Changelog

HyperController release history. Running v0.7.4.

v0.7.4 2026-09-25 running

feat SK Email instance licensing — Add a revisioned SK Email module gate to plans and per-instance overrides. RMM confirms customer-scoped SK Clean processing state before the license push is acknowledged.

v0.7.3 2026-08-17

fix Keep unassigned sync edges out of rotation — Install/adopt now inserts lifecycle=unassigned weight=0. Those cards show not in rotation, drop out of the Healthy count, and cannot be placement, assignment, or failover destinations until an operator raises the weight. Live agent routing is still Flask sync_lb_backends.

v0.7.2 2026-08-17

fix Register RMM-installed sync edges on Servers — Install sync service minted a connector that enrolled as a generic instance, so /servers kept showing one collapsed Hetzner card. Enrollment tokens hinted 'sync edge …' now adopt the node as kind=sync-server and insert a registry row. Existing VPS-01A7797E is backfilled the same way on page load.

v0.7.1 2026-08-17

fix Give sync-server installs the long ACK window — INSTALL_SYNC_SERVICE no longer dies after five minutes while the endpoint is still in a post-rescue settle wait. The job now uses the 30-minute long-op grace, matching the connector monitor.
security Redact rescue credentials in install status — Operator-visible install progress no longer echoes SK_RESCUE_API_KEY or SK_RESCUE_TOKEN from a blocking command.

v0.7.0 2026-08-16

feat Website demo control plane — Accepts authenticated, idempotent 24-hour demo requests only after operator readiness, then reuses the managed cloud provisioning, branding, licensing, credential-delivery, and telemetry pipeline.
feat Demo configuration — Shows deployed trials, app versions, customer and endpoint usage, placement, expiry, paid-pilot state, and audited retry or revoke controls in HyperController.
security Enforced demo boundaries — Demo licenses are visibly labeled inside RMM and hard-stop creation beyond one customer or three endpoints; expiry automatically suspends the instance.

v0.6.7 2026-08-13

feat Master-crown favicon — Console tabs now use a closed imperial crown with a cyan control orb so HyperController is visually the master mark, distinct from the open gold RMM crown.

v0.6.6 2026-08-13

feat Collapse sync-edge aliases and show provider — Servers cards fold localhost and NetBird heartbeat addresses onto the enrolled edge, and infer Hetzner / OVH / Google / AWS / Azure from the hostname.

v0.6.5 2026-08-13

feat Flask sync back-channel control — Instance page can set how that RMM reaches its sync box (private NetBird http://100.x:8590). This is not agent DNS. The public name rmm-sync.sitekings.net is rejected.
feat Sync server weight and role — HyperController records documentary weight and role (edge vs lb) on each sync server. These fields do not rewrite agent host lists; live routing stays on Flask sync_lb_backends.

v0.6.4 2026-08-13

fix Show live sync edges on Servers — Heartbeats and kind=sync-server nodes now register into the sync-server registry, and the Servers page no longer swallows list errors or hide an empty table behind a cramped action grid.
feat Fleet drill-down pages — Fleet stat cards open Instances, Portal users, and Endpoint traffic views so operators can inspect who is enrolled, who can log in, and which deployments consume bandwidth.

v0.6.3 2026-08-06

feat Deployment bandwidth telemetry — Tracks rolling 24-hour endpoint network sent and received totals per RMM deployment, fleet aggregates, history charts, API fields, and Prometheus gauges.

v0.6.2 2026-08-05

feat Deployment usage telemetry — Authenticated heartbeats now carry endpoint, sub-customer, directory-user, portal-user, and active SK Clean mailbox counts into fleet dashboards, admin JSON, and Prometheus gauges.
fix Failure-safe mailbox metering — SK Clean usage refreshes asynchronously and persists only complete snapshots, preventing cleaner latency or partial failures from blocking heartbeats or producing false usage drops.

v0.6.1 2026-07-21

feat Grouped command navigation — Replaces the wrapped link wall with a fixed operations rail organized around monitoring, customers, delivery, systems, and governance, plus a persistent new-deployment action.
feat Responsive control console — The command rail becomes an accessible mobile drawer with explicit focus states, Escape-to-close behavior, contained data tables, and actions that remain reachable on short screens.
fix Update-center hierarchy — Release readiness, fleet drift, channel targets, and deployment status now scan as distinct operational layers with shorter guidance and clearer actions.

