What's Changed

• feat(store): add deleted_at to domains, billing checkouts, and billing transactions by @whoAbhishekSah in #1927
• feat(store): enforce unique names and emails over live rows only by @whoAbhishekSah in #1928
• chore(proto): pull the soft-delete check RPCs and organization resources by @AmanGIT07 in #1930
• fix(resource): store the title and bump updated_at when updating a resource by @AmanGIT07 in #1933
• fix(billing): omit empty product description for Stripe by @RushikeshBhavsar3605 in #1898
• feat(store): user, organization, and project reads skip soft-deleted rows by @whoAbhishekSah in #1931
• fix(store): return every org service user and honour the requested sort by @rohilsurana in #1929
• feat(store): policy, relation, and resource reads skip soft-deleted rows by @whoAbhishekSah in #1936
• feat(store): domain, group, role, and service user reads skip soft-deleted rows by @whoAbhishekSah in #1938
• fix: map three missing-row cases to not found or unauthenticated by @whoAbhishekSah in #1940
• test(store): a missing domain reads back as not found by @whoAbhishekSah in #1944
• feat(store): org users search skips soft-deleted rows by @AmanGIT07 in #1939
• fix(store): org users search survives a policy with no role by @AmanGIT07 in #1941
• feat(store): org projects search skips soft-deleted rows by @AmanGIT07 in #1943
• fix(store): org users search reports a value that is not a uuid as bad input by @AmanGIT07 in #1942
• fix(billing): show the credit purchase amount as a formatted price by @rohanchkrabrty in #1948
• feat(store): user projects search skips soft-deleted rows by @AmanGIT07 in #1945
• feat(store): project users search skips soft-deleted rows by @AmanGIT07 in #1946
• feat(store): user organizations search skips soft-deleted rows by @AmanGIT07 in #1947
• feat(store): org service user credentials search skips soft-deleted rows by @AmanGIT07 in #1949
• feat(store): org invoices search skips soft-deleted rows by @AmanGIT07 in #1951
• fix(docs): build the docs with chronicle 0.16.3 by @rohanchkrabrty in #1957
• feat(store): org scoped searches report nothing for a deleted organization by @AmanGIT07 in #1953
• fix(store): a search value that is not a uuid reports bad input by @AmanGIT07 in #1952
• test: share postgres container across suites by @RushikeshBhavsar3605 in #1934
• fix(test): convert the pg suites missed by the shared container change by @rohilsurana in #1958
• feat(store): add a helper that marks rows as deleted by @AmanGIT07 in #1959
• feat(store): org tokens search skips soft-deleted rows by @rohilsurana in #1950
• feat(resource): soft-delete resources and keep the URN unique over live rows only by @AmanGIT07 in #1937
• feat(store): role names are unique over live rows only by @AmanGIT07 in #1961
• feat(domain): soft-delete domains and write a domain.deleted audit record by @AmanGIT07 in #1960
• feat(store): billing invoices, transactions and cusomter reads to skip soft-deleted rows by @rohilsurana in #1962
• feat(store): audit user creation and deletion by @rohanchkrabrty in #1954
• feat(store): billing subscription and checkout reads skip soft-deleted rows by @rohilsurana in #1963

