chore(main): release iam-service 0.17.0

[github-actions]

🤖 I have created a release beep boop

0.17.0 (2026-08-20)

Features

• bi: add EBITDA + NET_PROFIT per-dashboard sidebar menu entries (IAM 000047) (cc97e61)
• bi: seed DELIVERY_MARGIN dashboard config + IAM menu/permissions (000324+000046) (ab4dcef)
• cost-erp: add ERP item CRUD — domain, repository, gRPC handler, migrations (25671e2)
• costing: Cost Fill Assignments, CPR Workflow, and IAM Notification Redesign (5399842)
• email: reduce social icon display size from 36px to 30px (8d6131d)
• email: replace pill buttons with hosted PNG social icons in footer (a5e70f2)
• finance: audit emit on product master/param mutations; calc schedule menu (a241f9e)
• finance: param value override with audit trail; lock enforces fill approval; confirm requires locked route (8d50622)
• finance: product request classification + workflow revamp (backend) (3ce2f1a)
• finance: wire SLA + fill-assignment reminder notifications to cron scheduler (e2d09d3)
• iam/db: add migrations 000050-000053 for CPR roles, permissions, and section assignments (de311c6)
• iam/email: add app_url config, CTA link routing, and asset embedding (3aa4c78)
• iam/email: add AppName/AppURL/SupportURL to EmailConfig; fix from_name (be9b8ab)
• iam/email: add base shell and OTP HTML templates; OTP renderer test (a183a5c)
• iam/email: add multipart MIME builder with attachment support (fecc2dd)
• iam/email: add notification template with table/alert/CTA support (0a61538)
• iam/email: add Renderer with data structs, template cache, SplitOTP/SplitParagraphs (0264e60)
• iam/email: add security and welcome HTML templates with integration tests (1ae3da4)
• iam/email: redesign email templates — branding header, social icons, mobile responsive (3f98295)
• iam/email: rewrite Service to use Renderer; add WithAttachments/WithTable methods; clean subjects (86ef918)
• iam/email: wire Renderer into main.go; email template system complete (01e1a49)
• iam: add CheckPassword method, VerifyPassword gRPC handler, migration 000055 (ce31daf)
• iam: add menu_id column to mst_permission (f26f704)
• iam: add offline email notifications for chat messages (23751c6)
• iam: add real-time chat system + AI chatbot backend (8bf0415)
• iam: add RequestHandler for rule-based notification fan-out with deduplication (7b33a7d)
• iam: add UserResolver interface and DB implementation for notification recipient resolution (6fd761e)
• iam: add ValidateUnlockPassword use case (c0b07d1)
• iam: backfill permission menu_id from RBAC audit (275 mapped, 4 global) (7c64a0a)
• iam: cache user permissions in Redis on login/refresh; auth interceptor resolves from cache (4789cd5)
• iam: chat clear-history and file/image attachments (842f051)
• iam: implement NotificationEmailDispatcher; wire into RequestHandler so CPR events send emails via SMTP/Mailpit (ee34d9f)
• iam: implement RequestNotification gRPC handler with rule-based UserResolver and wire into server (6080129)
• iam: permission repository persists menu_id, joins menu_title, ListByMenu (792cc77)
• iam: populate section_code/department_code in AuthUser (Task 6 A3) (baec8af)
• iam: read CHAT_MASTER_KEY from Viper config (persistent across restarts) (12dd521)
• iam: Redis Streams + user info resolver for production-grade chat (85bfe0d)
• iam: require permission description; thread menu_id through update + list filter (3c65162)
• iam: seed company mappings, employee levels and groups from legacy data (75df047)
• iam: seed company mappings, employee levels and groups from legacy data (fc0624b)
• iam: seed fill-assignment permissions for finance costing (b6cf87b)
• iam: seed MB batch costing roles, permissions and menus (1845cc7)
• iam: seed PPC roles, permissions and menus (180ec99)
• iam: seed spin fixed cost menu and permissions (575dd44)
• iam: seed Yarn Master menus and 24 permissions (migration 000057) (f9a9333)
• iam: sender name in broadcasts + email with sender context (a2f2081)
• Implement End-to-End Master Batch (MB) Costing Suite & Workflow (14caf6f)
• ppc: add the Production Planning & Control service (b8be505)

Bug Fixes

• bi-dashboard: Enhance BI metrics and dashboards with schema v1.1 updates (bbb088d)
• build: pin golangci-lint to v2.3.0 to match CI (c00c906)
• bulk-export: correct download filename and add import-jobs menu seed (b9fe944)
• ci: fix goimports local-prefix grouping across finance and iam (7a73b25)
• ci: resolve golangci-lint and test failures on PR #117 (0c9fd0f)
• docker: mount Postgres volumes at the PostgreSQL 18 data root (4a960c8)
• Dynamic YTD KPI for BI Dashboards & IAM Menu Permissions (#115) (69e9171)
• finance: implement spin fixed-cost POY pool model, master CRUD, calc engine injection, and permissions (#163) (b11085b)
• iam: add RequestNotification to permission interceptor allow-list (internal service RPC) (40aea89)
• iam: align route-unlock permission migration with current mst_permission schema (85f8482)
• iam: company mapping delete only blocks on active users; return 409 on ErrAssignedToUser/ErrComboTaken (079db53)
• iam: dispatch email to offline chat recipients via EmailDispatcher (84e62d5)
• iam: drop legacy chat tables before creating chat_message (64ff286)
• iam: fix email logo and social icons for Gmail/Outlook compatibility (#118) (1d9b0c5)
• iam: fix migration 000076 menu hierarchy and permission schema (b8cdaae)
• iam: gate RM Pricing and Product Costing parent menus (082fd67)
• iam: GetPermissionsByService returns role_count per permission (11f3646)
• iam: GetUserRolesAndPermissions returns true direct grants separately (fe7e28a)
• iam: graceful handling of master key mismatch + log unhandled errors (54e778f)
• iam: hide cleared history from conversation preview and unread count (10a8785)
• iam: populate SenderName in ListMessages response (5030784)
• iam: populate StreamChatEvents proto payload from broadcaster events (b3928cc)
• iam: read receipts + lastMessage/unreadCount + edit history + email CTA (3cd8b02)
• iam: register ChatService + PresenceService in permission interceptor (9d3ae52)
• iam: remove finance.product.request.create from CPR_ADMIN role (4c401b4)
• iam: replace interface{} with any in UserResolver scan helper (6066175)
• iam: resolve golangci-lint v2.3.0 findings in chat package (c49da07)
• import: Async Cost Data Import Engine, CPM Extensions & Email Assets (780cb08)
• lint: resolve golangci-lint v2 failures in finance and IAM services (33aa588)
• lint: resolve golangci-lint v2 issues across finance and iam (393ee82)
• notifications: Multi-replica SSE via Redis Pub/Sub & Email Client Compatibility (#120) (ad4c9e4)
• Product Request Workflow Revamp, Parameter Approval Visibility, and Route Graph Enhancements (3f2bb19)
• resolve Docker volume paths, IAM migration conflict, linter version, and PPC compose (733bc38)
• Route Lock Enforcement, Param Override Audit Trail, and IAM Password Verification (d526e9d)

Reverts

• cost-erp: remove ERP item CRUD from backend; add legacy flex fields to product master pipeline (cc4b4bf)

---

This PR was generated with Release Please. See documentation.

[kilo-code-bot]

Code Review Summary

The review did not run because the selected model is no longer available.

Choose another model in Kilo Code review settings: https://app.kilo.ai/code-reviews