⚠ BREAKING CHANGES

• api: reshape server profile responses (#1185)

Features

• api: reshape server profile responses (#1185) (96bde6e)

⚠ BREAKING CHANGES

• api: split ConnectRPC packages (#1179)

Features

• api: add ConnectRPC reflection (#1182) (a93324c)
• api: clean up ConnectRPC surface (#1171) (03c42af)
• api: clean up ConnectRPC surface (#1178) (b1b6e28)
• api: extract generated TypeScript clients (#1183) (3480cda)
• api: extract TypeScript API client (#1184) (b38b9a5)
• api: split ConnectRPC packages (#1179) (6ec286a)
• docs: add release notes pages (#1180) (6418471)

Bug Fixes

• api: preserve offline presence in snapshots (#1172) (7fce244)
• attachments: crop extreme image thumbnails (#1181) (d5dd244)
• messages: validate reply targets before posting (#1176) (2919a1a)

⚠ BREAKING CHANGES

• api: replace GraphQL with ConnectRPC (#1166)

Features

• api: add ConnectRPC DM start (#1157) (c46ef79)
• api: add protobuf realtime websocket (#1158) (9e8e34c)
• api: replace GraphQL with ConnectRPC (#1166) (3dd3fa6)
• config: configure SMTP TLS verification (#1159) (1f5c8b0)
• connectrpc: add message management API (#1146) (c07b049)
• connectrpc: add room directory service (#1138) (c1f13cf)
• connectrpc: add room lifecycle service (#1134) (3f2b3a9)
• frontend: refresh admin system dashboard (#1160) (5c54899)
• frontend: send typing indicators with ConnectRPC (#1155) (1a131ee)
• frontend: use ConnectRPC for message writes (#1153) (4b34f34)
• frontend: use ConnectRPC for room commands (#1150) (bfff68e)

Bug Fixes

• api: centralize Connect room RBAC in core (#1149) (8ba5b0c)
• ci: gate release-please on green ci (#1135) (4decb0f)
• frontend: address svelte guidance review (#1154) (d8c4010)
• frontend: make scrollbars follow selected theme (#1152) (9c5fa16)
• frontend: refresh messages after local deletions (#1148) (cefc22a)
• frontend: restyle reply attribution preview (#1140) (909c1f4)

⚠ BREAKING CHANGES

• api: use optional timeline presence fields (#1110)

Features

• api: migrate reactions to ConnectRPC (#1128) (161f51c)
• api: use optional timeline presence fields (#1110) (5c1406f)
• presence: add user-controlled presence modes (#1095) (9e8f696)

Bug Fixes

• api: make ConnectRPC plumbing idiomatic (#1123) (338f573)
• api: tighten ConnectRPC caller auth (#1126) (bb8c10d)
• connectapi: harden timeline and thread read handling (#1117) (ba027fe)
• connectrpc: cap request message size (#1102) (a773531)
• connectrpc: reject missing read anchors (#1109) (f2f68b9)
• core: complete service inventory metrics (#1130) (9bc89f3)
• core: prevent read marker regressions (#1107) (cb81d58)
• frontend: clarify remote push notification support (#1105) (bfdbdea)
• frontend: submit simple message edits with enter (#1129) (f5651b4)
• frontend: sync room thread follow bell state (#1121) (4048f23)

Performance Improvements

• build: improve frontend and CLI cache reuse (#1106) (f22da3a)
• frontend: split chat code from app chrome (#1103) (4a4a4de)

Features

• api: port message posting to ConnectRPC (#1093) (011018b)
• api: port read state and thread follow to ConnectRPC (#1087) (f2128d6)
• connectrpc: port thread history reads (#1083) (4b81b4d)
• frontend: add Paraglide-based client-shell i18n (#1077) (1a4ab07)
• frontend: move UI strings into i18n catalogs (#1084) (d310382)
• profile: add custom user statuses (#1081) (1d1d7d2)

