Platform Changelog

This page tracks deployed platform functionality, updated daily. It is indexed by the OSC architect RAG system so users can ask "what was recently deployed?" or "when did feature X ship?".

2026-06-11

osaas-app v7.74.0

  • Show a proactive help nudge ("Still exploring? We're here if you need a hand") in the empty-state dashboard after browsing services for 10 minutes without deploying
  • Fix token usage estimate dialog contrast and link styling

2026-06-10

osaas-app v7.73.0

  • Exempt OAuth-issued tokens from the PAT lifetime cap, allowing OAuth apps to mint long-lived PATs on behalf of users
  • Fix log viewer to stack entries vertically instead of overlapping
  • Surface agentic setup links at the empty-state activation moment
  • Remove deprecated GET /api/user/pat endpoint
  • Fix live-mode log polling: first fetch is now immediate, pagination state resets correctly
  • Handle 404 responses from service API gracefully as instance-not-found in stop and manage actions
  • Show token balance, refill model, and zero-state in the deploy modal

osaas-ai v7.49.2

  • Fix list-user-inbox-items MCP tool returning truncated results when the response is paginated
  • Extend restart-my-app rate limit window to 60 minutes
  • Add terminal-error guidance to admin-remake-service tool description
  • Add circuit-breaker and recovery hints to parameter-store operations

osaas-deploy-manager v7.56.2

  • Fix Agentic SDLC: task secrets now fall through to the legacy secret store when a key is missing from the primary store

osaas-lib-token v0.11.0

  • Add generateOAuthToken() and isOAuthToken() to the @osaas/token SDK for tagging and identifying OAuth-issued tokens

2026-06-09

osaas-app v7.71.0

  • Add reload button to My Apps requests page (Agentic SDLC)
  • Allow referencing a saved git credential when creating a MyApp (select from dropdown instead of pasting token)
  • Hide public-access toggle for HTTP-only instances that have no NodePort (prevents confusing no-op toggle)

osaas-ai v7.49.0

  • Surface NodePort endpoints in describe-service-instance — UDP-based services (STUN/TURN, SRT) now show host:port endpoint lines and a usage hint

osaas-deploy-manager v7.56.1

  • Fix Agentic SDLC: propagate configApiKey to stage app on stage-link callback so encrypted parameter stores work end-to-end
  • Fix Agentic SDLC: widen PR review trigger to include all human reviewer comments (not only [blocking]-tagged ones)
  • Fix MyApps: add 30-second minimum-age guard to prevent false rebuild triggers from stale pod observations
  • Fix MyApps: map HTTP 404 response to running state during build status polling for Python/Go/dotnet/WASM runtimes
  • Fix certificate issuer: use GTS ClusterIssuers when acmeIssuer=gts is configured

2026-06-08

osaas-app v7.69.0

  • Fix: stop retrying POST/PUT/PATCH/DELETE requests on fetch timeout (only GET/HEAD safe for retry)

osaas-ai v7.48.2

  • Surface actionable error when a My Domain proxy name exceeds the 63-character DNS limit
  • Add divergence detection to restart-my-app rebuild=true to prevent unnecessary rebuilds
  • wait-for-app-ready returns terminal not_found when the app 404s during polling
  • Clarify set-instance-public-access controls TCP port exposure only, not HTTP auth-gate access
  • Handle deploy-manager "already removed" 200 response as a clean not-found on app delete
  • Use pre-flight getApp result to detect non-existent apps before delete, avoiding false 404 errors

osaas-deploy-manager v7.55.0

  • Fix proxy Service name validation to enforce the 63-character DNS-1035 limit (was incorrectly allowing 253)

osaas-lib-orchestrator v4.6.2

  • Use serviceId as stable DNS label for TCP ingress hostnames instead of per-tenant appName

2026-06-07

osaas-lib-orchestrator v4.6.1

  • Fix wildcard TLS cert host binding to use stable API domain
  • Fix orphaned ReplicaSets after service instance deletion
  • Fix port-name suffix incorrectly appended to TCP ingress hostname

2026-06-05

osaas-app v7.68.0

  • Show Swedish flag badge on service cards and detail page for prod-se instances

osaas-deploy-manager v7.54.8

  • Make ACME issuer configurable (LE default, GTS optional)

2026-06-04

osaas-token-service v7.0.5

  • Remove cache bypass workaround now that fast-jwt v6 is safe

2026-06-03

osaas-ai v7.47.1

  • Add start-git-credential-registration MCP tool: initiates browser-based PAT registration, returns a one-time URL valid for 10 min
  • Add get-git-credential-setup-instructions MCP tool: returns a ready-to-run curl command for headless/CI environments
  • Add list-git-credentials MCP tool: list registered credential names and timestamps (PAT values are never returned)
  • create-my-app now accepts a gitCredential parameter — pass a pre-registered credential name instead of a raw PAT
  • update-my-app-github-token now accepts gitCredential for rolling token rotation with no downtime
  • Return structured error from restart-my-app when the app is still in creating state
  • Return structured 409 from update-my-app-github-token on conflict
  • Return structured error for non-managed buckets in list-objects-on-bucket
  • enable-app-stage-prod response now includes async-init guidance for apps initialising after first enable

osaas-deploy-manager v7.54.2

  • Consolidated tenant instance list now aggregates across primary and secondary hosting sites (multi-region support)
  • Return 404/503 instead of generic 500 when version listing fails during Agentic SDLC operations
  • Propagate subPath and analyticsService to stage app provisioner in Agentic SDLC

