v2.6.0
Highlights
@revisium/admin 2.6.0 expands the organization-level admin experience, adds cookie-based session support for JWT 2.0, introduces API key management screens, and adds billing, cache,
endpoint limit, and file-usage admin surfaces. This release also hardens the build/release pipeline with Vite 8, pinned GitHub Actions, audit fixes, Node 24.11.1, and release-train
workflows.
Organization Admin
- Added organization routes, sidebar navigation, organization projects list, and org-scoped permission loading. #311
- Added organization members management with search, role selection, member removal, pagination, and shared member UI. #314
- Fixed multi-organization project creation so new projects use the organization from the current route. #317
- Hid the organization settings nav item until the settings page is ready. #316
- Fixed main-page organization fallback when no route organization is present. #327
Auth And API Keys
- Switched the admin app to cookie-based sessions with silent refresh for JWT 2.0. #326
- Fixed
/get-tokenfor JWT 2.0 by issuing a fresh access token through GraphQL. #328 - Fixed OAuth authorization to use the cookie session instead of an in-memory bearer token. #329
- Added API key management UI for personal keys and organization/project service keys, including create, rotate, revoke, expiration, and permission presets. #320
- Aligned API key page visibility with the new
manage-api-keypermission. #324 - Simplified API key project resolution and fixed API key manager initialization races. #321
Billing, Limits, Cache, And Files
- Added the Usage & Limits page with billing status, plan display, checkout/cancel actions, and yearly/monthly pricing toggle. #313
- Fixed billing progress display and plan-card click handling. #318
- Added endpoint limit display and creation blocking when project endpoint limits are reached. #330
- Added an admin cache page with cache stats and reset-all action. #325
- Added a project file usage admin panel with validate, dry-run restore, and permission gating. #331
Build, Security, And Release
- Fixed npm audit issues across
flatted, Chakra-related dependencies, Vite, lodash, PostCSS, and GitHub Actions dependencies. #309 #310 #322 #323 #332 - Migrated the admin build to Vite 8 / Rolldown and preserved vendor chunking. #323
- Fixed
/env.jscache headers in nginx so runtime config is served withno-store. #319 - Added release-train workflows for verified release commits, tag-driven npm/Docker publishing, stable version sync, and Node 24.11.1 enforcement. #333
- Hardened release workflow checks, prerelease dependency validation, ref-update retries, and npm publish diagnostics. #334
- Added and later removed temporary Claude Code workflows. #312 #315
Compatibility Notes
- Requires Node.js
>=24.11.1 <25. - Admin auth now expects the core JWT 2.0 cookie-session flow.
- Vite was upgraded to 8, so local build environments should match the new Node/runtime requirements.
Full Changelog: v2.5.2...v2.6.0