Security defaults: email hidden from readers by default; auth/system schemas admin-only (incl. previously ungated system.* document reads).

• f7863c5Security defaults: reader email mask; auth/system schemas admin-only

Code-based email verification: {{verification_code}} + POST /auth/verify-code.

• fd89e2fAuth: code-based email verification - {{verification_code}} + POST /auth/verify-code

App restore (POST /apps/import with id remapping), apps-state persistence fix, and RLS property masks (HIDE/UNHIDE PROPERTY, snapshot v8).

• bfacf43RLS: property masks (column-level security) - HIDE/UNHIDE PROPERTY
• 1f69195Apps: POST /apps/import - restore a backup as a new app; persist apps state

Per-app JSON backup: GET /apps/{id}/export.

• d3a322cApps: GET /apps/{id}/export - self-contained JSON backup of an app

Phantom collection-registry fix (tombstoned removal on every drop path, boot repair) and SHOW COLLECTIONS.

• e3ca22eFix phantom collection-registry entries on drop; add SHOW COLLECTIONS

Apps/projects Phases 1–3 merged (model + membership, schema isolation, settings + per-app email) plus the Cypher app DDL; APPS.md rollback guide; flaky CLI env test fixed.

• 2168dd9Tests: pin DETACH DELETE semantics for Cypher and sync-rule deletions
• c25b275APPS.md: design plan for first-class apps/projects
• 6007f39Apps Phase 1: app model, membership, and X-Anvil-App request scoping
• 5f5b550Apps Phase 2: schema isolation, label bindings, and DROP APP cascade
• fa3f288Apps Phase 3: app-scoped settings, per-app email templates, app-aware auth mail
• 1846b0dAPPS.md: mark Phase 4 (Hammer UI) implemented
• d2c200bAPPS.md: rollback instructions for returning to pre-apps master
• 3598db7Merge branch 'apps': first-class apps/projects (Phases 1-3)
• 82aab82Clippy: drop needless borrow in resolve_app_scope
• 99512f8Apps: Cypher DDL (CREATE/DROP/SHOW APP, APP ... MEMBER/LABEL); fix flaky CLI env test

Doc→graph sync removes deleted fields from nodes (previously a field deleted from a synced document lingered on the node forever).

• 6181491Sync: remove node properties when fields are deleted from the document

Version bump; trigger/sync duplicate fixes.

• 22b2516v0.21.29: version bump + trigger/sync duplicate fixes

Cypher UUID generation (randomUUID()/uuid(), placeholders, POST /db/uuid).

• 05645bdCypher: randomUUID()/uuid() + generated-value placeholders; POST /db/uuid
• 3edd781CI: retrigger after GitHub Actions outage (startup_failure on 05645bd)

server.base_url runtime-editable (SET/SHOW/RESET + REST).

• 6a23160Settings: make server.base_url runtime-editable (SET/SHOW/RESET + REST)

server.base_url config for links in outgoing emails.

• 577bc2eConfig: server.base_url for links in outgoing emails
• 2c1e907Fmt: wrap the base_url set_value call in the config test

Auth polish: OTP users mirrored into the graph, server-assigned usernames, unique emails, email login.

• 99544f4Auth: mirror OTP-registered users into the graph (:User node + HAS_ROLE)
• d259336Auth: server-assigned usernames, unique emails, and email login

Collection registry/store mismatch healing on create; UBUNTU26.md revised from a real walkthrough.

• cd1f69dHeal collection registry/store mismatches on create
• 9d0016fFmt: wrap the re-created-collection summary line
• 0f448c3Fix flaky signed-download tamper test: flip a significant signature char
• 9bed750UBUNTU26.md: revise from a real walkthrough of the guide

Database export/import endpoints, camelCase auth fields, MATCH…CREATE per-row semantics, UBUNTU26.md hardened-server guide.

• ac4972bAdd full-database export endpoint (GET /db/export)
• 2b5eb03Docs: refresh README stats/UI naming; add DEPENDENCIES.md
• 29ecc0fAdd database restore/import endpoint (POST /db/import)
• 85e60bdAuth: accept camelCase field names on /auth/refresh and /auth/change-password
• 974dcedCypher: MATCH ... CREATE/MERGE ... RETURN runs the write once per MATCH row
• 7c9e444Fix clippy 1.98 lints so CI is green again
• 7026aa3Add UBUNTU26.md: hardened Ubuntu 26.04 server setup for Anvil DB

The index integration release (Phase 27): every index kind with DDL/CLI/REST, MATCH fast paths, IndexAdvisor, disk-backed stores with snapshot v7; rustls ring-provider fix.

