Release Next v3.0.0-next.1
Pre-release
Pre-release
@cloudpdf/admin@3.0.0-next.1
Major Changes
- #720 by @bobsingor – Reworks the backend administration SDK around explicit tenant addressing and deployment API-token authentication.
- Replaces the flat document client with
cloud.tenant(tenantId), accepting exactly one rootapiTokenor delegatedtenantTokencredential. - Adds tenant lifecycle APIs for creating, listing, iterating, retrieving, and deleting tenants.
- Adds tenant token APIs for issuing document or tenant JWTs and revoking them by
jti. - Adds keyset-paginated document listing, lifecycle-state filtering, and an async document iterator.
- Moves the SDK's shared schemas and route definitions to
@cloudpdf/contract.
- Replaces the flat document client with
@cloudpdf/contract@3.0.0-next.1
Major Changes
- #720 by @bobsingor – Introduces the complete CloudPDF backend HTTP contract, replacing the narrower
@cloudpdf/admin-apipackage.- Defines a typed operation registry and Zod request/response schemas for tenant administration, document lifecycle, token delegation, deployment status, and backend-callable document-plane operations.
- Exposes tenant-aware route builders and operation metadata shared by the admin SDK and server.
- Adds an OpenAPI 3.1 emitter, a packaged
openapientry point, and the generatedopenapi.jsonartifact. - Validates operation IDs, route coverage, schema references, security declarations, and generated OpenAPI output with contract tests.
@cloudpdf/server@3.0.0-next.1
Major Changes
- #720 by @bobsingor – Adds the tenant-scoped backend API and root API-token workflow to the self-hosted CloudPDF server.
- Replaces the legacy flat admin routes with contract-backed
/v1/tenants/:tenantIddocument, tenant, token, and deployment operations. - Adds constant-time root API-token authentication alongside delegated tenant JWT authorization.
- Adds tenant lifecycle and provenance tracking, keyset pagination and state filtering, and cascade deletion for tenant-owned data.
- Adds document and tenant token issuance, revocation, and durable security-event auditing.
- Allows API tokens on document-plane routes and supports per-request
X-Document-Passwordauthorization through HMAC proofs or non-mutating checks against the canonical PDFium session, including credential-safe open singleflight behavior. - Adds matching SQLite and PostgreSQL migrations plus expanded registry, authorization, password, and end-to-end coverage.
- Replaces the legacy flat admin routes with contract-backed
@embedpdf/engine-core@3.0.0-next.1
Minor Changes
- #720 by @bobsingor – Exports
wireTemplates, the canonical Fastify-style path templates for backend-callable, unversioned document-plane routes. The templates let@cloudpdf/contractand server route-conformance checks share one source of truth without exposing the viewer-only immutable URL variants.