v0.6.82

Changes since release/v0.6.52. Assembled at mint from the release-note fragments committed alongside the changes themselves.

Highlights (curated)

• Zero-paste onboarding from the host's own AWS identity. Kumo.io now detects the identity its deployment already runs as (environment credentials, an AWS profile, an ECS task role, EKS IRSA, or an EC2 instance profile) via the SDK default chain + STS GetCallerIdentity. kumo system status shows the detected identity and points first-run operators at kumo init --from-ambient, which bootstraps account → workspace → aws.ambient credential → STS-discovered source with nothing to paste (the headless/scripted lane). The CUSTOMER lane rides the UI: after sign-up, the add-source step shows the detected identity and a one-click "Use runtime identity" offer (GET /v1/providers/aws/ambient-identity — self-host only; the route does not exist on hosted deployments). Detection is fail-soft and bounded — a host with no AWS access prints nothing and never hangs. Creating and syncing the source remains an explicit operator action.

• A fresh appliance now boots fully seeded. docker run appliances since v0.6.37 silently skipped their boot-time reference-data seeding — the system view templates and environment-identification policies both reported 0 until kumo template publish + kumo system seed were run by hand. The seed flag now reaches the composition, so a first boot comes up with the full template gallery and identification policies. kumo system status / kumo doctor also no longer report login readiness as unavailable on self-hosted — the billing/trial read is deleted from the readiness check entirely (login gates on credential + membership + owner role only).

• 14-day free trial, buy-now, and bring-your-own-license — the full commercial flow. Signing up and connecting an installation starts your account's one 14-day Business trial (server-anchored: reinstalling or wiping a volume does not restart it). Buy a license at any moment — even before installing anything — from the account portal's new plan picker; the subscription lands on your account and every installation you connect is licensed immediately. Already-licensed deployments keep using KUMO_LICENSE_* directly. A purchase unlocks a waiting installation within minutes (locked installations poll for their entitlement every 5 minutes) — no restart.

Breaking changes (curated)

• Unlicensed self-host installations are now restricted until connected or licensed. The former community fallback (every feature allowed with no license, forever) is retired for production self-host deployments: a fresh installation shows a connect screen, connecting starts the 14-day trial, and when the trial or subscription ends the product locks completely until a plan is purchased (sign-in, status, and the upgrade path stay reachable). Existing evaluators upgrading to this release must connect their installation to a Kumo.io account or install a license.

Upgrade notes (curated)

Standard upgrade: swap image, run migrations.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.

v0.6.52

Changes since release/v0.6.39. Assembled at mint from the release-note fragments committed alongside the changes themselves.

Highlights (curated)

• First-party JS in the Docker image ships minified. The compiled dist/ output was plain tsc emit — readable source minus type annotations, with every comment and JSDoc block preserved. The image build now minifies all @kumo-scoped JS (comments stripped, code compacted, function/class names kept for diagnostics), removes .d.ts declarations and package markdown from the deploy tree, and fails the build if any first-party file escapes the pass.

Breaking changes (curated)

• Self-hosted and local deployments no longer run billing mechanics. Plans, trials, quota enforcement, and usage metering are hosted-SaaS rails; a self-hosted instance resolves entitlements purely from its license (community by default, enterprise when licensed), and the billing/usage API surfaces no longer exist there. Setting billing environment variables (KUMO_STRIPE_*, KUMO_BILLING_PROVIDER) on a self-hosted deployment is now a startup configuration error.

Upgrade notes (curated)

Standard upgrade: swap image, run migrations.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.

v0.6.39

Changes since release/v0.6.37. Assembled at mint from the release-note fragments committed alongside the changes themselves.

Highlights (curated)

• Web UI sourcemaps no longer ship. The tenant UI's production build no longer emits sourcemaps (which embedded original source), and the image build strips and fail-closes on any map in the served UI tree.

Breaking changes (curated)

None.

Upgrade notes (curated)

Standard upgrade: swap image, run migrations.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.

v0.6.37

Changes since release/v0.6.28. Assembled at mint from the release-note fragments committed alongside the changes themselves.

Highlights (curated)

• Fresh appliance installs work out of the box. The single-container appliance now seeds its system reference data on boot — environment- identification policies, the global system view templates, and the commercial catalog — the same bootstrap AWS and Compose deployments run as a release step. Previously a plain docker run install synced resources but identified 0 environments and rendered 0 diagrams. The seeds are idempotent: existing installs pick them up on their next restart after upgrading, with no data affected.

• Self-hosted images no longer contain hosted-only code (phase 1). The Stripe billing adapter, the Redis rate limiter, the hosting-cell serving seam, and the partner/white-label domain are now physically absent from self-hosted, OEM, and local distributions — resolved as optional modules only in the hosted SaaS build, with the packaging gate enforcing their absence. A self-host deployment that sets a hosted-only knob (e.g. KUMO_REDIS_URL) now gets a clear configuration error instead of silent behavior. The control-plane domains (installations, releases, issuer, portal) moved to their own persistence package and are likewise absent from every customer distribution. Remaining hosted-only lanes are staged for the same extraction.

