0.4.20 (2026-08-08)

Bug Fixes

• calls: restore missed DM call indicators (#1855) (1e4cbdf)
• frontend: backport adaptive ordered list markers (#1913) (7344942)
• frontend: backport on-demand PWA caching (#1791) (5233a9a)
• push: prioritize visible notifications (#1930) (57abecd)
• realtime: use valid fatal close code (#1896) (00d0513)

v0.4.20 Latest

Latest

Compare

Choose a tag to compare

Bug Fixes

• calls: restore missed DM call indicators (#1855) (1e4cbdf)
• frontend: backport adaptive ordered list markers (#1913) (7344942)
• frontend: backport on-demand PWA caching (#1791) (5233a9a)
• push: prioritize visible notifications (#1930) (57abecd)
• realtime: use valid fatal close code (#1896) (00d0513)

0.4.19 (2026-07-28)

Bug Fixes

• frontend: reconcile My Threads unread indicator (#1760) (6e6629c)
• threads: reject echoes as thread roots (#1758) (617bfba)

v0.4.19

Compare

Choose a tag to compare

Bug Fixes

• frontend: reconcile My Threads unread indicator (#1760) (6e6629c)
• threads: reject echoes as thread roots (#1758) (617bfba)

0.4.18 (2026-07-27)

Bug Fixes

• performance: reduce viewer requests on first load (#1754) (0c9248e)

v0.4.18

Compare

Choose a tag to compare

Bug Fixes

• performance: reduce viewer requests on first load (#1754) (0c9248e)

0.4.17 (2026-07-27)

Bug Fixes

• frontend: keep mobile bottom sheets open on input focus (#1750) (4201a19)
• reduce authenticated startup latency (#1753) (04bd566)

v0.4.17

Compare

Choose a tag to compare

Bug Fixes

• frontend: keep mobile bottom sheets open on input focus (#1750) (4201a19)
• reduce authenticated startup latency (#1753) (04bd566)

0.4.16 (2026-07-23)

Bug Fixes

• threads: distinguish unread and notified thread badges (#1715) (7f9c3d1)

v0.4.16

Compare

Choose a tag to compare

Bug Fixes

• threads: distinguish unread and notified thread badges (#1715) (7f9c3d1)

0.4.15 (2026-07-23)

Bug Fixes

• frontend: correct My Threads unread badge (#1638) (fd204f1)
• frontend: parse pasted markdown in composer (#1711) (2aef711)
• frontend: preserve video playback on reactions (#1619) (e445af0)
• frontend: restore message editor accessible label (#1640) (62456aa)
• frontend: stabilise composer word wrapping (#1636) (bf3b0e6)

v0.4.15

Compare

Choose a tag to compare

Bug Fixes

• frontend: correct My Threads unread badge (#1638) (fd204f1)
• frontend: parse pasted markdown in composer (#1711) (2aef711)
• frontend: preserve video playback on reactions (#1619) (e445af0)
• frontend: restore message editor accessible label (#1640) (62456aa)
• frontend: stabilise composer word wrapping (#1636) (bf3b0e6)

0.4.14 (2026-07-19)

Bug Fixes

• assets: mark NATS streams as non-seekable (#1607) (438d16d)
• frontend: keep emoji picker open on new messages (#1603) (b5c88a0)
• frontend: keep realtime active while looking offline (#1606) (233fcc6)
• frontend: preserve pasted message line breaks (#1609) (8d3fd4b)

v0.4.14

Compare

Choose a tag to compare

Bug Fixes

• assets: mark NATS streams as non-seekable (#1607) (438d16d)
• frontend: keep emoji picker open on new messages (#1603) (b5c88a0)
• frontend: keep realtime active while looking offline (#1606) (233fcc6)
• frontend: preserve pasted message line breaks (#1609) (8d3fd4b)

0.4.13 (2026-07-17)

Features

• calls: share browser tab audio (#1578) (8deb1d8)

Bug Fixes

• api: batch presence hydration (#1594) (d23d420)
• core: forbid threads in direct messages (#1583) (fd551a8)
• core: retry link previews across validated IPs (#1577) (8c4cd57)
• e2e: preserve thread from room list clicks (6de0b5d)
• frontend: add notifications return navigation (#1570) (5cc9e90)
• frontend: scope thread click-outside dismissal (#1592) (6bde913)

Miscellaneous Chores

• release: keep release-0.4 on patch line (e4ff20a)

v0.4.13

Compare

Choose a tag to compare

Features

• calls: share browser tab audio (#1578) (8deb1d8)

Bug Fixes

• api: batch presence hydration (#1594) (d23d420)
• core: forbid threads in direct messages (#1583) (fd551a8)
• core: retry link previews across validated IPs (#1577) (8c4cd57)
• e2e: preserve thread from room list clicks (6de0b5d)
• frontend: add notifications return navigation (#1570) (5cc9e90)
• frontend: scope thread click-outside dismissal (#1592) (6bde913)

