# Changelog

## 0.2.0 — 2026-08-15

- Production OTP path through the central SMS subsystem.
- Mida fast API adapter with encrypted credentials, HTTPS host restriction and response normalization.
- OTP cooldown, independent mobile/IP request throttles and verification throttling.
- OTP delivery status, mobile verification timestamp and login/logout security audit.
- Full admin user management: search/filter/create/edit/status/roles.
- National-code support and validation.
- Protection against deactivating/removing the last active Super Admin.
- User and admin active-session management with device/browser labels.
- Granular RBAC permissions and custom role management.
- Central Notification Event + per-channel Delivery architecture.
- Database and SMS notification channels.
- User notification inbox and read state.
- SMS gateway settings, real-send test, templates and redacted delivery logs.
- Audit Log browser in Admin Panel.
- CLI bootstrap commands for Super Admin and Mida SMS.
- Phase-2 migrations, documentation and versioned PWA/assets.

## 0.1.0 — 2026-08-15

- Modular-monolith Foundation.
- Central Design System and navigation.
- User/OTP/session foundation.
- Database-backed RBAC.
- Settings Service and Audit Log.
- Version registry and ZIP Update Center.
- PWA foundation and cache-safe asset structure.
- Initial Admin and User panel shells.