
• api: consolidate shared api shapes (#1302)
• api: consolidate shared public API types (#1299)
• api: consolidate public ConnectRPC API (#1295)
• api: polish ConnectRPC API for 0.4.0 (#1224)
• operator: add socket-backed operator user administration (#1164)
• api: reshape server profile responses (#1185)
• api: split ConnectRPC packages (#1179)
• api: replace GraphQL with ConnectRPC (#1166)
• api: use optional timeline presence fields (#1110)

Features

• add universal rooms (#1046) (0b8c5cb)
• admin: filter event log (#1056) (d8bd280)
• api: add ConnectRPC asset uploads (#1249) (f97f1d0)
• api: add ConnectRPC DM start (#1157) (c46ef79)
• api: add ConnectRPC public API PoC (#1067) (7aeb8f7)
• api: add ConnectRPC reflection (#1182) (a93324c)
• api: add ConnectRPC room timeline PoC (#1074) (920fcaa)
• api: add protobuf realtime websocket (#1158) (9e8e34c)
• api: add resource batch reads (#1232) (8a04ae0)
• api: clean up ConnectRPC surface (#1171) (03c42af)
• api: clean up ConnectRPC surface (#1178) (b1b6e28)
• api: clean up server assets calls and includes (#1303) (e960def)
• api: consolidate membership services (#1293) (7ed268c)
• api: consolidate shared api shapes (#1302) (4429009)
• api: consolidate shared public API types (#1299) (1ec2015)
• api: extract generated TypeScript clients (#1183) (3480cda)
• api: extract TypeScript API client (#1184) (b38b9a5)
• api: migrate reactions to ConnectRPC (#1128) (161f51c)
• api: polish ConnectRPC API for 0.4.0 (#1224) (06f4361)
• api: port message posting to ConnectRPC (#1093) (011018b)
• api: port read state and thread follow to ConnectRPC (#1087) (f2128d6)
• api: replace GraphQL with ConnectRPC (#1166) (3dd3fa6)
• api: reshape server profile responses (#1185) (96bde6e)
• api: split ConnectRPC packages (#1179) (6ec286a)
• api: use optional timeline presence fields (#1110) (5c1406f)
• auth: add SSO account creation and linking (#1167) (61723e9)
• auth: type runtime credentials (#1195) (5f0ebe4)
• config: configure SMTP TLS verification (#1159) (1f5c8b0)
• connectrpc: add message management API (#1146) (c07b049)
• connectrpc: add room directory service (#1138) (c1f13cf)
• connectrpc: add room lifecycle service (#1134) (3f2b3a9)
• connectrpc: port thread history reads (#1083) (4b81b4d)
• core: persist link preview assets via storage backend (#1060) (005deb1)
• core: store thread follows in EVT (#1233) (01a2bb3)
• dev: add Mailpit to mise dev (#1238) (0d07f7e)
• docs: add release notes pages (#1180) (6418471)
• exporter: add deployment-wide prometheus exporter (#1059) (5aa29c7)
• frontend: add multi-image attachment gallery (#1241) (d8338c5)
• frontend: add Paraglide-based client-shell i18n (#1077) (1a4ab07)
• frontend: add Trusted Types markdown policy (#1307) (47b9060)
• frontend: consolidate frontend design system (#1053) (7fc39ab)
• frontend: improve admin member details (#1057) (8c8ccce)
• frontend: maximize call pane (#1240) (7aaa34a)
• frontend: move UI strings into i18n catalogs (#1084) (d310382)
• frontend: refresh admin system dashboard (#1160) (5c54899)
• frontend: refresh toast styling (#1260) (1b728e5)
• frontend: send typing indicators with ConnectRPC (#1155) (1a131ee)
• frontend: show call participants in room sidebar (#1036) (8cd0858)
• frontend: show reaction names in popups (#1044) (e141b74)
• frontend: show room descriptions in header (#1037) (44f9c67)
• frontend: use ConnectRPC for message writes (#1153) (4b34f34)
• frontend: use ConnectRPC for room commands (#1150) (bfff68e)
• operator: add socket-backed operator user administration (#1164) (6209795)
• presence: add user-controlled presence modes (#1095) (9e8f696)
• profile: add custom user statuses (#1081) (1d1d7d2)

