0.5.0-beta.3 (2026-09-18)

⚠ BREAKING CHANGES

• members: cache profiles and retain room member lists (#2444)

Features

• frontend: add message status badges and echo navigation (#2442) (168197c)

Bug Fixes

• frontend: align typing indicator avatars (#2440) (c65307f)
• frontend: preserve composer selection during reactive updates (#2445) (cbca5d9)
• frontend: soften selected header button highlights (#2443) (417963b)
• frontend: truncate MOTD and open full Markdown in a modal (#2447) (41db1c3)
• kms: retry missing keys after brief KV visibility lag (#2439) (84c60f7)

Performance Improvements

• members: cache profiles and retain room member lists (#2444) (7d4910c)
• members: load online members independently of the full directory (#2446) (c0ce126)

0.5.0-beta.2 (2026-09-18)

Features

• frontend: fill the viewport with the mobile sidebar (#2434) (68bee8d)
• frontend: stack matrix labels in narrow panes (#2435) (2328332)

Bug Fixes

• accounts: allow admin self-renames and cooldown resets (#2427) (f8ad7cf)
• events: retry JetStream provisioning request timeouts (#2436) (91e6330)
• frontend: align iOS browser chrome with the app frame (#2432) (c66ea65)
• frontend: fit single image attachments within messages (#2428) (fe423ec)
• frontend: fit video attachments within narrow messages (#2437) (6f2e3b4)
• frontend: hide mobile chat headers while keyboard is open (#2430) (c2f59a5)
• frontend: preserve drag highlights and stabilize async tests (#2424) (5cbd584)
• frontend: refresh bot controls when privileged mode changes (#2431) (366393f)
• frontend: remove duplicate room settings actions (#2429) (93406e0)
• frontend: soften Kinda 3D depth (#2433) (d42d316)
• release: remove fixed Chatto release version (#2426) (c9d952e)

0.5.0-beta.1 (2026-09-17)

Features

• calls: detect silent microphones and improve call controls (#2415) (0f0fb41)
• calls: show shared connection quality warnings (#2422) (cb7ce47)
• frontend: improve mobile spacing and collapsible pane actions (#2409) (3fe6030)
• frontend: replace voice quality slider with default-on boosting (#2418) (383fff6)
• frontend: unify call and composer controls with pill buttons (#2404) (e879c0f)
• frontend: unify user cards and participant context menus (#2410) (ab6aaa1)
• frontend: use themed selects for call devices (#2420) (0fe4f28)
• frontend: visualize voice activity with layered fog (#2411) (7eb0b60)

Bug Fixes

• calls: drive remote voice fog from received audio (#2417) (a66fc02)
• calls: use a perceptual participant volume curve (#2419) (291fe32)
• core: commit room patches and reply echoes atomically (#2416) (0e9dc00)
• frontend: rename surface depth preference to UI Style (#2408) (b7fc045)
• frontend: separate screen-share audio meters and controls (#2412) (2e15bda)
• push: use local notification routes for custom domains (#2423) (6411d2d)
• realtime: reload private data only for relevant permission changes (#2421) (932364e)

0.5.0-alpha.9 (2026-09-16)

⚠ BREAKING CHANGES

• bots: show owner and effective access in profile panes (#2381)

Features

• account: manage verified email addresses (#2359) (81e208f)
• attachments: add sandboxed HTML preview and original downloads (#2372) (e1ac1ad)
• attachments: encrypt message attachment descriptions (#2363) (e81478e)
• attachments: share the viewer across file types and galleries (#2377) (f675dd3)
• auth: add password-manager discovery (#2365) (cec4a0f)
• authling: add conformance tooling and explicit client policies (#2403) (90654ea)
• bots: show owner and effective access in profile panes (#2381) (891e5fc)
• calls: add noise gate and continuous voice processing (#2375) (bd07f63)
• calls: enforce scoped call permissions (#2367) (7ee50e0)
• calls: remember devices and add voice preferences (#2369) (a8fed67)
• frontend: add appearance controls and shared surface depth (#2394) (62b99b0)
• frontend: add per-participant call volume controls (#2400) (f89c3e2)
• frontend: add room group creation menu (#2370) (8dbbac1)
• frontend: collapse unjoined rooms in sidebar groups (#2368) (2785080)
• frontend: protect server directory privacy (#2357) (64a9acc)
• frontend: refresh typing indicator UX (#2095) (c66015b)
• frontend: render and edit bios with message Markdown (#2393) (f97160a)
• profiles: add collapsible bios and seed TestBot bio (#2391) (46e711c)
• testing: seed realistic data and speed up e2e history setup (#2354) (e212bad)

Bug Fixes

• auth: link remote identities through server account settings (#2402) (94a543d)
• frontend: check saved server availability before sign-in (#2374) (cb3da27)
• frontend: highlight event payload JSON (#2371) (8c7fad5)
• frontend: remove duplicate hash from thread titles (#2405) (145162e)
• frontend: remove outer app frame highlights (#2397) (3252500)
• frontend: request audio permissions in voice settings (#2392) (361bc26)
• frontend: restore sidebar choices and default DM profiles on desktop (#2385) (2791db8)
• frontend: simplify standalone welcome page (#2395) (a18c31c)
• messages: store echoes as references to original replies (#2380) (03a3c88)

0.5.0-alpha.8 (2026-09-14)

⚠ BREAKING CHANGES

• api: bound permission reads by scope (#2346)
• api: paginate explicit role members (#2344)
• api: paginate the room directory (#2341)
• api: rename call token creation RPC (#2335)
• api: use explicit sidebar item references (#2334)
• api: align room and thread read-marker responses (#2333)
• api: use canonical thread follow response state (#2332)
• api: return empty responses for success-only commands (#2331)
• api: align protobuf type names and enforce lint (#2330)
• api: standardize resource updates on field masks (#2329)
• api: remove legacy notification policy RPCs (#2327)

Features

• accounts: manage room membership from permission matrices (#2323) (49267a4)
• add first-run web setup wizard (#2339) (d88da95)
• api: add archive filters to room discovery (#2328) (4026262)
• api: add direct account settings read (#2340) (898cb3d)
• api: bound permission reads by scope (#2346) (e743042)
• api: expose complete relationships and read markers (#2338) (c91b35a)
• api: paginate explicit role members (#2344) (c5f1809)
• api: paginate the room directory (#2341) (581b887)
• bots: add outbound webhooks and retained operational logs (#2312) (450826b)
• frontend: add shared startup and page entrance animations (#2345) (e252da1)
• frontend: unify room search inputs (#2352) (f057cdb)
• webhooks: support Grafana default payloads and room selection (#2322) (aab82ec)

