Tags

v2.8.4-nginx

v2.8.3-relay

- Add multi-instance Relay Pool operation with multiple active relay assignments, per-connection distribution, failover, and existing-stream pinning
- Add the Relay Supervisor and managed Relay Worker for enrolling and operating relay instances on additional physical hosts
- Add signed policy snapshots with revision checks, expiry enforcement, endpoint authorization, and workload-scoped grants
- Add staged endpoint registration and source verification before activating new assignment generations
- Add graceful drain, forced disconnect, active tunnel, registered endpoint, and pressure telemetry
- Add signed one-instance-at-a-time updates for Relay Supervisor and Relay Worker binaries on amd64 and arm64
- Bundle digest-pinned Relay, Database Connector, and Secure Link Connector images in one signed Relay release manifest
- Preserve protocol v1 and singleton compatibility for existing Gateway installations during migration to Relay Pool

v2.8.3

- Add a fault-domain-aware Relay Pool with local and remote relay instances, enrollment, health, drain, resume, rebalance, and staged assignment activation
- Add global and workload-level Relay Spread controls with inherited, fixed-count, and all-ready-relays distribution behind a single Secure Link
- Balance new workload connections across active relay assignments while preserving existing TCP and WebSocket streams during drain and failover
- Add signed Relay Pool policies, scoped grants, source probes, assignment generations, policy expiry handling, and durable update state
- Add one-instance-at-a-time Relay Pool updates with automatic drain, worker and supervisor verification, resume, and failure pause
- Migrate existing singleton Relay installations in place without recreating Secure Links or changing their public topology
- Add support for multiple service addresses per managed node
- Add PEM and PKCS#12 certificate exports and restore certificate export actions
- Preserve unsaved route settings during background refresh and consistently highlight modified configuration blocks
- Improve Relay settings with stable instance ordering, workload spread controls, responsive sizing, and clearer local-node status
- Synchronize realtime resource mutations, recreated environments, generated images, inference settings, OpenRouter balances, and accounting updates

v2.8.3-docker

v2.8.3-monitoring

v2.8.3-nginx

v2.8.2

- Add support for up to ten ordered service addresses per node while preserving existing address data.  
- Replace Node Settings address selectors with grouped free-text comboboxes and add/remove controls.  
- Apply all configured service addresses across ingress, DNS reconciliation, Docker upstreams, and managed database endpoints.  
- Align Node Settings height and field transitions with the shared modal animation behavior.

v2.8.1

- Add PEM bundle, chain, fullchain, and private-key exports for issued PKI certificates.
- Fix PKCS#12 exports for non-RSA certificates.
- Audit and permission-protect all private-key export operations.
- Align certificate-issuance dialog transitions with the shared modal behavior.

v2.8.0

- Add Gateway Pages with static-site projects, immutable deployments, mutable tags, runtime configuration, deploy tokens, manual archive uploads, node placement, migration, retention, and wildcard previews
- Add managed path-based Additional Routes for addresses, Docker containers, deployments, and Pages tags, including per-route WebSocket, buffering, timeout, prefix stripping, and Secure Link controls
- Add scoped Pages and ingress automation to AI Workspace, MCP, search, audit, notifications, and resource navigation
- Enforce plan entitlements consistently across backend APIs and frontend surfaces, including the Personal requirement for Pages and fail-closed feature access
- Replace the built-in inference engine with a privately managed OpenCodex core that Gateway can install, verify, update, repair, and automatically roll back
- Add signed inference-core release discovery, download progress, health and version reporting, installer integration, and lifecycle recovery after interrupted operations
- Keep provider selection, failover, quotas, limits, accounting, pricing, and access control in Gateway while delegating protocol execution and compaction to OpenCodex
- Add priority, even-distribution, and quota-balanced routing across eligible provider accounts with affinity, reserve thresholds, cooldowns, and pre-output failover
- Add managed ChatGPT, OpenAI API, Claude, Anthropic API, Kimi, Moonshot, xAI, OpenRouter, opencode go, Z.AI GLM Coding Plan, Alibaba Token Plan, and custom OpenAI-compatible provider connections
- Add device authorization for ChatGPT and Kimi, subscription quota synchronization, live provider model discovery, reasoning metadata, context overrides, and account-specific availability
- Add logical inference models with stable public IDs, model capabilities, reasoning mappings, access rules, API pricing, subscription multipliers, and configurable context and compaction limits
- Expose stable OpenAI and Anthropic inference APIs for Models, Responses, Chat Completions, Messages, images, search, realtime calls, streaming, continuation, and remote compaction
- Add protected inference accounting with atomic reservations, immutable settlement records, per-user API and subscription budgets, recovery reserves, and ChatGPT Fast-tier accounting
- Add the `@wiolett/gateway-inference` interactive companion for secure Codex and Claude Code setup, catalog synchronization, diagnostics, repair, removal, and guarded logout
- Preserve existing Codex and Claude Code configuration during setup and removal while storing dedicated inference credentials outside harness configuration files
- Harden public health endpoints, protected routes, Docker emergency actions, archive validation, route retargeting, and inference cancellation and failure handling
- Improve Gateway Inference setup, provider, model, endpoint, quota, update, and lifecycle UI across the browser installer, settings, profile, and AI Workspace
- Require existing installations to install the managed inference core after upgrading and reconnect supported harnesses when the endpoint contract changes

v2.8.0-docker

v2.8.0-monitoring

v2.8.0-nginx

v2.7.15

Gateway v2.7.15

v2.7.14

Deploy committed Secure Link routes immediately.

v2.7.13

Fix Docker header action ordering and preserve lifecycle controls.

v2.7.17-docker

Migrate existing runsc networking configuration.

v2.7.12

Fix shared header identity priority and frontend test cleanup.

v2.7.16-docker

Fix Secure Runtime networking on Docker user-defined bridges by enabling runsc host network passthrough.

v2.7.11

- Reuse managed database owner credentials across new Secure Links to keep application ownership stable
- Reconcile existing PostgreSQL link principals after Docker daemon reconnects
- Prevent legacy role cleanup from deleting application-owned database objects

v2.7.15-docker

- Grant legacy PostgreSQL link users permission to create migration objects in the public schema
- Reassign legacy-owned objects before removing obsolete binding roles
- Add the versioned binding_remove_v2 cleanup contract for safe mixed-version upgrades