Changelog
Every release and catalog change for the Railbase core and its plugins — the same feed your self-hosted instance polls to discover updates.
Core releaseRailbase corev0.18.89
- Personnel canon fields + bulk role assignment + admin UI fixes
Core releaseRailbase corev0.18.88
- Logger: RAILBASE_LOG_CONSOLE=false silences the terminal, file logs stay
Core releaseRailbase corev0.18.87
- Backups: retention, manual delete, configurable dir — and an update that says why it failed
Core releaseRailbase corev0.18.86
- Drawer: read-only facts + ledger grids; pages can be routable-but-hidden
Core releaseRailbase corev0.18.85
- Update center: downloads get deadlines; stale phases self-heal at boot
Core releaseRailbase corev0.18.84
- Re-import: pull from the REMEMBERED folder, no picker (Chromium)
Core releaseRailbase corev0.18.83
- Table: row-level Re-import action + upload abort marker
Core releaseRailbase corev0.18.82
- Cards: Test connection only where there is a connection to test
Core releaseRailbase corev0.18.81
- Jobs: claim-scan watermark — stop walking the graveyard on every claim
Core releaseRailbase corev0.18.80
- Ingest speed + index-integrity: paced uploads, keys-only classification, index reconcile heals
Core releaseRailbase corev0.18.79
- Serve: a stopped server must always release its port
- Site: pause/resume/cancel controls on the upload pill
Core releaseRailbase corev0.18.78
- Platformsurface: host.transform v2 — canon-spec executor symbols
- Jobs: wake-on-enqueue — idle workers claim immediately
- Hooks: canon-batch handles — the zero-boundary hot path (Вариант В core)
- Hooks: canon-spec party executor — byte-parity with the bundle proven
- Hooks: В2 foundations — goja-parity JSON emitter + parametric checksums
Core releaseRailbase corev0.18.77
- Jobs: worker-stall watchdog — frozen workers are loud now
Core releaseRailbase corev0.18.76
- Platformsurface: bump epoch golden for host.transform (2487749502)
- Plugindock+surface: declare host.transform capability
- Eventbus: elision markers — buffer-overflow loss is no longer silent (Ф3)
- Hooks: $app.transform.parseDelimited — native delimited parser (Ф2.1)
- Hooks: $app.dao().upsertBatch — Ф1 native bulk-upsert
- Hooks: UTF-16-unit FNV-1a — the Ф1 hash-parity foundation
Core releaseRailbase corev0.18.75
- Site(upload): serialize concurrent uploads — queue behind, never interrupt
Core releaseRailbase corev0.18.74
- Site(upload): file-level context per part — batch id, part i/k, rows_total
Core releaseRailbase corev0.18.73
- Site: global upload-progress pill + beforeunload guard
Core releaseRailbase corev0.18.72
- Site(upload): split parts by UTF-8 BYTES, cap 1 MiB (fixes MaxValueSize on Cyrillic)
- Logging: retryable job errors + sub-budget VM-lock holds → Debug, not Warn
- Site(upload): per-part retry with backoff — folder-scale flow control
Core releaseRailbase corev0.18.71
- Admin+site: plugin audit in the unified timeline; card template select; fail-fast uploads
- Admin(data): per-collection record counts on the Data landing
Core releaseRailbase corev0.18.70
- Site(widgets): dual file/folder pickers everywhere + big-file part upload
- Admin(ai): assistant panel — messenger-style chat card
Core releaseRailbase corev0.18.69
- Site(cards): folder picking fixed + dual file/folder pickers
Core releaseRailbase corev0.18.68
- Site(i18n): fill the widget-strings gap across the 9 machine locales