Bug Fixes

• api: return actionable errors for cooldowns and invalid permissions (#2336) (91be5d2)
• api: stabilize ban pagination and document page contracts (#2337) (f2d2061)
• assets: increase upload chunks to 10 MiB (#2313) (76148aa)
• auth: decouple bot permission ceilings from privilege arming (#2321) (f6e1a32)
• events: identify and clean up projection consumers (#2317) (ab5c834)
• frontend: distinguish loading message authors from deleted users (#2325) (0ce210e)
• frontend: gate moderation on effective ban permission (#2316) (9f33cbc)
• frontend: remove room sidebar skeletons (#2348) (3831d8e)
• frontend: restore room group header hover behaviour (#2318) (8fdd8d7)
• frontend: retain room timelines across navigation (#2351) (1c7c61d)
• frontend: smooth initial page transition (#2350) (08dad42)
• runling: deliver one final reply from validated agent outcomes (#2320) (58ec39b)
• tooling: configure pnpm 11 and use Node LTS (#2310) (fd127dd)
• tooling: reclaim workspace ports before dev startup (#2353) (e4ab9ce)

Code Refactoring

• api: align protobuf type names and enforce lint (#2330) (55d1b31)
• api: align room and thread read-marker responses (#2333) (fd307e6)
• api: remove legacy notification policy RPCs (#2327) (005d614)
• api: rename call token creation RPC (#2335) (b776da8)
• api: return empty responses for success-only commands (#2331) (09d2d24)
• api: standardize resource updates on field masks (#2329) (fbd0607)
• api: use canonical thread follow response state (#2332) (3aee7ca)
• api: use explicit sidebar item references (#2334) (324bd4c)

0.5.0-alpha.7 (2026-09-05)

⚠ BREAKING CHANGES

• authz: require privileged mode for elevated permissions (#2291)
• realtime: add semantic events with exact snapshots and bounded resume (#2260)

Features

• add direct-message RBAC scope and threads (#2294) (9bc1fea)
• authz: require privileged mode for elevated permissions (#2291) (9455fd6)
• config: configure embedded NATS sync interval (#2293) (1a6d507)
• docker: add Compose backup and restore workflow (#2292) (62b4fbc)
• pwa: close handled push notifications in running clients (#2302) (f2dc7ee)
• realtime: add semantic events with exact snapshots and bounded resume (#2260) (34ad973)

Bug Fixes

• frontend: adapt dialog width to footer actions (#2289) (25daf57)
• frontend: give bot avatars a friendly adaptive robot badge (#2308) (a75f7f0)
• frontend: hide bot badges on tiny avatars (#2309) (fd9bd4d)
• frontend: synchronize PWA chrome with display theme (#2286) (475adc3)
• frontend: unify sidebar drop target frames (#2290) (92aa8df)

Performance Improvements

• ci: select checks by product boundary (#2299) (ca154ed)

0.5.0-alpha.6 (2026-09-02)

⚠ BREAKING CHANGES

• api: align UserService protobuf source (#2259)
• api: manage targeted user avatars (#2256)
• realtime: stop retransmitting room permissions (#2254)
• threads: turn My Threads into a conversation inbox (#2232)

Features

• api: manage targeted user avatars (#2256) (cb58f6d)
• auth: allow native loopback OAuth callbacks (#2255) (1fb7eb9)
• frontend: consolidate standard modal design (#2265) (be76cd2)
• mcp: clarify connected server role (#2250) (937aa8a)
• threads: turn My Threads into a conversation inbox (#2232) (3fc1d08)

Bug Fixes

• accounts: bypass own username cooldown (#2271) (17a43bf)
• dev: unify local embedded NATS data directory (#2279) (403e911)
• email: omit unnecessary SMTPUTF8 (#2273) (0595d00)
• frontend: hide inactive preview scroll fades (#2261) (eee27b7)
• messages: let managers bypass edit window (#2280) (0fe226f)
• notifications: decide from current projected state (#2253) (7e1b5c8)
• notifications: stop retrying absent signal deletion (#2258) (cd9042e)
• realtime: stop retransmitting room permissions (#2254) (fc03a98)

Code Refactoring

• api: align UserService protobuf source (#2259) (9df3011)

0.5.0-alpha.5 (2026-08-30)

⚠ BREAKING CHANGES

• neighbors: remove testimonials (#2245)

Features

• neighbors: remove testimonials (#2245) (7297d0d)

Bug Fixes

• mcp: serve configured public aliases (#2249) (2c76717)

0.5.0-alpha.4 (2026-08-30)

⚠ BREAKING CHANGES

• bots: support multiple named API keys (#2244)

Features

• bots: support multiple named API keys (#2244) (1ca3a9e)
• frontend: add bounded recursive neighbor discovery (#2230) (46c3045)
• frontend: add user menu action icons (#2222) (98a4a4c)
• frontend: finish the progressive Neighbor tapestry (#2234) (ba864c5)
• frontend: simplify push notification activation (#2228) (482fcf3)
• manage rooms from the server sidebar (#2219) (eb81244)
• mcp: add authenticated network integration (#2225) (45eaece)
• neighbors: add public testimonials (#2223) (a9f611c)
• neighbors: show recommendation sources (#2202) (4c2a9fb)

Bug Fixes

• ci: update only affected release PRs (#2203) (1ea5e54)
• frontend: layer jump button above scroll fade (#2209) (5ebd2d6)
• frontend: make notification dismissal safer (#2204) (19d99ba)
• frontend: recover unread markers after app resume (#2229) (36fa5ea)
• frontend: standardize settings form actions (#2201) (e2ce334)
• neighbors: hand incompatible servers off to their client (#2227) (4b951ea)
• neighbors: reject server origins (#2210) (69db917)

0.5.0-alpha.3 (2026-08-29)

Features

• frontend: finish version easter egg (#2192) (bef8139)
• frontend: restore configurable thread overlays (#2191) (9e89dd3)
• frontend: unify checkbox and choice row styling (#2199) (c3b3908)
• neighbors: add advertised server directory (#2183) (eebf6df)
• privacy: make timezone sharing opt-in (#2195) (f660d21)

Bug Fixes

• auth: extend email verification codes to 30 minutes (#2197) (11e16b3)
• ci: roll Go build cache between commits (#2188) (4685b4e)
• frontend: keep current room text regular (#2194) (eb44b8c)
• frontend: open settings on appearance (#2193) (32317e5)
• frontend: restore bright notification orange (#2189) (bede63d)
• frontend: restore visual composer caret (#2196) (3d29dc5)
• frontend: stop automatic app update reloads (#2198) (6caada1)

0.5.0-alpha.2 (2026-08-29)

Features

• frontend: add compact composer formatting shelf (#2182) (98c072b)

