What we
shipped.
Every feature, fix and improvement to the FerrLabs platform: accounts, organisations, billing and the holding site. Each product keeps its own changelog.
RSS ↗Signing out now reaches the products
Ending a session cuts its access to FerrVault as well, instead of leaving the token it minted working until it expired on its own.
Single sign-on: your organization, your identity provider
Verify an email domain, point us at your OIDC provider, and your members sign in there instead of with a password. Accounts are matched on the provider subject, never on an email alone, and an organization can require the provider for everyone.
One nav column, and an app switcher that shows what your org has
The dark product rail and the white sidebar merge into a single column in FerrVault, FerrTrack, FerrGrowth, FerrFleet and the FerrLabs console. Switching apps moves to the top of it, and only lists the products your organization actually uses.
MCP: the product servers move to their own npm scopes
@ferrlabs/mcp-track and its three siblings become @ferrtrack/mcp, @ferrvault/mcp, @ferrgrowth/mcp and @ferrfleet/mcp. The unified server and the shared core keep their names. Ships as v8.
Admin: Editable org subscriptions + global discounts + promo codes
Staff can now edit any org's subscriptions inline from the admin console, and a new Billing page manages site-wide percentage discounts and user-redeemable promo codes with stacking rules.
FerrLabs: Org switcher in every product sidebar + cross-app create-org link
All four product apps (Vault, Track, Growth, Fleet) now show the same org switcher dropdown in the sidebar. 'Create an organisation' deep-links to the central labs portal instead of being a dead end.
FerrLabs: Product APIs accept the BFF session cookie. Auth no longer 401s in cookie mode
Every product API (Vault, Track, Growth, Fleet) now falls back to the fl_session HttpOnly cookie when no Authorization header is present. Fixes a hard 401 for all BFF-routed traffic.
FerrLabs: server-side telemetry emit wired into auth + org + subscription handlers
API now emits the documented events when accounts sign up, log in, orgs are created, members added, subscriptions activate / change tier / cancel.
app.ferrlabs.com: telemetry opt-out toggles in Preferences and a new Privacy page
Per-user toggle on /prefs and a new /privacy page with the org-wide toggle for owners and admins.
FerrLabs: telemetry ingestion endpoint + opt-out plumbing
POST /v1/telemetry now persists envelopes, organizations and users get a telemetry_opt_out flag, and the toggle endpoints are live in app.ferrlabs.com.
FerrLabs: /telemetry preview of the on-by-default commitment
New transparency page documenting every event we plan to collect, the hashing scheme, and the opt-out paths. Marked draft until the events actually emit.
FerrLabs: CI i18n + langue désactivée quand pas de miroir
Tous les sites passent par un check CI parité fr/en + résolution de clés. Le toggle FR/EN sur une page sans miroir est désormais visiblement désactivé (strikethrough + tooltip) au lieu de no-op silencieux.
FerrLabs: changelog disponible en français
ferrlabs.com/fr/changelog/ et /fr/changelog/<slug>/ + flux RSS FR. La chrome (header, breadcrumb, boutons, dates) suit la langue ; les entrées restent en anglais (source unique de vérité).
FerrLabs: Navbar + Footer enfin traduits sur les 3 sites SaaS
FerrTrack / FerrVault / FerrGrowth: les pages /fr/ affichaient une navbar et un footer en anglais. Tout passe maintenant par t(lang, key).
FerrLabs: public changelog
New /changelog/ on every FerrLabs site: editorial entries for what shipped, when, and why. Source of truth at FerrLabs/Changelog (public repo).
FerrLabs: editorial scrollbar everywhere
Hairline scrollbar with slate thumb: applied via @ferrlabs/styles base + inlined on sites that do not consume the package. Firefox supported via scrollbar-width.
FerrLabs: auto-redirect French browsers + translate=no on code
First-time visitors with browser locale starting with `fr` are redirected once to /fr/. Code blocks tagged translate="no" so Google Translate stops mangling shell snippets.
FerrLabs: noindex on private app surfaces
Every app/admin/auth UI now ships meta robots + robots.txt + nginx X-Robots-Tag for defence-in-depth no-indexing. Search engines stop crawling auth flows and dashboards.
FerrLabs: sitemaps + structured robots.txt for every marketing site
ferrlabs.com / ferrflow.com / ferrvault.com / ferrtrack.com / ferrgrowth.com all ship a generated sitemap.xml + a robots.txt that points to it. Hreflang alternates included for the bilingual sites.