Miscellaneous Chores

• release: keep release-0.4 on patch line (e4ff20a)

v0.4.12

Compare

Choose a tag to compare

Bug Fixes

• core: preserve cleared RBAC defaults (#1543) (5108444)
• frontend: allow app-wide mobile sidebar swipes (#1534) (404e1bf)
• frontend: collapse invisible markdown spacing (#1539) (5933a9b)
• pwa: use server name for installed app (#1542) (b6c8d50)

Bug Fixes

• frontend: add direct thread message routes (#1524) (6f644a0)
• frontend: preserve unusual video aspect ratios (#1521) (2f845af)
• frontend: support remote-only sessions (#1530) (af84281)
• frontend: use origin host for message links (#1526) (1448ecd)
• frontend: use server logo for browser icons (#1506) (41cffa9)
• presence: handle constant wrong-sequence errors (#1511) (c27cbee)
• security: restrict public server assets (#1499) (0a10c3f)

Bug Fixes

• ci: time out media environment setup (#1486) (718b836)
• config: configure API response compression (#1502) (c8401d4)
• dockercompose: use muxed LiveKit UDP port (#1503) (61734af)
• frontend: enforce mono voice call audio (#1489) (8c10471)
• frontend: hide deleted users from membership events (#1504) (4f0439e)
• frontend: preserve expanded timeline groups (#1483) (efa67a9)
• frontend: restore branded PWA install icons (#1478) (f5740ab)

Bug Fixes

• auth: reject usernames ending in dots (#1474) (d5fb5ce)
• ci: use pushed branch as protobuf base (f385682)
• frontend: space grouped event conjunctions (#1469) (c7cc0d9)
• release: recover 0.4.9 publication (#1475) (1dd7dde)

Performance Improvements

• projections: increase replay pull window (#1473) (85fe7c6)

Bug Fixes

• api: bound message attachment asset IDs (#1458) (f22b343)
• auth: keep provider redirects credential-free (#1437) (e9c5ebf)
• auth: preserve sessions during storage outages (#1431) (3442f8a)
• auth: throttle password reset requests (#1441) (67dd1dc)
• backup: harden archive creation and restore (#1435) (d07672c)
• cli: require explicit passphrase sources (#1451) (6b8b24e)
• frontend: embed main build version (#1463) (21a20a8)
• frontend: label deleted users consistently (#1452) (8e04235)
• release: publish sortable main image tags (030db55)
• security: harden realtime auth and request handling (#1433) (75c5a24)
• security: require explicit proxy trust (#1447) (234862f)
• tls: secure autocert cache permissions (#1461) (cef9d29)

Bug Fixes

• frontend: show server logo before login (#1416) (577cf17)
• frontend: stabilize linked-message navigation (#1421) (721c974)
• frontend: support file drops in threads (#1417) (6166dc0)
• release: add next prerelease channel (#1414) (6312e39)

Performance Improvements

• frontend: speed up large room member loading (#1423) (6d4ce8a)

Bug Fixes

• api: validate custom status emoji (#1408) (cb62f72)

Performance Improvements

• projections: bound replay idempotency memory (#1407) (7dd3841)
• projections: remove redundant string interning (#1411) (c69ef30)

Bug Fixes

• assets: recover physical deletion from events (#1394) (e4d2a85)
• core: remove room leavers from voice calls (#1373) (e0b1ad7)
• docker: support read-only root filesystems (#1403) (76462a4)
• docs: correct deployment guide redirect (#1395) (aded4e0)
• frontend: add optimistic room reads (#1376) (22ffc62)
• frontend: keep signed-out servers navigable (#1397) (c3e281a)
• frontend: preserve optimistic reads across refresh (#1393) (b77270d)
• frontend: respect browser region in timestamps (#1387) (7ca3b92)
• release: restore Windows builds (#1405) (f95a668)

Performance Improvements

• realtime: bound WebSocket compression memory (#1400) (c794e59)
• realtime: reduce per-connection memory (#1389) (963287d)

Bug Fixes

• api: skip invalid followed-thread rooms (#1366) (90a5918)
• docs: add per-page social previews (#1370) (69eab4a)
• frontend: allow any file in attachment picker (#1364) (5b20e17)
• frontend: compress displayed images (#1361) (5539816)
• messages: expire context-free tombstones (#1365) (98123b5)
• notifications: harden delivery and synchronization (#1363) (b46e012)
• notifications: prevent stale push delivery and badges (#1368) (3c588aa)
• pwa: use server logo for install icons (#1371) (49b26e9)

Bug Fixes

• api: tune room member page defaults (#1354) (07675ee)
• backfill sparse room timelines (#1353) (f8adf6a)
• docs: add community chat link (#1344) (10c1eec)
• frontend: add optimistic reactions (#1349) (beaf180)
• frontend: harden login redirect path validation (#1340) (01db3e3)
• frontend: stabilize unread and resume refresh (#1346) (d2f185a)
• frontend: use opaque PWA install icons (#1352) (afd025c)
• metrics: track realtime websocket connections (#1356) (fd3ca58)
• pwa: stop preserving push badge hints (#1343) (d9e50a3)
• realtime: align heartbeat cadence with client stall detection (#1342) (c0e0d23)

