Releases

API access and security

• Make task run access include read access, and task management include read and run access. Simplify API key creation to a single descriptive access level.
• Enforce scoped task allowlists on full task saves and restrict sensitive browser, credential, cabinet, capture, and screenshot routes to management access.
• Prevent API-key task runs from replacing extraction scripts and safely handle runtime values in extraction script templates.
• Improve API key authentication and legacy-key regression coverage.