Changelog

HyperController release history. Running v0.6.1.

v0.6.1 2026-07-21 running

feat Grouped command navigation — Replaces the wrapped link wall with a fixed operations rail organized around monitoring, customers, delivery, systems, and governance, plus a persistent new-deployment action.
feat Responsive control console — The command rail becomes an accessible mobile drawer with explicit focus states, Escape-to-close behavior, contained data tables, and actions that remain reachable on short screens.
fix Update-center hierarchy — Release readiness, fleet drift, channel targets, and deployment status now scan as distinct operational layers with shorter guidance and clearer actions.

security Signed fleet releases — Ed25519 publisher manifests are verified against a key pinned on each RMM before app or connector installation; downloaded bytes are independently checksum-verified.
feat Disruption-controlled deployment campaigns — Dark-launched cohort rollouts now expose per-server commands, acknowledgements, errors, observation state, pause/resume controls, health floors, and automatic signed rollback. Hosted RMM listeners remain socket-backed while Gunicorn generations restart.
feat Authoritative billable entitlements — The complete gateable module catalog is controlled by revisioned HyperController licenses with push/apply/error convergence status and fail-closed schema-2 payloads.
security Customer-requested platform support — Customers request, scope, expire, and revoke named-technician access. HyperController issues a target-bound, one-time signed assertion that opens only the requesting user's effective view without sharing a password or creating a permanent account.

feat Resumable tenant migration — Durable source/target preflight, application fencing, quiescent final backup, restore-to-new validation, second-owner DNS cutover, rollback, and non-destructive finalization.
feat Cross-platform upload mapping — Backup format 2 stores each upload root as a relative archive and maps it to target-configured paths, allowing the same RMM data set to move between Mac-hosted Linux, physical Linux, and provider VMs.
security Fail-closed move gates — Migration blocks on stale connectors, mismatched application versions or durable record counts, disabled restore/lifecycle/secret-import gates, missing database tools, insufficient target space, unavailable automatic DNS, or incomplete restore validation. Source encryption keys are imported through atomic, narrowly scoped environment updates.

feat Multi-console sync edge tenants — Tracks which RMM instances share a sync server (sync_server_tenants), pushes SYNC_SET_TENANTS to the edge, and marks edges dedicated vs shared. Pilot: SiteKings + RMM-2.

feat Scale-safe MSP provisioning — Capacity and cost guardrails, verified provider/DNS/billing/email/backup readiness, bootstrap telemetry, watchdog recovery, and hardened dedicated-host installation.
feat Operational control plane — Role-based access, dual approval for destructive cloud actions, reconciliation-driven dunning, Prometheus health metrics, capacity alerting, artifact retention, and health-gated canary rollouts.
feat Recovery and portability — Every deployment must pass a real backup restore verification before activation; signed tenant manifests and encrypted controller disaster-recovery tooling support planned recovery away from the source host.
fix PostgreSQL driver security — Upgraded pgx to the release that fixes GO-2026-5004 placeholder-confusion SQL injection behavior.

feat Complete MSP deployment pipeline — Durable, resumable full-instance provisioning for Hetzner, Vultr, and DigitalOcean with one-time bootstrap bundles, automatic or guided DNS, live run status, and managed teardown.
feat Billing and onboarding convergence — Graduated endpoint tiers now map directly to Stripe meters and revenue reporting; billable deployments remain in billing wait until the customer and subscription are ready.
feat Hosted-instance updates and rollback — Node-authenticated checksum-addressed app releases install through database backup, explicit migration, atomic release swap, health verification, and automatic rollback.
fix Fallback transport self-heal — HTTPS stream, WebSocket, and poll connectors now receive the same license, sync, branding, logging, and first-admin reconciliation as direct gRPC.

feat Changelog screen — Footer version now links to this release-history page so you can verify what's running at a glance.

feat Version footer — Running controller version shown bottom-right on every page.
feat Update-pending pills — Fleet list and instance detail flag when an instance's app or connector is behind its channel target.

feat HyperController onboarding wizard — Step-by-step new-deployment wizard: tiered per-endpoint pricing, cloud provider catalog with cost + markup, email/phone/address validation, custom-domain uniqueness check, and a welcome email.
feat Email subsystem — SMTP / SendGrid / Microsoft Graph transports, editable templates, and a test-send.
feat Console redesign — Revenue, Provisioning, Audit, Clients, and Update-center dashboards; MRR trend; heartbeat sparklines.
feat Rebrand — SiteKings Controller is now SiteKings HyperController — the hub for all SiteKings software.

feat Control-plane foundation — Fleet registry, single-use enrollment tokens, fleet CA (ECDSA P-256) with CSR signing, and a gRPC mTLS control channel.
feat Sync-server management — Register/enroll sync servers; restart, update, OS-update, and shell; periodic SYNC_STATUS with host metrics.
feat Connector transport ladder — gRPC -> h2-stream -> WebSocket -> HTTP-poll fallback with per-rung circuit breakers and offline-queue redelivery.
feat Billing — Stripe base plus metered overage; role-aware suspend/terminate enforcement.