"""Version tracking for SubmitStream.

Bump VERSION on every code change before restarting the container, so you can
confirm the running container has the latest code (shown in the dashboard nav).
"""

VERSION = "0.10.1"

# Changelog (most recent first):
# 0.10.0 - View-as standardized on the BW drop-in (bw_view_as.py + refreshed bw_auth.py):
#          read-only-by-default (write-guard middleware), no-privilege-escalation, hub
#          oversight via report_impersonation. admin → any non-admin; manager → clients
#          sharing a form they manage. Dashboard picker; app/viewas.py holds the policy.
# 0.9.0 - Auth switched to BW Auth (Pattern B "Sign in with BW"). Removed email+password/
#         setup/reset. Roles admin/manager/client (staff→manager). Reject-until-provisioned;
#         accounts link by bw_username then email. Host un-gated; /f public endpoints unchanged.
# 0.8.0 - Headless form UPDATE: GET/PATCH /api/forms/{ref} + CLI get-form/update-form/
#         set-origins/add-origin. Closes the go-live gap (was create-only). services.update_form.
# 0.7.0 - Allowed-origins: a bare root domain (client.com) now covers the apex, www, and
#         all subdomains. Add the root domain only; no need to list www/non-www separately.
# 0.6.0 - Thank-you page set from the form itself (no Settings): embed.js reads
#         data-redirect / data-success off the <form>; no-JS forms accept a `_redirect`
#         hidden field, guarded to same-site (security.safe_redirect) to avoid open redirect.
# 0.5.0 - Deletion: forms (FK-cascade entries/notifications/events/grants), single entries,
#         and users (admin-only; forms they made survive). CLI delete-form/delete-client,
#         API DELETE /api/forms|clients, UI delete buttons. Guards: no deleting admins/self.
# 0.4.0 - Multi-user: roles admin/staff/client. Many-to-many form_access (grants).
#         Per-user API tokens + headless management API (/api/*, on-server only) + the
#         `bin/submitstream` CLI. Invites (UI button + API). Admin "view as" client.
#         Staff see only forms they create or are granted.
# 0.3.0 - Wildcard origin allowlist (*.demoing.info matches apex + any subdomain).
#         New forms default allowed_origins to DEFAULT_ALLOWED_ORIGINS (*.demoing.info)
#         so they're testable but never fully open. Settings help text updated.
# 0.2.0 - Phase 2/3/4: email+password auth, client dashboard (entries, detail, event
#         timeline, mark read/spam, CSV export), admin (clients+forms), manual resend,
#         retry worker, embed.js, autoresponse + custom sender, CSRF middleware.
# 0.1.0 - Phase 1: public submit endpoint (/f/{key}) → store + Resend notify +
#         per-submission event timeline. Schema covers all phases. DEV_EMAIL_PRINT
#         logs email instead of sending until RESEND_API_KEY is wired.