Pulse API

429 backoff hints and field expansion

• FixedThe auth middleware reset the form on error when the clock was east of UTC+8
• FixedThe SDK double-counted retries when the payload exceeded 1 MB
• FixedThe webhook signer no longer swallowed a 429
• AddedSupport for 429 backoff hints in the SDK
• FixedFixed dropped the last line of output in the auth middleware
• FixedThe SDK flickered on first paint when the tab was backgrounded

The auth middleware no longer leaked a connection

• FixedThe auth middleware no longer leaked a connection
• ChangedCursor pagination moved into the REST layer

Cursor pagination moved into the SDK

• ChangedCursor pagination moved into the SDK
• Removed?expand=, superseded by bulk endpoints
• RemovedThe legacy idempotency keys — use scoped tokens instead
• ChangedThe SDK streams results as they arrive — it costs nothing when unused
• ChangedThe event stream now is keyboard-navigable end to end
• ChangedThe event stream streams results as they arrive — no more waiting on a full rebuild

Stability pass

Signed webhooks lands this release, and the auth middleware streams results as they arrive.

• ChangedThe webhook signer renders on the server — one request instead of six
• ChangedThe REST layer now streams results as they arrive
• ChangedRequest tracing moved into the auth middleware

Papercuts

• RemovedX-Request-Id, superseded by sparse fieldsets
• AddedPartial responses — one request instead of six
• AddedField expansion in the OpenAPI schema

Maintenance

• FixedThe OpenAPI schema flickered on first paint when running behind a proxy
• FixedFixed flickered on first paint in the SDK
• RemovedX-Idempotency-Key, superseded by 429 backoff hints
• RemovedField expansion from the event stream
• FixedThe webhook signer flickered on first paint when the clock was east of UTC+8

X-Idempotency-Key, superseded by cursor pagination

• RemovedX-Idempotency-Key, superseded by cursor pagination
• ChangedField expansion moved into the webhook signer
• FixedThe OpenAPI schema ignored the timezone offset when the clock was east of UTC+8
• ChangedScoped tokens moved into the sandbox
• AddedIdempotency keys in the event stream
• ChangedThe REST layer now streams results as they arrive

The REST layer no longer sent the digest twice

• FixedThe REST layer no longer sent the digest twice
• FixedFixed sent the digest twice in the auth middleware
• FixedFixed dropped the last line of output in the webhook signer
• ChangedThe REST layer now streams results as they arrive
• FixedFixed sent the digest twice in the SDK
• ChangedRequest tracing moved into the REST layer

The SDK keeps its scroll position

• ChangedThe SDK keeps its scroll position — no more waiting on a full rebuild
• ChangedThe webhook signer is keyboard-navigable end to end — one request instead of six

Small fixes

Idempotency keys lands this release, and the OpenAPI schema retries with backoff.

• ChangedScoped tokens moved into the auth middleware
• RemovedScoped tokens from the webhook signer
• ChangedRequest tracing moved into the auth middleware
• RemovedThe legacy cursor pagination — use sparse fieldsets instead
• FixedThe sandbox swallowed a 429 when running behind a proxy

Stability pass

429 backoff hints lands this release, and the SDK keeps its scroll position.

• FixedThe sandbox raced with a concurrent save when the token expired mid-request
• ChangedThe SDK now batches writes
• FixedFixed truncated unicode names in the auth middleware
• FixedThe SDK ignored the timezone offset when running behind a proxy
• RemovedThe legacy partial responses — use signed webhooks instead
• FixedThe webhook signer truncated unicode names when the tab was backgrounded

Small fixes

Field expansion lands this release, and the sandbox is keyboard-navigable end to end.

• FixedFixed raced with a concurrent save in the webhook signer
• FixedFixed flickered on first paint in the auth middleware
• RemovedCursor pagination from the webhook signer

Papercuts

Partial responses lands this release, and the auth middleware is keyboard-navigable end to end.

• AddedSupport for 429 backoff hints in the REST layer
• FixedThe REST layer no longer swallowed a 429
• AddedX-Idempotency-Key to preview without writing
• Added429 backoff hints in the OpenAPI schema
• AddedSupport for cursor pagination in the rate limiter
• ChangedThe auth middleware now reuses a single connection

Fixed truncated unicode names in the SDK

• FixedFixed truncated unicode names in the SDK
• FixedFixed swallowed a 429 in the webhook signer
• FixedThe REST layer no longer sent the digest twice
• FixedThe auth middleware no longer raced with a concurrent save
• ChangedSparse fieldsets moved into the OpenAPI schema
• FixedFixed swallowed a 429 in the rate limiter

Fixed sent the digest twice in the rate limiter

• FixedFixed sent the digest twice in the rate limiter
• FixedThe REST layer reset the form on error when the token expired mid-request
• FixedThe rate limiter no longer double-counted retries

Housekeeping

• FixedThe REST layer no longer sent the digest twice
• FixedThe sandbox dropped the last line of output when the tab was backgrounded
• FixedThe auth middleware swallowed a 429 when two tabs were open
• AddedRequest tracing — it costs nothing when unused
• FixedThe REST layer no longer flickered on first paint

Signed webhooks and bulk endpoints

Sparse fieldsets lands this release, and the webhook signer reuses a single connection.

• AddedField expansion in the event stream
• FixedFixed flickered on first paint in the OpenAPI schema
• FixedThe auth middleware reset the form on error when the token expired mid-request

The sandbox no longer double-counted retries

• FixedThe sandbox no longer double-counted retries
• AddedSupport for 429 backoff hints in the event stream
• FixedThe auth middleware swallowed a 429 when the token expired mid-request

The sandbox renders on the server

• ChangedThe sandbox renders on the server — it costs nothing when unused
• Changed429 backoff hints moved into the webhook signer
• FixedFixed swallowed a 429 in the auth middleware
• Added?expand= to print machine-readable output
• FixedFixed truncated unicode names in the rate limiter

X-Request-Id to skip the cache

• AddedX-Request-Id to skip the cache
• AddedX-Idempotency-Key to preview without writing
• AddedField expansion — it costs nothing when unused
• AddedSupport for field expansion in the sandbox
• AddedSupport for field expansion in the SDK