Bug Fixes

• auth: publish frontend CIMD for origin aliases (#2186) (3bc4dd1)
• frontend: divide member search from presence groups (#2187) (d7c2195)

Performance Improvements

• ci: shorten and harden validation (#2185) (68d68ba)

0.5.0-alpha.1 (2026-08-29)

⚠ BREAKING CHANGES

• authz: flatten interaction read permission (#2175)
• proto: separate internal storage contracts (#2162)
• proto: relocate live-only user payloads (#2153)
• account-deletion: let admins delete other users (#2134)
• profile: add rich user profiles and local time (#2149)
• auth: keep active users signed in (#2102)
• api: prevent bots from starting DMs (#2113)
• rbac: require message.read for channel content (#2100)
• auth: add renewable bearer sessions (#2092)
• auth: remove legacy cookie sessions (#2087)
• push: support remote-server web push (#2055)
• notifications: replace Notifications 1.0 with persistent notifications (#2061)
• notifications: replace Notifications 1.0 with persistent notifications (#2020)
• auth: require CIMD clients for remote access (#2013)
• search: rank cross-server Cmd-K results (#1862)
• cli: remove passphrase argument flags (#1705)
• metrics: retire legacy service inventory (#1703)
• video: add seekable HLS playback (#1624)
• realtime: add resumable server projection stream (#1588)

Features

• account-deletion: let admins delete other users (#2134) (37c9d89)
• add native social post previews (#1569) (3a1a72f)
• admin: expose asset cleanup health (#1401) (66d7de3)
• admin: report durable worker health (#1979) (cb697c9)
• api: add client-server compatibility discovery (#1586) (13e5318)
• api: support GET server discovery (#1396) (cf1a373)
• appconfig: extract shared configuration loading (#1856) (732d7b2)
• auth: add CIMD-enabled development stack (#1881) (5e0f471)
• auth: add renewable bearer sessions (#2092) (af87cc1)
• auth: add server invite links (#1983) (ce6b525)
• auth: allow operators to disable password login (#2042) (1df8f3e)
• auth: identify OAuth clients through CIMD (#2012) (8ac44de)
• auth: manage member-authorized OAuth clients (#2014) (2e6f1d0)
• auth: require CIMD clients for remote access (#2013) (792f9bb)
• auth: transfer Authling profiles to Chatto (#2076) (c91cac7)
• authz: add interaction-scoped message reads (#2114) (06396c1)
• bots: activate bots through notifications (#2127) (71b4577)
• bots: add baseline bot accounts (#2060) (3a66bcd)
• bots: add multiple incoming webhooks (#2137) (80a1126)
• bots: support owner reassignment (#2085) (d8d3dd9)
• calls: show lifecycle events in room timelines (#2032) (033130d)
• core: accelerate projection startup with encrypted snapshots (#1549) (0a1417d)
• core: add encrypted projection snapshot canary (#1488) (835737e)
• core: bound projection snapshot cleanup (#1538) (3e332d3)
• datacrypto: extract shared encryption primitives (#1853) (4235d7c)
• desktop: adapt game streams with simulcast (#2028) (dda3eb7)
• desktop: add experimental Deno CEF app (#1893) (ab25ca8)
• desktop: replace Deno Desktop with Electron (#1939) (362204f)
• desktop: sign and notarise macOS releases (#2048) (a0b4c0e)
• desktop: sign Windows releases (#2050) (6f0c875)
• desktop: stream macOS games through LiveKit (#2024) (ff3842b)
• desktop: unify native and browser screen sharing (#2034) (59aee59)
• dev: add bind-mounted Compose watch stack (#2038) (ab945c9)
• dev: add compiled Conductor run task (#1696) (6c3b83b)
• dev: replace Compose stack with Pitchfork (#2047) (41f4424)
• docs: publish stable and development channels (#1490) (67e15b1)
• email: add JMAP delivery transport (#1443) (49a090d)
• events: add durable pull-worker execution (#1972) (8777064)
• events: add selectable mutation consistency boundaries (#1962) (3db6575)
• events: extract shared framework module (#1833) (3195ffd)
• frontend: add Arabic and Hebrew translations (#1929) (3ca9bc4)
• frontend: add Chatto laser clicker easter egg (#1605) (8b5119d)
• frontend: add Chinese translations (#1745) (0c3b74b)
• frontend: add composer formatting shortcuts (#2103) (d7e36ad)
• frontend: add context menus for visible rooms (#1637) (9dbb684)
• frontend: add context-menu copy actions (#2090) (7cc495d)
• frontend: add inline message timestamps (#1558) (70fe404)
• frontend: add regional English locales (#1532) (adea7d1)
• frontend: add responsive resizable thread pane (#1927) (76e4757)
• frontend: add room group context menu (#1672) (942d117)
• frontend: add room-scoped message search (#1863) (0848a50)
• frontend: add server and room context menus (#1580) (fea2d34)
• frontend: add six language translations (#1908) (1787ded)
• frontend: add visual and Markdown composers (#2078) (fc7b4be)
• frontend: adopt TanStack Query for snapshot reads (#1870) (c747f83)
• frontend: animate segmented control selection (#1938) (b52e944)
• frontend: animate video processing state (#1718) (ba68708)
• frontend: authenticate remote servers in a popup (#1560) (8d5354c)
• frontend: consolidate app preferences into settings (#2126) (772e0f2)
• frontend: copy message text from action menus (#1598) (4e91f4e)
• frontend: debounce server message search (#1867) (81fb048)
• frontend: enforce Content Security Policy (#2143) (2b8a2f8)
• frontend: expand lazy-loaded locale support (#1537) (ffc9470)
• frontend: frame preference forms (#2104) (5b79973)
• frontend: highlight rich composer mode (#1412) (468cf14)
• frontend: improve pinned message presentation (#2016) (2f566ff)
• frontend: keep screen awake during calls (#2054) (98b0d9f)
• frontend: link user menu to server admin (#2147) (a2944f5)
• frontend: open created threads automatically (#2108) (4b909a1)
• frontend: open profiles in direct messages (#2164) (023bab1)
• frontend: polish navigation feedback (#2166) (2707586)
• frontend: prepare client shell for RTL locales (#1910) (06e4e24)
• frontend: refine permissions and scroll UI (#1685) (8a32ee0)
• frontend: refine room and thread dialogs (#2106) (5601b70)
• frontend: refine room group sidebar sections (#2037) (58e9daf)
• frontend: refresh semantic colors and buttons (#2159) (9d611a9)
• frontend: remove implicit auto-away presence (#2136) (2a0f470)
• frontend: render GFM tables (#1612) (c36644b)
• frontend: replace Paraglide with Lingua (#1918) (c55ea79)
• frontend: restructure settings and preferences (#2097) (53599fb)
• frontend: show attachment upload progress (#1689) (d6cb466)
• frontend: show inline message state markers (#2110) (53712e2)
• frontend: show server re-login status (#2105) (5111c2e)
• frontend: show user ID in account settings (#1921) (f189952)
• frontend: smooth sliding pane motion (#1936) (74859a7)
• frontend: submit dialog actions with Enter (#2107) (5f19ecf)
• frontend: suppress previews for angle-bracket links (#2144) (815299b)
• frontend: unify collapsible sidebar sections (#2045) (c8f9ec9)
• frontend: unify interactive control styling (#1708) (135c94e)
• frontend: unify message action menus (#1811) (38fe1cb)
• management: add resource-scoped room administration (#1630) (1647794)
• messages: add pinned channel messages (#1990) (2b3b187)
• natsruntime: extract embedded NATS lifecycle (#1845) (cb24279)
• notifications: add Badge and room-message delivery (#2119) (3dde347)
• notifications: add scoped policy matrix (#2111) (631c1f5)
• notifications: add test push action (#1480) (add1590)
• notifications: replace Notifications 1.0 with persistent notifications (#2020) (29c88d9)
• notifications: replace Notifications 1.0 with persistent notifications (#2061) (1f63f0f)
• profile: add rich user profiles and local time (#2149) (1203310)
• push: support remote-server web push (#2055) (4f7fbfc)
• rbac: require message.read for channel content (#2100) (f340f3b)
• rbac: treat everyone as scoped permission baseline (#1614) (0446d01)
• realtime: add resumable server projection stream (#1588) (a886853)
• rooms: add joinable room previews (#1546) (0e96593)
• rooms: add slow mode (#1980) (fd385b2)
• rooms: allow flexible Unicode names (#1986) (4b5d84c)
• rooms: manage channel room members (#1713) (2125b37)
• rooms: support Unicode room names (#1739) (1d1e850)
• search: add pluggable message search (#1632) (a9e1224)
• search: rank cross-server Cmd-K results (#1862) (73912ad)
• search: support filter-only queries (#1868) (0b14c9a)
• shields: add Shields.io community badges (#1467) (c6b5752)
• threading: add configurable room threading modes (#2091) (cf04c6d)
• threads: let authors create threads with root messages (#1906) (55ace4e)
• video: add durable asset processing workers (#1931) (9d66dc2)
• video: add seekable HLS playback (#1624) (1c07057)