Full Changelog: v0.117.1...v0.118.0

Changelog

• 5b74374 feat(domain): soft-delete domains and write a domain.deleted audit record (#1960)
• f09054e feat(resource): soft-delete resources and keep the URN unique over live rows only (#1937)
• 60668f8 feat(store): add a helper that marks rows as deleted (#1959)
• b145dc0 feat(store): add deleted_at to domains, billing checkouts, and billing transactions (#1927)
• b51bd0a feat(store): audit user creation and deletion (#1954)
• 926c39e feat(store): billing invoices, transactions and cusomter reads to skip soft-deleted rows (#1962)
• bb329ac feat(store): billing subscription and checkout reads skip soft-deleted rows (#1963)
• 4ca8187 feat(store): domain, group, role, and service user reads skip soft-deleted rows (#1938)
• f3f2094 feat(store): enforce unique names and emails over live rows only (#1928)
• 52db5ba feat(store): org invoices search skips soft-deleted rows (#1951)
• a2ba3a2 feat(store): org projects search skips soft-deleted rows (#1943)
• 397098b feat(store): org scoped searches report nothing for a deleted organization (#1953)
• 8c18295 feat(store): org service user credentials search skips soft-deleted rows (#1949)
• 58583d2 feat(store): org tokens search skips soft-deleted rows (#1950)
• 5a9f898 feat(store): org users search skips soft-deleted rows (#1939)
• 64aa400 feat(store): policy, relation, and resource reads skip soft-deleted rows (#1936)
• c9112ac feat(store): project users search skips soft-deleted rows (#1946)
• 8e305d5 feat(store): role names are unique over live rows only (#1961)
• 1a8f1dd feat(store): user organizations search skips soft-deleted rows (#1947)
• a008a83 feat(store): user projects search skips soft-deleted rows (#1945)
• f840f22 feat(store): user, organization, and project reads skip soft-deleted rows (#1931)
• 3385d1a fix(billing): omit empty product description for Stripe (#1898)
• f789863 fix(billing): show the credit purchase amount as a formatted price (#1948)
• cefc54a fix(docs): build the docs with chronicle 0.16.3 (#1957)
• c1c4b20 fix(resource): store the title and bump updated_at when updating a resource (#1933)
• 60ac2de fix(store): a search value that is not a uuid reports bad input (#1952)
• 057a60c fix(store): org users search reports a value that is not a uuid as bad input (#1942)
• 42d0f10 fix(store): org users search survives a policy with no role (#1941)
• aabc1bb fix(store): return every org service user and honour the requested sort (#1929)
• af7634f fix(test): convert the pg suites missed by the shared container change (#1958)
• 639e284 fix: map three missing-row cases to not found or unauthenticated (#1940)

What's Changed

• feat(sdk): show a consent tooltip and add a disableIntent prop by @rohanchkrabrty in #1925

Full Changelog: v0.117.0...v0.117.1

What's Changed

• chore(proto): pull FlowIntent and the consent document RPC by @rohanchkrabrty in #1910
• feat(consent): add the user_consents table with immutability triggers by @rohanchkrabrty in #1911
• feat(authenticate): separate login from signup with an explicit intent by @rohanchkrabrty in #1912
• feat(consent): add app.consent config, the consent service and ListConsentDocuments by @rohanchkrabrty in #1913
• feat(consent): record consent in the same transaction as the user by @rohanchkrabrty in #1914
• feat(authenticate): map the gate and consent errors on both auth RPCs by @rohanchkrabrty in #1915
• test(e2e): cover intent and consent across every auth strategy by @rohanchkrabrty in #1916
• fix(consent): store no consent on a flow that can never record one by @rohanchkrabrty in #1920
• feat(sdk): take explicit consent and send a login or signup intent by @rohanchkrabrty in #1922

Full Changelog: v0.116.1...v0.117.0

Changelog

• 88c7b71 fix(db): run advisory lock and unlock on the same session (#1918)
• 130efe4 fix(sdk): reword the delete organization blocker messages (#1921)

