Release history
Changelog
ObjectStack is the runtime and Console every ObjectOS edition runs on, and all of its packages ship under one version number. Each release below shows the date its notes state and up to four highlights quoted from those notes; the full notes carry the breaking changes and the upgrade checklist.
-
18.3.0
- An installed package is customized in its pair
- Ownership queues and assignment rules
- Connectors carry each organization's credentials
- One record page, opened in a drawer
-
18.2.0
- The Console and
@object-ui/*ship from this repository - One access rule for a file reference
- App automation cannot write identity rows under elevation
- Installs check what a package declares
- The Console and
-
18.1.0
- ADR-0131's last steps: an organization-less row confers nothing
- A production
os servewith no organization object is refused - Nine metadata narrowings come with a conversion
- One federation rule at every datasource door
-
18.0.0
- A database 17.x created is upgraded by a ceremony before 18.0.0 serves it
- A flow reads one expression dialect per slot
- Positions, permission sets and capabilities are metadata
- Page components are judged as errors
-
17.7.0
- App-authored code reaches stored metadata only through the metadata API
- Credentials stop travelling in copies
- "Hidden" and "gone" are one answer on the write doors
- Reads and writes serve declared fields only
-
17.6.0
- A caller that resolves no permission set gets the deny baseline
- Field-level security reaches every query door
- Stored metadata bodies are redacted wherever they are copied
- Analytics is judged like the data door
-
17.5.0
- Package-authored scheduled work is off until a deployment turns it on
- An edge-branched
decisiontakes only its first matching branch - Row-level security stops admitting what it cannot enforce
- Analytics answers only what the caller may read
-
17.4.0
- Every duration key carries its unit in its own name, and a gate keeps it that way
- A static
readonlyfield is stripped from a non-system INSERT, not only from a non-system update -
positions[]on the session payload is the security axis -
driver-turso'stimeoutis delivered or refused, and two inert keys are gone
-
17.3.0
-
client.projects.*becomesclient.environments.*, with no aliases - Who may become a user of an environment's apps is one declaration, and its default flips to the safe end
- A permission-store read failure fails LOUD
-
driver-memoryenforces the uniqueness it always declared
-
-
17.2.0
- Two write-path guardrails close the "silently dropped predicate" hole
- Further ADR-0049 enforce-or-remove retirements
-
http_request_errors_totalis retired - Analytics stops answering the wrong number on a cross-object filter
-
17.1.0
- Deactivating a permission set or a position now actually stops granting access
- Platform admin sets stop shipping a bulk-export wildcard
- Partial field masking
-
sys_audit_logcan answer "who viewed this record"
-
17.0.0
- A file is a record now, not a blob in a column
- Bulk export is its own privilege
- The SDK reaches the surface that exists — and only that surface
- An approver can choose the next approver
-
16.0.0
- Ask for approval like a real organization
- The approvals inbox is now metadata, not hand-written buttons
- "Alert 60 days before
end_date" finally just works - Roll-ups can count only what matters
-
15.0.0
Date not stated in the notes- Answer "why can this user see this record?" in one click
- Multi-tenant data stays in its lane — by construction
- An AI workspace built into the Console
- Gantt charts ready for real project management
-
14.0.0
- Approvals route to positions
- Admin user management, phone sign-in, and bulk import
- SMS infrastructure and phone OTP
- Book audience enforced at the read layer
-
13.0.0
- Audience anchors: built-in
everyone/guestpositions - Delegated administration
- The explain engine
- Access-matrix snapshot gate
- Audience anchors: built-in
-
12.0.0
- Adaptive record surfaces and semantic field spans
- Detail-page related lists:
'primary'prominence - Package-shipped permission sets
- The protocol-version handshake is now enforced
-
9.0.0
- Analytics results are now presentation-ready
- Automation: durable pause survives subflows and restarts
- Publishing: seed data lands on every publish path
- AI service: tools stream progress while they run