2026-05-14 — feature (1.0.0)
API documentation portal — a public /docs/api page listing every /api/v1 route with its required scope and deprecation status, generated from the typed route definitions.
The published record of user-visible changes to CrowdVital, newest first. Deprecation entries are the canonical announcement that starts the deprecation clock for the affected contract.
API documentation portal — a public /docs/api page listing every /api/v1 route with its required scope and deprecation status, generated from the typed route definitions.
API token management — create, view, revoke, and rotate programmatic API tokens at /app/me/tokens, with an owner-only organisation token oversight page.
API / programmatic access — the versioned, token-authenticated /api/v1 HTTP API with scoped tokens, cursor pagination, and per-token rate limiting.
Notification preferences & unsubscribe — per-user notification category controls, send-time suppression, and the RFC 8058 one-click unsubscribe landing.
Billing self-service — view your plan, subscription status, seat usage, and invoices, and open the Stripe Customer Portal.
User self-service — manage your profile, active sessions, and email address from /app/me.
Tenant admin — rename your organisation and transfer ownership.
Team management — invite members by email, manage pending invitations, and accept an invitation.
Role & permission administration — assign roles to members.
System pages — branded 404 and 500 pages, plus the maintenance and degraded-mode surfaces.
Tenant switcher — switch the active organisation from the header for users who belong to more than one.
Signup & tenant onboarding — public signup with email verification and first-organisation onboarding.
Authentication — passwordless login (magic link / code), passkeys, TOTP MFA, recovery codes, and server-side sessions.
Platform foundation — the modular monolith, tenant isolation, the audit log, the notification substrate, and observability.