Bug Fixes

• api: include user status in generated docs (#1092) (52521fa)
• connectapi: harden message post migration (#1097) (b15fb14)
• frontend: align call control button colors (#1085) (4b7f37e)
• frontend: defer unread separator until return to the room (#1079) (9535694)
• frontend: improve unread channel contrast (#1089) (74247b4)

Features

• add universal rooms (#1046) (0b8c5cb)
• admin: filter event log (#1056) (d8bd280)
• api: add ConnectRPC public API PoC (#1067) (7aeb8f7)
• api: add ConnectRPC room timeline PoC (#1074) (920fcaa)
• core: persist link preview assets via storage backend (#1060) (005deb1)
• exporter: add deployment-wide prometheus exporter (#1059) (5aa29c7)
• frontend: consolidate frontend design system (#1053) (7fc39ab)
• frontend: improve admin member details (#1057) (8c8ccce)
• frontend: show call participants in room sidebar (#1036) (8cd0858)
• frontend: show reaction names in popups (#1044) (e141b74)
• frontend: show room descriptions in header (#1037) (44f9c67)

Bug Fixes

• auth: add structured unauthenticated GraphQL errors (#1048) (510c07d)
• frontend: align muted call participant icon (#1050) (68cea04)
• frontend: harden asset proxy token handling (#1054) (8797c65)
• frontend: ignore stale DM member loads when switching rooms (#1065) (b4264b7)
• frontend: reconcile notification badge dismissals (#1058) (13c7a6e)
• frontend: remove redundant universal room badge (#1052) (5f6131e)
• frontend: restrict same-tab message links (#1068) (d43d23f)
• notifications: preserve unread badge state across dismissals (#1069) (03444e3)
• voice: scope LiveKit observations to active calls (#1049) (dcd95c8)

Bug Fixes

• downgrade invalid session cookie logs (#1029) (5bbbe88)
• improve push notification routing (#1031) (bda7d3d)
• sidebar: server-local sidebar links now open in the same window (#1041) (b206d56)

Performance Improvements

• add opt-in profiling diagnostics (#1038) (ca2a2f6)
• fast-path projection stream sequence parsing (#1042) (ad28708)
• optimize projection dispatch matching (#1040) (8f40573)
• optimize projection replay and memory (#1032) (f0118ed)
• replay projections through shared EVT fanout (#1035) (15d322d)

Bug Fixes

• remove graphql error logging (#1026) (bb3071c)

Performance Improvements

• reduce room timeline projection retention (#1016) (dd779b7)

Features

• add LiveKit screen sharing (#1021) (068abda)
• frontend: add call join leave sound cues (#1023) (1cf9e85)
• frontend: add display theme preference (#1018) (ed7e276)

Bug Fixes

• calls: improve LiveKit join resilience (#1022) (e9a0e55)
• frontend: make thread badges native links (#1020) (e8c3642)
• hide call lifecycle events from room history (#1017) (5315770)

Features

• add scoped server sign-out (#1006) (1fc081b)
• frontend: refresh call sidebar UI (#1001) (cd48c1a)

Bug Fixes

• frontend: clear stale mention autocomplete state (#1015) (9132ab6)
• frontend: eagerly load room members (#1009) (d76ae9a)
• frontend: prevent room badge clipping (#1012) (5c86be7)
• reconcile in-app notification badges (#1008) (be8cb02)

Performance Improvements

• share projection event consumers (#1011) (31e08fc)

Performance Improvements

• optimize projection startup paths (#1005) (b69f2ef)

Features

• monitor projection startup duration (#1004) (3c6083c)

Bug Fixes

• frontend: preserve nested reply quotes (#1000) (5f97896)
• graphql: enforce room move group permissions (#987) (1364b7b)

Features

• quote selected text when replying (#978) (4844e89)

