Vitris / Open source
Admin package release notes.
Independent version histories for the runtime, contracts and initializer.
Admin runtime
@tryvitris/website-admin-harness
1.5.0
Daily agent package maintenance
- Adds bounded public-registry version discovery and pinned update plans for the stable admin release family and directly declared website harness. Incomplete releases, drift, local overrides and breaking updates are held for review.
- Adds idempotent existing-installation maintenance instructions and new-installation check scripts. Preparation and testing follow existing publishing permissions; no scheduler or production action is activated.
1.4.0
Owner-approved reporting and named sign-in setup
- Adds an explicit client-owner choice to link an existing local account during analytics reporting approval, preserving account roles, organization reporting and billing.
- Adds a local webmaster-setup plan/apply command for reviewed broker pins, optional migrations and separate new-key inputs. Cloud deployment and migrations remain explicit.
1.3.1
Smoother sign-on and scrollable navigation
- Made fixed desktop navigation scrollable on short windows and at browser zoom so lower navigation and account actions remain reachable.
- Improved named sign-on loading screens, titles and fragment cleanup, and completed sign-on inside the app without an extra full-page reload. Existing browser binding, permissions, source-session checks and linked logout are preserved. No migration or new secret is required.
1.3.0
Named webmaster sign-on and linked logout
- Added opt-in named webmaster sign-on for one explicitly configured broker owner, with pinned installation identities and browser-bound PKCE, signed assertions and one-use authorization codes.
- Added client-owner approval that maps the configured webmaster to an existing named local account. Each request uses that account's current approved permissions; sign-on does not create or promote accounts.
- Linked client sessions check the original broker session on every authenticated request. Vitris logout, source-session expiry, revoked access or an unavailable broker ends linked access.
- Kept individual sign-on revocation separate from organization reporting and billing. Disconnecting the organization revokes its named mappings and linked sessions.
- Added optional migration 0013_webmaster_signon.sql and explicit identity, key, account-approval and recovery instructions. Existing installations retain normal login until deliberately configured.
1.2.0
Client-approved analytics pairing
- Added opt-in, client-owner-approved organization analytics pairing with versioned contracts and a public server SDK.
- Added pinned installation signing keys, PKCE, short-lived approvals, hashed machine grants, encrypted retry receipts, rotation and revocation.
- Added a client-admin reporting proxy that keeps original backend credentials private. Organization reporting survives individual membership removal and stops on organization disconnect.
- Added optional migration 0012_reporting_pairing.sql. Pairing requires explicit client trust and installation setup; billing remains independent.
1.1.0
Managed by Webmaster
- Added the opt-in Managed by Webmaster connection in Settings with owner-approved operational grants and optional lead access.
- Added persistent revocation and activity attribution to the acting person and organization.
- Kept management access usable without billing. Disconnecting access preserves independently configured billing and existing subscriptions.
- Added optional migration 0011_webmaster_connections.sql and explicit module/migration review guidance.
1.0.0
First stable business admin
- Released synchronized stable runtime, contracts and initializer packages on npm's latest tag.
- Added optional Stripe seller/client billing: subscription and one-off Checkout, invoice workflows, payment history, customer portal, webhook reconciliation and recovery.
- Added designated-owner enrollment, account verification, invitations, password recovery and an explicit Pages/private-mail adapter.
- Added client-management and onboarding previews with reusable questionnaire templates and controlled draft previews; synthetic modules remain separate from production integrations.
- Expanded leads with history search, due/status/assignee filters, pagination, follow-up notes and concurrency checks.
- Included optional scheduling, calendar connections, customer notifications, reminders and private appointment-management links, retaining test-mode and sender prerequisites.
- Improved responsive typography, analytics history/date handling, publication privacy checks and verified archive installation. Optional modules and live payments require separate activation.
0.1.0-alpha.2
Scheduling and customer workflows
- Added optional scheduling configuration, day/week/agenda calendars, service/staff management, availability and atomic resource reservations.
- Added Google/Outlook calendar adapters, test-mode website booking integration, automatic admin refresh and booking provenance.
- Added captured customer confirmation emails, calendar attachments, private cancellation/rescheduling links and configurable reminders.
- Included analytics/theme improvements, maintained TypeScript entry points and compatibility with legacy analytics responses.
- Kept live calendars, email delivery, infrastructure and migrations as separately reviewed installation steps.
0.1.0-alpha.1
First public admin alpha
- Published the separate admin runtime, initializer and validated contracts packages under the alpha tag.
- Included the branded shell, Overview, Leads, Analytics, Settings, Users and access, Activity, and an optional persistent work queue.
