Wholisphere
Changelog

What's new

Everything we've shipped, newest first. Subscribe to the changelog feed at /changelog/rss.xml (coming soon) — or just check back; we ship roughly weekly.

  • featuredocs

    Demo glue — read-aloud, voice control, playground

    Read-page TTS controller + playground demo page + extension popup site preferences. The pieces from the last release are now usable end-to-end.

    A run of “make it usable, not just buildable”:

    • Read-aloud TTS controller walks a page outline section-by-section with pause / next-section / jump-to / stop. Highlights the active line via setActiveLine.
    • Voice command surface unified: every voice-driven DOM action goes through the same sandboxed executeVoiceCommand (selector sanitation, off-origin nav block, 10 KB input cap, confidence threshold).
    • /playground on the dashboard — live demo article + buttons for read-aloud, focus mode, captions. The demo URL we’ll point everyone at.
    • Extension popup “This site” panel — toggle widget per-host, auto-enable focus / captions, snooze 24h. Backed by chrome.storage.sync so it travels across devices.
  • featuresecurity

    Sales velocity, ops, and EU residency

    Admin ops dashboard, customer onboarding wizard, EU data residency v1, widget Arabic + RTL, weekly customer digest emails.

    A grab-bag bucket aimed at moving paid-customer time-to-value:

    • Admin operations dashboard at /admin — list orgs, suspend / reactivate, audit-logged. Founder/oncall view.
    • Customer onboarding wizard on the dashboard Overview — 3-step checklist that lights up as you create your first key, invite a teammate, make your first API call.
    • EU data residency v1regionMiddleware returns 421 + correct-host headers when an org pinned to one region hits another. Owner-only region pinning.
    • Widget Arabic locale + RTL'ar' strings + dir="rtl" auto-flips the panel layout.
    • Weekly customer digest email — opt-in per user; usage delta + top capabilities + open incidents.
  • feature

    North Star — agent replaces assistive tech

    Five capabilities that move from "AI helper" to actual AT replacement — read-page outline, focus mode, live captions, voice DOM control, per-site extension preferences.

    This is the one we’ve been building toward.

    • POST /v1/read-page returns a structured page outline (summary, sections with headings + paragraphs, links with intent, landmarks). Quota-counted, PII-scrubbed.
    • Focus mode — pure-DOM cognitive accessibility: clutter removal, line spacing, optional Atkinson Hyperlegible font, line-by-line highlight. Free for everyone, no LLM call.
    • Live captions surface — mirrors any <track kind="captions"> cues onto a high-contrast overlay. MutationObserver picks up dynamic media. STT extension hook ready for v2.
    • Voice DOM controlexecuteVoiceCommand runs the voice-action response with hard guardrails (sanitized selectors, off-origin nav block, 10 KB cap, confidence threshold).
    • Per-site preferences in the extensionchrome.storage.sync per host, snooze, cross-device.
  • featuresecurity

    Tier 2 polish — SLO board, scoped keys, deprecation policy

    Internal SLO dashboard, API key IP allowlists + scopes, webhook event-type subscriptions, API versioning + Deprecation/Sunset headers, end-user activity feed.

    Five professional-polish wins:

    • Internal SLO dashboard — sampled request_metrics table + MetricsRepo.sloByRoute() returns p50/p95/p99 + error rate per route. Drives oncall + SLA reporting.
    • API key IP allowlists + scope refinement — per-key CIDR enforcement, canonical scope list (agent:rw, describe, vpat, …). Returns 403 ip_not_allowed / 403 scope_insufficient.
    • Webhook subscriptions by event type — typed event registry (10 kinds + wildcard); dashboard checkbox UI; drain already filters by org + kind.
    • API versioning + deprecation headersx-wholisphere-api-version: v1 on every response. RFC 8594 Deprecation: true + Sunset headers ready to deploy. Public docs page.
    • End-user activity feed in the widget — opt-in tab in the panel, in-memory ring buffer, four-locale i18n.
  • featuresecurity

    Enterprise readiness — multi-user orgs, SSO, quotas, status page

    Multi-user orgs + roles + invitations, Google Workspace OIDC SSO, per-org monthly quotas, public status page + uptime probes, audit log filters + CSV + retention.

    Tier 1 (enterprise) blockers cleared:

    • Multi-user orgs + roles + invitationseditor role joins owner/admin/viewer/api. Email-link invites, last-owner protection, dashboard Members page.
    • Google Workspace OIDC SSO — code-flow + tokeninfo verification, per-org allowed domain, auto-join with auto_assign_role. “Sign in with Google” on the Login page.
    • Per-org monthly quotasusage_monthly table + quotaMiddleware. Returns 429 quota_exceeded with X-Quota-Limit/Remaining/Reset headers. Dashboard usage panel.
    • Public status page + uptime probes — new apps/status Astro app at status.wholisphere.ai.
    • Audit log filters + CSV export + retention — kind/since/until filtering, RFC 4180 CSV, plan-aware nightly prune (free + pro 90d, platform 1yr, enterprise unlimited).