> ## Documentation Index
> Fetch the complete documentation index at: https://docs.grantex.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Changelog

> All notable changes to the Grantex project.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).

## \[0.1.5] - 2026-03-01

### Added

* Principal sessions — `POST /v1/principal-sessions` creates short-lived session JWTs for end-users
* End-user permissions dashboard — `GET /permissions` serves HTML self-service UI
* Three principal endpoints: `GET /v1/principal/grants`, `GET /v1/principal/audit`, `DELETE /v1/principal/grants/:id`
* Express middleware (`@grantex/express`) — drop-in Grantex token verification for Node.js APIs
* FastAPI middleware (`grantex-fastapi`) — drop-in Grantex token verification for Python APIs
* Go SDK (`github.com/mishrasanjeev/grantex-go`) v0.1.0 — 12 resource services, offline JWT verification, PKCE, webhook HMAC-SHA256
* Service provider adapters (`@grantex/adapters`) — Google Calendar, Gmail, Stripe, Slack
* Reverse-proxy gateway (`@grantex/gateway`) — YAML-configured, Fastify-based token verification proxy
* `principalSessions.create()` in TypeScript and Python SDKs
* Conformance suite: principal-sessions test suite

### Changed

* Bumped `@grantex/sdk` to 0.1.5 and `grantex` (Python) to 0.1.5
* Bumped `@grantex/conformance` to 0.1.2

## \[0.1.4] - 2026-02-28

### Added

* Token refresh — `POST /v1/token/refresh` with single-use rotation per SPEC §7.4
* `tokens.refresh()` method in TypeScript and Python SDKs
* Conformance suite: token refresh tests
* Troubleshooting guide in docs

### Changed

* Bumped `@grantex/sdk` to 0.1.4 and `grantex` (Python) to 0.1.4

## \[0.1.3] - 2026-02-28

### Added

* PKCE (S256) support in authorization and token exchange flows
* `generatePkce()` helper in TypeScript SDK
* `generate_pkce()` helper in Python SDK
* Rate limiting on auth-service (100/min global, 20/min token, 10/min authorize)
* CHANGELOG.md, CODE\_OF\_CONDUCT.md, issue templates, PR template

### Changed

* Bumped `@grantex/sdk` to 0.1.3 and `grantex` (Python) to 0.1.3

### Fixed

* "ML-based detection" copy corrected to "Pattern-based detection" on landing page

## \[0.1.2] - 2026-02-27

### Added

* `tokens.exchange()` method to TypeScript and Python SDKs for exchanging authorization codes for grant tokens
* Python examples for the token exchange flow
* OpenAI Agents SDK integration (`grantex-openai-agents`)
* Google ADK integration (`grantex-adk`)
* MCP server package (`@grantex/mcp`) with 13 tools for Claude Desktop / Cursor / Windsurf
* Health endpoint (`GET /health`) in auth-service
* CLI commands for policies, billing, SCIM, and SSO
* Portal webhooks management page
* Webhook retry with exponential backoff (persistent delivery table + background worker)
* Anomaly detection background worker (runs every 60 minutes)
* Plan limit enforcement for grants, audit entries, and policies

### Changed

* Bumped `@grantex/sdk` and `grantex` (Python) to 0.1.2
* Webhook delivery is now persistent with retry instead of fire-and-forget

## \[0.1.1] - 2026-02-26

### Added

* CrewAI integration (`grantex-crewai`) published to PyPI
* Vercel AI SDK integration (`@grantex/vercel-ai`)
* AutoGen integration (`@grantex/autogen`)
* CLI tool (`@grantex/cli`) with commands for agents, grants, tokens, audit, and anomalies
* LangChain integration (`@grantex/langchain`)
* Example apps: quickstart-ts, quickstart-py, langchain-agent, crewai-agent, vercel-ai-chatbot
* Developer portal with React dashboard
* Landing page deployed to Firebase Hosting at grantex.dev

### Changed

* Bumped integration packages to 0.1.1

### Fixed

* Compliance timestamptz cast using null instead of empty string
* Startup migration runner for production DB schema

## \[0.1.0] - 2026-02-25

### Added

* Protocol specification v1.0 (SPEC.md)
* Auth service (Fastify + PostgreSQL + Redis) with full API surface:
  * Authorization flow, consent, approve/deny
  * Token exchange, verification, and revocation
  * Grant management with delegation support
  * Tamper-evident audit log with hash chaining
  * Anomaly detection
  * Policy engine
  * SCIM provisioning
  * SSO configuration (OIDC)
  * Billing integration (Stripe)
  * Webhook registration and delivery
  * JWKS endpoint for offline token verification
* TypeScript SDK (`@grantex/sdk`) published to npm
* Python SDK (`grantex`) published to PyPI
* CI/CD pipelines (GitHub Actions)
* Cloud Run deployment configuration
* Docker Compose for local development