Changelog

Release notes and updates for CueAPI.

v1.0.0 — March 2026

CueAPI launches with a complete scheduling API for AI agents.

Core API

  • Full CRUD for cues with cron and one-time schedules
  • Timezone-aware scheduling via croniter
  • Per-user API key authentication with SHA-256 hashing and Redis caching
  • Request ID middleware on every response

Webhook Delivery

  • HMAC-SHA256 signed webhooks with per-user secrets (v1= format)
  • Timestamp-bound signatures for replay protection (5-minute window)
  • Automatic retries (3 attempts) with exponential backoff
  • Transactional outbox pattern for reliable dispatch
  • Concurrent delivery via arq worker queue

Worker Transport

  • Pull-based execution for machines without public URLs
  • Claim/release mechanism with conditional UPDATE pattern
  • Handler routing by payload.task
  • Stale claim recovery and unclaimed execution timeout
  • cueapi-worker daemon with YAML config and service installation

Execution & Outcomes

  • Full execution lifecycle tracking (pending → delivering → success/failed)
  • Stale execution recovery (auto-recover after 5 minutes)
  • Outcome reporting (write-once, per-execution)
  • Outcome metadata (up to 10KB JSON)

Security

  • SSRF protection on callback URLs (blocked private IPs, IPv6, metadata endpoints)
  • Embedded credential rejection in URLs
  • Rate limiting with sliding window (per-plan, per-key)
  • Rate limit feedback loop fix (rejected requests don't inflate window)
  • Body size limit (2MB)
  • PATCH validation (unknown fields rejected)

Billing

  • Stripe Checkout integration (Pro and Scale plans)
  • Stripe Customer Portal for subscription management
  • Webhook-driven plan changes with automatic limit adjustment
  • Downgrade protection (excess cues paused, not deleted)

CLI (cueapi)

  • Published to PyPI as cueapi v0.1.0
  • 14 commands: login, whoami, logout, quickstart, create, list, get, pause, resume, delete, upgrade, manage, usage, key regenerate
  • Device code authentication flow with magic link email
  • Multi-profile credential storage

Worker Package (cueapi-worker)

  • Published to PyPI as cueapi-worker v0.1.0
  • YAML-based handler configuration with template variables
  • Concurrent execution with ThreadPoolExecutor
  • launchd (macOS) and systemd (Linux) service installation
  • Graceful shutdown on SIGINT/SIGTERM

Dashboard

  • React 18 + Vite + Tailwind CSS web interface
  • Email signup and device code magic link login
  • Live cue table with auto-refresh
  • Execution history in expandable rows
  • API key and webhook secret management
  • Usage stats with color-coded progress bars
  • Support request modal

Infrastructure

  • Deployed on Railway (API, Worker, Poller services)
  • PostgreSQL + Redis with failover handling
  • Poller leader election for high availability
  • Enhanced health endpoint with operational metrics
  • UptimeRobot monitoring

Documentation

  • Mintlify documentation site at docs.cueapi.ai
  • Interactive API playground on every endpoint
  • Signature verification guides (Python + Node.js)
  • Worker setup and configuration guides
  • Agent turn scheduling pattern documentation