• 05df5faSYNC LABEL: idempotent on exact match
• 455490fPhase 27.1 prep: lift index descriptors to core, add IndexObserver trait
• 335342eTODO: break Phase 27.1 into 10 numbered sub-tasks
• 438d930Phase 27.1.2: IndexManager implements IndexObserver via SharedIndexManager
• 08e55d1Phase 27.1.3: MemGraph wires IndexObserver with rollback on violation
• d658f10Phase 27.1.4: AppState wires SharedIndexManager into MemGraph
• 2c6d8f7Phase 27.1.5: SHOW INDEXES [ON :Label] Cypher
• d920d6bPhase 27.1.6: CREATE INDEX (Property kind) + backfill + IF NOT EXISTS
• bcabe30Phase 27.1.7: CREATE UNIQUE INDEX
• 444fecbPhase 27.1.8: CREATE FULLTEXT INDEX + DROP INDEX
• 81dafc9Phase 27.1.9: WAL persistence - CreateIndex + DropIndex mutations
• 3028ee1Phase 27.1.10: Snapshot file-format persistence for index descriptors
• 96cba26TODO: break Phase 27.2 into 4 sub-slices + record architecture decision
• f3e7bbcPhase 27.2.1: Live MATCH fast path for n.prop = X (Property + Unique)
• 05fcd2fPhase 27.2.2: MATCH fast path for range predicates with selectivity gate
• 60dc70dPhase 27.2: mark 27.2.1 and 27.2.2 as done (drop 'commit pending' tag)
• f209a8dPhase 27.2.3: EXPLAIN / PROFILE reflects the index fast path
• 5a09e63Phase 27.2.4: pin SHOW INDEXES stats end-to-end + UNIQUE short-circuit
• c415f4dPhase 27.3.1: Composite-index DDL + AND-of-equalities fast path
• 516e64ePhase 27.3.2: Fulltext query procedure CALL db.index.fulltext.queryNodes
• add50e1Phase 27.3.3: CLI `anvil index ls/show/create/drop`
• db49214Phase 27.3.4: REST admin API for index management - /admin/indexes
• b76e294Phase 27.3.5.1: lift RelationshipPropertyIndex into IndexManager + new IndexKind::RelProperty
• 286c1d6Phase 27.3.5.2: relationship observer hooks
• 744534ePhase 27.3.5.3: relationship-property index DDL + SHOW + CLI + REST
• 2db110ePhase 27.3.5.4: MATCH fast path for relationship-property equality
• b38341bPhase 27.3.5.5: range fast path for relationship-property indexes
• 2063b30Phase 27.3.6.1: lift SpatialIndex into IndexManager + new IndexKind::Spatial
• 1882addPhase 27.3.6.2: observer hooks for Spatial descriptors
• 987981ePhase 27.3.6.3: SPATIAL index DDL + SHOW + CLI + REST + inline point()
• 847f570Phase 27.3.6.4: MATCH fast path for spatial radius queries
• 028df77Phase 27.3.7.1: lift CoveringIndex into IndexManager + new IndexKind::Covering
• 3d4ccccPhase 27.3.7.2: observer hooks for Covering descriptors
• 4fc9372Phase 27.3.7.3: covering index DDL + SHOW + CLI + REST
• 84384a7Phase 27.3.7.4: MATCH fast path routes through Covering descriptor + storage refactor
• 923f99cTODO: add 27.3 status roll-up + parent-heading completion markers
• 13a7cecTODO: restore 27.3 quick-wins / larger-primitives bullets with checkboxes
• d5ad054TODO: expand 27.3.8 IndexAdvisor with scope breakdown + checkboxes
• 9aa6e74Phase 27.3.8.1: SuggestedIndex data model + dismissal persistence
• c4044b1Phase 27.3.8.2: slow-query attribution via LabelScanProbe
• ffe7b40Phase 27.3.8.3: IndexAdvisor suggestion engine
• 863d499Phase 27.3.8.4: IndexAdvisor operator surfaces (closes 27.3)
• b4ac678TODO: expand 27.4 production scale-out into 9 sub-slices
• 0cd6fc0Phase 27.4.1: Disk-backed Property index store
• 39d6b5ePhase 27.4.2: Disk-backed Unique/Composite/Fulltext/Rel/Covering stores
• 2e15ea9Phase 27.4.3: Snapshot v7 + skip-walk restart for disk-backed indexes
• 322d4f9Phase 27.4.4: CREATE INDEX populate no longer blocks concurrent writes
• 0c43200Phase 27.4.5: Online ALTER INDEX REBUILD
• e21247cPhase 27.4.6: ShardedIndexManager storage primitive
• 25f7796Phase 27.4.7: Replica index convergence (WAL determinism, storage-level)
• 41ce4c6Phase 27.4.8: Per-index maintenance_micros + IndexPressure event type
• c014a26Phase 27.4.9: Memory-budget index advisor (closes Phase 27.4)
• f31fb91TODO: mark 27.5.2 (IndexAdvisor admin panel) complete
• c5bd530Phase 27.6: Indexes documentation
• 7869a71TODO: 27.7 Checks -- Phase 27 testing gaps + open items
• 8693f1ePhase 27.7: Address testing gaps documented in 27.7 Checks
• f4621b6Phase 27.7: clippy fix + workspace cargo fmt pass
• 1411e73Fix clippy::unnecessary_sort_by under stricter CI lint set
• c6518f4Ignore generated mdBook output (docs/book)
• 0c993fbFix rustls CryptoProvider panic: standardize on ring provider
• 934a2bfBump workspace version to 0.21.22

OTP auto-registration username-collision handling.