Bug Fixes

• api: tolerate invalid presence user ids (#1336) (76f1bef)
• frontend: render inline room join screen (#1335) (af7c831)
• frontend: separate input mode from viewport size (#1339) (217da21)
• frontend: unify user card presence source (#1334) (dde9b14)
• push: add declarative web push payloads (#1338) (ede325d)

Bug Fixes

• api: log internal connect errors (#1329) (c292bac)
• frontend: adopt menu shell for toasts (#1323) (4982463)
• frontend: align message footer row spacing (#1331) (02841fe)
• frontend: hydrate room lifecycle event actors (#1319) (a9abe8c)
• frontend: improve chat link navigation (#1333) (a88133f)
• frontend: improve reaction user popovers (#1328) (2d1af04)
• frontend: refresh recent emoji quick reactions (#1327) (fab2ae4)
• frontend: simplify push notification click routing (#1322) (21bff8d)
• frontend: simplify room resume catch-up (#1332) (b7d32ce)
• frontend: stabilize mobile sidebar gestures (#1324) (1cbd3c5)
• read-state: reduce no-op read signals (#1330) (244e4c8)
• server: reduce routine info logs (#1325) (8849fd7)

⚠ BREAKING CHANGES

• api: consolidate ConnectRPC surface (#1306)
• api: clean up server assets calls and includes (#1303)
• api: consolidate shared api shapes (#1302)
• api: consolidate shared public API types (#1299)
• api: consolidate public ConnectRPC API (#1295)
• api: polish ConnectRPC API for 0.4.0 (#1224)
• operator: add socket-backed operator user administration (#1164)
• api: reshape server profile responses (#1185)
• api: split ConnectRPC packages (#1179)
• api: replace GraphQL with ConnectRPC (#1166)
• api: use optional timeline presence fields (#1110)

Features

• add universal rooms (#1046) (0b8c5cb)
• admin: filter event log (#1056) (d8bd280)
• api: add ConnectRPC asset uploads (#1249) (f97f1d0)
• api: add ConnectRPC DM start (#1157) (c46ef79)
• api: add ConnectRPC public API PoC (#1067) (7aeb8f7)
• api: add ConnectRPC reflection (#1182) (a93324c)
• api: add ConnectRPC room timeline PoC (#1074) (920fcaa)
• api: add protobuf realtime websocket (#1158) (9e8e34c)
• api: add resource batch reads (#1232) (8a04ae0)
• api: clean up ConnectRPC surface (#1171) (03c42af)
• api: clean up ConnectRPC surface (#1178) (b1b6e28)
• api: clean up server assets calls and includes (#1303) (e960def)
• api: consolidate membership services (#1293) (7ed268c)
• api: consolidate shared api shapes (#1302) (4429009)
• api: consolidate shared public API types (#1299) (1ec2015)
• api: extract generated TypeScript clients (#1183) (3480cda)
• api: extract TypeScript API client (#1184) (b38b9a5)
• api: migrate reactions to ConnectRPC (#1128) (161f51c)
• api: polish ConnectRPC API for 0.4.0 (#1224) (06f4361)
• api: port message posting to ConnectRPC (#1093) (011018b)
• api: port read state and thread follow to ConnectRPC (#1087) (f2128d6)
• api: replace GraphQL with ConnectRPC (#1166) (3dd3fa6)
• api: reshape server profile responses (#1185) (96bde6e)
• api: split ConnectRPC packages (#1179) (6ec286a)
• api: use optional timeline presence fields (#1110) (5c1406f)
• auth: add SSO account creation and linking (#1167) (61723e9)
• auth: type runtime credentials (#1195) (5f0ebe4)
• config: configure SMTP TLS verification (#1159) (1f5c8b0)
• connectrpc: add message management API (#1146) (c07b049)
• connectrpc: add room directory service (#1138) (c1f13cf)
• connectrpc: add room lifecycle service (#1134) (3f2b3a9)
• connectrpc: port thread history reads (#1083) (4b81b4d)
• core: persist link preview assets via storage backend (#1060) (005deb1)
• core: store thread follows in EVT (#1233) (01a2bb3)
• dev: add Mailpit to mise dev (#1238) (0d07f7e)
• docs: add release notes pages (#1180) (6418471)
• exporter: add deployment-wide prometheus exporter (#1059) (5aa29c7)
• frontend: add multi-image attachment gallery (#1241) (d8338c5)
• frontend: add Paraglide-based client-shell i18n (#1077) (1a4ab07)
• frontend: add Trusted Types markdown policy (#1307) (47b9060)
• frontend: consolidate frontend design system (#1053) (7fc39ab)
• frontend: improve admin member details (#1057) (8c8ccce)
• frontend: maximize call pane (#1240) (7aaa34a)
• frontend: move UI strings into i18n catalogs (#1084) (d310382)
• frontend: refresh admin system dashboard (#1160) (5c54899)
• frontend: refresh toast styling (#1260) (1b728e5)
• frontend: send typing indicators with ConnectRPC (#1155) (1a131ee)
• frontend: show call participants in room sidebar (#1036) (8cd0858)
• frontend: show reaction names in popups (#1044) (e141b74)
• frontend: show room descriptions in header (#1037) (44f9c67)
• frontend: use ConnectRPC for message writes (#1153) (4b34f34)
• frontend: use ConnectRPC for room commands (#1150) (bfff68e)
• operator: add socket-backed operator user administration (#1164) (6209795)
• presence: add user-controlled presence modes (#1095) (9e8f696)
• profile: add custom user statuses (#1081) (1d1d7d2)

