v0.1.0-alpha.8

What's Changed

• console: return users from /admin/status by @kaisoz in #276
• fix(console): serve the routes under --base-path, not just at the root by @kaisoz in #281
• fix(site): restore scrolling so the landing demo stays reachable by @roushou in #280
• fix(discovery): authorize exact-name GossipSub tool results by @rhein1 in #290
• node: fix device flow polling against dex's non-RFC 401 responses by @aojea in #292
• fix(api): sort label keys in ValidateLabels for deterministic errors by @HosniBelfeki in #293
• Agentic integration by @aojea in #291
• docs: integrating VS Code and Copilot with a node by @aojea in #294
• fix: do not advertise an MCP service whose backend is not one by @aojea in #295
• node: refuse a config schema this build cannot read by @aojea in #300
• use GET for enroll status polling #297 by @IbrahimAhmed8 in #301
• SSE-safe HTTP timeouts in SamClient, self peer_id in get_mesh_info by @kaisoz in #326
• Structured [Mesh Event] logs by @kaisoz in #328
• feat(node): expose authenticated identity evidence by @rhein1 in #298
• fix(router): support key rotation in mutual auth handshake by @aojea in #337
• fix(node): stamp verified X-Peer-Id on mesh service ingress by @aojea in #338
• fix(node): make the trusted key lifecycle survive rotation, restarts and offline windows by @aojea in #339
• Move network diagnostics from MCP tools to /debug REST endpoints + sam-node debug CLI by @kaisoz in #330
• enforce biscuit expiry and revocation in node relay by @IbrahimAhmed8 in #334
• docs: clarify digital sovereignty architecture by @aojea in #344

New Contributors

• @roushou made their first contribution in #280
• @rhein1 made their first contribution in #290
• @HosniBelfeki made their first contribution in #293
• @IbrahimAhmed8 made their first contribution in #301

Full Changelog: v0.1.0-alpha.7...v0.1.0-alpha.8