v9.12.0 — audit-export token accounting, visible migration diagnostics, and role-model reconciliation migrations
AxonFlow v9.12.0 adds token accounting to the CSV audit export, makes database migration diagnostics visible in the agent log, and lands the schema migrations that reconcile the platform's system role model and organization-owner assignments. Self-hosting deployments apply these migrations automatically on upgrade.
Highlights
tokenscolumn on the audit-export CSV.POST /api/v1/audit/export?format=csvnow includes atokenscolumn, sourced from each decision's recorded token usage, so the CSV and JSON exports carry the same fields.- Migration diagnostics reach the agent log. The migration connection previously discarded server NOTICE/WARNING output, so upgrade diagnostics — backfill counts, orphan-organization reports, and similar messages — were silently lost. They are now surfaced during startup migrations.
- Identity-resolver hardening. The fleet identity resolver no longer confers a role from a directory identity the identity provider has deactivated (defense-in-depth for SSO/SCIM deprovisioning; inert on deployments without a SCIM directory).
Migrations
Additive. The upgrade applies core migrations 148–152, which reconcile the system role model and backfill organization-owner assignments. On deployments whose database migration role runs under FORCE row-level security without BYPASSRLS (seen on some managed Postgres configurations), a legacy organization with no system-role rows may need a one-time owner assignment after upgrade — the release notes give the exact step.
Full release notes: https://docs.getaxonflow.com/docs/releases/v9-12-0