Bug Fixes

• api: address 0.4.0 surface review findings (#1228) (bd054ff)
• api: align ConnectRPC permission exposure (#1246) (cf2eca7)
• api: centralize Connect room RBAC in core (#1149) (8ba5b0c)
• api: close ConnectRPC RBAC gaps (#1207) (da0b129)
• api: include user status in generated docs (#1092) (52521fa)
• api: make ConnectRPC plumbing idiomatic (#1123) (338f573)
• api: preserve offline presence in snapshots (#1172) (7fce244)
• api: tighten ConnectRPC caller auth (#1126) (bb8c10d)
• assets: prevent protected attachment caching (#1261) (e3c6eed)
• assets: serve protected assets through stable gateway (#1264) (744e93e)
• attachments: crop extreme image thumbnails (#1181) (d5dd244)
• auth: add structured unauthenticated GraphQL errors (#1048) (510c07d)
• auth: reject empty-user runtime credentials (#1201) (43b569c)
• calls: preserve call on tab takeover (#1284) (451929d)
• ci: gate release-please on green ci (#1135) (4decb0f)
• conductor: use workspace port for Storybook (#1290) (c5ba4dc)
• connectapi: harden message post migration (#1097) (b15fb14)
• connectapi: harden timeline and thread read handling (#1117) (ba027fe)
• connectrpc: cap request message size (#1102) (a773531)
• connectrpc: reject missing read anchors (#1109) (f2f68b9)
• core: complete service inventory metrics (#1130) (9bc89f3)
• core: prevent read marker regressions (#1107) (cb81d58)
• dockercompose: enable LiveKit TURN relay (#1190) (51eb5e7)
• docs: keep release note cards in grid lanes (#1204) (a6c79df)
• frontend: address svelte guidance review (#1154) (d8c4010)
• frontend: align call control button colors (#1085) (4b7f37e)
• frontend: align muted call participant icon (#1050) (68cea04)
• frontend: clarify echo reply actions (#1253) (5a2b264)
• frontend: clarify iOS PWA push setup (#1192) (2416a41)
• frontend: clarify remote push notification support (#1105) (bfdbdea)
• frontend: clear call-wide mode on notification navigation (#1291) (db09a62)
• frontend: constrain current user card height (#1239) (1b536b9)
• frontend: defer camera permission until enabled (#1243) (2145a95)
• frontend: defer unread separator until return to the room (#1079) (9535694)
• frontend: handle API auth failures gracefully (#1269) (e82c554)
• frontend: harden asset proxy token handling (#1054) (8797c65)
• frontend: ignore stale DM member loads when switching rooms (#1065) (b4264b7)
• frontend: improve call presence indicators (#1257) (696a92e)
• frontend: improve extreme image thumbnails (#1227) (d5c596d)
• frontend: improve LiveKit media error handling (#1281) (94a86c0)
• frontend: improve unread channel contrast (#1089) (74247b4)
• frontend: localize date formatting (#1242) (cfc96ec)
• frontend: make attachment remove control subtle (#1265) (6537c27)
• frontend: make scrollbars follow selected theme (#1152) (9c5fa16)
• frontend: polish error and missing media states (#1267) (b9dabba)
• frontend: preserve touch composer line breaks (#1194) (8c62c70)
• frontend: quiet console warning noise (#1280) (4df7b85)
• frontend: reconcile notification badge dismissals (#1058) (13c7a6e)
• frontend: reconcile PWA notification badges (#1229) (e44645e)
• frontend: refresh messages after local deletions (#1148) (cefc22a)
• frontend: remove redundant universal room badge (#1052) (5f6131e)
• frontend: reset inline code state when composer clears (#1251) (0dddeaa)
• frontend: restore circular avatars with stable presence dots (#1252) (14b15b9)
• frontend: restore default text smoothing (#1268) (b3a6dc3)
• frontend: restrict same-tab message links (#1068) (d43d23f)
• frontend: restyle reply attribution preview (#1140) (909c1f4)
• frontend: share unread marker lifecycle with threads (#1310) (07c3601)
• frontend: show loading state for call media toggles (#1237) (9063832)
• frontend: stabilize new messages separator (#1308) (c35ed86)
• frontend: stabilize tab resume catch-up (#1288) (b70916d)
• frontend: style room member search clear button (#1226) (e43f615)
• frontend: submit simple message edits with enter (#1129) (f5651b4)
• frontend: sync presence badge across tabs (#1301) (5fbfb22)
• frontend: sync room thread follow bell state (#1121) (4048f23)
• frontend: use direct ticketed asset URLs (#1312) (b41eb1d)
• frontend: use full-width image galleries (#1247) (f5fe88a)
• frontend: use semantic presence colors (#1259) (ccf64db)
• frontend: wire UI strings to i18n (#1225) (7eafcd3)
• media: preserve video aspect ratios (#1254) (8a85f0a)
• messages: validate reply targets before posting (#1176) (2919a1a)
• notifications: clear read notifications server-side (#1297) (c6f3c30)
• notifications: preserve unread badge state across dismissals (#1069) (03444e3)
• pwa: reduce service worker reload churn (#1187) (5489e47)
• reactions: canonicalize echo reaction targets (#1272) (2b87044)
• release: publish release before updating tap (#1298) (c5c8aa6)
• voice: scope LiveKit observations to active calls (#1049) (dcd95c8)