Bug Fixes

• api: address 0.4.0 surface review findings (#1228) (bd054ff)
• api: align ConnectRPC permission exposure (#1246) (cf2eca7)
• api: centralize Connect room RBAC in core (#1149) (8ba5b0c)
• api: close ConnectRPC RBAC gaps (#1207) (da0b129)
• api: include user status in generated docs (#1092) (52521fa)
• api: make ConnectRPC plumbing idiomatic (#1123) (338f573)
• api: preserve offline presence in snapshots (#1172) (7fce244)
• api: tighten ConnectRPC caller auth (#1126) (bb8c10d)
• assets: prevent protected attachment caching (#1261) (e3c6eed)
• assets: serve protected assets through stable gateway (#1264) (744e93e)
• attachments: crop extreme image thumbnails (#1181) (d5dd244)
• auth: add structured unauthenticated GraphQL errors (#1048) (510c07d)
• auth: reject empty-user runtime credentials (#1201) (43b569c)
• calls: preserve call on tab takeover (#1284) (451929d)
• ci: gate release-please on green ci (#1135) (4decb0f)
• conductor: use workspace port for Storybook (#1290) (c5ba4dc)
• connectapi: harden message post migration (#1097) (b15fb14)
• connectapi: harden timeline and thread read handling (#1117) (ba027fe)
• connectrpc: cap request message size (#1102) (a773531)
• connectrpc: reject missing read anchors (#1109) (f2f68b9)
• core: complete service inventory metrics (#1130) (9bc89f3)
• core: prevent read marker regressions (#1107) (cb81d58)
• dockercompose: enable LiveKit TURN relay (#1190) (51eb5e7)
• docs: keep release note cards in grid lanes (#1204) (a6c79df)
• frontend: address svelte guidance review (#1154) (d8c4010)
• frontend: align call control button colors (#1085) (4b7f37e)
• frontend: align muted call participant icon (#1050) (68cea04)
• frontend: clarify echo reply actions (#1253) (5a2b264)
• frontend: clarify iOS PWA push setup (#1192) (2416a41)
• frontend: clarify remote push notification support (#1105) (bfdbdea)
• frontend: clear call-wide mode on notification navigation (#1291) (db09a62)
• frontend: constrain current user card height (#1239) (1b536b9)
• frontend: defer camera permission until enabled (#1243) (2145a95)
• frontend: defer unread separator until return to the room (#1079) (9535694)
• frontend: handle API auth failures gracefully (#1269) (e82c554)
• frontend: harden asset proxy token handling (#1054) (8797c65)
• frontend: ignore stale DM member loads when switching rooms (#1065) (b4264b7)
• frontend: improve call presence indicators (#1257) (696a92e)
• frontend: improve extreme image thumbnails (#1227) (d5c596d)
• frontend: improve LiveKit media error handling (#1281) (94a86c0)
• frontend: improve unread channel contrast (#1089) (74247b4)
• frontend: localize date formatting (#1242) (cfc96ec)
• frontend: make attachment remove control subtle (#1265) (6537c27)
• frontend: make scrollbars follow selected theme (#1152) (9c5fa16)
• frontend: polish error and missing media states (#1267) (b9dabba)
• frontend: preserve touch composer line breaks (#1194) (8c62c70)
• frontend: quiet console warning noise (#1280) (4df7b85)
• frontend: reconcile notification badge dismissals (#1058) (13c7a6e)
• frontend: reconcile PWA notification badges (#1229) (e44645e)
• frontend: refresh messages after local deletions (#1148) (cefc22a)
• frontend: remove redundant universal room badge (#1052) (5f6131e)
• frontend: reset inline code state when composer clears (#1251) (0dddeaa)
• frontend: restore circular avatars with stable presence dots (#1252) (14b15b9)
• frontend: restore default text smoothing (#1268) (b3a6dc3)
• frontend: restrict same-tab message links (#1068) (d43d23f)
• frontend: restyle reply attribution preview (#1140) (909c1f4)
• frontend: share unread marker lifecycle with threads (#1310) (07c3601)
• frontend: show loading state for call media toggles (#1237) (9063832)
• frontend: stabilize new messages separator (#1308) (c35ed86)
• frontend: stabilize tab resume catch-up (#1288) (b70916d)
• frontend: style room member search clear button (#1226) (e43f615)
• frontend: submit simple message edits with enter (#1129) (f5651b4)
• frontend: sync presence badge across tabs (#1301) (5fbfb22)
• frontend: sync room thread follow bell state (#1121) (4048f23)
• frontend: use direct ticketed asset URLs (#1312) (b41eb1d)
• frontend: use full-width image galleries (#1247) (f5fe88a)
• frontend: use semantic presence colors (#1259) (ccf64db)
• frontend: wire UI strings to i18n (#1225) (7eafcd3)
• media: preserve video aspect ratios (#1254) (8a85f0a)
• messages: validate reply targets before posting (#1176) (2919a1a)
• notifications: clear read notifications server-side (#1297) (c6f3c30)
• notifications: preserve unread badge state across dismissals (#1069) (03444e3)
• pwa: reduce service worker reload churn (#1187) (5489e47)
• reactions: canonicalize echo reaction targets (#1272) (2b87044)
• release: publish release before updating tap (#1298) (c5c8aa6)
• voice: scope LiveKit observations to active calls (#1049) (dcd95c8)

Performance Improvements

• build: improve frontend and CLI cache reuse (#1106) (f22da3a)
• core: cache unwrapped DEKs per request (#1193) (0623831)
• core: slim timeline projection memory (#1287) (cd026ff)
• frontend: load room members in larger batches (#1206) (f465a09)
• frontend: split chat code from app chrome (#1103) (4a4a4de)

Code Refactoring

• api: consolidate ConnectRPC surface (#1306) (900233d)
• api: consolidate public ConnectRPC API (#1295) (a0ab823)