Bug Fixes

• api: batch presence hydration (#1597) (8812cb9)
• api: omit deleted users from room member reads (#1964) (793d41c)
• api: prevent bots from starting DMs (#2113) (50d6d38)
• api: redact password verifiers from audit payloads (#2039) (f1eed9b)
• assets: mark NATS streams as non-seekable (#1607) (96febb8)
• auth: allow configured browser origin aliases (#2123) (6dba2ee)
• auth: keep active users signed in (#2102) (7227c87)
• auth: preserve legacy browser login (#2120) (65f929b)
• calls: share browser tab audio (4f27dd8)
• calls: show active DM calls in sidebar (#1676) (d894882)
• ci: publish desktop releases without checkout (#2033) (45f8a16)
• ci: time out media environment setup (#1486) (6e2373f)
• config: configure API response compression (#1502) (443f26f)
• core: decrypt projected user PII on demand (#1551) (879c39d)
• core: enforce exclusive asset attachments (#2041) (ee40655)
• core: fence message lifecycle mutations (#1925) (5c01511)
• core: forbid threads in direct messages (#1583) (896c74b)
• core: harden CallModel state ownership (#1771) (b698e72)
• core: make user key shredding crash-safe (#1973) (63f014f)
• core: migrate projection snapshot pointer lineage (#1572) (c6ca943)
• core: preserve cleared RBAC defaults (#1543) (be7b4d9)
• core: publish room layout after projection catch-up (#1966) (ccc31f9)
• core: re-authorize message mutations on OCC retries (#1960) (6df5f6e)
• core: recheck message authorization during OCC (#1922) (43219b3)
• core: recover safely after NATS outages (#1891) (2fd9674)
• core: retry link previews across validated IPs (#1577) (1fc1a19)
• desktop: identify bundled frontend builds (#2036) (cb8ebd8)
• desktop: make release verification reliable (#1902) (898eec2)
• desktop: require immutable GitHub OIDC subjects (#2051) (fdb260d)
• dev: bootstrap alice and bob in compose (#1907) (d67b4da)
• dev: build Lingua during workspace setup (#1951) (c23205d)
• dev: clean up archived workspace processes (#2121) (39100e8)
• dev: clean up Compose stack on archive (#1932) (5260dd7)
• dev: isolate Pitchfork workspace services (#2067) (967f0cc)
• dev: keep Conductor tasks in process group (#1699) (483f802)
• dev: release Conductor workspace ports (#1704) (356ca89)
• dev: restore mise chatto command routing (#1707) (8781cbe)
• dm: hide empty conversations until first message (#1635) (56b1916)
• dockercompose: restart services unless stopped (#2052) (0fcd020)
• dockercompose: use muxed LiveKit UDP port (#1503) (4974c63)
• dockercompose: validate init-env arguments (#2023) (f413260)
• docker: use real service health checks (#1761) (58d52d9)
• events: add bounded subject reads (#2002) (1a15202)
• events: require pointer projections (#2000) (4ee0c2b)
• events: validate snapshot bindings (#2001) (d323298)
• forward-port 0.4.9 changes (#1477) (e7119f7)
• frontend: accept all uploadable composer drops (#2066) (8f2821a)
• frontend: add direct thread message routes (#1524) (68bba96)
• frontend: align pane header actions (#2161) (9210ec8)
• frontend: allow app-wide mobile sidebar swipes (#1534) (a78110e)
• frontend: avoid blank line when enabling rich mode (#1548) (09aa9e3)
• frontend: balance room directory card padding (#2173) (aac58c8)
• frontend: cache PWA assets on demand (#1786) (ded8061)
• frontend: collapse invisible markdown spacing (#1539) (d3c8d19)
• frontend: default room sidebar to closed (#1633) (c751eb7)
• frontend: enforce mono voice call audio (#1489) (ae686d4)
• frontend: enforce server description limit (#1587) (17693d7)
• frontend: expire empty attachment tombstones (#1952) (410492c)
• frontend: hide context-free tombstones immediately (#2142) (54aa45e)
• frontend: hide deleted users from membership events (#1504) (65fa9a0)
• frontend: hydrate desktop server statuses on startup (#2029) (ef7375f)
• frontend: improve thread badge interaction (#1935) (3b9d4c7)
• frontend: keep emoji picker open on new messages (#1603) (2042625)
• frontend: keep mobile bottom sheets open on input focus (#1750) (54b8b57)
• frontend: keep permission matrices stable during refresh (#2178) (2329ead)
• frontend: keep realtime active while looking offline (#1606) (7cbbd9b)
• frontend: keep remote sessions live without origin auth (#1877) (55aed52)
• frontend: keep video close button within iOS safe area (#1618) (cf4210a)
• frontend: lazily load room attachments (#1615) (6a5b7e0)
• frontend: log auth/session degradation events with console.warn (#2093) (811e624)
• frontend: move account settings to top (#2125) (02fa2b8)
• frontend: parse pasted markdown in composer (#1714) (c571f70)
• frontend: preserve composer drag selections (#2053) (ededb95)
• frontend: preserve expanded timeline groups (#1483) (599696e)
• frontend: preserve inline ordered-list content (#2010) (27980b2)
• frontend: preserve pasted Markdown links (#1639) (40a496b)
• frontend: preserve pasted message line breaks (#1609) (07eb5c2)
• frontend: preserve unusual video aspect ratios (#1521) (106ab5f)
• frontend: preserve video playback on reactions (#1622) (2b75984)
• frontend: prevent premature attachment URL refreshes (#1920) (034eb49)
• frontend: proxy OAuth token endpoint in development (#2101) (38da936)
• frontend: reduce production build memory (#1912) (1f108cf)
• frontend: restore branded PWA install icons (#1478) (5c915b1)
• frontend: restore neutral server selection (#2170) (769b3de)
• frontend: restore POST server discovery (#1528) (8534ba7)
• frontend: restore subtle design colors (#1545) (659be37)
• frontend: scope thread click-outside dismissal (#1595) (ae5b9f9)
• frontend: separate member sidebar scrolling (#2177) (c41c124)
• frontend: shorten server navigation heading (#2148) (f57af58)
• frontend: show pending permission updates (#1540) (a33a25e)
• frontend: simplify copy ID affordance (#2088) (8d1ba0c)
• frontend: size ordered list markers adaptively (#1911) (862f49c)
• frontend: stabilise composer word wrapping (#1636) (0e7dde0)
• frontend: stabilise sign-in and chat landing states (#2160) (5e46cd3)
• frontend: support remote-only sessions (#1530) (e7b90c3)
• frontend: unify admin panel and table surfaces (#1677) (0289c34)
• frontend: use origin host for message links (#1526) (b4b872c)
• frontend: use server logo for browser icons (#1506) (63c7fde)
• i18n: restore regional locale fallback chains (#1987) (d98ecf7)
• media: stabilize attachment URLs and playback (#1626) (8b8c63b)
• notifications: avoid authorization fence events (#2115) (003f54a)
• presence: handle constant wrong-sequence errors (#1511) (07a87f1)
• push: prevent authenticated SSRF (#2040) (b6aa43c)
• push: prioritize visible notifications (