Performance Improvements

• build: improve frontend and CLI cache reuse (#1106) (f22da3a)
• core: cache unwrapped DEKs per request (#1193) (0623831)
• core: slim timeline projection memory (#1287) (cd026ff)
• frontend: load room members in larger batches (#1206) (f465a09)
• frontend: split chat code from app chrome (#1103) (4a4a4de)

Code Refactoring

• api: consolidate ConnectRPC surface (#1306) (900233d)
• api: consolidate public ConnectRPC API (#1295) (a0ab823)

⚠ BREAKING CHANGES

• api: consolidate ConnectRPC surface (#1306)
• api: clean up server assets calls and includes (#1303)
• api: consolidate shared api shapes (#1302)
• api: consolidate shared public API types (#1299)

Features

• api: clean up server assets calls and includes (#1303) (e960def)
• api: consolidate shared api shapes (#1302) (4429009)
• api: consolidate shared public API types (#1299) (1ec2015)

Bug Fixes

• frontend: sync presence badge across tabs (#1301) (5fbfb22)
• release: publish release before updating tap (#1298) (c5c8aa6)

Code Refactoring

• api: consolidate ConnectRPC surface (#1306) (900233d)

⚠ BREAKING CHANGES

• api: consolidate public ConnectRPC API (#1295)

Features

• api: consolidate membership services (#1293) (7ed268c)

Bug Fixes

• calls: preserve call on tab takeover (#1284) (451929d)
• conductor: use workspace port for Storybook (#1290) (c5ba4dc)
• frontend: clear call-wide mode on notification navigation (#1291) (db09a62)
• frontend: improve LiveKit media error handling (#1281) (94a86c0)
• frontend: quiet console warning noise (#1280) (4df7b85)
• frontend: stabilize tab resume catch-up (#1288) (b70916d)
• notifications: clear read notifications server-side (#1297) (c6f3c30)

Performance Improvements

• core: slim timeline projection memory (#1287) (cd026ff)

Code Refactoring

• api: consolidate public ConnectRPC API (#1295) (a0ab823)

Features

• frontend: refresh toast styling (#1260) (1b728e5)

Bug Fixes

• assets: prevent protected attachment caching (#1261) (e3c6eed)
• assets: serve protected assets through stable gateway (#1264) (744e93e)
• frontend: handle API auth failures gracefully (#1269) (e82c554)
• frontend: make attachment remove control subtle (#1265) (6537c27)
• frontend: polish error and missing media states (#1267) (b9dabba)
• frontend: restore default text smoothing (#1268) (b3a6dc3)
• frontend: use semantic presence colors (#1259) (ccf64db)
• reactions: canonicalize echo reaction targets (#1272) (2b87044)

Features

• api: add ConnectRPC asset uploads (#1249) (f97f1d0)

Bug Fixes

• api: align ConnectRPC permission exposure (#1246) (cf2eca7)
• frontend: clarify echo reply actions (#1253) (5a2b264)
• frontend: improve call presence indicators (#1257) (696a92e)
• frontend: reset inline code state when composer clears (#1251) (0dddeaa)
• frontend: restore circular avatars with stable presence dots (#1252) (14b15b9)
• frontend: use full-width image galleries (#1247) (f5fe88a)
• media: preserve video aspect ratios (#1254) (8a85f0a)

⚠ BREAKING CHANGES

• api: polish ConnectRPC API for 0.4.0 (#1224)

Features

• api: add resource batch reads (#1232) (8a04ae0)
• api: polish ConnectRPC API for 0.4.0 (#1224) (06f4361)
• core: store thread follows in EVT (#1233) (01a2bb3)
• dev: add Mailpit to mise dev (#1238) (0d07f7e)
• frontend: add multi-image attachment gallery (#1241) (d8338c5)
• frontend: maximize call pane (#1240) (7aaa34a)