• 095e0b9Fix formatter
• 4cbbfc1OTP auto-register: handle username collisions, mark provisional

File storage (Phase 25: buckets, signed URLs, image transforms, TUS resumable uploads, quotas, CLI), service accounts & API keys (Phase 26), email verification + passwordless OTP login, SMTP TLS.

• e32b4b0Added Email Verification & Passwordless Login
• 9f77400Update auth, passwordless, glbal settings
• 5f96796Add Phase 25 file storage plan and 25.1 storage schema
• 7cf124fPhase 25.2 pluggable storage backends + clippy fixes
• e2a05d3Phase 25.3 storage REST API
• 8ccf9b6Phase 25.4 Cypher integration (helpers + bucket DDL)
• 5059d67Phase 25.5 storage access control (RLS)
• 11436f9Backfill 25.5 RLS test coverage
• 0d984e6Phase 25.6 signed URLs
• b8fedfcPhase 25.7 image transformations
• 41f5737Phase 25.8 resumable uploads (TUS 1.0.0)
• f750725rustfmt Phase 25.8 files
• 7af726aPhase 25.9 storage trigger integration
• 8386053Phase 25.10 storage event logging
• b826b65Phase 25.11 storage quotas and limits
• 0980156Phase 25.12 storage configuration
• ad4b6ffPhase 25.14 storage CLI
• 6327128Phase 26: Service Accounts & Long-Lived Tokens -> 26.1 Service Account Model
• 5fd6d5626.2 API Key / Token Model
• ee3f11a26.3 Management API
• 07583ce26.4 Authentication Middleware Integration
• 26e1d6226.5 Security & Auditing
• 74c8331SMTP TLS + sync-before-trigger ordering for collection writes
• 57fa54a26.6 Service Account CLI
• 7a2d545fix(clippy): use sort_by_key + Reverse for unnecessary_sort_by

EXPLAIN/PROFILE fixes; formatting/clippy pass.

• 5de27d0Updates to wikipedia
• 1c7657cUpdate test data and wikipedia file
• e3eb4afFix EXPLAIN and PROFILE
• 521e53aCode formating and clippy errors

Trigger execution order + backfill, persistent RLS, Cypher document updates with WHERE, collection-creation fixes.

• 528e481Fix create collection and tests
• 4f66dc3Fix issues with triggers and execution orders
• 17898faTrigger automatically backfills by firing the
• 9ad96e8Add descriptions to tests
• 15c6823Make sure RLS is persistent, fix issues with polocies beinng applied
• 6f7121dFix cypher to update document, added where clause, fixed it so it executes sync correctly
• 5b83704Update tests
• ef60a39Fix clippy issues
• 756e3c3Fix tests
• cf63bacFix formatting
• 8170fedFix tests

Cypher conformance driven by the test-script harness, wired into CI; algorithm/apoc call fixes.

• 429714eUpdate create and module comments
• 8f035f6Fix issues with inlime MATCH and SET
• 16090daFix transaction, calculation method, datetime(), relationship matching
• 8eaa180Fixed issue with WHERE clause in transactions, fixed issues with COALESCE on a null or non-existent property
• 4b73f02Update tests and test data
• b277afcFix issue with algorithms being called correctly
• 18c96f4Update tests apoc and algo functions
• 7ff759cFix issue with algo.bfs
• 41bdb59Update cypher test and add to github actions tests
• 7e4eae4fix issue with clippy erros in core
• 53ea9ecUUpdate issues with storage
• 2ae5d8aMore invisible clippy issues not picked up locally

Collections enforce roles; GraphQL fixes and tests.

• 43a3036Patch collections to enforce role
• f6c1c7aFix issuees with graphQL and added tests

Role-based restrictions and new role tests.

• 9621eadUpdate restrictionns based on role and add new tests
• 2c2f613Update role tests

Cypher fixes driven by the test script; OPTIONAL MATCH; stats tooling.

• 5dd5bb9Add scripts to generate stats
• d82f1dcAdd script to get crate information and update WIKIPEDIA
• d1061d3Fixed issue with OPTIONAL MATCH
• 9c1f3a7U pdated cypher test script
• 35e4fa8Update test script for cypher and fix issues qith cypher queries

Client drivers (anvilent), GraphQL fixes, sample database, doc-API auth fixes.

• 89c5bd1Update
• d496c5fanvilent drivers
• 24b996aFix issues with graphql queries
• 8fe28b0Add sample database to CLI
• cf478c9Fix issues with authentication errors when using document api, fixed cypher linknig to document collections
• 629b987Fix issues with clippy and fmt

Baseline of the v0.21.x versioning scheme - carries the v0.1.x foundation: storage engine, Cypher, GraphQL, auth, document store, RLS, plugins, browser UI, TLS, and WAL-first checkpoint durability.