Changelog

All notable changes to the Grantex project.

The format is based on Keep a Changelog.

[0.1.5] - 2026-03-01

Added

• Principal sessions — POST /v1/principal-sessions creates short-lived session JWTs for end-users
• End-user permissions dashboard — GET /permissions serves HTML self-service UI
• Three principal endpoints: GET /v1/principal/grants, GET /v1/principal/audit, DELETE /v1/principal/grants/:id
• Express middleware (@grantex/express) — drop-in Grantex token verification for Node.js APIs
• FastAPI middleware (grantex-fastapi) — drop-in Grantex token verification for Python APIs
• Go SDK (github.com/mishrasanjeev/grantex-go) v0.1.0 — 12 resource services, offline JWT verification, PKCE, webhook HMAC-SHA256
• Service provider adapters (@grantex/adapters) — Google Calendar, Gmail, Stripe, Slack
• Reverse-proxy gateway (@grantex/gateway) — YAML-configured, Fastify-based token verification proxy
• principalSessions.create() in TypeScript and Python SDKs
• Conformance suite: principal-sessions test suite

Changed

• Bumped @grantex/sdk to 0.1.5 and grantex (Python) to 0.1.5
• Bumped @grantex/conformance to 0.1.2

[0.1.4] - 2026-02-28

Added

• Token refresh — POST /v1/token/refresh with single-use rotation per SPEC §7.4
• tokens.refresh() method in TypeScript and Python SDKs
• Conformance suite: token refresh tests
• Troubleshooting guide in docs

Changed

• Bumped @grantex/sdk to 0.1.4 and grantex (Python) to 0.1.4

[0.1.3] - 2026-02-28

Added

• PKCE (S256) support in authorization and token exchange flows
• generatePkce() helper in TypeScript SDK
• generate_pkce() helper in Python SDK
• Rate limiting on auth-service (100/min global, 20/min token, 10/min authorize)
• CHANGELOG.md, CODE_OF_CONDUCT.md, issue templates, PR template

Changed

• Bumped @grantex/sdk to 0.1.3 and grantex (Python) to 0.1.3

Fixed

• “ML-based detection” copy corrected to “Pattern-based detection” on landing page

[0.1.2] - 2026-02-27

Added

• tokens.exchange() method to TypeScript and Python SDKs for exchanging authorization codes for grant tokens
• Python examples for the token exchange flow
• OpenAI Agents SDK integration (grantex-openai-agents)
• Google ADK integration (grantex-adk)
• MCP server package (@grantex/mcp) with 13 tools for Claude Desktop / Cursor / Windsurf
• Health endpoint (GET /health) in auth-service
• CLI commands for policies, billing, SCIM, and SSO
• Portal webhooks management page
• Webhook retry with exponential backoff (persistent delivery table + background worker)
• Anomaly detection background worker (runs every 60 minutes)
• Plan limit enforcement for grants, audit entries, and policies

Changed

• Bumped @grantex/sdk and grantex (Python) to 0.1.2
• Webhook delivery is now persistent with retry instead of fire-and-forget

[0.1.1] - 2026-02-26

Added

• CrewAI integration (grantex-crewai) published to PyPI
• Vercel AI SDK integration (@grantex/vercel-ai)
• AutoGen integration (@grantex/autogen)
• CLI tool (@grantex/cli) with commands for agents, grants, tokens, audit, and anomalies
• LangChain integration (@grantex/langchain)
• Example apps: quickstart-ts, quickstart-py, langchain-agent, crewai-agent, vercel-ai-chatbot
• Developer portal with React dashboard
• Landing page deployed to Firebase Hosting at grantex.dev

Changed

• Bumped integration packages to 0.1.1

Fixed

• Compliance timestamptz cast using null instead of empty string
• Startup migration runner for production DB schema

[0.1.0] - 2026-02-25

Added

• Protocol specification v1.0 (SPEC.md)
• Auth service (Fastify + PostgreSQL + Redis) with full API surface:
  • Authorization flow, consent, approve/deny
  • Token exchange, verification, and revocation
  • Grant management with delegation support
  • Tamper-evident audit log with hash chaining
  • Anomaly detection
  • Policy engine
  • SCIM provisioning
  • SSO configuration (OIDC)
  • Billing integration (Stripe)
  • Webhook registration and delivery
  • JWKS endpoint for offline token verification
• TypeScript SDK (@grantex/sdk) published to npm
• Python SDK (grantex) published to PyPI
• CI/CD pipelines (GitHub Actions)
• Cloud Run deployment configuration
• Docker Compose for local development