Note truncated.

0.4.24 (2026-09-08)

Bug Fixes

• assets: backport 10 MiB upload chunks to 0.4 (#2314) (4536f82)
• frontend: backport iOS video safe-area fix to 0.4 (#2319) (1844db9)

0.4.23 (2026-09-03)

Bug Fixes

• accounts: backport username cooldown bypass to 0.4 (#2272) (60057a1)
• email: backport SMTPUTF8 handling to 0.4 (#2274) (5565d4e)
• frontend: backport preview scroll fades to 0.4 (#2263) (987569c)
• frontend: synchronize PWA chrome with display theme (#2288) (cb3d926)

0.4.22 (2026-08-30)

Bug Fixes

• frontend: backport resilient unread markers to 0.4 (#2231) (db6bbc1)

0.4.21 (2026-08-11)

Bug Fixes

• api: omit deleted users from room member reads (#1963) (b0ddf03)
• frontend: preserve inline ordered-list content (#2009) (aab2dec)

0.4.20 (2026-08-08)

Bug Fixes

• calls: restore missed DM call indicators (#1855) (1e4cbdf)
• frontend: backport adaptive ordered list markers (#1913) (7344942)
• frontend: backport on-demand PWA caching (#1791) (5233a9a)
• push: prioritize visible notifications (#1930) (57abecd)
• realtime: use valid fatal close code (#1896) (00d0513)

0.4.19 (2026-07-28)

Bug Fixes

• frontend: reconcile My Threads unread indicator (#1760) (6e6629c)
• threads: reject echoes as thread roots (#1758) (617bfba)

0.4.18 (2026-07-27)

Bug Fixes

• performance: reduce viewer requests on first load (#1754) (0c9248e)

0.4.17 (2026-07-27)

Bug Fixes

• frontend: keep mobile bottom sheets open on input focus (#1750) (4201a19)
• reduce authenticated startup latency (#1753) (04bd566)

0.4.16 (2026-07-23)

Bug Fixes

• threads: distinguish unread and notified thread badges (#1715) (7f9c3d1)

0.4.15 (2026-07-23)

Bug Fixes

• frontend: correct My Threads unread badge (#1638) (fd204f1)
• frontend: parse pasted markdown in composer (#1711) (2aef711)
• frontend: preserve video playback on reactions (#1619) (e445af0)
• frontend: restore message editor accessible label (#1640) (62456aa)
• frontend: stabilise composer word wrapping (#1636) (bf3b0e6)

0.4.14 (2026-07-19)

Bug Fixes

• assets: mark NATS streams as non-seekable (#1607) (438d16d)
• frontend: keep emoji picker open on new messages (#1603) (b5c88a0)
• frontend: keep realtime active while looking offline (#1606) (233fcc6)
• frontend: preserve pasted message line breaks (#1609) (8d3fd4b)

0.4.13 (2026-07-17)

Features

• calls: share browser tab audio (#1578) (8deb1d8)

Bug Fixes

• api: batch presence hydration (#1594) (d23d420)
• core: forbid threads in direct messages (#1583) (fd551a8)
• core: retry link previews across validated IPs (#1577) (8c4cd57)
• e2e: preserve thread from room list clicks (6de0b5d)
• frontend: add notifications return navigation (#1570) (5cc9e90)
• frontend: scope thread click-outside dismissal (#1592) (6bde913)

Miscellaneous Chores

• release: keep release-0.4 on patch line (e4ff20a)

v0.4.12

Compare

Choose a tag to compare

Bug Fixes

• frontend: add direct thread message routes (#1524) (6f644a0)
• frontend: preserve unusual video aspect ratios (#1521) (2f845af)
• frontend: support remote-only sessions (#1530) (af84281)
• frontend: use origin host for message links (#1526) (1448ecd)
• frontend: use server logo for browser icons (#1506) (41cffa9)
• presence: handle constant wrong-sequence errors (#1511) (c27cbee)
• security: restrict public server assets (#1499) (0a10c3f)

