Changelog

All notable changes to ProBeya are documented here. We follow Semantic Versioning.

v0.3.0 — 2026-04-01

Added — Integration & API Layer (Phase 4)

  • API Key Management — Create, rotate, and revoke API keys with fine-grained scopes for programmatic access. Keys use bcrypt hash storage (prefix-based lookup) and support expiration dates.
  • Outgoing Webhooks — HMAC-SHA256 signed HTTP POST events with 3x exponential backoff retry, delivery logging, and auto-disable after 10 consecutive failures. Subscribe to 14+ event types.
  • Slack & Teams Integrations — Incoming webhook notifications for action creation, KPI alerts, escalations, and audit completions.
  • KPI Data Ingestion — Batch endpoint (POST /api/v1/ingest/batch) for automated KPI data feeds from SAP, MES, QMS, LIMS, and other external systems. Processes up to 500 values per request.
  • Ingest History & Audit Log — Immutable audit trail for all ingestion attempts (success and failure). Paginated, filterable by source, date range, and status for compliance reviews.
  • Threshold Breach Webhooks — Automatic kpi.threshold_breached event dispatch when ingested values exceed red/amber thresholds. Enables real-time alerting via PagerDuty, Slack, or custom integrations.
  • API Versioning — URL path versioning (/api/v1/) with additive change policy, Sunset header for deprecated versions, and 6-month migration windows.

Changed

  • Ingest Router now logs every ingestion attempt to the ingest_log table for full traceability
  • Webhook Sender includes source system identifier in threshold breach payloads

Developer

  • New ingest-log schema in packages/db/src/schema/ingest-log.ts with composite index on (organizationId, source, createdAt)
  • New history query on ingestRouter for paginated audit log retrieval with filtering
  • Comprehensive test suite for ingest router: 8 test cases covering batch processing, tenant isolation, scope enforcement, and webhook triggering

v0.2.0 — 2026-03-20

Added — Pharma OpEx Platform

  • SQCDP KPI Dashboards — Track Safety, Quality, Cost, Delivery, People metrics with traffic-light indicators
  • HSE Safety Cross — Monthly calendar grid for daily safety status logging
  • TIER Meeting Mode — Full-screen mode with timer, agenda flow, and quick action creation
  • Action Management — 7-status lifecycle with TIER 1/2/3 auto-escalation engine
  • Problem Solving — 5 Whys, Ishikawa (6M), WWWHWWH, A3 Report, PDCA cycle tracker
  • Gemba Walk Module — Digital route-based walks with observation logging
  • 5S Audit Module — Configurable checklists with radar chart results
  • Standard Work Checklists — Daily/shift/weekly checklists with completion tracking
  • Kaizen Board — Continuous improvement idea submission and tracking
  • OEE Dashboard — Availability × Performance × Quality with gauge charts
  • CSV Import Engine — 4-step wizard with column mapping and type detection

Added — Platform

  • Public REST API — 20+ endpoints with OpenAPI 3.1 specification
  • API Key Authentication — Bearer tokens with bcrypt hash storage and scopes
  • MCP Server — 18 tools for Claude/ChatGPT integration (stdio transport)
  • Webhooks — HMAC-SHA256 signed, 3 retries with exponential backoff
  • Slack & Teams Integration — Incoming webhook notifications for actions and KPIs
  • Zapier Integration — 7 trigger definitions for polling/webhook setup
  • Formula Engine — SUM, AVG, MIN, MAX, COUNT + KPI references
  • Time Tracking — Timer widget, weekly timesheets, manual entry
  • Dependencies & Critical Path — DAG with cycle detection
  • Recurring Items — RRULE-based auto-creation with cron
  • Approval Workflows — Multi-step with all/any/sequential modes
  • Board-Level Permissions — View/Edit/Admin per board per user
  • Electronic Signatures — 21 CFR Part 11 compliant with HMAC integrity

Added — Enterprise

  • Azure AD OIDC SSO — Conditional provider for Microsoft Entra ID
  • MFA / TOTP — Two-factor authentication via authenticator apps
  • White-Label Branding — Per-tenant colors, logo, and CSS overrides
  • Portfolio View — Cross-project health dashboard with risk indicators
  • Embeddable Widgets — Token-based HTML rendering for iframes
  • Daily Digest Emails — Cron-triggered summary of KPI alerts and actions
  • PDF Reports — Printable KPI, action, and problem-solving reports

Added — Analytics

  • Pareto Charts — Sorted frequency with cumulative 80/20 line
  • Trend Analysis — Moving average, ±1σ/±2σ bands, anomaly detection
  • Cross-Board KPI Comparison — Same KPI across teams/departments
  • Real Dashboard Aggregation — JSONB queries for status/priority distribution

v0.1.0 — 2026-03-19

Added — Foundation

  • Multi-tenant architecture with subdomain routing
  • Email/password + Authentik SSO authentication
  • 6-language i18n (EN, FR, NL, DE, IT, ES)
  • 7 project views: Board, Table, Timeline, Calendar, Visual, KPI, Actions
  • 16 custom field types with inline editing
  • Rich text comments (Tiptap)
  • In-app notifications + global search (Cmd+K)
  • Dashboard with Recharts charts
  • Settings (profile, security, org, members)
  • Marketing landing page with SEO
  • 5 pharma board templates