Bug Fixes

• api: address 0.4.0 surface review findings (#1228) (bd054ff)
• api: close ConnectRPC RBAC gaps (#1207) (da0b129)
• docs: keep release note cards in grid lanes (#1204) (a6c79df)
• frontend: constrain current user card height (#1239) (1b536b9)
• frontend: defer camera permission until enabled (#1243) (2145a95)
• frontend: improve extreme image thumbnails (#1227) (d5c596d)
• frontend: localize date formatting (#1242) (cfc96ec)
• frontend: reconcile PWA notification badges (#1229) (e44645e)
• frontend: show loading state for call media toggles (#1237) (9063832)
• frontend: style room member search clear button (#1226) (e43f615)
• frontend: wire UI strings to i18n (#1225) (7eafcd3)

Performance Improvements

• frontend: load room members in larger batches (#1206) (f465a09)

Bug Fixes

• auth: reject empty-user runtime credentials (#1201) (43b569c)

Features

• auth: type runtime credentials (#1195) (5f0ebe4)

Bug Fixes

• frontend: preserve touch composer line breaks (#1194) (8c62c70)

⚠ BREAKING CHANGES

• operator: add socket-backed operator user administration (#1164)

Features

• auth: add SSO account creation and linking (#1167) (61723e9)
• operator: add socket-backed operator user administration (#1164) (6209795)

Bug Fixes

• dockercompose: enable LiveKit TURN relay (#1190) (51eb5e7)
• pwa: reduce service worker reload churn (#1187) (5489e47)

⚠ BREAKING CHANGES

• api: reshape server profile responses (#1185)

Features

• api: reshape server profile responses (#1185) (96bde6e)

⚠ BREAKING CHANGES

• api: split ConnectRPC packages (#1179)

Features

• api: add ConnectRPC reflection (#1182) (a93324c)
• api: clean up ConnectRPC surface (#1171) (03c42af)
• api: clean up ConnectRPC surface (#1178) (b1b6e28)
• api: extract generated TypeScript clients (#1183) (3480cda)
• api: extract TypeScript API client (#1184) (b38b9a5)
• api: split ConnectRPC packages (#1179) (6ec286a)
• docs: add release notes pages (#1180) (6418471)

Bug Fixes

• api: preserve offline presence in snapshots (#1172) (7fce244)
• attachments: crop extreme image thumbnails (#1181) (d5dd244)
• messages: validate reply targets before posting (#1176) (2919a1a)

⚠ BREAKING CHANGES

• api: replace GraphQL with ConnectRPC (#1166)

Features

• api: add ConnectRPC DM start (#1157) (c46ef79)
• api: add protobuf realtime websocket (#1158) (9e8e34c)
• api: replace GraphQL with ConnectRPC (#1166) (3dd3fa6)
• config: configure SMTP TLS verification (#1159) (1f5c8b0)
• connectrpc: add message management API (#1146) (c07b049)
• connectrpc: add room directory service (#1138) (c1f13cf)
• connectrpc: add room lifecycle service (#1134) (3f2b3a9)
• frontend: refresh admin system dashboard (#1160) (5c54899)
• frontend: send typing indicators with ConnectRPC (#1155) (1a131ee)
• frontend: use ConnectRPC for message writes (#1153) (4b34f34)
• frontend: use ConnectRPC for room commands (#1150) (bfff68e)

Bug Fixes

• api: centralize Connect room RBAC in core (#1149) (8ba5b0c)
• ci: gate release-please on green ci (#1135) (4decb0f)
• frontend: address svelte guidance review (#1154) (d8c4010)
• frontend: make scrollbars follow selected theme (#1152) (9c5fa16)
• frontend: refresh messages after local deletions (#1148) (cefc22a)
• frontend: restyle reply attribution preview (#1140) (909c1f4)

⚠ BREAKING CHANGES

• api: use optional timeline presence fields (#1110)

Features

• api: migrate reactions to ConnectRPC (#1128) (161f51c)
• api: use optional timeline presence fields (#1110) (5c1406f)
• presence: add user-controlled presence modes (#1095) (9e8f696)

Bug Fixes

• api: make ConnectRPC plumbing idiomatic (#1123) (338f573)
• api: tighten ConnectRPC caller auth (#1126) (bb8c10d)
• connectapi: harden timeline and thread read handling (#1117) (ba027fe)
• connectrpc: cap request message size (#1102) (a773531)
• connectrpc: reject missing read anchors (#1109) (f2f68b9)
• core: complete service inventory metrics (#1130) (9bc89f3)
• core: prevent read marker regressions (#1107) (cb81d58)
• frontend: clarify remote push notification support (#1105) (bfdbdea)
• frontend: submit simple message edits with enter (#1129) (f5651b4)
• frontend: sync room thread follow bell state (#1121) (4048f23)

Performance Improvements

• build: improve frontend and CLI cache reuse (#1106) (f22da3a)
• frontend: split chat code from app chrome (#1103) (4a4a4de)

Features

• api: port message posting to ConnectRPC (#1093) (011018b)
• api: port read state and thread follow to ConnectRPC (#1087) (f2128d6)
• connectrpc: port thread history reads (#1083) (4b81b4d)
• frontend: add Paraglide-based client-shell i18n (#1077) (1a4ab07)
• frontend: move UI strings into i18n catalogs (#1084) (d310382)
• profile: add custom user statuses (#1081) (1d1d7d2)

