v1.8.0
March 2026
New
- OAuth config section — dedicated
server.oauthconfig withenabled,accessTokenTtl,refreshTokenTtl, andauthCodeTtlfields - Per-model embedding cache — cache factory supports per-model namespacing for multi-model setups
Fixes
- Cross-graph link deletion from mirror side now works correctly; proxy nodes excluded from graph stats
- OAuth token endpoint moved to
/api/oauth/tokenfor consistency with all other OAuth endpoints - Security hardening — path traversal, input validation, headers, error message disclosure
Docs
- Comprehensive documentation audit — synced all docs, site, UI help, and changelog with actual code
- Changelog rewritten in compact user-facing format, trimmed to v1.5.0+