Skip to content

Changelog

What changed in Sailor, release by release: the version, the date and what it means for a project built on it.

  1. v1.7refactor

    TS-by-Default Backends & Dark Border Tokens

    The Python fleet collapses to _shared + ai under ADR 2026-05-10, a pure-neutral dark border token system lands under ADR 2026-05-11, and the marketing copy passes an honesty audit.

    • TS-by-default backend audit — Python fleet collapsed to _shared + ai; event-ingest migrated in-process; ecommerce/recsys/content/third-party/web3 removed (ADR 2026-05-10)
    • Dark border token system — pure-neutral nebutra-gray palette + token-aware * wildcard rule fixes high-saturation borders across all surfaces (ADR 2026-05-11)
    • Marketing copy honesty audit — fictional testimonials, fabricated developer counts, hallucinated AI model names, and unenforced pricing claims all corrected
    Read the release
  2. v1.5feat

    Categorized Monorepo & Multi-Provider Auth/Billing

    Packages regroup by domain, and both auth and billing move behind provider abstractions so a deployment can pick its own stack.

    • Categorized monorepo layout — packages grouped by domain (design / iam / commerce / integrations / platform / ops / ai)
    • Multi-provider auth — Clerk, Better Auth, NextAuth via @nebutra/auth provider abstraction
    • Multi-provider billing — Stripe, Polar, LemonSqueezy, ChinaPay, Manual via @nebutra/billing
    Read the release
  3. v0.10.0security

    ExternalSecrets & RBAC Hardening

    Production security audit — ExternalSecrets Operator with ClusterSecretStore for AWS Secrets Manager, comprehensive RBAC with least-privilege ServiceAccounts and RoleBindings, Prisma migration automation with K8s init container.

    • ExternalSecrets Operator — ClusterSecretStore + ExternalSecret CRDs for AWS Secrets Manager
    • RBAC — ServiceAccounts + least-privilege Roles + RoleBindings for all 11 workloads
    • Prisma migrate:deploy — production migration script + K8s init container on api-gateway
    • Storybook component stories — Card, PageHeader, EmptyState, AnimateIn, LoadingState, ErrorState
    Read the release
  4. v0.9.1platform

    Analytics Dashboard & Blog Launch

    Customer insights at your fingertips — analytics dashboard with interactive charts, Sanity-powered blog engine with ISR, and React feature flags with SSR hydration.

    • Analytics dashboard — recharts AreaChart + BarChart for 30-day funnel and revenue trends
    • Blog powered by Sanity CMS — index + post pages with ISR, OG metadata, prose rendering
    • Feature flag React hooks — FeatureFlagProvider, useFeatureFlag, useFlags with SSR hydration
    Read the release
  5. v0.9.0major

    GitOps & SLO Observability

    Enterprise-grade deployment automation and reliability — ArgoCD GitOps reconciliation, PgBouncer connection pooling, Google SRE burn-rate alerts, and Grafana platform dashboard.

    • ArgoCD GitOps — production deployments now auto-reconcile from main branch
    • PgBouncer connection pooler (transaction mode, 1,000 client connections on 20 server connections)
    • SLO burn-rate alerts — multi-window Google SRE methodology (14.4×/6×/3×)
    • Grafana platform dashboard — 32 panels, SLO + HPA + resource usage
    Read the release
  6. v0.8.0feature

    Usage Metering & Error Tracking

    Billing-ready infrastructure — fire-and-forget usage metering with Redis counters, Sentry error tracking with tenant context, transactional email system via Resend.

    • Usage metering middleware — fire-and-forget Redis counters per tenant / billing period
    • Sentry server-side + client-side error tracking with tenant context
    • Transactional email package (Resend): welcome, API key creation, quota warnings, invites
    Read the release
  7. v0.7.0feature

    Settings & Idempotency

    Self-service control panel — settings pages for team management, API key rotation, billing, and security. Idempotency middleware prevents duplicate charges.

    • Settings pages: General, Team, API Keys (SHA-256 hashed, soft-delete), Billing, Security
    • Idempotency middleware — UUID v4 validation, Redis SET NX, 24-hour response cache
    • Pricing page — FREE / PRO / ENTERPRISE with gradient-border highlighted card
    Read the release
  8. v0.6.0infrastructure

    Observability & Zero-Trust Security

    Production-hardened infrastructure — Prometheus monitoring, ModSecurity WAF, and zero-trust network policies. Every request traced.

    • Prometheus ServiceMonitor + PrometheusRule for all Node.js and Python services
    • ModSecurity WAF (DetectionOnly) + OWASP CRS on nginx-ingress with rate limiting
    • Inter-service NetworkPolicies — zero-trust mesh for every service-to-service call
    Read the release
  9. v1.0feat

    Hono Gateway & Multi-Tenant Primitives

    The Hono API gateway lands with OpenAPI, oRPC and tRPC, on the Prisma + Supabase foundation, alongside the multi-tenant primitives the rest of the platform builds on.

    • Hono API gateway — OpenAPI, oRPC, tRPC with middleware composition
    • Prisma + Supabase foundation (PostgreSQL + pgvector)
    • Multi-tenant primitives — @nebutra/tenant (AsyncLocalStorage + RLS), @nebutra/permissions (CASL + OpenFGA)
    Read the release
  10. v0.5.0platform

    Multi-Tenant Auth & RBAC

    Multi-tenant ready — Clerk authentication with organization roles, fine-grained RBAC with 17 typed scopes, AI service proxy routes.

    • Multi-tenant auth — Clerk clerkMiddleware with org membership roles
    • RBAC permission matrix — 17 typed scopes across OWNER/ADMIN/MEMBER/VIEWER
    • AI service proxy routes (/api/v1/ai/chat, embeddings, models)
    Read the release
  11. v0.4.0foundation

    Turborepo Monorepo & Hono API

    Foundation release — Turborepo-powered monorepo with 33 packages, Hono API gateway with OpenAPI support, PostgreSQL with pgvector for embeddings.

    • Turborepo monorepo — pnpm workspaces, 33 packages, Node 22
    • Hono API gateway with OpenAPI, idiomatic middleware stack
    • Prisma + Supabase (PostgreSQL + pgvector)
    Read the release

Subscribe to release notes via RSS or Atom or follow @nebutra_ai.