- Added generated installations, trusted module scaffolding, local setup plan/apply and read-only default website backend grants.
- Included Cloudflare Worker/D1 infrastructure, canonical-host and CSRF checks, revocable sessions and agent-maintained installation instructions.
- Provided synthetic local demos without provisioning or changing customer installations.
0.0.0-stage
Registry staging placeholders
- Reserved the runtime, contracts and initializer package names during publication setup. These placeholders were not business-admin feature releases.
Admin contracts
@tryvitris/website-admin-contracts
1.5.0
Typed agent maintenance reports and plans
- Adds the shared package-family, status, release identity and prepare-and-test plan contract used by the admin and website daily maintenance tooling.
1.4.0
Optional combined connection approval contract
- Adds versioned combined-setup capability discovery, optional named-subject intent, owner-selected existing-account approval and explicit sign-on result metadata. Legacy reporting-only requests remain supported.
1.3.1
Synchronized contracts version
- Updated the synchronized package version to 1.3.1. The manifest, permissions and scheduling contract APIs are unchanged from 1.3.0.
1.3.0
Named webmaster sign-on and linked logout
- Added opt-in named webmaster sign-on for one explicitly configured broker owner, with pinned installation identities and browser-bound PKCE, signed assertions and one-use authorization codes.
- Added client-owner approval that maps the configured webmaster to an existing named local account. Each request uses that account's current approved permissions; sign-on does not create or promote accounts.
- Linked client sessions check the original broker session on every authenticated request. Vitris logout, source-session expiry, revoked access or an unavailable broker ends linked access.
- Kept individual sign-on revocation separate from organization reporting and billing. Disconnecting the organization revokes its named mappings and linked sessions.
- Added optional migration 0013_webmaster_signon.sql and explicit identity, key, account-approval and recovery instructions. Existing installations retain normal login until deliberately configured.
1.2.0
Client-approved analytics pairing
- Added opt-in, client-owner-approved organization analytics pairing with versioned contracts and a public server SDK.
- Added pinned installation signing keys, PKCE, short-lived approvals, hashed machine grants, encrypted retry receipts, rotation and revocation.
- Added a client-admin reporting proxy that keeps original backend credentials private. Organization reporting survives individual membership removal and stops on organization disconnect.
- Added optional migration 0012_reporting_pairing.sql. Pairing requires explicit client trust and installation setup; billing remains independent.
1.1.0
Managed by Webmaster
- Added the opt-in Managed by Webmaster connection in Settings with owner-approved operational grants and optional lead access.
- Added persistent revocation and activity attribution to the acting person and organization.
- Kept management access usable without billing. Disconnecting access preserves independently configured billing and existing subscriptions.
- Added optional migration 0011_webmaster_connections.sql and explicit module/migration review guidance.
1.0.0
First stable business admin
- Released synchronized stable runtime, contracts and initializer packages on npm's latest tag.
- Added optional Stripe seller/client billing: subscription and one-off Checkout, invoice workflows, payment history, customer portal, webhook reconciliation and recovery.
- Added designated-owner enrollment, account verification, invitations, password recovery and an explicit Pages/private-mail adapter.
- Added client-management and onboarding previews with reusable questionnaire templates and controlled draft previews; synthetic modules remain separate from production integrations.
- Expanded leads with history search, due/status/assignee filters, pagination, follow-up notes and concurrency checks.
- Included optional scheduling, calendar connections, customer notifications, reminders and private appointment-management links, retaining test-mode and sender prerequisites.
- Improved responsive typography, analytics history/date handling, publication privacy checks and verified archive installation. Optional modules and live payments require separate activation.
0.1.0-alpha.2
Scheduling and customer workflows
- Added optional scheduling configuration, day/week/agenda calendars, service/staff management, availability and atomic resource reservations.
- Added Google/Outlook calendar adapters, test-mode website booking integration, automatic admin refresh and booking provenance.
- Added captured customer confirmation emails, calendar attachments, private cancellation/rescheduling links and configurable reminders.
- Included analytics/theme improvements, maintained TypeScript entry points and compatibility with legacy analytics responses.
- Kept live calendars, email delivery, infrastructure and migrations as separately reviewed installation steps.
0.1.0-alpha.1
First public admin alpha
- Published the separate admin runtime, initializer and validated contracts packages under the alpha tag.
- Included the branded shell, Overview, Leads, Analytics, Settings, Users and access, Activity, and an optional persistent work queue.
- Added generated installations, trusted module scaffolding, local setup plan/apply and read-only default website backend grants.
- Included Cloudflare Worker/D1 infrastructure, canonical-host and CSRF checks, revocable sessions and agent-maintained installation instructions.
