0.3.0-preview
PreviewAPI protocol: app 1 → 2; server supports 1 → 2. Update the server first, then every app: apps from the previous release cannot sync with this server, and this app cannot sync with the previous server. Local notes and queued writes are kept while sync is paused.
Breaking changes
- tags: add nested tags and search filters
clients and servers now require API protocol 2. Upgrade the server before clients; queued writes and device notes retain their existing formats.
- security: harden exposed servers and add admin invites
sign-up is closed after the first account by default; set REGISTRATION=open to add accounts. The bare session token from a sign-in response body is no longer accepted as a bearer token; use the set-auth-token header value. Restoring a backup signs everyone out except the admin who started it.