- Site(widgets): friendly errors, cards search+validation+test, row drawer
- Ai: assistant answers out of the box — indexed product docs + admin FAB
Core releaseRailbase corev0.18.67
- Assistant polish — grammatical noSource label + Sources heading
- Give the admin Test-connection probe the local-endpoint client
- Mirror the six AI learn articles into the in-app corpus
Core releaseRailbase corev0.18.66
- Ai: AI Engine — $app.ai platform surface, providers, delegation + federation transport
- Cmd/pluginseed: dev-only local rbundle installer (connector e2e harness)
Core releaseRailbase corev0.18.65
- Site(cards): fold file upload into the source card
- Site: cards widget — per-kind config + secret fields (Phase 1 req 3)
- Marketplace: green 'Installed' badge for installed plugins (+ Badge success variant)
Core releaseRailbase corev0.18.64
- Admin: no identity banner at all for a genuine LOCAL instance (loopback re-pins silently)
Core releaseRailbase corev0.18.63
- Admin: calm 'new instance identity' notice instead of a mock alarm on a legit key change
Core releaseRailbase corev0.18.62
- Site: add
cardswidget (system/ERP catalog picker) - Boot: RAILBASE_VAULT_SKIP_DELETE_VERIFY — bulk-load escape hatch
- Eventbus+changefeed: rate-limit buffer-full drop logs (1 line / topic / 10s)
- Hooks: reject request bodies that error mid-read instead of passing a prefix
- Hooks: dispatch cron handlers on a fresh exec VM with an armed DAO ctx
- Payload out of the claim scan path (_jobs_payloads)
- Declared long-running jobs — per-kind handler timeout
- Site: add
Core releaseRailbase corev0.18.61
- Site: add a 'plans' widget — tier comparison + manage-plan CTA
- Site: two-level plugin nav — sections in the rail, pages as tabs
Core releaseRailbase corev0.18.60
- Site: plugin sub-nav is a left sidebar with sections, not a top strip
Core releaseRailbase corev0.18.59
- Rbac: close the offline-CLI and SCIM bypasses of the plugin license gate
- Rbac: tenant-priced plugin roles assignable only inside licensed companies
- Admin: assign-role drawer admits plugin-scope roles in a company context
- Ui: QEditableList computed cells were unsized — inherited 16px root font
Core releaseRailbase corev0.18.58
- Admin: role editor is one checkbox list over the whole catalog + lock icons
- Admin: role-detail breadcrumb shows the role name, not the opaque id
- I18n: SoD tab is Segregation of Duties, not lawn turf
- Marketplace: update awareness only — updates run solely in the Update Center
Core releaseRailbase corev0.18.57
- Rbac: tenant-first role model, SoD subsystem, manifest-owned plugin roles
- Admin+site: close the 45 UI-kit conformance violations
- Admin: refetch identity-scoped catalog when the account identity changes
ReleaseRiskv0.4.2
Enterprise risk management inside Railbase — risk register, heat map, cumulative risk appetite and live KRI monitoring, governed by real approval workflows.
Risk Managementv0.4.2Paid
View in marketplace ↗
Core releaseRailbase corev0.18.56
- Server + admin: trust server identity, and user-session visibility/config
ReleaseAccounts Payablev0.1.2
ReleaseGeneral Ledgerv0.1.2
Double-entry general ledger — journals, fiscal periods, reports, period close.
Financev0.1.2Paid
View in marketplace ↗ReleaseRiskv0.4.2
Enterprise risk management inside Railbase — risk register, heat map, cumulative risk appetite and live KRI monitoring, governed by real approval workflows.