v0.6.0 2026-07-20

security Signed fleet releases — Ed25519 publisher manifests are verified against a key pinned on each RMM before app or connector installation; downloaded bytes are independently checksum-verified.
feat Disruption-controlled deployment campaigns — Dark-launched cohort rollouts now expose per-server commands, acknowledgements, errors, observation state, pause/resume controls, health floors, and automatic signed rollback. Hosted RMM listeners remain socket-backed while Gunicorn generations restart.
feat Authoritative billable entitlements — The complete gateable module catalog is controlled by revisioned HyperController licenses with push/apply/error convergence status and fail-closed schema-2 payloads.
security Customer-requested platform support — Customers request, scope, expire, and revoke named-technician access. HyperController issues a target-bound, one-time signed assertion that opens only the requesting user's effective view without sharing a password or creating a permanent account.

v0.5.0 2026-07-20

feat Resumable tenant migration — Durable source/target preflight, application fencing, quiescent final backup, restore-to-new validation, second-owner DNS cutover, rollback, and non-destructive finalization.
feat Cross-platform upload mapping — Backup format 2 stores each upload root as a relative archive and maps it to target-configured paths, allowing the same RMM data set to move between Mac-hosted Linux, physical Linux, and provider VMs.
security Fail-closed move gates — Migration blocks on stale connectors, mismatched application versions or durable record counts, disabled restore/lifecycle/secret-import gates, missing database tools, insufficient target space, unavailable automatic DNS, or incomplete restore validation. Source encryption keys are imported through atomic, narrowly scoped environment updates.

v0.4.1 2026-07-20

feat Multi-console sync edge tenants — Tracks which RMM instances share a sync server (sync_server_tenants), pushes SYNC_SET_TENANTS to the edge, and marks edges dedicated vs shared. Pilot: SiteKings + RMM-2.

v0.4.0 2026-07-20

feat Scale-safe MSP provisioning — Capacity and cost guardrails, verified provider/DNS/billing/email/backup readiness, bootstrap telemetry, watchdog recovery, and hardened dedicated-host installation.
feat Operational control plane — Role-based access, dual approval for destructive cloud actions, reconciliation-driven dunning, Prometheus health metrics, capacity alerting, artifact retention, and health-gated canary rollouts.
feat Recovery and portability — Every deployment must pass a real backup restore verification before activation; signed tenant manifests and encrypted controller disaster-recovery tooling support planned recovery away from the source host.
fix PostgreSQL driver security — Upgraded pgx to the release that fixes GO-2026-5004 placeholder-confusion SQL injection behavior.

v0.3.0 2026-07-20

feat Complete MSP deployment pipeline — Durable, resumable full-instance provisioning for Hetzner, Vultr, and DigitalOcean with one-time bootstrap bundles, automatic or guided DNS, live run status, and managed teardown.
feat Billing and onboarding convergence — Graduated endpoint tiers now map directly to Stripe meters and revenue reporting; billable deployments remain in billing wait until the customer and subscription are ready.
feat Hosted-instance updates and rollback — Node-authenticated checksum-addressed app releases install through database backup, explicit migration, atomic release swap, health verification, and automatic rollback.
fix Fallback transport self-heal — HTTPS stream, WebSocket, and poll connectors now receive the same license, sync, branding, logging, and first-admin reconciliation as direct gRPC.

v0.2.2 2026-06-06

feat Changelog screen — Footer version now links to this release-history page so you can verify what's running at a glance.

v0.2.1 2026-06-06

feat Version footer — Running controller version shown bottom-right on every page.
feat Update-pending pills — Fleet list and instance detail flag when an instance's app or connector is behind its channel target.

v0.2.0 2026-06-06

feat HyperController onboarding wizard — Step-by-step new-deployment wizard: tiered per-endpoint pricing, cloud provider catalog with cost + markup, email/phone/address validation, custom-domain uniqueness check, and a welcome email.
feat Email subsystem — SMTP / SendGrid / Microsoft Graph transports, editable templates, and a test-send.
feat Console redesign — Revenue, Provisioning, Audit, Clients, and Update-center dashboards; MRR trend; heartbeat sparklines.
feat Rebrand — SiteKings Controller is now SiteKings HyperController — the hub for all SiteKings software.

v0.1.0 2026-06-04

feat Control-plane foundation — Fleet registry, single-use enrollment tokens, fleet CA (ECDSA P-256) with CSR signing, and a gRPC mTLS control channel.
feat Sync-server management — Register/enroll sync servers; restart, update, OS-update, and shell; periodic SYNC_STATUS with host metrics.
feat Connector transport ladder — gRPC -> h2-stream -> WebSocket -> HTTP-poll fallback with per-rung circuit breakers and offline-queue redelivery.
feat Billing — Stripe base plus metered overage; role-aware suspend/terminate enforcement.