Bug Fixes

• correct push notification deep links (#982) (d6bfe9f)
• frontend: add embed frame vertical spacing (#976) (4137f7f)
• frontend: echo local room posts after send (#980) (33f0f46)
• frontend: remove server name from room header (#979) (5e58bd5)
• frontend: tighten mobile message action sheet (#981) (e30a153)

⚠ BREAKING CHANGES

• sidebar: list rooms visible via room.list (#961)

Features

• add simple and rich composer modes (#974) (ec5bcea)
• gate message attachments with message.attach (#966) (2870f0f)
• improve linked message previews (#970) (aecdb1b)
• improve room member loading and search (#963) (33bd45a)
• messages: add copy link menu action (#969) (2afdee2)
• sidebar: list rooms visible via room.list (#961) (fe27c06)
• simplify web push opt-in (#971) (6abb0ce)

Bug Fixes

• composer: preserve trailing hashes in headings (#967) (3028cb2)
• frontend: align chat control border radii (#968) (5bc44df)
• frontend: improve blockquote styling (#973) (441706c)
• frontend: route room badges from scoped notifications (#972) (8bb1cc1)
• tighten sidebar item spacing (#975) (8aab581)

Features

• add notification sound shaping controls (#962) (585fa4b)
• composer: submit with Ctrl/Cmd+Enter (#960) (461f911)

Bug Fixes

• composer: keep autolink boundaries editable (#964) (2170f5f)
• frontend: restore push notification routing (#957) (b000610)
• support configurable Docker runtime user (#959) (edb4595)

Features

• group room files by date (#937) (b13674b)
• sidebar: add group sidebar links (#915) (aea26da)

Bug Fixes

• log graphql errors (#955) (692bfc9)
• represent deleted room members (#934) (91ad1dc)

Features

• add room files sidebar (#920) (23e3415)
• cli: remove reset command (60502e3)
• cli: remove reset command (#928) (3380efd)

Bug Fixes

• e2e: wait for posted message articles (#923) (c7d9e22)
• frontend: confirm mention autocomplete with enter (d28aa4e)
• frontend: use app modal for mention confirmation (#927) (f7ff517)
• tolerate stale room members (#932) (40c7d6c)
• update thread replies after send (#924) (2062fdc)

⚠ BREAKING CHANGES

• docker: use config and data root paths (#903)

Features

• add notification badge counts (#909) (f25a69d)
• auth: configure email OTP throttling (#902) (8c2d202)
• frontend: preview Markdown in composer (#876) (06afedb)
• show room sidebar in DMs (#912) (32222fa)

Bug Fixes

• auth: make CSRF tokens stateless (#900) (a2da80c)
• ci: checkout docs image PR refs (#906) (a2af9a2)
• docker: use config and data root paths (#903) (c90f0d9)
• frontend: remount room on notification switch (#908) (fcba838)
• frontend: show active call badges for DMs (#899) (a7299e1)
• refresh room layout state after room creation (#907) (7cd94d2)
• support implicit SMTP TLS (#905) (d7d83b1)
• tidy server lifecycle logs (#914) (2b95bf4)

Features

• auth: use bearer tokens for origin GraphQL (#897) (cf9b552)

Bug Fixes

• frontend: keep sidebars visible on fresh sessions (#891) (1cb5717)
• frontend: remember last visited DM rooms (#894) (de8efb0)

⚠ BREAKING CHANGES

• refresh current room on reconnect (#878)
• auth: stabilize cookie session auth (#883)
• simplify RBAC permissions (#880)

Features

• add per-process Prometheus metrics (#877) (34a88e5)
• auth: support external auth providers (#873) (ff2fb06)
• make LiveKit reconciliation resilient (#869) (82a5bc9)
• show call lifecycle notices in room events (#867) (b652c4f)

