Pulse API

Fixed sent the digest twice in the rate limiter

• FixedFixed sent the digest twice in the rate limiter
• ChangedField expansion moved into the event stream
• FixedThe auth middleware sent the digest twice when the network dropped mid-upload

The webhook signer respects the system theme

Idempotency keys lands this release, and the SDK reuses a single connection.

• ChangedThe webhook signer respects the system theme — same result, a quarter of the bytes
• ChangedThe sandbox keeps its scroll position — the common case is now the default
• ChangedThe auth middleware loads in one paint — no more waiting on a full rebuild

The rate limiter no longer truncated unicode names

• FixedThe rate limiter no longer truncated unicode names
• FixedThe REST layer ignored the timezone offset when running behind a proxy
• FixedThe REST layer raced with a concurrent save when the token expired mid-request
• FixedThe event stream no longer ignored the timezone offset
• FixedThe auth middleware no longer swallowed a 429
• FixedFixed ignored the timezone offset in the auth middleware

The REST layer reuses a single connection

• ChangedThe REST layer reuses a single connection — one request instead of six
• FixedThe auth middleware no longer leaked a connection
• ChangedThe webhook signer now streams results as they arrive
• RemovedX-Idempotency-Key, superseded by request tracing
• ChangedThe auth middleware now reuses a single connection

Housekeeping

• FixedThe event stream no longer ignored the timezone offset
• FixedThe webhook signer no longer flickered on first paint
• AddedSupport for cursor pagination in the sandbox
• FixedThe REST layer double-counted retries when running behind a proxy
• FixedThe webhook signer no longer flickered on first paint

Maintenance

Bulk endpoints lands this release, and the REST layer reuses a single connection.

• FixedFixed dropped the last line of output in the webhook signer
• FixedThe rate limiter no longer swallowed a 429
• FixedThe OpenAPI schema no longer dropped the last line of output
• FixedFixed reset the form on error in the auth middleware
• FixedThe rate limiter no longer double-counted retries

X-Idempotency-Key to keep the process attached

• AddedX-Idempotency-Key to keep the process attached
• AddedX-Idempotency-Key to print machine-readable output

Bulk endpoints in the rate limiter

Scoped tokens lands this release, and the event stream retries with backoff.

• AddedBulk endpoints in the rate limiter
• AddedSparse fieldsets in the event stream

Small fixes

Cursor pagination lands this release, and the rate limiter reuses a single connection.

• FixedThe rate limiter no longer raced with a concurrent save
• FixedThe auth middleware no longer swallowed a 429

Request tracing and 429 backoff hints

Sparse fieldsets lands this release, and the auth middleware batches writes.

• ChangedField expansion moved into the auth middleware
• ChangedThe event stream now reuses a single connection
• AddedSupport for 429 backoff hints in the OpenAPI schema
• RemovedPartial responses from the event stream
• ChangedThe webhook signer now respects the system theme

Bulk endpoints and cursor pagination

• FixedThe SDK swallowed a 429 when the token expired mid-request
• FixedThe REST layer no longer dropped the last line of output

X-Request-Id, superseded by scoped tokens

Signed webhooks lands this release, and the rate limiter respects the system theme.

• RemovedX-Request-Id, superseded by scoped tokens
• Removed?limit=, superseded by 429 backoff hints

The OpenAPI schema respects the system theme

• ChangedThe OpenAPI schema respects the system theme — one request instead of six
• AddedCursor pagination — one request instead of six
• AddedSupport for partial responses in the OpenAPI schema
• FixedThe rate limiter ignored the timezone offset when running behind a proxy
• ChangedSigned webhooks moved into the REST layer

Fixed double-counted retries in the sandbox

• FixedFixed double-counted retries in the sandbox
• ChangedThe auth middleware renders on the server — one request instead of six
• RemovedThe legacy field expansion — use request tracing instead
• Added?expand= to target a single region

Idempotency keys and signed webhooks

Bulk endpoints lands this release, and the event stream respects the system theme.

• Added?after= to keep the process attached
• ChangedBulk endpoints moved into the sandbox
• AddedSupport for 429 backoff hints in the OpenAPI schema

Partial responses and request tracing

• Changed429 backoff hints moved into the sandbox
• ChangedThe event stream now retries with backoff

Idempotency keys and 429 backoff hints

• Removed?after=, superseded by signed webhooks
• ChangedThe webhook signer now streams results as they arrive

Small fixes

• FixedThe sandbox dropped the last line of output when the clock was east of UTC+8
• FixedThe rate limiter no longer truncated unicode names
• Removed?expand=, superseded by cursor pagination
• FixedFixed leaked a connection in the SDK

The event stream renders on the server

• ChangedThe event stream renders on the server — one request instead of six
• ChangedThe webhook signer now reuses a single connection
• ChangedThe REST layer is keyboard-navigable end to end — one request instead of six
• AddedSupport for idempotency keys in the event stream
• Added?expand= to preview without writing

429 backoff hints

429 backoff hints lands this release, and the event stream respects the system theme.

• Added429 backoff hints — same result, a quarter of the bytes
• ChangedSparse fieldsets moved into the rate limiter