Skip to content

Changelog - Core

2026-02-27

  • Introduce Builder-first API lifecycle coverage for artifacts, planning, generation/evolve, apply, and evaluation.
  • Align Builder OpenAPI schema and request validation with current Core behavior.
  • Improve Builder apply/evolve reliability for deployable function code and revision-driven iteration.

2026-02-25

  • Add centralized and typed permissions catalog, and migrate runtime permission checks to use it across Core.
  • Align proxy-level service permission checks with adapter-level permissions to prevent permission drift.
  • Improve wildcard authorization matching to support patterns like *.read and resource.*.
  • Tighten function binding enforcement for target-scoped permissions and support wildcard target *.
  • Harden OAuth redirect flow by validating redirect_uri and requiring application_id for redirect-based flows.
  • Harden Storage path handling to block traversal and prevent access to internal metadata namespace.
  • Add test coverage for permission mapping, wildcard authorization, OAuth redirect validation, binding enforcement, and storage path safety.

2026-02-07

  • Update AI generation system prompt for new triggers on Functions (HTTP and/or events).

2026-02-02

  • Fix request formats for a few endpoints.

2026-02-02

  • Add Schema Registry capability.
    • Schemas binding for functions via context.bindings.schemas.validate() (synchronous, in-process).
    • IaC support: declare schemas in molnos.json under resources.schemas.
  • Add event triggers for functions.
    • Functions can subscribe to named events on the in-process event bus via triggers configuration.
    • Supports combining HTTP and event triggers on the same function.
  • Add events binding for functions: Functions can emit events via context.bindings.events.emit(eventName, data).
  • Add evroc as a supported AI provider.
  • Fix IaC function deployment not passing triggers through to the Functions service.
  • Update schema-iac-v1.json with schemas resource type and schema binding support.

2026-01-30

  • Add AI-assisted code generation capabilities.
  • Add AI configuration section to molnos.config.json schema.
  • Add /contexts/:contextName/generate endpoint for code generation.
  • Add /generations endpoints for generation management (get, list, apply, discard, delete).
  • Add ability to download Sites.

2026-01-25

  • Add basic management capabilities to worker server.

2026-01-25

  • Add elasticity - running worker nodes to distribute work across multiple hosts.

2026-01-24

  • Add Contexts capability.
  • Add infrastructure-as-code (IAC) capabilities.
  • Various bug fixes, clean up and under-the-hood polish.
  • Add cluster mode for multi-host deployments with core/worker architecture.

2026-01-12

  • Add system metrics endpoint.
  • Fix regex pattern that broke the API view on the docs site.

2026-01-11

  • Add capability to use either passwordless (magic links) or OAuth-based login variants.
  • Add capability to create signed URLs for objects in private buckets.
  • Add capability to do rate-limiting either globally or per-service.
  • Migrate away from MikroDB to only using PikoDB, reducing packaging dependencies and data overhead.
  • Migrate away from Hono to MikroServe, making the full package dependency chain go down to only 1 individual (Mikael Vesavuori).
  • The above changes reduced the total size of MolnOS with 15%, from 400KB to 340KB.

2026-01-08

  • Enable installation of MolnOS via npm.

2026-01-01

  • Update to new, more flexible and uniform format for Sites project IDs.

2026-01-01

  • Fix incorrect validation reference statement.

2025-12-31

  • First public release.