Bug Fixes

• ci: time out media environment setup (#1486) (718b836)
• config: configure API response compression (#1502) (c8401d4)
• dockercompose: use muxed LiveKit UDP port (#1503) (61734af)
• frontend: enforce mono voice call audio (#1489) (8c10471)
• frontend: hide deleted users from membership events (#1504) (4f0439e)
• frontend: preserve expanded timeline groups (#1483) (efa67a9)
• frontend: restore branded PWA install icons (#1478) (f5740ab)

Bug Fixes

• auth: reject usernames ending in dots (#1474) (d5fb5ce)
• ci: use pushed branch as protobuf base (f385682)
• frontend: space grouped event conjunctions (#1469) (c7cc0d9)
• release: recover 0.4.9 publication (#1475) (1dd7dde)

Performance Improvements

• projections: increase replay pull window (#1473) (85fe7c6)

Bug Fixes

• api: bound message attachment asset IDs (#1458) (f22b343)
• auth: keep provider redirects credential-free (#1437) (e9c5ebf)
• auth: preserve sessions during storage outages (#1431) (3442f8a)
• auth: throttle password reset requests (#1441) (67dd1dc)
• backup: harden archive creation and restore (#1435) (d07672c)
• cli: require explicit passphrase sources (#1451) (6b8b24e)
• frontend: embed main build version (#1463) (21a20a8)
• frontend: label deleted users consistently (#1452) (8e04235)
• release: publish sortable main image tags (030db55)
• security: harden realtime auth and request handling (#1433) (75c5a24)
• security: require explicit proxy trust (#1447) (234862f)
• tls: secure autocert cache permissions (#1461) (cef9d29)

Bug Fixes

• frontend: show server logo before login (#1416) (577cf17)
• frontend: stabilize linked-message navigation (#1421) (721c974)
• frontend: support file drops in threads (#1417) (6166dc0)
• release: add next prerelease channel (#1414) (6312e39)

Performance Improvements

• frontend: speed up large room member loading (#1423) (6d4ce8a)

Bug Fixes

• api: validate custom status emoji (#1408) (cb62f72)

Performance Improvements

• projections: bound replay idempotency memory (#1407) (7dd3841)
• projections: remove redundant string interning (#1411) (c69ef30)

Bug Fixes

• assets: recover physical deletion from events (#1394) (e4d2a85)
• core: remove room leavers from voice calls (#1373) (e0b1ad7)
• docker: support read-only root filesystems (#1403) (76462a4)
• docs: correct deployment guide redirect (#1395) (aded4e0)
• frontend: add optimistic room reads (#1376) (22ffc62)
• frontend: keep signed-out servers navigable (#1397) (c3e281a)
• frontend: preserve optimistic reads across refresh (#1393) (b77270d)
• frontend: respect browser region in timestamps (#1387) (7ca3b92)
• release: restore Windows builds (#1405) (f95a668)

Performance Improvements

• realtime: bound WebSocket compression memory (#1400) (c794e59)
• realtime: reduce per-connection memory (#1389) (963287d)

Bug Fixes

• api: skip invalid followed-thread rooms (#1366) (90a5918)
• docs: add per-page social previews (#1370) (69eab4a)
• frontend: allow any file in attachment picker (#1364) (5b20e17)
• frontend: compress displayed images (#1361) (5539816)
• messages: expire context-free tombstones (#1365) (98123b5)
• notifications: harden delivery and synchronization (#1363) (b46e012)
• notifications: prevent stale push delivery and badges (#1368) (3c588aa)
• pwa: use server logo for install icons (#1371) (49b26e9)

Bug Fixes

• api: tune room member page defaults (#1354) (07675ee)
• backfill sparse room timelines (#1353) (f8adf6a)
• docs: add community chat link (#1344) (10c1eec)
• frontend: add optimistic reactions (#1349) (beaf180)
• frontend: harden login redirect path validation (#1340) (01db3e3)
• frontend: stabilize unread and resume refresh (#1346) (d2f185a)
• frontend: use opaque PWA install icons (#1352) (afd025c)
• metrics: track realtime websocket connections (#1356) (fd3ca58)
• pwa: stop preserving push badge hints (#1343) (d9e50a3)
• realtime: align heartbeat cadence with client stall detection (#1342) (c0e0d23)

Bug Fixes

• api: tolerate invalid presence user ids (#1336) (76f1bef)
• frontend: render inline room join screen (#1335) (af7c831)
• frontend: separate input mode from viewport size (#1339) (217da21)
• frontend: unify user card presence source (#1334) (dde9b14)
• push: add declarative web push payloads (#1338) (ede325d)

Bug Fixes

• api: log internal connect errors (#1329) (c292bac)
• frontend: adopt menu shell for toasts (#1323) (4982463)
• frontend: align message footer row spacing (#1331) (02841fe)
• frontend: hydrate room lifecycle event actors (#1319) (a9abe8c)
• frontend: improve chat link navigation (#1333) (a88133f)
• frontend: improve reaction user popovers (#1328) (2d1af04)
• frontend: refresh recent emoji quick reactions (#1327) (fab2ae4)
• frontend: simplify push notification click routing (#1322) (21bff8d)
• frontend: simplify room resume catch-up (#1332) (b7d32ce)
• frontend: stabilize mobile sidebar gestures (#1324) (1cbd3c5)
• read-state: reduce no-op read signals (#1330) (244e4c8)
• server: reduce routine info logs (#1325) (8849fd7)

⚠ BREAKING CHANGES

• api: consolidate ConnectRPC surface (#1306)
• api: clean up server assets calls and includes (#1303)
• api: consolidate shared api shapes (#1302)
• api: consolidate shared public API types (#1299)
• api: consolidate public ConnectRPC API (#1295)
• api: polish ConnectRPC API for 0.4.0 (#1224)
• operator: add socket-backed operator user administration (#1164)
• api: reshape server profile responses (#1185)
• api: split ConnectRPC packages (#1179)
• api: replace GraphQL with ConnectRPC (#1166)
• api: use optional timeline presence fields (#1110)