Bug Fixes

• auth: stabilize cookie session auth (#883) (376a268)
• cli: improve generated chatto config defaults (#872) (7ba64b7)
• config: tighten chatto config validation (#868) (8b45012)
• core: align projection snapshots with OCC (#864) (f805493)
• frontend: prevent expired edit via ArrowUp (#879) (bbae3aa)
• ignore markdown code mentions and previews (#866) (37933cb)
• refresh current room on reconnect (#878) (8066af7)
• remember sidebar visibility preferences (#862) (ec13041)

Code Refactoring

• simplify RBAC permissions (#880) (37fe2c6)

Features

• add durable LiveKit call events and E2EE (#835) (8d91797)
• add role mentions (#825) (cc95f73)
• add room extras sidebar tabs (#856) (99dff21)
• admin: auto-paginate event log (#852) (cbee54f)
• allow editing thread reply channel echoes (#847) (a5abd5a)
• frontend: find server users in cmd-k (#844) (26283ce)

Bug Fixes

• add CSRF protection for cookie sessions (#851) (ccc8d69)
• attribute RBAC audit events to actors (#834) (0e89890)
• core: end stuck calls when LiveKit fails (#860) (fbe1644)
• frontend: auto-paginate admin members (#846) (7fff051)
• frontend: paginate room member sidebar (#833) (1e87d98)
• frontend: remove server header leave icon (#855) (360bdca)
• frontend: stabilize presence display (#850) (1901ca2)
• frontend: use commit hash for dev app version (#857) (2a7f73e)
• logging: stop logging user PII (#830) (6f1b558)
• preserve session auth for GraphQL CSRF (#858) (4b1507d)
• refine conversation start marker UX (#839) (862a617)
• replay missed subscription events (#832) (eeec111)
• validate cookie encryption secret early (#842) (899953c)

Performance Improvements

• threads: paginate My Threads (#837) (7d4afab)

Bug Fixes

• frontend: cache reply previews during scroll (#819) (fc2c629)
• frontend: crop server sidebar banners (#822) (41ad36b)
• ignore foreign LiveKit webhooks (de90c89)

Features

• pwa: enrich web app manifest (#808) (2c6fe8b)

Bug Fixes

• emit structured logs for Loki (#815) (25ab64a)
• harden backend shutdown handling (#814) (59d344b)
• Harden Docker images (0b227e9)
• improve web push provider compatibility (#816) (2e0d464)
• projections: fail visibly on projection errors (#803) (6959161)
• projections: introduce stream positions and services (#812) (240970c)

Bug Fixes

• timeline: preserve migrated room join order (#801) (53547ca)

Features

• proto: stabilize event schemas for beta (#797) (ef3c601)

Bug Fixes

• auth: add OAuth redirect origin allowlist (#796) (7cbc486)
• auth: include server name in auth emails (#793) (19dd784)

Features

• add s3 asset path prefix (#784) (bbf0262)
• auth: add OAuth consent flow (#791) (b401b57)
• frontend: inline admin sidebar navigation (#785) (0be5f68)
• moderation: add channel room bans (#777) (abc107b)
• proxy asset URLs through service worker (#781) (309d0b0)

Bug Fixes

• assets: sandbox active attachment responses (#788) (f98f826)
• auth: restrict OAuth redirect origins (#786) (50268a6)
• consolidate server config live events (#783) (995e663)
• es: canonicalize legacy import verification (1af33ac)
• refresh expiring attachment asset URLs (#779) (2de2dde)

Miscellaneous Chores

• force beta prerelease (c6833b4)

⚠ BREAKING CHANGES

• graphql: consolidate list field shapes (#770)

Features

• add compact encrypted data envelopes (#704) (4c6b7b6)
• add ES rollout observability (#709) (2c0cb34)
• add explicit room thread creation events (#722) (2de3459)
• add server-admin system diagnostics (#720) (64e23f0)
• add server-side cookie sessions (#732) (3a0b224)
• add shreddable message body events (#729) (ea05797)
• audit auth token workflows (#697) (fce12a4)
• auth: use OTP codes for email verification (#771) (0bf1905)
• frontend: polish service worker shell caching (#773) (b842901)
• graphql: clean up schema hygiene (#724) (f68ae54)
• harden encryption key storage (#710) (0bf76e7)
• move presence and calls to memory cache (#702) (c98aacf)
• store link preview cache in runtime state (#708) (d5832c4)

