Changelog¶

This changelog maps the implementation phases to release-style version milestones.

1.0.0 - 2026-07-11¶

Official Sanskrit Branding: Established public names for all active modules (Astra Yantra, Sutra, Setu, Tantra, Pramaan, Mudra, Niyam, Mandal, Dwaar, Netra) to express the structural soul of the platform.
Dependency Injection Guide: Added robust, native, and third-party DI examples for FastAPI, Flask, Django, Robyn, Litestar, and Dishka in the user-guide.
ReBAC Policy Engine: Implemented Astra Niyam (astraauth-policy) providing Zanzibar-inspired schema compiling and CheckEngine graph solver.
Multi-Tenancy Isolation: Implemented Astra Mandal (astraauth-tenancy) providing async/thread-safe dynamic tenant context-bindings and routing middleware.
Admin UI Console: Hardened Astra Netra (astraauth-admin-ui) to add interactive ReBAC policy authoring view, schema validator nodes, and checking console.
Layout & Quality Passes: Cleaned up the Repository Layout diagrams (including E2E examples directory), fixed Mermaid rendering syntax errors, and deprecated outdated status reports.
Framework Integration Adapters: Rewrote framework examples (ASGI, Flask, Django, Litestar, Robyn) to run as full E2E mock client verification suites.
Added strict release verification evidence for Ruff, Ty, package tests, docs, Bandit, pip-audit, package builds, Twine metadata checks, and install smoke tests.
Promoted astraauth-admin-ui into the publishable package set with operator-focused docs and examples.

Argon2 password hashing became the default, with legacy SHA-256 verification retained only as a migration path
stronger WebAuthn verifier support was added behind the optional webauthn extra, and service composition now prefers it when installed
runtime and admin credential throttling moved to shared persisted storage for multi-process deployments
plugin runtime trust boundaries were tightened with timeout/error classification, persisted audit records, and safer endpoint execution
CLI, admin API, and browser admin UI now expose runtime security diagnostics and dedicated plugin audit exports
browser admin UI package was promoted into the active public package set with dashboard-style operator workflows

public platform branding updated from AstraAuth to Astra while keeping technical astraauth-* package names intact
astra CLI entrypoint added and documented as the preferred runtime executable
package metadata updated for the future public repo and docs domains
MKDocs content rewritten to match the actual package/runtime surface
minimum supported Python version lowered to 3.12 with UUIDv7 compatibility helpers for 3.12/3.13
repository release essentials added: MIT license, contributing guide, security policy, and code of conduct

browser admin UI hardened with authenticated sessions, CSRF protection, admin audit logging, and setup-token gating
bootstrap handling hardened with hashed admin passwords, hashed short-lived setup tokens, and bootstrap lockdown support
CI expanded for adapters, operator surfaces, relational backend confidence, OIDC confidence, and security scanning
release-check and publish workflows added
backup verification, diagnostics, observability, disaster recovery, and production-readiness docs added
browser admin UI moved to Jinja + Basecoat + htmx partial updates

generic ASGI, Flask, and Django adapter wiring completed
CLI expanded for schema, persistence, config export/import, state export/import, key management, diagnostics, and operator workflows
Textual TUI and lightweight browser admin UI package added
deployment-focused examples and package-level READMEs completed
repo-wide ty type-check cleanup completed

OIDC discovery, callback handling, identity linking, claim/group mapping, and local session issuance implemented
JWKS-backed ID token verification and federation audit persistence added
hybrid authorization context prepared for IdP-derived attributes and roles
SAML and LDAP/AD explicitly deferred from the current production baseline

OAuth/session/token foundation implemented
tenant claim normalization and repository/store baseline completed
RBAC foundation and early hybrid policy contracts added
plugin runtime, tenant registry, endpoint extension support, and hook isolation implemented