v0.1.0

What's Changed

• CI gate + green test suite by @go4cas in #1
• Adopt Biome (lint + format) and enforce in CI by @go4cas in #2
• Structured logging by @go4cas in #3
• OpenAPI spec + docs at /openapi by @go4cas in #4
• fix(realtime): mint WS connId before the origin gate by @go4cas in #5
• fix(realtime): allow WS/SSE clients that send no Origin header by @go4cas in #6
• fix(oauth2): verify Apple id_token signature against JWKS by @go4cas in #7
• refactor(db): transactional migrations + stop swallowing real errors by @go4cas in #8
• refactor(auth): extract OAuth2 routes into auth-oauth2.ts by @go4cas in #9
• Migrate server framework: Elysia → Hono by @go4cas in #10
• fix: declare @sinclair/typebox dep (fixes CI); Hono + fork attribution in README by @go4cas in #11
• fix(auth): close admin/user token-revocation bypasses (P0-1/2/3) by @go4cas in #12
• refactor(auth): centralize the admin gate; remove ~16 duplicate helpers (T-1) by @go4cas in #13
• fix(cluster): run singleton schedulers on one leader worker only (P0-5) by @go4cas in #14
• docs(ratelimit): document per-worker limiter in cluster mode (P0-6) by @go4cas in #15
• feat(cluster): cross-worker realtime bus via SQLite event-tail (P0-4) by @go4cas in #16
• fix: last two P0s — ETag same-second guard (P0-8) + image bomb cap (P0-7) by @go4cas in #17
• fix(ci): stop background schedulers leaking unhandled rejections across tests by @go4cas in #18
• chore: add MIT LICENSE with fork attribution by @go4cas in #19
• rebrand(db): table namespace vaultbase_→cogworks_, vb_→cw_; JWT issuer→cogworks by @go4cas in #20
• rebrand(shell): Vaultbase → Cogworks (strings, env, prefixes, deploy, admin UI) by @go4cas in #21
• feat(search): full-text search via SQLite FTS5 (roadmap F-1) by @go4cas in #22
• feat(auth): WebAuthn / passkeys for auth-collection users (roadmap F-4) by @go4cas in #23
• feat(vector): remove silent candidate cap + cache parsed vectors (roadmap F-5) by @go4cas in #24
• feat(ops): readiness probe GET /_/ready (roadmap F-7) by @go4cas in #25
• feat(records): keyset/cursor pagination for the list hot path (roadmap E-1) by @go4cas in #26
• feat(exec): execution-timeout budget for hooks/routes/jobs/workers (roadmap E-6) by @go4cas in #27
• feat(realtime): SSE resume via Last-Event-ID replay (roadmap E-3) by @go4cas in #28
• feat(records): reverse-relation expand (roadmap E-9) by @go4cas in #29
• feat(observability): OTLP/HTTP trace export (roadmap F-6) by @go4cas in #30
• feat(backup): consistent VACUUM INTO snapshot for the HTTP backup (roadmap E-7) by @go4cas in #31
• feat(docs): OpenAPI 3.0 spec + rendered docs from collection defs (roadmap F-2) by @go4cas in #32
• Roadmap: server hardening — RBAC, durable queues/workflows, key rotation, email, F-3 + tail by @go4cas in #33
• Storage streaming (E-5/E-4) + durable-workflow waitForEvent (F-11b) by @go4cas in #34
• Realtime subscription filters (E-2) by @go4cas in #35
• S3 download redirects to CDN / presigned URL (E-4b) by @go4cas in #36
• Auth helpers split (T-6) + one-off 'run at' jobs (F-8) by @go4cas in #37
• docs(roadmap): defer F-5 (sqlite-vec ANN) with rationale by @go4cas in #38
• feat(realtime): Supabase-style presence (F-15) by @go4cas in #39
• chore: sweep dangling Vaultbase rebrand cruft (milestone 1) by @go4cas in #40
• feat(landing): Cogworks landing — pure static, no React by @go4cas in #41
• feat(docs): branded Starlight docs site, deployed with the landing by @go4cas in #42
• Landing content review + Why/Workflow docs + favicon by @go4cas in #43
• chore: sweep Vaultbase/Elysia leftovers + dead migration scaffolding by @go4cas in #44
• feat: static-site serving + AI docs page + landing AI copy fixes by @go4cas in #45
• chore: reset to Cogworks 0.1.0 + patch nodemailer (High CVE) by @go4cas in #46

New Contributors

• @go4cas made their first contribution in #1

Full Changelog: v0.11.5...v0.1.0