Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

✨ GET /api/v1/uptime endpoint (PR #67) — returns server start_time and uptime_seconds
📝 mkcert local HTTPS doc + Makefile cert target (PR #68) — prep for ADR-0028 Phase B OIDC callbacks
✨ pkg/auth/ skeleton for OpenID Connect (PR #69) — types + client surface, handlers come later (Phase B.3+)
📝 ADR-0028 Phase B roadmap document (PR #71) — outlines remaining B.3 / B.4 / B.5 work
✨ pkg/auth/ OIDC client implementation : Discover, RefreshJWKS, ExchangeCode, ValidateIDToken (PR #74) — completes ADR-0028 Phase B.3
✨ OIDC HTTP handlers : /api/v1/auth/oidc/{provider}/start and /callback with PKCE + sign-up-on-first-use (PR #75) — completes ADR-0028 Phase B.4
🧪 OIDC handler unit tests covering start/callback rejection paths and PKCE redirect (PR #76)
📝 documentation/AUTH.md synthesis covering Phase A + B current state (PR #73)
📝 documentation/MISTRAL-AUTONOMOUS-PATTERN.md contributor guide for the Mistral autonomous pattern that ships PRs (PR #78)
📝 PHASE_B_ROADMAP marks B.3 + B.4 done (PR #80)
📝 documentation/2026-05-05-AUTONOMOUS-SESSION-RECAP.md captures the day's 24 Mistral autonomous PRs (PR #81)
📝 README link to Mistral autonomous pattern doc (PR #83)

Magic-link passwordless authentication (ADR-0028 Phases A.1 through A.5, PRs #59-#63)
OIDC provider config skeleton (ADR-0028 Phase B.1 prep, PR #64)
Magic-link expired-token cleanup loop (PR #65)
Mailpit local SMTP infrastructure (ADR-0029)
BDD parallel email assertion strategy (ADR-0030)