What's Changed

• chore(store): remove the orphaned blob store and its gocloud.dev dependency by @rohilsurana in #1900
• chore(deleter): extend deleter billing mocks for the delete checks by @whoAbhishekSah in #1865
• feat(deleter): clear or report org delete blockers up front by @whoAbhishekSah in #1857
• feat(deleter): email the org owners when a delete forfeits tokens by @whoAbhishekSah in #1880
• chore(proto): pull the CheckOrganizationDelete RPC by @whoAbhishekSah in #1893
• feat(deleter): serve CheckOrganizationDelete for delete eligibility by @whoAbhishekSah in #1894
• docs: refresh permission key form and drop removed app.admin.users config by @rohilsurana in #1901
• fix(admin): stop duplicate API calls across admin tables by @Shreyag02 in #1869
• refactor(api)!: drop the removed permission namespace and name fields by @whoAbhishekSah in #1897
• feat(deleter): send the delete notice on every organization delete by @whoAbhishekSah in #1903
• refactor(api): require resource in CheckResourcePermission by @AmanGIT07 in #1886
• docs(frontier): remove unnecessary references from RFC doc by @rohilsurana in #1904
• fix(billing): keep the synced invoice amount up to date by @whoAbhishekSah in #1906
• docs: RFC 0002 for explicit consent at signup by @rohanchkrabrty in #1905
• feat(sdk): guard the delete organization flow by @whoAbhishekSah in #1881

Full Changelog: v0.115.2...v0.116.0

What's Changed

• fix(sdk): skip the header for PAT detail error and not-found states by @rohilsurana in #1899

Full Changelog: v0.115.1...v0.115.2

Changelog

• 670a8fe fix(sdk): skip the header for PAT detail error and not-found states (#1899)

What's Changed

• fix(permission): make the response key lossless and migrate its readers by @whoAbhishekSah in #1887
• refactor(api): require permission key in create and update requests by @AmanGIT07 in #1885
• fix(reconcile): reject unknown top-level fields in desired-state documents by @rohilsurana in #1888
• fix(reconcile): tighten permission name and namespace validation to SpiceDB grammar by @rohilsurana in #1889
• fix(reconcile): honor product behavior, reject a credit amount without the credits behavior, and keep feature names verbatim on apply by @rohilsurana in #1890
• docs(reconcile): declare disabled users out of scope for the PlatformUser kind by @rohilsurana in #1891
• fix(reconcile): identify permissions by key instead of namespace and name by @rohilsurana in #1892
• fix(sdk): scope PAT detail to active org and show a unified not-found page by @rohilsurana in #1895

Full Changelog: v0.115.0...v0.115.1

Changelog

• 2b125a7 fix(permission): make the response key lossless and migrate its readers (#1887)
• 2c37983 fix(reconcile): honor product behavior, reject a credit amount without the credits behavior, and keep feature names verbatim on apply (#1890)
• 1e7ad49 fix(reconcile): identify permissions by key instead of namespace and name (#1892)
• eca7ba0 fix(reconcile): reject unknown top-level fields in desired-state documents (#1888)
• 4c26238 fix(reconcile): tighten permission name and namespace validation to SpiceDB grammar (#1889)
• 4fb6f25 fix(sdk): scope PAT detail to active org and show a unified not-found page (#1895)
• 1e7727e refactor(api): require permission key in create and update requests (#1885)

What's Changed

• feat(authz): enforce disabled org state on the authorization path by @AmanGIT07 in #1860
• test(e2e): cover disabled org enforcement across resource RPCs by @AmanGIT07 in #1861
• refactor(api): drop per-handler org-state checks covered by the gate by @AmanGIT07 in #1867
• feat(admin): list pending invites in user details side panel by @Shreyag02 in #1847
• feat(admin): list and remove pending invites from organization members by @Shreyag02 in #1862
• chore(server): remove the resources_config_path boot loader flow by @rohilsurana in #1767
• docs: rewrite the custom resources guide for the reconcile flow by @rohilsurana in #1872
• fix(bootstrap): harden AppendSchema against list errors and missing metadata description by @rohilsurana in #1871
• chore(server): remove the billing plans boot loader flow by @rohilsurana in #1870
• fix(server): set ReadHeaderTimeout and IdleTimeout on all HTTP servers by @whoAbhishekSah in #1873
• refactor: remove unused new relic instrumentation by @AmanGIT07 in #1876
• test(e2e): move billing setup off deprecated UpdateBillingAccountLimits by @AmanGIT07 in #1883
• feat(metaschema): refresh the schema cache on a timer and make it concurrency-safe by @rohilsurana in #1878
• feat(reconcile): add a MetaSchema kind for declarative metaschema management by @rohilsurana in #1882
• fix(server): recover from panics in RPC and UI HTTP handlers by @whoAbhishekSah in #1877
• test(reconcile): guard canonicalJSON number precision with a 2^53 pair by @rohilsurana in #1884

