Changelog
What is new in Telegram OS
A running log of features shipped, security work landed, fixes deployed, and performance improvements rolled out. Newest first.
Revenue spine, real account-health signals, and outreach hardening
v0.9.0Latest- FeatureSubscriptions now lift your account/task/feature limits the moment you pay (the entitlement spine) — paying a plan actually unlocks it.
- FeaturePer-account health view: health score now reflects real flood-wait / spam / peer-diversity signals, plus a /risk summary and a SpamBot "limited" auto-throttle to keep sending within limits.
- FeaturePersonalized outreach: {first_name} personalization, a deliverability breakdown (why sends failed), a do-not-contact list, auto-skip of replied contacts, and PeerFlood hold.
- FeatureAI: cross-provider fallback (no more silent template degrade), conversation summarization, and post-idea / template-variation tools.
- FeatureOnboarding: welcome notification + auto-login on signup, plan carried into checkout, and an in-app Upgrade nudge.
- FixReferral rewards now actually pay out (5% on a referral’s first purchase).
Rial payments, account resale, support, and full Persian
v0.8.0- FeatureRial card-to-card top-up (in addition to crypto), with a low-fee coin picker so small top-ups settle.
- FeatureP2P account marketplace: list and buy owned accounts with a secure session hand-off.
- FeatureIn-app support widget bridged to our team, plus a per-category notification centre with quiet hours.
- FeatureFull Persian (fa) localization with RTL, and a locale switcher.
- SecurityConnection reliability and session safety: an obfuscated transport option and diverse device fingerprints for fresh logins, so sessions stay stable.
Wallet-first checkout and Add-account modal
v0.7.0- FeatureAccount creation now happens through an in-page modal (Normal or Special account). No more redirect to the marketplace.
- FeatureWallet-first bundle purchase: buy one or more account-plus-proxy bundles ($4 each) directly from the Accounts page.
- FeatureTeam Manage dialog: invite, change roles, and remove members inline from Settings.
- SecurityRole-rank guards on member updates: admins can no longer promote themselves to owner.
Phase 4 hardening, analytics isolation, Vitest and pytest
v0.6.0- SecuritySealed a cross-tenant leak in the analytics pipeline.
- FeatureWired Vitest and pytest into CI. Coverage threshold enforced on every PR.
- FixResolved a flaky scheduler test that masked a tenant-isolation regression.
Scheduler tenant isolation and DNS-rebinding TOCTOU
v0.5.0- SecurityScheduler now enforces tenant isolation at the queue level.
- SecurityClosed a DNS-rebinding TOCTOU window in webhook delivery.
- SecurityRedis is now authenticated end-to-end across all services.
Second-pass audit fixes
v0.4.0- SecurityFixed privilege-escalation vector in member updates.
- SecurityPatched SSRF in the proxy probe.
- FixAligned WebSocket auth with REST auth. The broken WS auth path is resolved.
- FixSchema-drift checker now runs on every migration.
Audit and regression hardening
v0.3.0- SecurityFirst security audit landed. Fixes for tenant query gaps and missing rate limits.
- FeatureNew regression test suite covering the highest-blast-radius endpoints.
Inbox and Automation public preview
v0.2.0- FeatureUnified inbox shipped with assign, snooze, and internal notes.
- FeatureAutomation runner with human-delay shaping and per-account cooldowns.
- FeatureMarketplace alpha: automation templates and bots.
Initial production-ready release
v0.1.0- FeatureMulti-account workspace, dedicated residential proxies, wallet billing, teams, and analytics. First production cut.