v0.37.0

0.37.0 (2026-10-11)

No user-facing changes in this release.

v0.36.0

0.36.0 (2026-10-11)

Features

• api: delivery=email on invite and reset, mail error codes, features on /api/me, rate limit on link redemption (a7cf94b)
• auth: e-mail delivery of invite and reset links, revoked when the send fails (bf52ba4)
• config: KUBELATCH_RESEND_API_KEY and KUBELATCH_MAIL_FROM, and mail.from in the chart (42c64f1)
• edition: per-feature gating with email_links as the first Pro feature (5173328)
• mail: invite and reset e-mail (template B) in en and es, logo inline (e87c120)
• mail: stdlib Resend client with inline images and a fixed endpoint (1a952e5)
• server: wire Resend link e-mails when configured (23470a6)
• store: account link delivery, single-link revoke and control event counts (fd29b20)
• web: choose e-mail or link for invitations and resets (ca086da)

Bug Fixes

• auth: count the hourly e-mail limits inside the issuing transaction (7e84e0a)
• auth: issue and send an e-mailed link detached from the request (654c6ce)
• httpapi: an empty chunked reset-link body is the default, not a 400 (3f9d76d)
• httpapi: say when Resend did not answer and when a reset closed sessions (172f06b)
• mail: the footer names the configured base URL (00b36cf)
• web: describe the create sheet as a single-use invitation, which may never be shown (f6e286c)
• web: Spanish text of subject.bad_delivery says correo, not email (e811b69)

v0.35.0

0.35.0 (2026-10-11)

Features

• agents: a repeated held write returns its pending request, the retry waits for the decision, and an executed approval says so (32930a3)
• config: KUBELATCH_AGENT_APPROVAL_WAIT, how long a held write's retry waits for the decision (bd9a9f1)
• helm: config.agentApprovalWait sets how long an agent's call waits for a held write's decision (2eb0b3d)
• httpapi: follow in the consent answer and the session views, source on each consent grant (90bfccd)
• mcp: approvals over multi round-trip requests, a retry that waits for the decision, and one tool list for every caller (152a947)
• oauth: the consent chooses what the session takes of later grants (follow) (32ffbbe)
• rbac: sessions that follow their person derive from each grant they receive (5842939)
• store: agent_sessions.follow and the live sessions that follow a subject (3c7d542)
• web: consent merges rows per cluster, scope and role and asks what to do with later permissions (f27b79a)

Bug Fixes

• apierr: an expired approval no longer says it may have been used, now that a run approval has its own code (8ca955e)
• mcp: a waiting retry answers approval_pending when the server shuts down (c728a02)
• mcp: cap the retries of one credential that wait for a decision (bba1c49)
• rbac: a following session derives nothing for a permission the person held at the consent (a6c1f9d)

v0.34.1

0.34.1 (2026-10-11)

Bug Fixes

• web: keep the activity and the credentials current with their page open (7ff6df4)
• web: keep the agent pages and the pending count live (2fc7f1f)
• web: refresh the grants after approving an agent's access request (1bfa002)

v0.34.0

0.34.0 (2026-10-11)

Features

• edition: check for a new version now, from the Version row (3fe74eb)

v0.33.0

0.33.0 (2026-10-11)

Features

• web: fold each cluster of My access, as Permissions does (4e1eade)

v0.32.1

0.32.1 (2026-10-10)

Bug Fixes

• web: Home's connection card takes the full width, compact, with the command beside its copy button (89c787c)

v0.32.0

0.32.0 (2026-10-10)

Features

• api: grant rows carry their cluster's name, so a member's Home can name the clusters it lists (4344f68)
• web: an access directory grouped by cluster, on the grouped table without folding (f10a3de)
• web: Edition lists the installation's health, each check with its state and where to fix it (8f20871)
• web: Home leads with what needs attention, names the connection in its header and lists access as a directory by cluster (68f21c5)
• web: Home's attention items and access directory as pure helpers (f7d614f)

Bug Fixes

• web: Needs attention drops a credential already reissued with the same name and cluster (3795328)
• web: the health list words a failed GitHub sync by its cause, as Users does (7e38ae8)
• web: the issue sheet opened from the command palette gives focus back to Home's issue button (2ec92fc)

v0.31.2

0.31.2 (2026-10-10)

Bug Fixes

• updatecheck: check within 30 s of starting and retry a failed check after an hour (068d6c0)

v0.31.1

0.31.1 (2026-10-10)

Bug Fixes

• web: role fields stay aligned, and a cap of 0 says the edition does not include it (2d11d04)