Full Changelog: v0.114.0...v0.115.0

Changelog

• e045707 feat(admin): list and remove pending invites from organization members (#1862)
• 562e230 feat(admin): list pending invites in user details side panel (#1847)
• ce2a611 feat(authz): enforce disabled org state on the authorization path (#1860)
• a2ce258 feat(metaschema): refresh the schema cache on a timer and make it concurrency-safe (#1878)
• 059f974 feat(reconcile): add a MetaSchema kind for declarative metaschema management (#1882)
• 0e6a1f3 fix(bootstrap): harden AppendSchema against list errors and missing metadata description (#1871)
• 5bacc1b fix(server): recover from panics in RPC and UI HTTP handlers (#1877)
• fafc986 fix(server): set ReadHeaderTimeout and IdleTimeout on all HTTP servers (#1873)
• 8e22bcf refactor(api): drop per-handler org-state checks covered by the gate (#1867)
• 229ea89 refactor: remove unused new relic instrumentation (#1876)

What's Changed

• feat(billing): reset product title, description, and config when update omits them by @rohilsurana in #1821
• refactor(project): move project creation grants into membership by @whoAbhishekSah in #1822
• refactor(project): remove unused SetMemberRole and RemoveMember by @whoAbhishekSah in #1823
• refactor(membership): split service.go by resource type by @whoAbhishekSah in #1826
• fix(admin): Admin org design fixes by @Shreyag02 in #1799
• docs(local-setup): add backend, admin app, and client SDK dev guide by @Shreyag02 in #1814
• docs(deployment-guide): add admin console build, deploy, verify, and rollback guide by @Shreyag02 in #1820
• refactor(membership): deduplicate repeated patterns by @whoAbhishekSah in #1827
• feat(reconcile): add BillingProduct kind by @rohilsurana in #1816
• chore: apply go fix modernizers by @AmanGIT07 in #1825
• fix(resource): use resource title as audit record target name by @AmanGIT07 in #1833
• fix(billing): include plans without products in plan listings by @rohilsurana in #1834
• fix(authenticate): read otp attempt counter from json-decoded metadata by @AmanGIT07 in #1846
• feat(checkout): add delete of checkout records by billing account by @whoAbhishekSah in #1841
• feat(credit): add delete of credit transactions by billing account by @whoAbhishekSah in #1842
• feat(kyc): add delete of an org kyc record by @whoAbhishekSah in #1843
• fix(deleter): clean up all billing and kyc records during org delete by @whoAbhishekSah in #1838
• fix(subscription): make billing account teardown retryable by @whoAbhishekSah in #1844
• feat(deleter): write an audit record for each checkout removed during org delete by @whoAbhishekSah in #1839
• fix(db): report rollback outcome correctly in WithTxn by @AmanGIT07 in #1855
• feat(billing): add stripe error translator by @whoAbhishekSah in #1849
• fix(billing): translate stripe errors in billing services by @whoAbhishekSah in #1850
• fix(api): map billing errors to actionable codes instead of internal by @whoAbhishekSah in #1851
• fix(billing): deny entitlement for a feature with no products by @rohilsurana in #1858
• feat(billing): move plan writes to AdminService and add ListAllPlans by @rohilsurana in #1830
• feat(reconcile): add the BillingPlan reconcile kind by @rohilsurana in #1854

Full Changelog: v0.113.0...v0.114.0

Changelog

• 9880871 refactor(server): serve unencrypted HTTP/2 natively (#1818)