Features

• add universal rooms (#1046) (0b8c5cb)
• admin: filter event log (#1056) (d8bd280)
• api: add ConnectRPC asset uploads (#1249) (f97f1d0)
• api: add ConnectRPC DM start (#1157) (c46ef79)
• api: add ConnectRPC public API PoC (#1067) (7aeb8f7)
• api: add ConnectRPC reflection (#1182) (a93324c)
• api: add ConnectRPC room timeline PoC (#1074) (920fcaa)
• api: add protobuf realtime websocket (#1158) (9e8e34c)
• api: add resource batch reads (#1232) (8a04ae0)
• api: clean up ConnectRPC surface (#1171) (03c42af)
• api: clean up ConnectRPC surface (#1178) (b1b6e28)
• api: clean up server assets calls and includes (#1303) (e960def)
• api: consolidate membership services (#1293) (7ed268c)
• api: consolidate shared api shapes (#1302) (4429009)
• api: consolidate shared public API types (#1299) (1ec2015)
• api: extract generated TypeScript clients (#1183) (3480cda)
• api: extract TypeScript API client (#1184) (b38b9a5)
• api: migrate reactions to ConnectRPC (#1128) (161f51c)
• api: polish ConnectRPC API for 0.4.0 (#1224) (06f4361)
• api: port message posting to ConnectRPC (#1093) (011018b)
• api: port read state and thread follow to ConnectRPC (#1087) (f2128d6)
• api: replace GraphQL with ConnectRPC (#1166) (3dd3fa6)
• api: reshape server profile responses (#1185) (96bde6e)
• api: split ConnectRPC packages (#1179) (6ec286a)
• api: use optional timeline presence fields (#1110) (5c1406f)
• auth: add SSO account creation and linking (#1167) (61723e9)
• auth: type runtime credentials (#1195) (5f0ebe4)
• config: configure SMTP TLS verification (#1159) (1f5c8b0)
• connectrpc: add message management API (#1146) (c07b049)
• connectrpc: add room directory service (#1138) (c1f13cf)
• connectrpc: add room lifecycle service (#1134) (3f2b3a9)
• connectrpc: port thread history reads (#1083) (4b81b4d)
• core: persist link preview assets via storage backend (#1060) (005deb1)
• core: store thread follows in EVT (#1233) (01a2bb3)
• dev: add Mailpit to mise dev (#1238) (0d07f7e)
• docs: add release notes pages (#1180) (6418471)
• exporter: add deployment-wide prometheus exporter (#1059) (5aa29c7)
• frontend: add multi-image attachment gallery (#1241) (d8338c5)
• frontend: add Paraglide-based client-shell i18n (#1077) (1a4ab07)
• frontend: add Trusted Types markdown policy (#1307) (47b9060)
• frontend: consolidate frontend design system (#1053) (7fc39ab)
• frontend: improve admin member details (#1057) (8c8ccce)
• frontend: maximize call pane (#1240) (7aaa34a)
• frontend: move UI strings into i18n catalogs (#1084) (d310382)
• frontend: refresh admin system dashboard (#1160) (5c54899)
• frontend: refresh toast styling (#1260) (1b728e5)
• frontend: send typing indicators with ConnectRPC (#1155) (1a131ee)
• frontend: show call participants in room sidebar (#1036) (8cd0858)
• frontend: show reaction names in popups (#1044) (e141b74)
• frontend: show room descriptions in header (#1037) (44f9c67)
• frontend: use ConnectRPC for message writes (#1153) (4b34f34)
• frontend: use ConnectRPC for room commands (#1150) (bfff68e)
• operator: add socket-backed operator user administration (#1164) (6209795)
• presence: add user-controlled presence modes (#1095) (9e8f696)
• profile: add custom user statuses (#1081) (1d1d7d2)

Bug Fixes

• api: address 0.4.0 surface review findings (#1228) (bd054ff)
• api: align ConnectRPC permission exposure (#1246) (cf2eca7)
• api: centralize Connect room RBAC in core (#1149) (8ba5b0c)
• api: close ConnectRPC RBAC gaps (#1207) (da0b129)
• api: include user status in generated docs (#1092) (52521fa)
• api: make ConnectRPC plumbing idiomatic (#1123) (338f573)
• api: preserve offline presence in snapshots (#1172) (7fce244)
• api: tighten ConnectRPC caller auth (#1126) (bb8c10d)
• assets: prevent protected attachment caching (#1261) (e3c6eed)
• assets: serve protected assets through stable gateway (#1264) (744e93e)
• attachments: crop extreme image thumbnails (#1181) (d5dd244)
• auth: add structured unauthenticated GraphQL errors (#1048) (510c07d)
• auth: reject empty-user runtime credentials (#1201) (43b569c)
• calls: preserve call on tab takeover (#1284) (451929d)
• ci: gate release-please on green ci (#1135) (4decb0f)
• conductor: use workspace port for Storybook (#1290) (c5ba4dc)
• connectapi: harden message post migration (#1097) (b15fb14)
• connectapi: harden timeline and thread read handling (#1117) (ba027fe)
• connectrpc: cap request message size (#1102) (a773531)
• connectrpc: reject missing read anchors (#1109) (f2f68b9)
• core: complete service inventory metrics (#1130) (9bc89f3)
• core: prevent read marker regressions (#1107) (cb81d58)
• dockercompose: enable LiveKit TURN relay (#1190) (51eb5e7)
• docs: keep release note cards in grid lanes (#1204) (a6c79df)
• frontend: address svelte guidance review (#1154) (d8c4010)
• frontend: align call control button colors (#1085) (4b7f37e)
• frontend: align muted call participant icon (#1050) (68cea04)
• frontend: clarify echo reply actions (#1253) (5a2b264)
• frontend: clarify iOS PWA push setup (#1192) (2416a41)
• frontend: clarify remote push notification support (#1105) (bfdbdea)
• frontend: clear call-wide mode on notification navigation (#1291) (db09a62)
• frontend: constrain current user card height (#1239) (1b536b9)
• frontend: defer camera permission until enabled (#1243) (2145a95)
• frontend: defer unread separator until return to the room (#1079) (9535694)
• frontend: handle API auth failures gracefully (#1269) (e82c554)
• frontend: harden asset proxy token handling (#1054) (8797c65)
• frontend: ignore stale DM member loads when switching rooms (#1065) (b4264b7)
• frontend: improve call presence indicators (#1257) (696a92e)
• frontend: improve extreme image thumbnails (#1227) (d5c596d)
• frontend: improve LiveKit media error handling (#1281) (94a86c0)
• frontend: improve unread channel contrast (#1089) (74247b4)
• frontend: localize date formatting (#1242) (cfc96ec)
• frontend: make attachment remove control subtle (#1265) (6537c27)
• frontend: make scrollbars follow selected theme (#1152) (9c5fa16)
• frontend: polish error and missing media states (#1267) (b9dabba)
• frontend: preserve touch composer line breaks (#1194) (8c62c70)
• frontend: quiet console warning noise (#1280) (4df7b85)
• frontend: reconcile notification badge dismissals (#1058) (13c7a6e)
• frontend: reconcile PWA notification badges (#1229) (e44645e)
• frontend: refresh messages after local deletions (#1148) (cefc22a)
• frontend: remove redundant universal room badge (#1052) (5f6131e)
• frontend: reset inline code state when composer clears (#1251) (0dddeaa)
• frontend: restore circular avatars with stable presence dots (#1252) (14b15b9)
• frontend: restore default text smoothing (#1268) (b3a6dc3)
• frontend: restrict same-tab message links (#1068) (d43d23f)
• frontend: restyle reply attribution preview (#1140) (909c1f4)
• frontend: share unread marker lifecycle with threads (#1310) (07c3601)
• frontend: show loading state for call media toggles (#1237) (9063832)
• frontend: stabilize new messages separator (#1308) (c35ed86)
• frontend: stabilize tab resume catch-up (#1288) (b70916d)
• frontend: style room member search clear button (#1226) (e43f615)
• frontend: submit simple message edits with enter (#1129) (f5651b4)
• frontend: sync presence badge across tabs (#1301) (5fbfb22)
• frontend: sync room thread follow bell state (#1121) (4048f23)
• frontend: use direct ticketed asset URLs (#1312) (b41eb1d)
• frontend: use full-width image galleries (#1247) (f5fe88a)
• frontend: use semantic presence colors (#1259) (ccf64db)
• frontend: wire UI strings to i18n (#1225) (7eafcd3)
• media: preserve video aspect ratios (#1254) (8a85f0a)
• messages: validate reply targets before posting (#1176) (2919a1a)
• notifications: clear read notifications server-side (#1297) (c6f3c30)
• notifications: preserve unread badge state across dismissals (#1069) (03444e3)
• pwa: reduce service worker reload churn (#1187) (5489e47)
• reactions: canonicalize echo reaction targets (#1272) (2b87044)
• release: publish release before updating tap (#1298) (c5c8aa6)
• voice: scope LiveKit observations to active calls (#1049) (dcd95c8)