Bug Fixes

• add GraphQL length validation (#751) (715a3b4)
• add HTTP server timeout hardening (#723) (880628e)
• add report-only CSP header (#728) (74e6200)
• auth: revoke credentials after password changes (#752) (e1adcbd)
• autofocus login identifier field (#727) (f349bba)
• clamp room event query limits (#735) (75bf8e0)
• clean up cached asset derivatives on deletion (#766) (f7a6d04)
• core: consolidate NATS asset storage (#768) (1eaca2b)
• disable video uploads when processing is off (#695) (4a31d1a)
• enforce core string length limits (#741) (3c64b17)
• frontend: disable composer submit while attachments stage (#711) (fdb1831)
• frontend: keep failed server icons visible (#772) (7b974d6)
• graphql: widen event log total count (#760) (79ebf41)
• harden OIDC avatar fetching (#739) (7b82ad7)
• hide echoes on direct retraction (#701) (035601b)
• limit GraphQL JSON request body size (#740) (8cae516)
• make message ES importer non-atomic (#733) (651780b)
• paginate unbounded GraphQL list fields (#726) (1e7d5e8)
• require mandatory SMTP TLS by default (#725) (ecad9c5)

Performance Improvements

• optimize room timeline projection reads (#734) (2265ee8)

Code Refactoring

• graphql: consolidate list field shapes (#770) (b20beda)

0.1.0-alpha.2 (2026-08-13)

⚠ BREAKING CHANGES

• auth: require CIMD clients for remote access (#2013)

Features

• authling: add OIDC-authorized account data sync (#1886) (4953bf1)
• auth: require CIMD clients for remote access (#2013) (792f9bb)
• desktop: replace Deno Desktop with Electron (#1939) (362204f)
• desktop: stream macOS games through LiveKit (#2024) (ff3842b)

Bug Fixes

• desktop: make release verification reliable (#1902) (898eec2)

Performance Improvements

• desktop: prune unused Electron locales (#1940) (538eeff)

0.1.0-alpha.1 (2026-09-16)

⚠ BREAKING CHANGES

• authling: limit Authling to identity provider (#2044)

Features

• appconfig: extract shared configuration loading (#1856) (732d7b2)
• auth: add CIMD-enabled development stack (#1881) (5e0f471)
• auth: add password-manager discovery (#2365) (cec4a0f)
• authling: add auditable password reset recovery (#2056) (5d1936f)
• authling: add browser session management (#2072) (cbf69db)
• authling: add CIMD-native OIDC provider (#1875) (a026593)
• authling: add durable account deletion and key erasure (#2382) (d5f395d)
• authling: add durable OIDC authorization grants (#2074) (1e5a016)
• authling: add local login and browser sessions (#1872) (65cf095)
• authling: add OIDC-authorized account data sync (#1886) (4953bf1)
• authling: add server-rendered web foundation (#1861) (12c8957)
• authling: add signed-in password change (#2059) (dab6594)
• authling: add standalone account runtime (#1842) (e563d68)
• authling: add verified email changes (#2058) (216a1f8)
• authling: add verified email signup (#1866) (30fef96)
• authling: incubate standalone identity provider (#1828) (93b4637)
• authling: redirect aliases to the canonical origin (#2362) (9a51f87)
• authling: rotate OIDC signing keys automatically (#2079) (8d305cd)
• authling: show signed-in account in site header (#2071) (aa87c47)
• authling: split verification codes into boxes (#2062) (0847b2f)
• auth: transfer Authling profiles to Chatto (#2076) (c91cac7)
• datacrypto: extract shared encryption primitives (#1853) (4235d7c)
• dev: replace Compose stack with Pitchfork (#2047) (41f4424)
• events: extract shared framework module (#1833) (3195ffd)
• natsruntime: extract embedded NATS lifecycle (#1845) (cb24279)

