Release
v0.1.0 · public beta
- REST API + signed webhooks + SSE — production-ready surface
- Hosted dashboard at app.whatisup.dev
- Public docs and playground
- Pricing per connected instance — Starter / Pro / Max
Changelog
Changelog
Everything we shipped, with the rationale. New entries land at the top.
Improvement
Webhook delivery worker hardening
- Per-host concurrency cap so one slow endpoint cannot starve the others
- Payload retention TTL — successful deliveries drop their payload after 7 days
- BullMQ namespace split between staging and production
Security
Encryption at rest for signing secrets
- webhook_endpoints.signing_secret now envelope-encrypted with a rotatable master key
- Legacy plaintext rows are decrypted transparently and re-encrypted on the next write
- SECRETS_KEY_PREVIOUS env supports zero-downtime rotation
Security
Per-customer rate limits + SSRF guard
- Token-bucket limiter keyed by customerId, configurable per route
- SSRF guard rejects loopback, RFC1918, link-local, and cloud-metadata IPs at the Zod layer
- MAX_SESSIONS_PER_WORKER cap with 429 worker_at_capacity response
Release
Dashboard 1.0
- Spotify-inspired dark UI
- Realtime QR pairing flow
- API key management
- Webhook delivery inspector