Risk Managementv0.4.2Paid
View in marketplace ↗Core releaseRailbase corev0.18.55
- Rbac: role doctrine — site auditor/employee, tenant CxO/founder tier, plugins-carry-DoA
- Sync authentication + backups-and-restore + environment-variables
- Close OAuth-OIDC + backup-list gaps left by dc7b893 (+ tests)
- Sync backups-and-restore + realtime + authentication from content/learn
- Four audit-found bugs (OAuth wizard, SDK PB_CONNECT, schema-preview i18n, scheduled-backup dir)
- Sync new scheduler article + operations from content/learn
- Sync licensing-and-seats + managing-billing from content/learn
- Sync installing-plugins from content/learn
- Sync updating + troubleshooting from content/learn
- Sync deployment + security from content/learn
- Sync operations + backups-and-restore from content/learn
- Sync managing-data from content/learn
- Sync project-setup + quickstart from content/learn
- Sync admin-overview + users-and-access from content/learn
- Sync migrations + realtime + hooks from content/learn
- Sync typescript-sdk + schema from content/learn
- Sync environment-variables + jobs-and-cron from content/learn
- Sync cli + data-and-tenancy from content/learn
Core releaseRailbase corev0.18.54
- Ship: raise the binary-size gate to 43 MB — in-app docs corpus (v0.18.54)
- Sync building-plugins + how-plugins-work from content/learn
- Sync installation + authentication from content/learn
- I18n: translate the two new import-error keys; regenerate the admin floor
- Site: row-scoped downloads in dossier tables
- Site: stop leaking the select sentinel into the form trigger
- Admin: replace the four raw
- Import: stop losing every row silently — read the batch results, map by source column
- Admin: keep the docs rails in place while the article scrolls
- Serve the published learn corpus at /_/docs, nothing else
- Admin: four collection-surface fixes (double plus, drawer font, name link, Data grid)
Core releaseRailbase corev0.18.53
- Dock+site: exports enablement — verb canonicalization, dossier downloads
- Hooks: $app.tasks + $app.authority — the workflow half of the surface
- Point operator-doc links at app-core/devDocs (renamed from docs/)
- Admin: collapsed sidebar becomes an icon rail instead of vanishing
- Admin: fold Schemas into the flat sidebar group — no orphan label/spacing
- Admin: stop enumerating collections in the sidebar — Schemas is the entry
- Admin: members page gets the full QDatatable surface; Authority tabs → section sub-nav
Core releaseRailbase corev0.18.52
- Site: cross-filter dims — the Qlik selections gesture for masterdetail
- Ui: floating panels no longer fly in from the viewport origin
- Ui: Combobox — searchable single-value picker; tenants country/parent adopt it
Core releaseRailbase corev0.18.51
- Admin: tenant members page — associate users from the catalog, not by typed email
- Site: dashboard panels + dossier workflow — stats, barchart, actions, links
Core releaseRailbase corev0.18.50
- Admin: per-company role editor + DoA company picker — RBAC/DoA respect the tenant (frontend)
- Rbac: restore tenant-scoped roles — RBAC respects the tenant (backend)
- Tenant gate: never leave an authenticated caller worse off than an anonymous one
Core releaseRailbase corev0.18.49
- Site: masterdetail widget — declarative master-detail entity console
Core releaseRailbase corev0.18.48
- Admin: user creation and invites assign the company up front
- Tenant: MEMBERSHIP DOCTRINE — no company, no frontend
Core releaseRailbase corev0.18.47
- Site: always-visible tenant badge in the header
- Tenant: a stale X-Tenant must not brick sign-in — degrade auth surface to tenant-less
Core releaseRailbase corev0.18.46
- Build-pkg: retry Gatekeeper strict check — tolerate notarization propagation lag
- Marketplace: fix dependency install skipped on the buy path (stale closure)
- Marketplace: reload the tab after a banner-driven core self-update
Core releaseRailbase corev0.18.45
- Marketplace: dependency-aware install — depends_on lands before the plugin
Core releaseRailbase corev0.18.44
- Marketplace: identified catalog for admin surfaces — internal-tester tiles
ReleaseSchoolv0.1.0
Schedule, attendance, grades, parent links and teacher meetings — phone-first.
