Changelog

User System: Self-hosted setup flow — first user registers as admin via /setup; all subsequent users are invite-only with UUID-token links and 72-hour expiry.

Permissions: Module-based JSONB permissions per user — granular levels (admin / write / read / none) across five modules: notifications, channels, apps, users, settings.

Email: Transactional emails via Postmark API — setup confirmation, invitation, and welcome emails handled entirely in the Go backend.

Targeted Delivery: Notifications now correctly scope delivery — client token auth → that token only; app secret auth → broadcast to all tokens in the app.

Dashboard: Users page with inline permission editor, invite panel with per-module selectors, and joined-date column.

agents.md: AI-agent integration guide with accurate method signatures, auth scoping rules, and SaaS patterns. Served at /agents.md and /dashboard/agents.

Docs: Dashboard and public docs updated with SaaS integration pattern and private/presence channel auth endpoint examples.

Notifications: Gotify-style push notifications with persistent message storage, priority levels (1-10), and TTL expiration.

Delivery Tracking: Per-client delivery status (pending → delivered → read) with WebSocket acknowledgment protocol.

Client Tokens: Per-device authentication tokens for notification clients, managed via dashboard and REST API.

Webhooks: Forward notification events to external endpoints with HMAC-SHA256 signed payloads.

Offline Queue: Messages queued for offline clients, automatically delivered on WebSocket reconnect.

SDK: Updated @datonow/sdk and @datonow/sdk-server to v1.1.0 with sendNotification, NotificationInbox, and client token management.

Dashboard: New notification sender, client token manager, and webhook management pages.

Protocol: New WebSocket connection mode (?token=xxx) alongside existing ?appKey= for realtime channels.

SDK: Released @datonow/sdk and @datonow/sdk-server to NPM with full documentation.

Architecture: Migrated Next.js API routes to Go backend proxy for enhanced performance.

Security: Hardened HMAC-SHA256 signature verification in both SDKs.

Infrastructure: Added .dockerignore and optimized monorepo Dockerfile logic.

Core: Initial stable release of the Datonow Go Realtime Server.

Protocol: Implementation of WebSocket pub/sub with low-latency delivery.

Auth: Authentication engine with scrypt password hashing and AES-256-GCM secret encryption.

Dashboard: Multi-tenant management interface with realtime telemetry.