# Changelog

All notable changes to this project will be documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).




### Fixes

- update vitaminc imports for 0.1.0-pre4.2 module restructure


### Documentation

- explain why region_geo uses ErrorKind::Alt as fallback error
- note AwsRegion is Copy in all_static() doc comment
- don't mention refactoring

### Fixes

- add `ca-central-1` to list of valid regions CTS can run in
- support `ca-central-1` in CRN handling

### Performance

- avoid Vec allocation in region_geo via AwsRegion::all_static()

### Refactoring

- derive CRN region parser from AwsRegion::all()
- derive TryFrom<&str> for AwsRegion from all_static()
- make AwsRegion::ALL pub, remove all_static()

### Testing

- add regression guard for all regions in CRN parsing
- include parse error in CRN region regression test panic
- enforce and document region_geo prefix-matching invariant


### Features

- ✨ expose auth strategies in @cipherstash/auth Node bindings
- ✨ add Secrets service discovery and include in issued tokens

### Refactoring

- 🔥 remove SECRETS_DISCOVERY_OVERRIDE env var

### Testing

- ✅ add unit tests for exposed auth strategies



### Fixes

- skip unknown service types in token parsing instead of failing

### Miscellaneous

- run cargo fmt on cts-common

### Refactoring

- use serde's IntoDeserializer for ServiceType matching



### Features

- add OR-style decryption policies for lock context
- add Actor entity with compact ActorId primary key
- add Actor API endpoints and permissions

### Refactoring

- replace blake3 bucketing with raw WorkspaceId bytes


### Features

- wasm32 support for pure crypto/protocol crates (Layer 1)

### Miscellaneous

- inherit uuid from workspace in wasm32 target deps

### Refactoring

- drop cts-common/aead workaround, point vitaminc at branch


### Features

- add Supabase as an OIDC vendor






### Features

- add PATCH /api/access-key endpoint


## [0.34.0-alpha.1] - 2026-03-04

### Changed
- Consolidated all publishable crate versions to 0.34.0; version is now centralized via `workspace.package.version`
