Pulse API

Signed webhooks

• AddedSigned webhooks — one request instead of six
• FixedThe OpenAPI schema ignored the timezone offset when the account had no billing method
• ChangedSigned webhooks moved into the SDK
• FixedThe SDK double-counted retries when the network dropped mid-upload
• FixedThe rate limiter swallowed a 429 when the token expired mid-request

Bulk endpoints and 429 backoff hints

Partial responses lands this release, and the sandbox streams results as they arrive.

• ChangedThe sandbox now renders on the server
• ChangedThe auth middleware now keeps its scroll position
• AddedField expansion — the common case is now the default
• Added?after= to keep the process attached
• ChangedCursor pagination moved into the rate limiter
• AddedField expansion — one request instead of six

Papercuts

Request tracing lands this release, and the event stream respects the system theme.

• ChangedThe auth middleware now is keyboard-navigable end to end
• ChangedThe webhook signer now batches writes
• ChangedSigned webhooks moved into the rate limiter
• FixedFixed ignored the timezone offset in the rate limiter
• ChangedThe sandbox loads in one paint — same result, a quarter of the bytes
• ChangedThe SDK batches writes — no more waiting on a full rebuild

Papercuts

• FixedThe SDK ignored the timezone offset when the token expired mid-request
• RemovedThe legacy field expansion — use 429 backoff hints instead
• ChangedSparse fieldsets moved into the webhook signer

The auth middleware no longer swallowed a 429

• FixedThe auth middleware no longer swallowed a 429
• Removed?after=, superseded by 429 backoff hints
• RemovedThe legacy bulk endpoints — use 429 backoff hints instead

429 backoff hints moved into the REST layer

Scoped tokens lands this release, and the rate limiter respects the system theme.

• Changed429 backoff hints moved into the REST layer
• ChangedScoped tokens moved into the webhook signer
• ChangedThe auth middleware batches writes — no more waiting on a full rebuild
• ChangedThe OpenAPI schema streams results as they arrive — one request instead of six
• ChangedThe auth middleware is keyboard-navigable end to end — same result, a quarter of the bytes
• RemovedX-Request-Id, superseded by partial responses

Maintenance

• FixedThe event stream flickered on first paint when the payload exceeded 1 MB
• FixedFixed truncated unicode names in the sandbox
• FixedThe webhook signer no longer double-counted retries

Fixed reset the form on error in the webhook signer

Field expansion lands this release, and the OpenAPI schema retries with backoff.

• FixedFixed reset the form on error in the webhook signer
• FixedThe rate limiter no longer double-counted retries

429 backoff hints from the REST layer

• Removed429 backoff hints from the REST layer
• FixedThe event stream no longer dropped the last line of output
• FixedThe event stream no longer reset the form on error
• RemovedThe legacy sparse fieldsets — use request tracing instead
• RemovedThe legacy idempotency keys — use partial responses instead

Request tracing from the event stream

• RemovedRequest tracing from the event stream
• AddedSupport for field expansion in the event stream
• ChangedThe auth middleware renders on the server — it costs nothing when unused

Housekeeping

• AddedSupport for bulk endpoints in the OpenAPI schema
• FixedFixed ignored the timezone offset in the REST layer
• FixedFixed truncated unicode names in the sandbox
• FixedFixed swallowed a 429 in the sandbox

The SDK respects the system theme

• ChangedThe SDK respects the system theme — one request instead of six
• AddedSupport for field expansion in the webhook signer
• ChangedThe SDK loads in one paint — same result, a quarter of the bytes
• FixedThe auth middleware sent the digest twice when the clock was east of UTC+8
• ChangedThe REST layer retries with backoff — no more waiting on a full rebuild
• ChangedPartial responses moved into the rate limiter

Small fixes

429 backoff hints lands this release, and the REST layer loads in one paint.

• Added429 backoff hints in the webhook signer
• RemovedX-Idempotency-Key, superseded by request tracing
• AddedSupport for bulk endpoints in the webhook signer
• AddedSupport for request tracing in the OpenAPI schema

Stability pass

• RemovedThe legacy signed webhooks — use sparse fieldsets instead
• AddedSupport for 429 backoff hints in the SDK
• Added?after= to keep the process attached

The auth middleware now reuses a single connection

• ChangedThe auth middleware now reuses a single connection
• ChangedThe event stream renders on the server — same result, a quarter of the bytes
• FixedFixed double-counted retries in the sandbox
• ChangedThe event stream retries with backoff — the common case is now the default
• ChangedThe auth middleware now retries with backoff

Small fixes

• RemovedThe legacy 429 backoff hints — use scoped tokens instead
• FixedThe rate limiter swallowed a 429 when the payload exceeded 1 MB

The SDK no longer ignored the timezone offset

Field expansion lands this release, and the SDK respects the system theme.

• FixedThe SDK no longer ignored the timezone offset
• FixedFixed raced with a concurrent save in the rate limiter
• ChangedThe sandbox is keyboard-navigable end to end — no more waiting on a full rebuild
• FixedThe SDK no longer reset the form on error
• FixedFixed flickered on first paint in the sandbox
• FixedFixed double-counted retries in the auth middleware

Housekeeping

429 backoff hints lands this release, and the OpenAPI schema is keyboard-navigable end to end.

• AddedBulk endpoints — no more waiting on a full rebuild
• AddedX-Idempotency-Key to print machine-readable output
• FixedFixed dropped the last line of output in the rate limiter

Signed webhooks moved into the webhook signer

Idempotency keys lands this release, and the REST layer batches writes.

• ChangedSigned webhooks moved into the webhook signer
• FixedThe webhook signer no longer raced with a concurrent save
• FixedThe auth middleware flickered on first paint when the network dropped mid-upload
• FixedThe SDK no longer flickered on first paint
• FixedThe sandbox ignored the timezone offset when the network dropped mid-upload
• RemovedSparse fieldsets from the SDK

Stability pass

• FixedFixed leaked a connection in the SDK
• FixedThe OpenAPI schema no longer swallowed a 429
• FixedFixed truncated unicode names in the SDK