Changelog

Notable platform changes, newest first. Breaking changes are called out explicitly.

2026-09#

• Multi-device Connect sessions. Each authorization-code exchange and device-flow approval now receives an independent access token. Connecting on another device no longer signs out an existing device; disconnecting the app still revokes every token for that user.

2026-08#

• Documentation. These docs replaced the single publishing page, with search across every page.
• Public app assets. Apps can serve their own static files from /appdata — icons, screenshots, and sample data, world-readable, developer-writable.

2026-07#

• App Data Layer plans. Storage subscriptions now cancel at period end and can be reactivated before they lapse, with a billing portal for payment methods and invoices. See Storage plans.
• Hosted checkout. Credit top-ups run through hosted Stripe Checkout, and credits are granted only on confirmed payment.

Earlier#

• Device flow. Connect gained an RFC 8628 device authorization flow for CLIs, desktop apps, and anything without a browser redirect. See Device flow.
• PKCE. Public clients can use the authorization code flow with PKCE instead of holding a client secret.
• Cross-app file scopes. Apps owned by the same developer can share a user's folders through files.read:{app_id} and files.write:{app_id}, with the user's approval.