# Changelog

All notable changes to lean-grpc are documented here. The package version is the Lake/`Grpc.version` semver (currently **1.1.0**). Git tags such as `v1.1.0` are created manually by maintainers when publishing.

## [1.1.0] — 2026-08-04

Additive IAM surface for enterprise mTLS AuthN (lean-compliance G1–G4).

- **Peer identity:** `Grpc.Native.Tls.peerIdentity?` extracts verified client cert fields (RFC 2253 subject DN, CN, DNS/URI SANs, SHA-256 fingerprint, serial) via OpenSSL after mTLS handshake.
- **Request context:** `ServerCallContext` + `registerWithContext` / `registerTypedWithContext` pass `peerIdentity`, inbound metadata, and `methodPath` into unary handlers. Legacy `register` remains (ignores context).
- **TLS serve:** `Tls.serveH2` takes a per-connection handler factory; failed accepts/handshakes are logged and the listen loop continues.
- **Interceptors:** `registerUnaryWithContext`, `requirePeerIdentity` (fail closed when `mtlsRequired` and identity missing).
- **Tests:** `tlsLoopback` covers dual-cert identity binding, metadata non-forgery, h2c → `none`, accept-loop survival.
- **Codegen:** `protoc-gen-lean4-grpc` emits `register{Svc}{Method}WithContext` alongside body-only registrars.
- **Examples:** MirrorForge `Stamp` uses `registerUnaryWithContext` (Bearer metadata + body-token fallback; optional env-gated TLS/mTLS).
- **Docs:** cookbook mTLS → `ctx.peerIdentity`; API reference; security PKI note.
- **Deferred:** streaming handlers with context; trusted-proxy identity mode; JWT/OIDC validation inside lean-grpc.

Migration: additive API — bump consumer pin from `v1.0.0` to `v1.1.0`. Prefer `registerWithContext` for AuthN; do not trust client-supplied subject metadata.

## [1.0.0] — 2026-08-02

First production-oriented packaging release of the independent Lean 4 gRPC stack. **Scope note:** selected pure-codec proofs ship in CI; `H2.ConnState`, Huffman trie rewrite, and broader ∀ roundtrips remain follow-ups — see [ROADMAP.md](ROADMAP.md) and [docs/proofs.md](docs/proofs.md).

- Compile-time **`Proofs`** Lake library for high-leverage pure codecs (status maps, BE ints, gRPC identity framing lemmas, protobuf varint fixtures, HTTP/2 frame-type maps + fixtures, HPACK integer/header fixtures, metadata percent/base64/timeout). Run `lake build Proofs`; documented in [docs/proofs.md](docs/proofs.md). Hard-gated in CI.
- Provenance / IP diligence note ([docs/provenance.md](docs/provenance.md)): independent PROTOCOL-HTTP2 implementation; `NOTICE` attributes Apache-2.0 gRPC-authors interop protos under `python_interop/proto/` and `rust_interop/proto/`.
- Near grpc-go / official interop parity for general-purpose use (Go/Python/Rust peers, h2spec, stress demos) — see [docs/conformance.md](docs/conformance.md)

### Known allowlists

- ALTS / GCE channel credentials (`Grpc.Gcp`)
- Live Google ADC remains mock/allowlisted in regular CI

## [0.5.0] — 2026-08-01

Initial public packaging baseline for Lake / Reservoir distribution.

- Pure Lean 4 gRPC stack on `Std.Async`: `Bytes`, `Hpack`, `H2`, `Proto`, `Grpc`
- Near grpc-go / official interop parity for general-purpose use (see [docs/conformance.md](docs/conformance.md))
- In-process OpenSSL TLS (ALPN `h2`) and zlib bridges; optional sidecar TLS
- Dial / LB / retry, health, reflection, channelz, ADC (mock CI), xDS ADS subset
- `protoc-gen-lean4-grpc` codegen (text path + `CodeGeneratorRequest`)
- CI hard gates: unit tests, Lean↔Lean interop, Go/Python interop, h2spec, stress demos
- Packaging docs: [docs/packaging.md](docs/packaging.md)

### Known allowlists

- ALTS / GCE channel credentials (`Grpc.Gcp`)
- Live Google ADC remains mock/allowlisted in regular CI