Bug Fixes

• authling: avoid caching failed JWKS responses (#2080) (fe1d6ca)
• authling: bound CIMD cache and lookup resources (#2378) (b9ac343)
• authling: bound request admission and complete OIDC browser flows (#2383) (562ba03)
• authling: disable 1Password for code inputs (#2077) (fff3e44)
• authling: disclose identity claims and encrypt grant metadata (#2376) (9d90430)
• authling: enforce OIDC authentication freshness (#2379) (5d279a8)
• authling: fence credential audit events (#2083) (19e7edc)
• authling: harden provider edge cases (#2082) (3ec6073)
• authling: preserve signup keys and bind session authority (#2373) (fc8b21e)
• authling: report runtime failures during startup (#2366) (b762bbe)
• authling: require password confirmation during signup (#2075) (7ac09c3)
• email: omit unnecessary SMTPUTF8 (#2273) (0595d00)

Code Refactoring

• authling: limit Authling to identity provider (#2044) (ec00d62)

Features

• admin: add projection runtime diagnostics (#646) (178cd8e)
• core: messages and threads projections for event-sourced reads (#614) (a8b5585)
• es: harden local rollout imports (#642) (82207b2)
• event-source user accounts (#650) (7964a63)
• graphql: expose message edit events (#664) (f31c62a)
• move video asset manifests into EVT (#669) (0e75502)
• proto: durable message edit/retract events for ES migration (#606) (c237a46)
• reactions: move reactions to event sourcing (#635) (e8140b6)
• storage: move read markers to runtime state (#661) (14131d3)

Bug Fixes

• ci: start the prerelease line on 0.1.0-alpha.0 (#613) (6a4b767)
• ci: stop release-please runaway PR loop (#622) (49e6350)
• ci: tighten release-please trigger to not match its own branches (03dea0f)
• es: harden event-sourcing OCC behavior (#649) (8dd6783)
• es: preserve imported thread replies (#648) (d64a045)
• frontend: catch up missed messages after sleep + refactor message-store lifecycle (#631) (1bf2c51)
• frontend: clean utility story links (#653) (06e608f)
• frontend: refresh attachment URLs on lightbox open and download click (#616) (23973ac)
• frontend: refresh scroll fades on content changes (1f01dbe)
• refresh attachment URLs for image viewer (#637) (1324ce1)

Bug Fixes

• frontend: refresh scroll fades on content changes (1f01dbe)
• refresh attachment URLs for image viewer (#637) (1324ce1)

Bug Fixes

• frontend: catch up missed messages after sleep + refactor message-store lifecycle (#631) (1bf2c51)

Bug Fixes

• ci: stop release-please runaway PR loop (#622) (49e6350)
• frontend: refresh attachment URLs on lightbox open and download click (#616) (23973ac)

Features

• docker: ship nats CLI in production image, pre-wired to chatto's NATS (#591) (58ebfb1)

Bug Fixes

• assets: per-user signed URLs so remote-server attachments load cross-origin (#589) (6f08d31)

Features

• rooms: seed announcements and general on fresh server boot (#586) (1a82f91)

Bug Fixes

• assets: probe storage backends when Attachment.Storage is missing (#588) (86f7b7c)

Miscellaneous Chores

• cut release 0.0.186 (3f6e05e)

Bug Fixes

• migrations: backfill records for video variants and thumbnails (#577) (ca43ce8)

Bug Fixes

• assets: authorize attachment downloads via canonical Attachment records (#575) (c3ab155)

Features

• ci: adopt release-please, retire mise bump (#573) (2eb2f67)

Baseline. History prior to release-please adoption is preserved in git tags v0.0.1 … v0.0.182 and their corresponding GitHub Releases.