Performance Improvements

• build: improve frontend and CLI cache reuse (#1106) (f22da3a)
• core: cache unwrapped DEKs per request (#1193) (0623831)
• core: slim timeline projection memory (#1287) (cd026ff)
• frontend: load room members in larger batches (#1206) (f465a09)
• frontend: split chat code from app chrome (#1103) (4a4a4de)

Code Refactoring

• api: consolidate ConnectRPC surface (#1306) (900233d)
• api: consolidate public ConnectRPC API (#1295) (a0ab823)

⚠ BREAKING CHANGES

• api: consolidate ConnectRPC surface (#1306)
• api: clean up server assets calls and includes (#1303)
• api: consolidate shared api shapes (#1302)
• api: consolidate shared public API types (#1299)

Features

• api: clean up server assets calls and includes (#1303) (e960def)
• api: consolidate shared api shapes (#1302) (4429009)
• api: consolidate shared public API types (#1299) (1ec2015)

Bug Fixes

• frontend: sync presence badge across tabs (#1301) (5fbfb22)
• release: publish release before updating tap (#1298) (c5c8aa6)

Code Refactoring

• api: consolidate ConnectRPC surface (#1306) (900233d)

⚠ BREAKING CHANGES

• api: consolidate public ConnectRPC API (#1295)

Features

• api: consolidate membership services (#1293) (7ed268c)

Bug Fixes

• calls: preserve call on tab takeover (#1284) (451929d)
• conductor: use workspace port for Storybook (#1290) (c5ba4dc)
• frontend: clear call-wide mode on notification navigation (#1291) (db09a62)
• frontend: improve LiveKit media error handling (#1281) (94a86c0)
• frontend: quiet console warning noise (#1280) (4df7b85)
• frontend: stabilize tab resume catch-up (#1288) (b70916d)
• notifications: clear read notifications server-side (#1297) (c6f3c30)

Performance Improvements

• core: slim timeline projection memory (#1287) (cd026ff)

Code Refactoring

• api: consolidate public ConnectRPC API (#1295) (a0ab823)

Features

• frontend: refresh toast styling (#1260) (1b728e5)

Bug Fixes

• assets: prevent protected attachment caching (#1261) (e3c6eed)
• assets: serve protected assets through stable gateway (#1264) (744e93e)
• frontend: handle API auth failures gracefully (#1269) (e82c554)
• frontend: make attachment remove control subtle (#1265) (6537c27)
• frontend: polish error and missing media states (#1267) (b9dabba)
• frontend: restore default text smoothing (#1268) (b3a6dc3)
• frontend: use semantic presence colors (#1259) (ccf64db)
• reactions: canonicalize echo reaction targets (#1272) (2b87044)

Features

• api: add ConnectRPC asset uploads (#1249) (f97f1d0)

Bug Fixes

• api: align ConnectRPC permission exposure (#1246) (cf2eca7)
• frontend: clarify echo reply actions (#1253) (5a2b264)
• frontend: improve call presence indicators (#1257) (696a92e)
• frontend: reset inline code state when composer clears (#1251) (0dddeaa)
• frontend: restore circular avatars with stable presence dots (#1252) (14b15b9)
• frontend: use full-width image galleries (#1247) (f5fe88a)
• media: preserve video aspect ratios (#1254) (8a85f0a)

⚠ BREAKING CHANGES

• api: polish ConnectRPC API for 0.4.0 (#1224)

Features

• api: add resource batch reads (#1232) (8a04ae0)
• api: polish ConnectRPC API for 0.4.0 (#1224) (06f4361)
• core: store thread follows in EVT (#1233) (01a2bb3)
• dev: add Mailpit to mise dev (#1238) (0d07f7e)
• frontend: add multi-image attachment gallery (#1241) (d8338c5)
• frontend: maximize call pane (#1240) (7aaa34a)

Bug Fixes

• api: address 0.4.0 surface review findings (#1228) (bd054ff)
• api: close ConnectRPC RBAC gaps (#1207) (da0b129)
• docs: keep release note cards in grid lanes (#1204) (a6c79df)
• frontend: constrain current user card height (#1239) (1b536b9)
• frontend: defer camera permission until enabled (#1243) (2145a95)
• frontend: improve extreme image thumbnails (#1227) (d5c596d)
• frontend: localize date formatting (#1242) (cfc96ec)
• frontend: reconcile PWA notification badges (#1229) (e44645e)
• frontend: show loading state for call media toggles (#1237) (9063832)
• frontend: style room member search clear button (#1226) (e43f615)
• frontend: wire UI strings to i18n (#1225) (7eafcd3)

Performance Improvements

• frontend: load room members in larger batches (#1206) (f465a09)

Bug Fixes

• auth: reject empty-user runtime credentials (#1201) (43b569c)