Bug Fixes

• api: include user status in generated docs (#1092) (52521fa)
• connectapi: harden message post migration (#1097) (b15fb14)
• frontend: align call control button colors (#1085) (4b7f37e)
• frontend: defer unread separator until return to the room (#1079) (9535694)
• frontend: improve unread channel contrast (#1089) (74247b4)

Features

• add universal rooms (#1046) (0b8c5cb)
• admin: filter event log (#1056) (d8bd280)
• api: add ConnectRPC public API PoC (#1067) (7aeb8f7)
• api: add ConnectRPC room timeline PoC (#1074) (920fcaa)
• core: persist link preview assets via storage backend (#1060) (005deb1)
• exporter: add deployment-wide prometheus exporter (#1059) (5aa29c7)
• frontend: consolidate frontend design system (#1053) (7fc39ab)
• frontend: improve admin member details (#1057) (8c8ccce)
• frontend: show call participants in room sidebar (#1036) (8cd0858)
• frontend: show reaction names in popups (#1044) (e141b74)
• frontend: show room descriptions in header (#1037) (44f9c67)

Bug Fixes

• auth: add structured unauthenticated GraphQL errors (#1048) (510c07d)
• frontend: align muted call participant icon (#1050) (68cea04)
• frontend: harden asset proxy token handling (#1054) (8797c65)
• frontend: ignore stale DM member loads when switching rooms (#1065) (b4264b7)
• frontend: reconcile notification badge dismissals (#1058) (13c7a6e)
• frontend: remove redundant universal room badge (#1052) (5f6131e)
• frontend: restrict same-tab message links (#1068) (d43d23f)
• notifications: preserve unread badge state across dismissals (#1069) (03444e3)
• voice: scope LiveKit observations to active calls (#1049) (dcd95c8)

Bug Fixes

• downgrade invalid session cookie logs (#1029) (5bbbe88)
• improve push notification routing (#1031) (bda7d3d)
• sidebar: server-local sidebar links now open in the same window (#1041) (b206d56)

Performance Improvements

• add opt-in profiling diagnostics (#1038) (ca2a2f6)
• fast-path projection stream sequence parsing (#1042) (ad28708)
• optimize projection dispatch matching (#1040) (8f40573)
• optimize projection replay and memory (#1032) (f0118ed)
• replay projections through shared EVT fanout (#1035) (15d322d)

Bug Fixes

• remove graphql error logging (#1026) (bb3071c)

Performance Improvements

• reduce room timeline projection retention (#1016) (dd779b7)

Features

• add LiveKit screen sharing (#1021) (068abda)
• frontend: add call join leave sound cues (#1023) (1cf9e85)
• frontend: add display theme preference (#1018) (ed7e276)

Bug Fixes

• calls: improve LiveKit join resilience (#1022) (e9a0e55)
• frontend: make thread badges native links (#1020) (e8c3642)
• hide call lifecycle events from room history (#1017) (5315770)

Features

• add scoped server sign-out (#1006) (1fc081b)
• frontend: refresh call sidebar UI (#1001) (cd48c1a)

Bug Fixes

• frontend: clear stale mention autocomplete state (#1015) (9132ab6)
• frontend: eagerly load room members (#1009) (d76ae9a)
• frontend: prevent room badge clipping (#1012) (5c86be7)
• reconcile in-app notification badges (#1008) (be8cb02)

Performance Improvements

• share projection event consumers (#1011) (31e08fc)

Performance Improvements

• optimize projection startup paths (#1005) (b69f2ef)

Features

• monitor projection startup duration (#1004) (3c6083c)

Bug Fixes

• frontend: preserve nested reply quotes (#1000) (5f97896)
• graphql: enforce room move group permissions (#987) (1364b7b)

Features

• quote selected text when replying (#978) (4844e89)

Bug Fixes

• correct push notification deep links (#982) (d6bfe9f)
• frontend: add embed frame vertical spacing (#976) (4137f7f)
• frontend: echo local room posts after send (#980) (33f0f46)
• frontend: remove server name from room header (#979) (5e58bd5)
• frontend: tighten mobile message action sheet (#981) (e30a153)

⚠ BREAKING CHANGES

• sidebar: list rooms visible via room.list (#961)

Features

• add simple and rich composer modes (#974) (ec5bcea)
• gate message attachments with message.attach (#966) (2870f0f)
• improve linked message previews (#970) (aecdb1b)
• improve room member loading and search (#963) (33bd45a)
• messages: add copy link menu action (#969) (2afdee2)
• sidebar: list rooms visible via room.list (#961) (fe27c06)
• simplify web push opt-in (#971) (6abb0ce)

Bug Fixes

• composer: preserve trailing hashes in headings (#967) (3028cb2)
• frontend: align chat control border radii (#968) (5bc44df)
• frontend: improve blockquote styling (#973) (441706c)
• frontend: route room badges from scoped notifications (#972) (8bb1cc1)
• tighten sidebar item spacing (#975) (8aab581)

Features

• add notification sound shaping controls (#962) (585fa4b)
• composer: submit with Ctrl/Cmd+Enter (#960) (461f911)