Educationv0.1.0Free
View in marketplace ↗Core releaseRailbase corev0.18.43
- Pin EULA-before-activation gate order (ActivationGate_Pinned)
- Core: plugin egress & credential boundary (ADR-004)
- Catalog updatePlugin catalog
- Catalog updatePlugin catalog
- Catalog updatePlugin catalog
- Catalog updatePlugin catalog
UpdatedCMS — content management
Posts, pages, media, comments — external & internal audiences.
Contentv0.1.1Paid
View in marketplace ↗Core releaseRailbase corev0.18.42
- Documents: cover the repository with storage.encrypt_files
- Admin: finish Data-sidebar consolidation (Admins & roles, Tenants)
- Catalog updatePlugin catalog
Core releaseRailbase corev0.18.41
- Admin: consolidate nav into Data sidebar + full-width localized Settings
Core releaseRailbase corev0.18.40
- Admin/tenants: surface save errors + hydrate the edit drawer (walkthrough finds)
- Masterdata: country-specific tax-ID formats — validated, hinted, canonicalized
- Core EULA clickwrap gate + Plugin Subscription Agreement consent on trials
- Tenants: workspace creation is operator-only — retire site self-creation
- Admin/marketplace: core-attested purchase — company picker, KYC gate, locked checkout
- Admin/tenants: collect KYC legal identity at create; masterdata country select
- Masterdata: embedded ISO-3166 registry + tenant country validation
- Toast: honour the id opt — upsert one toast in place (fix CSV-export stacking)
- Admin: toasts as the single outcome surface — drop ad-hoc status panels
- Audit: journal every operator mutation; redact PEM key material
- Marketplace: manual key activation moves into the row menu (QDrawer)
Core releaseRailbase corev0.18.39
- Marketplace: every action refusal reaches the audit timeline and the bell
Core releaseRailbase corev0.18.38
- Server: panics reach _logs, metrics, and the operator bell
- Admin: surface unhandled query/action errors as toasts
- Banner: print the LAN admin URL on all-interfaces binds
- Marketplace: operator-bell alert on account activation (transition-only)
- Ship: atomic ~/Downloads binary drop — never truncate a running binary
Core releaseRailbase corev0.18.37
- Risk e2e — controls is a 410 tombstone since risk v0.4.0
- Marketplace: persist the site's activated verdict on activate request
Core releaseRailbase corev0.18.36
- Pkg: strip SIP-pinned AppleDouble sidecar from payload; strict gate = exact BOM
- Pkg: fix /usr/local ownership (P1) + fail-closed release (P1)
- Install page — signed/notarized + brew + .pkg, drop stale xattr
- Ship.sh: build + publish the macOS .pkg installer each release
- Release-tooling: macOS .pkg installer wizard (build-pkg.sh)
- Release-tooling: Homebrew tap auto-update on ship
- Release-tooling: daily batch cadence + ship.sh --security / auto-version
- Catalog updatePlugin catalog
Core releaseRailbase corev0.18.35
- Release-tooling: sign+notarize darwin binaries with Developer ID (Silkway Tech LLC)
ReleaseRiskv0.4.2
Enterprise risk management inside Railbase — risk register, heat map, cumulative risk appetite and live KRI monitoring, governed by real approval workflows.
Risk Managementv0.4.2Paid
View in marketplace ↗
Core releaseRailbase corev0.18.34
- Purge physically drops data, atomically, ownership-gated
- Purge guard — fatal snapshot + abort-on-error (defense-in-depth)
Core releaseRailbase corev0.18.33
- Role-gated UI visibility — no plugin role, no plugin app
Core releaseRailbase corev0.18.32
- Pin the workspace on session RESTORE, not only at password signin
- Baseline site
userrole rides the deliberate membership assignment - Retire the tenant scope — site + plugin roles only; DoA-safe migration
- Membership is operator-assigned — no signin auto-join, flat member role, email-first roster
- Trial relay sends the device fingerprint
Core releaseRailbase corev0.18.31
- A trial names its tenant — relay tenant identity to /trial/start
- Tenants row-action menu + focused drawers; ONE standard drawer width