v0.2.0

[0.2.0] - 2026-09-29

Added

• auth: Add fail-closed mailer, log helper and cron auth

• auth: Fail-closed linking, oauth state, mailer env and headers

• auth: Wire fail-closed Better Auth defaults

• auth: Add mailer and relax-flag env vars

• http: Add security headers and tighten CSP defaults

• auth: Hash invitation tokens and add IDOR service tests

• workspaces: Store invitation token hashes

• actions: Enforce minRole on workspace mutations

• actions: Add minRole default member to defineWorkspaceAction

• template: Promote production-ready stack

Fixed

• auth: Accept requireFresh on defineAction

• deps: Bump Next to 16.3.6 and stop ignoring it in audit

v0.1.0

Agent Stack Template — first release

Baseline of the template. The same history lives in CHANGELOG.md. Later versions are cut automatically when develop is merged to main.

Added

• Agent operating system: AGENTS.md, .cursor/rules/, .cursor/agents/, stop hook, and the curated skills under .agents/skills/.
• Documentation set: architecture, stack, TDD workflow, domain model, ADRs, spec template and specs, git-flow / changelog / playbooks.
• Next.js App Router application with Better Auth, Prisma and PostgreSQL.
• Workspace tenancy: membership roles, authorisation matrix, active-workspace resolution, personal workspace on sign-up.
• defineAction / defineWorkspaceAction — session, Zod validation, membership and error mapping in one place.
• Shared domain error taxonomy and the ActionResult contract.
• Application shell: sidebar, mobile tab bar, nav prefetching, loading skeletons.
• Design system in DESIGN.md with semantic tokens and light/dark themes.
• projects reference feature — one complete vertical slice, meant to be deleted.
• CI: typecheck, lint, test, build and commit-message validation; changelog and release automation.

Full changelog: https://github.com/krivoox/agent-stack-template/blob/main/CHANGELOG.md