Bug Fixes

• composer: keep autolink boundaries editable (#964) (2170f5f)
• frontend: restore push notification routing (#957) (b000610)
• support configurable Docker runtime user (#959) (edb4595)

Features

• group room files by date (#937) (b13674b)
• sidebar: add group sidebar links (#915) (aea26da)

Bug Fixes

• log graphql errors (#955) (692bfc9)
• represent deleted room members (#934) (91ad1dc)

Features

• add room files sidebar (#920) (23e3415)
• cli: remove reset command (60502e3)
• cli: remove reset command (#928) (3380efd)

Bug Fixes

• e2e: wait for posted message articles (#923) (c7d9e22)
• frontend: confirm mention autocomplete with enter (d28aa4e)
• frontend: use app modal for mention confirmation (#927) (f7ff517)
• tolerate stale room members (#932) (40c7d6c)
• update thread replies after send (#924) (2062fdc)

⚠ BREAKING CHANGES

• docker: use config and data root paths (#903)

Features

• add notification badge counts (#909) (f25a69d)
• auth: configure email OTP throttling (#902) (8c2d202)
• frontend: preview Markdown in composer (#876) (06afedb)
• show room sidebar in DMs (#912) (32222fa)

Bug Fixes

• auth: make CSRF tokens stateless (#900) (a2da80c)
• ci: checkout docs image PR refs (#906) (a2af9a2)
• docker: use config and data root paths (#903) (c90f0d9)
• frontend: remount room on notification switch (#908) (fcba838)
• frontend: show active call badges for DMs (#899) (a7299e1)
• refresh room layout state after room creation (#907) (7cd94d2)
• support implicit SMTP TLS (#905) (d7d83b1)
• tidy server lifecycle logs (#914) (2b95bf4)

Features

• auth: use bearer tokens for origin GraphQL (#897) (cf9b552)

Bug Fixes

• frontend: keep sidebars visible on fresh sessions (#891) (1cb5717)
• frontend: remember last visited DM rooms (#894) (de8efb0)

⚠ BREAKING CHANGES

• refresh current room on reconnect (#878)
• auth: stabilize cookie session auth (#883)
• simplify RBAC permissions (#880)

Features

• add per-process Prometheus metrics (#877) (34a88e5)
• auth: support external auth providers (#873) (ff2fb06)
• make LiveKit reconciliation resilient (#869) (82a5bc9)
• show call lifecycle notices in room events (#867) (b652c4f)

Bug Fixes

• auth: stabilize cookie session auth (#883) (376a268)
• cli: improve generated chatto config defaults (#872) (7ba64b7)
• config: tighten chatto config validation (#868) (8b45012)
• core: align projection snapshots with OCC (#864) (f805493)
• frontend: prevent expired edit via ArrowUp (#879) (bbae3aa)
• ignore markdown code mentions and previews (#866) (37933cb)
• refresh current room on reconnect (#878) (8066af7)
• remember sidebar visibility preferences (#862) (ec13041)

Code Refactoring

• simplify RBAC permissions (#880) (37fe2c6)

Features

• add durable LiveKit call events and E2EE (#835) (8d91797)
• add role mentions (#825) (cc95f73)
• add room extras sidebar tabs (#856) (99dff21)
• admin: auto-paginate event log (#852) (cbee54f)
• allow editing thread reply channel echoes (#847) (a5abd5a)
• frontend: find server users in cmd-k (#844) (26283ce)

Bug Fixes

• add CSRF protection for cookie sessions (#851) (ccc8d69)
• attribute RBAC audit events to actors (#834) (0e89890)
• core: end stuck calls when LiveKit fails (#860) (fbe1644)
• frontend: auto-paginate admin members (#846) (7fff051)
• frontend: paginate room member sidebar (#833) (1e87d98)
• frontend: remove server header leave icon (#855) (360bdca)
• frontend: stabilize presence display (#850) (1901ca2)
• frontend: use commit hash for dev app version (#857) (2a7f73e)
• logging: stop logging user PII (#830) (6f1b558)
• preserve session auth for GraphQL CSRF (#858) (4b1507d)
• refine conversation start marker UX (#839) (862a617)
• replay missed subscription events (#832) (eeec111)
• validate cookie encryption secret early (#842) (899953c)

Performance Improvements

• threads: paginate My Threads (#837) (7d4afab)

Bug Fixes

• frontend: cache reply previews during scroll (#819) (fc2c629)
• frontend: crop server sidebar banners (#822) (41ad36b)
• ignore foreign LiveKit webhooks (de90c89)

Features

• pwa: enrich web app manifest (#808) (2c6fe8b)

Bug Fixes

• emit structured logs for Loki (#815) (25ab64a)
• harden backend shutdown handling (#814) (59d344b)
• Harden Docker images (0b227e9)
• improve web push provider compatibility (#816) (2e0d464)
• projections: fail visibly on projection errors (#803) (6959161)
• projections: introduce stream positions and services (#812) (240970c)

Bug Fixes

• timeline: preserve migrated room join order (#801) (53547ca)