Changelog
Features
- f0c76d5: feat!: move secret ownership from the key to the project (@steveokay)
- b594530: feat(cli): add
janus doctorpreflight/diagnostic command (@steveokay) - afc9772: feat(cli): janus admin reset-password — local-console disaster recovery (@steveokay)
- 62f1be3: feat(rbac): Groups screen + group bindings on Members (@steveokay)
- f6ccb03: feat(rbac): group CLI + OpenAPI spec (@steveokay)
- 56f2925: feat(rbac): group role bindings, schema + engine + OIDC claim sync (@steveokay)
- 93ba713: feat: delegated project creation via groups (@steveokay)
- b0c4884: feat: four-eyes protection at environment scope (@steveokay)
- 4f3b502: feat: scoped audit read (@steveokay)
Fixes
- 8872726: fix(cli): reuse one share reader so a piped quorum is read in full (@steveokay)
- efd4f87: fix(deps): bump grpc to v1.82.1 for GO-2026-6061 (@steveokay)
- 03ac699: fix(web): Members reported group-derived access as no access (@steveokay)
- e8e8e72: fix(web): read the protected (four-eyes) flag from the server, not the cache (@steveokay)
- 1568902: fix: authorize project creation before reading the request body (@steveokay)
- f1782db: fix: let a delegated creator see the owning-team picker (@steveokay)
- e775770: fix: the three remaining defects the new E2E coverage found (@steveokay)
Others
- a1839d3: Merge pull request #198 from steveokay/worktree-agent-ad96aa07185cd35c0 (@steveokay)
- 079e374: Merge pull request #199 from steveokay/worktree-agent-acb2fce15c0f7536f (@steveokay)
- 659ca05: Merge pull request #200 from steveokay/worktree-agent-ab8b6662897d04067 (@steveokay)
- 998abd5: Merge pull request #201 from steveokay/docs/wire-post-v020-work (@steveokay)
- 0d690cb: Merge pull request #202 from steveokay/fix/deep-link-protected-flag (@steveokay)
- 160a772: Merge pull request #203 from steveokay/ci/test-timeout (@steveokay)
- fa7dcad: Merge pull request #204 from steveokay/fix/rbac-probe-limiter-and-ui-defects (@steveokay)
- ea74309: Merge pull request #205 from steveokay/docs/track-rbac-org-scale (@steveokay)
- 2249b95: Merge pull request #206 from steveokay/feat/rbac-groups (@steveokay)
- e2b2dab: Merge pull request #207 from steveokay/fix/members-group-derived-access (@steveokay)
- 282b2e9: Merge pull request #208 from steveokay/feat/env-scoped-four-eyes (@steveokay)
- e82b8cc: Merge pull request #209 from steveokay/feat/delegated-project-creation (@steveokay)
- 644ecba: Merge pull request #210 from steveokay/fix/project-create-authz-ordering (@steveokay)
- fd548a5: Merge pull request #211 from steveokay/fix/delegated-creator-picker (@steveokay)
- 37cfacc: Merge pull request #212 from steveokay/feat/scoped-audit-read (@steveokay)
- 7c4d1b6: Merge pull request #213 from steveokay/feat/project-owner (@steveokay)
- 6e30ba3: Merge pull request #214 from steveokay/docs/release-0.3.0 (@steveokay)
- 8990d24: Merge remote-tracking branch 'origin/main' into worktree-agent-ab8b6662897d04067 (@steveokay)
- b30a20d: ci: give go test an explicit timeout instead of inheriting the 10m default (@steveokay)
- 100ae0d: docs: cut CHANGELOG 0.3.0 (@steveokay)
- 9264477: docs: design for group-based role bindings (@steveokay)
- 75e102d: docs: groups guide, trackers, CHANGELOG, and the follow-ups this build raised (@steveokay)
- 14fb6d3: docs: sweep every reference doc for group staleness (@steveokay)
- e1783f6: docs: track RBAC for an organisation with many product teams (@steveokay)
- 64b2bb2: docs: wire up the post-v0.2.0 work and record what it found (@steveokay)
- f906d27: test(e2e): browser coverage for Trash, tokens, members, four-eyes, break-glass (@steveokay)
- e5a8b24: test(rbac): e2e over the group security invariants (@steveokay)
Contributors
steveokay