osaas-landing-app v3.20.2

  • Replace PayPal with Stripe as payment provider on purchase pages

2026-06-02

osaas-app v7.65.0

  • Add Git Credentials tab to My Apps dashboard for private repository access without sharing raw tokens
  • Add browser-based PAT registration page for secure git credential setup (PAT never passes through MCP or chat)
  • Add rate limit and client-side cooldown to magic link login flow
  • Fix overlapping labels in Add Git Credential modal
  • Fix submit button not disabled while create-team form is pending
  • Fix: show service instances without requiring a subscription record

osaas-ai v7.46.0

  • Add start-git-credential-registration MCP tool: initiates browser-based PAT registration, returns a one-time URL (valid 10 min)
  • Add get-git-credential-setup-instructions MCP tool: returns a ready-to-run curl command for headless/CI credential registration
  • Add list-git-credentials MCP tool: list registered credential names and timestamps (PAT values never returned)
  • create-my-app and update-my-app-github-token now accept gitCredential parameter; inline token args deprecated
  • get-service-schema uses structured fuzzy matching for improved service discovery
  • Auto-diagnose on update-service-instance Unknown reason failures
  • Add list-all-feedback admin tool
  • Add create-personal-access-token, list-personal-access-tokens, revoke-personal-access-token MCP tools
  • Expose OscEntry DLL field on dotnet My App via MCP

osaas-deploy-manager v7.54.0

  • Support private repository git credentials — store a named PAT, reference it by name at app creation and git-token rotation
  • Add git-credential-session mint and redeem endpoints backing the browser-based PAT registration flow

osaas-landing-app v3.20.0

  • Add AI agent safety section to homepage
  • Add lifecycle tools section to /mcp page

osaas-token-service v7.0.4

  • Widen SAT cookie domain to .osaas.io for cross-cluster authentication

2026-06-01

osaas-app v7.63.1

  • Fix /api/auth/login to redirect correctly to /api/auth/signin (308)

osaas-deploy-manager v7.53.0

  • Add OscEntry DLL field to dotnet MyApp — pin the entry DLL at creation or update it later in Settings
  • Faster app deletion with parallelized runtime probing

2026-05-31

osaas-app v7.63.0

  • Auto-trigger Trivy security scan after every rebuild
  • Fix linked issue URL input invisible in dark mode
  • Add 10s timeout to deleteMyApp with clear abort error

osaas-deploy-manager v7.52.0

  • Fix agent task completion tracking: route syncRunningTaskStatus through updateRunInHistory

osaas-landing-app v3.18.0

  • Add MCP integration guide link to Codex tutorial What's Next section

2026-05-30

osaas-app v7.62.0

  • Show sign-in code confirmation message and enable OTP autofill on magic-link login
  • Pre-populate feedback drawer fields from the list item to fix empty linked issue URL
  • Close plan downgrade warning modal immediately on API success

osaas-ai v7.44.2

  • Add list-service-instances preflight and terminal-error guidance for bulk delete operations

osaas-deploy-manager v7.51.1

  • Automatically probe and refresh stale Gitea tokens in Agentic SDLC workflows

2026-05-29

osaas-app v7.61.0

  • Show platform build status (building/running/failed) in the My Apps logs modal
  • Context-aware empty-state message in logs modal when app is still building

osaas-ai v7.44.1

  • Paginate list-parameters to return all keys when a store has more than one page
  • Steer create-my-app to wait-for-app-ready instead of get-my-app after creation
  • Add required-field guard to create-service-instance to catch missing mandatory fields early
  • Require list-service-instances preflight before bulk delete to prevent stale-name failures

osaas-deploy-manager v7.51.0

  • Make /enable endpoint async, returning 202 Accepted immediately

osaas-landing-app v3.17.0

  • Add VS Code Bearer token auth header option to /mcp setup page
  • Add Windsurf setup tab to /mcp page with mcp_config.json snippet

2026-05-28

osaas-app v7.60.0

  • Use per-domain delete to handle secondary-slot custom domains
  • Show tenant and user names in feedback list
  • Show confirmation modal after plan downgrade
  • Show workspace name in feedback table Tenant/User column
  • Close restart modal immediately for HA apps

osaas-ai v7.44.0

  • Emit DAU by product attribution (liivo/osc)
  • Add stop-condition to get-parameter to prevent exhaustive store search
  • Add Gitea repo recovery workflow to system prompt

osaas-deploy-manager v7.50.0

  • Correct off-by-one in secondary proxy slot length check

2026-05-27

osaas-app v7.59.0

  • Surface My Apps as equal activation path in dashboard empty-state
  • Add Pro plan first-session value walkthrough after subscription activation
  • Add voucher code input to activate-subscription modal
  • Add Trial ends column to admin subscriptions table
  • Add voucher promo code toggle to day-0 FirstDeployCard footer
  • Prevent secret name chip from overflowing modal edge
  • Show trial end date in Token Usage card
  • Apply voucher code during Stripe checkout via successUrl redirect
  • Hide trial end banner for users on paid plans

osaas-ai v7.43.0

  • Use port 8080 fallback in Node.js and Python skill examples
  • Add MCP subagent guidance and get-mcp-config tool
  • Strengthen service ID anti-patterns and add circuit-breaker
  • Add list-feedback trigger for feedback status queries
  • Redact secrets in assistant messages before MongoDB persistence

osaas-deploy-manager v7.49.1

  • Add backfill-secrets entry point and fix K8s job manifest
  • Surface K8s failure condition message in backup records

osaas-landing-app v3.16.0

  • Add AI Agentic Engineer MCP block above the fold
  • Pre-render service list in SSR for SEO/AEO
  • Bump service-count refs from 180 to 183

osaas-money-manager v7.13.0

  • Expose trialEnd in TenantPlan schema for admin trial date visibility
  • Persist trialEnd in MongoDB to avoid redundant Stripe API calls on GET /tenantplan