• Image packaging hardened. Self-hosted images no longer include any TypeScript source, test files, sourcemaps, or repo-local data files — every workspace package now declares an explicit publish allowlist, the image build strips and then fails closed if any source or map file survives into the deploy tree, and the packaging gate refuses any package in a distribution without an allowlist. Images are also meaningfully smaller.

Breaking changes (curated)

None.

Upgrade notes (curated)

Standard upgrade: swap image, run migrations.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.

v0.6.28

Changes since release/v0.6.22. Assembled at mint from the release-note fragments committed alongside the changes themselves.

Highlights (curated)

• Temporary AWS credentials and runtime-identity role hops in the connect wizard. The Access key method now takes an optional session token, so STS/SSO session credentials can be pasted directly (useful for estates with no long-lived IAM keys). The Runtime identity method gained the same optional "Then assume role" hop as the other methods — crawl through a cross-account read role from the deployment's own identity. Use Test connection to see exactly who the crawl would run as.

Breaking changes (curated)

None.

Upgrade notes (curated)

Standard upgrade: swap image, run migrations.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.

v0.6.22

Changes since release/v0.6.17. Assembled at mint from the release-note fragments committed alongside the changes themselves.

Highlights (curated)

• Owner sign-in and recovery, rebuilt. A lost browser session is no longer a lockout — and never needs a password you were asked to invent at setup. /signin (now actually reachable on the appliance) offers two lanes: Sign in with your Kumo.io account (re-approve from the account this instance is connected to — no passwords; only the owning account is accepted) and kumo recover (run docker exec <container> kumo recover on the host and paste the one-time code — valid 15 minutes, single use; works offline). A recovery passphrase remains an optional extra under Admin → System → Security. New CLI command: kumo recover.

• Release notes are now assembled at release time. Every release tag and GitHub Release carries curated notes built from per-change entries, so operators reading notes across skipped versions always get complete, per-release documents.

Breaking changes (curated)

None.

Upgrade notes (curated)

Standard upgrade: swap the image (no migrations in this release). After upgrading, visit /signin once to see the new recovery lanes — no configuration needed.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.

v0.6.14

Changes since v0.6. Generated by pnpm release:notes; the curated sections are hand-written before the release is minted.

Breaking changes (curated)

enumerate operator-visible breaking changes (config, CLI, API, deployment). Write "None." if there are none.

Upgrade notes (curated)

anything an operator must DO beyond image swap + migrate (env vars to set, one-time commands, ordering). Write "Standard upgrade: swap image, run migrations." if nothing special.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.

v0.6.11

Changes since v0.6. Generated by pnpm release:notes; the curated sections are hand-written before the release is minted.

Breaking changes (curated)

enumerate operator-visible breaking changes (config, CLI, API, deployment). Write "None." if there are none.

Upgrade notes (curated)

anything an operator must DO beyond image swap + migrate (env vars to set, one-time commands, ordering). Write "Standard upgrade: swap image, run migrations." if nothing special.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.

v0.6.6

Never released (note added 2026-10-25). There is no release/v0.6.6 tag (locally or on origin) and no GitHub Release for it. This file was committed by hand (579095935, "v0.6.6", 2026-08-31 17:08 +1200), three minutes after release.yml first landed (d99c0e37a), and its curated sections below were never filled in. Nothing was minted from it: the first mint under release.yml was v0.6.11 (release-playbook §5 ledger). The body is kept as written.

Changes since v0.6. Generated by pnpm release:notes; the curated sections are hand-written before the release is minted.

Breaking changes (curated)

release: enumerate operator-visible breaking changes (config, CLI, API, deployment). Write "None." if there are none.

Upgrade notes (curated)

release: anything an operator must DO beyond image swap + migrate (env vars to set, one-time commands, ordering). Write "Standard upgrade: swap image, run migrations." if nothing special.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.

v0.6.0

Changes since v0.5. Generated by pnpm release:notes; the curated sections are hand-written before the tag is cut.

Breaking changes (curated)

release: enumerate operator-visible breaking changes (config, CLI, API, deployment). Write "None." if there are none.

Upgrade notes (curated)

release: anything an operator must DO beyond image swap + migrate (env vars to set, one-time commands, ordering). Write "Standard upgrade: swap image, run migrations." if nothing special.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.

v0.5.0

Changes since v0.4. Generated by pnpm release:notes; the curated sections are hand-written before the tag is cut.

Breaking changes (curated)

release: enumerate operator-visible breaking changes (config, CLI, API, deployment). Write "None." if there are none.

Upgrade notes (curated)

release: anything an operator must DO beyond image swap + migrate (env vars to set, one-time commands, ordering). Write "Standard upgrade: swap image, run migrations." if nothing special.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.

v0.4.0

Changes since v0.3. Generated by pnpm release:notes; the curated sections are hand-written before the tag is cut.

Breaking changes (curated)

release: enumerate operator-visible breaking changes (config, CLI, API, deployment). Write "None." if there are none.

Upgrade notes (curated)

release: anything an operator must DO beyond image swap + migrate (env vars to set, one-time commands, ordering). Write "Standard upgrade: swap image, run migrations." if nothing special.

Database migrations (generated)

No new migrations in this release.

AWS read-only policy delta (generated)

No change — existing customer crawler roles need no update.