- Provided synthetic local demos without provisioning or changing customer installations.
0.0.0-stage
Registry staging placeholders
- Reserved the runtime, contracts and initializer package names during publication setup. These placeholders were not business-admin feature releases.
Admin initializer
@tryvitris/create-website-admin-harness
1.5.0
Initialize with daily maintenance guidance
- Pins runtime 1.5.0 so new admins receive the update-check script and agent maintenance instructions. Scaffolding does not activate an external schedule or change deployment authority.
1.4.0
Initialize with runtime 1.4.0
- Updates the exact runtime dependency to 1.4.0. The initializer scaffolding and cloud-provisioning requirements are unchanged.
1.3.1
Initialize with admin runtime 1.3.1
- Updated the exact admin runtime dependency to 1.3.1. The initializer command and installation scaffolding are unchanged from 1.3.0.
1.3.0
Named webmaster sign-on and linked logout
- Added opt-in named webmaster sign-on for one explicitly configured broker owner, with pinned installation identities and browser-bound PKCE, signed assertions and one-use authorization codes.
- Added client-owner approval that maps the configured webmaster to an existing named local account. Each request uses that account's current approved permissions; sign-on does not create or promote accounts.
- Linked client sessions check the original broker session on every authenticated request. Vitris logout, source-session expiry, revoked access or an unavailable broker ends linked access.
- Kept individual sign-on revocation separate from organization reporting and billing. Disconnecting the organization revokes its named mappings and linked sessions.
- Added optional migration 0013_webmaster_signon.sql and explicit identity, key, account-approval and recovery instructions. Existing installations retain normal login until deliberately configured.
1.2.0
Client-approved analytics pairing
- Added opt-in, client-owner-approved organization analytics pairing with versioned contracts and a public server SDK.
- Added pinned installation signing keys, PKCE, short-lived approvals, hashed machine grants, encrypted retry receipts, rotation and revocation.
- Added a client-admin reporting proxy that keeps original backend credentials private. Organization reporting survives individual membership removal and stops on organization disconnect.
- Added optional migration 0012_reporting_pairing.sql. Pairing requires explicit client trust and installation setup; billing remains independent.
1.1.0
Managed by Webmaster
- Added the opt-in Managed by Webmaster connection in Settings with owner-approved operational grants and optional lead access.
- Added persistent revocation and activity attribution to the acting person and organization.
- Kept management access usable without billing. Disconnecting access preserves independently configured billing and existing subscriptions.
- Added optional migration 0011_webmaster_connections.sql and explicit module/migration review guidance.
1.0.0
First stable business admin
- Released synchronized stable runtime, contracts and initializer packages on npm's latest tag.
- Added optional Stripe seller/client billing: subscription and one-off Checkout, invoice workflows, payment history, customer portal, webhook reconciliation and recovery.
- Added designated-owner enrollment, account verification, invitations, password recovery and an explicit Pages/private-mail adapter.
- Added client-management and onboarding previews with reusable questionnaire templates and controlled draft previews; synthetic modules remain separate from production integrations.
- Expanded leads with history search, due/status/assignee filters, pagination, follow-up notes and concurrency checks.
- Included optional scheduling, calendar connections, customer notifications, reminders and private appointment-management links, retaining test-mode and sender prerequisites.
- Improved responsive typography, analytics history/date handling, publication privacy checks and verified archive installation. Optional modules and live payments require separate activation.
0.1.0-alpha.2
Scheduling and customer workflows
- Added optional scheduling configuration, day/week/agenda calendars, service/staff management, availability and atomic resource reservations.
- Added Google/Outlook calendar adapters, test-mode website booking integration, automatic admin refresh and booking provenance.
- Added captured customer confirmation emails, calendar attachments, private cancellation/rescheduling links and configurable reminders.
- Included analytics/theme improvements, maintained TypeScript entry points and compatibility with legacy analytics responses.
- Kept live calendars, email delivery, infrastructure and migrations as separately reviewed installation steps.
0.1.0-alpha.1
First public admin alpha
- Published the separate admin runtime, initializer and validated contracts packages under the alpha tag.
- Included the branded shell, Overview, Leads, Analytics, Settings, Users and access, Activity, and an optional persistent work queue.
- Added generated installations, trusted module scaffolding, local setup plan/apply and read-only default website backend grants.
- Included Cloudflare Worker/D1 infrastructure, canonical-host and CSRF checks, revocable sessions and agent-maintained installation instructions.
- Provided synthetic local demos without provisioning or changing customer installations.
0.0.0-stage
Registry staging placeholders
- Reserved the runtime, contracts and initializer package names during publication setup. These placeholders were not business-admin feature releases.
