- Added a browser-first first-run setup wizard with one-time setup codes, atomic configuration apply, network settings, authentication configuration, structured logging, and first-administrator creation. - Added local password and email-code authentication with MFA support, and migrated legacy OIDC and ClickHouse settings into Gateway-managed configuration. - Added managed database nodes with curated Postgres, Redis, and ClickHouse deployments, encrypted direct access, and CA certificate download. - Added portable Docker container archives, controlled cross-node migrations, and resource-scoped container permissions. - Expanded per-user permissions with explicit overrides, effective-access views, auditing, and immediate propagation. - Added multi-provider inference controls, Claude Code harness support, and per-user GitLab personal-access-token authorization. - Hardened installers with signed release image verification, local-source test installation, and branded connection output. - Fixed proxy-host ACL handling so Basic Auth works with IP restrictions, removed unsafe per-vhost TLS policy overrides, and require nginx 1.25.1+ for modern HTTP/2 configuration.