[JacobStephens2]

Summary

0.21.0 adds the Console API at /api/v1: Console views as CLI JSON and scoped actions, with bearer tokens, account permissions and audit logs (#1777).

• thirdshift console token create/list/revoke manages tokens with default read scope, expiry, last use and immediate revocation. thirdshift console scopes manages address permissions (Console API: tokens, bearer authentication and whoami #1778, Enforce Console account scopes and named-person token requests #1803).
• thirdshift console whoami --json reports machine/caller identity and scopes; thirdshift console openapi prints the generated API description. HTTP twins serve /api/v1/whoami and /api/v1/openapi.json. Finite CLI log reads gain --json (Console API: tokens, bearer authentication and whoami #1778, Publish the Console API's generated OpenAPI description #1779, Console API: serve read views as CLI JSON under /api/v1 #1776).
• API reads cover Inbox, History, Command details, Waterfall, logs, Lanes, Stages, metrics, Scores, Bug origins, Experiments, cron jobs, Resources and look settings. Ordinary retained logs remain readable without Command records; Theme listing and look reads are available too (Console API: serve read views as CLI JSON under /api/v1 #1776, Spec: the Console API, /api/v1 behind scoped tokens #1777).
• Scoped API actions cover Stop, Dismissal/Undo, Scores, Bug-origin settlement, Eval-task approval, Theme changes/imports and hidden sections. Console logs record mutation callers, endpoints and outcomes; Stop/Dismissal Activity entries identify token holders and named people (Console API: scoped actions and mutation auditing #1789, Enforce Console account scopes and named-person token requests #1803, Spec: the Console API, /api/v1 behind scoped tokens #1777).
• Bearer access requires HTTPS or a direct connection to 127.0.0.1. Sessions use address permissions; named-person token requests use X-Thirdshift-Person and intersect token/address scopes. Existing addresses retain all five scopes until narrowed. Restricted sessions hide unavailable controls and retain their own sign-out; security protects Security details, traces and Waterfall. Other-account Commands remain read-only (Console API: tokens, bearer authentication and whoami #1778, Enforce Console account scopes and named-person token requests #1803, Console API: scoped actions and mutation auditing #1789, Spec: the Console API, /api/v1 behind scoped tokens #1777).
• Failed tokens and password sign-ins share a per-client-IP budget: increasing delays on failures 3–7, then HTTP 429 with Retry-After and a 60-second cooldown on failure 8. Success does not reset the count; 60 idle seconds or a restart clears it (Limit failed Console tokens and passwords per client address #1790).

Also: site and API documentation updates (#1776, #1777, #1778, #1779, #1789, #1790, #1803).

Version diff

diff --git a/Cargo.lock b/Cargo.lock
index 8a0fb1af..4a5d78c3 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2184,3 +2184,3 @@ dependencies = [
 name = "thirdshift"
-version = "0.20.6"
+version = "0.21.0"
 dependencies = [
diff --git a/Cargo.toml b/Cargo.toml
index 388b7d77..0960fbfc 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -2,3 +2,3 @@
 name = "thirdshift"
-version = "0.20.6"
+version = "0.21.0"
 edition = "2024"