v1.0.0

Changelog

• 4c85b19 Add API keys, webhooks, Stripe billing, plan management, branding subsystem, and admin improvements
• 8ebcfe6 Add MCP registry manifests, examples, and privacy policy
• 5ce736f Add MFA, dark/light mode, impersonation, onboarding, OAuth providers, sessions, audit logs, magic link, passkeys, per-seat billing, and SSO/SAML support
• 699cd7a Add Root Members admin feature for managing root tenant team
• 868cf0d Add Stripe Tax integration for automatic tax calculation
• 063f408 Add build artifacts to gitignore
• 7d3f1eb Add click-to-edit promotion modal and fix duplicate product names
• c007ac8 Add company name and address to downloadable PDF invoices
• e3df9ec Add competitor comparison section to README
• acc2b31 Add comprehensive test suite, CLI tooling, security hardening, and admin improvements
• aa72002 Add debug logging for all incoming Stripe webhook events
• d010384 Add expiration dates and product restrictions to promotion codes
• 60bc083 Add multi-instance Stripe webhook filtering using frontend hostname
• 2f74c2a Add system health monitoring, Fly.io deployment, README, and LICENSE
• a5f9bdf Allow /api/docs to be embedded by metavert.io
• 564427c Allow password reset for OAuth-only accounts
• b3849bf Auto-verify email when user accepts an invitation
• 7fd764a Change rate limiter from fail-closed to fail-open with local fallback
• a2bd2e7 Change severity filter to multi-select toggles with optimized $in queries
• 1e6f9d5 Comprehensive README update with all undocumented features
• 28c857f Comprehensive security hardening and audit fixes
• 1a41de9 Compute today's revenue and ARR live in admin dashboard
• 24bf177 Edge case hardening and comprehensive logging system improvements
• ddafed0 Embed version at compile time via ldflags
• 62ba9d5 Emphasize fork-ready agentic engineering in README
• fd36079 Fix TS error: remove invalid secret access from getWebhook response
• 9e59b1e Fix goreleaser deprecated config fields
• ca4b744 Fix goreleaser hook to run from backend dir
• 66cb405 Fix plan page UX, billing waiver modal, and auth provider discovery
• f5a0593 Fix webhook API version mismatch with ConstructEventWithOptions
• d38e0c3 Harden billing and security against financial attack vectors
• bef8238 Hide Security tab when MFA and passkeys are disabled
• 257513c Hide Security tab when MFA and passkeys are disabled
• 127c7bf Hide write actions in admin UI based on user role
• 7a7e42c Initial commit: LastSaaS multi-tenant SaaS platform
• 2528efa Make MCP server read-only and add 10 new admin tools
• c26a1cf Product-wide quality and feature improvements
• 26d108b Restructure admin access into three tiers: user (read-only), admin (read-write), owner (destructive)
• 0202eb2 Scalability improvements: batch queries, bounded concurrency, fail-closed rate limiting