Changelog

Webhook deliveries that fail an attempt now recover automatically: the delivery drain retries with increasing backoff and dead-letters after 5 attempts, instead of stalling on the first failure.

Webhook event documentation and endpoint scoping now list only events that are actually delivered, including package.launched and usage threshold alerts (70%, 90%, 100%).

Documentation corrections: the webhook event catalog now lists only delivered events, signature guidance leads with X-Connect-Signature (legacy X-Allure-Signature still sent), and the GET /api/v1/sessions filter reference matches the implemented parameters.

Webhook delivery records returned by GET /api/v1/webhooks now include lastResponseBody — a truncated copy of your endpoint’s last HTTP response — so you can diagnose rejected deliveries (e.g. auth errors) without contacting support.

Terminal session webhooks (completed, failed, suspended) are emitted on state transitions with signed, executor-compatible payloads that include session progress fields for downstream LMS integrations.

GET /api/v1/sessions supports filtering by user_id and package_id plus limit and offset pagination for tenant-scoped session inventories.

Partner API session reads now return progress, completion, and score fields from the same Convex source of truth used by SCORM runtime commits—no stale or divergent values after learner activity.

A customer-visible product changelog is available at /docs/changelog, with in-app What’s New highlights when you sign in.

OpenAPI and integration guides now document the required read-before-write session version flow, 409 conflict retries, and webhook signing headers (X-Connect-Signature with legacy X-Allure-Signature compatibility).

OpenAI GPT Actions schema at /api/v1/openapi-actions for AI tool integration. A TypeScript SDK (@allureconnect/sdk) and MCP server are in development and not yet published to npm.

Developer sandbox with ac_test_ and ac_live_ API keys—start integrating without a credit card, with watermarked SCORM output and 30-day package expiry on sandbox workspaces.

PPT-to-SCORM conversion (POST /api/v1/conversions) and quick-publish (POST /api/v1/quick-publish) for JSON-to-SCORM in a single API call.

Tenant credential handoff across onboarding and Integrations: visible workspace ID, one-time API key reveal, and rotate/revoke controls.

SCORM API documentation and examples updated for the tenant ID plus API key credential flow, including launch URL token requirements.

Session cache discipline and durable continuity unified across v1 partner API and SCORM launch flows.

Credentials UX fixes in onboarding and Integrations: copy behavior, rotation/revocation actions, and checkout-success credential presentation.