SignalBox v1.1.0 — Open-source launch readiness, Admin UI, audit, incident tools and HTTP provider foundation
LatestSignalBox v1.1.0
This release moves SignalBox from a compact webhook gateway toward a public open-source product: better operations UI, auditability, incident diagnostics, self-hosting documentation, examples, provider architecture groundwork and launch-ready repository structure.
Highlights
- Embedded Admin UI for source, event and delivery operations.
- Admin audit log for source, event, delivery and template actions.
- Source health badges and source incident snapshot.
- Copyable source diagnostics for debugging failed or noisy integrations.
- HTTP forwarding hardening with HMAC signatures and SSRF protection.
- Delivery filters by status, channel, source and event.
- HTTP delivery provider architecture foundation.
- Admin-only source test events.
- Better metrics, runbook and operational documentation.
- Open-source launch documentation, issue templates, PR template and examples.
Added
Admin UI and operations
- Added embedded
/adminUI. - Added source editor, source test event payloads and template preview flow.
- Added delivery filters by source and event.
- Added admin audit log panel.
- Added source investigation shortcuts.
- Added source health badges.
- Added source incident snapshot panel.
- Added copyable diagnostics for source incidents.
Admin audit
- Added
admin_audit_eventsstorage. - Added admin audit domain model.
- Added admin audit API endpoint.
- Added audit filters and UI rendering.
- Added documentation for admin audit behavior.
Delivery and forwarding
- Added durable HTTP forwarding docs.
- Added HTTP forwarding SSRF guard.
- Added resolved-host validation for outgoing forwarding.
- Added HMAC signing documentation.
- Added
Providercontract for future delivery providers. - Added
HTTPForwardProviderskeleton and delivery implementation. - Added HTTP provider tests.
- Connected HTTP enqueue payload creation to
HTTPForwardProvider.BuildJobPayload.
Documentation and launch readiness
- Added getting started guide.
- Added self-hosting guide.
- Added environment variable reference.
- Added recipes.
- Added comparison guide.
- Added public roadmap.
- Added documentation index and navigation paths.
- Added public launch checklist.
- Added demo script.
- Added screenshots plan.
- Added contributing guide.
- Added issue templates.
- Added pull request template.
- Added funding configuration.
- Added synthetic example payloads.
Examples
Added safe synthetic payloads for:
- landing lead events;
- repository push events;
- checkout/payment-style events;
- monitoring alerts.
Changed
- Improved README positioning around SignalBox as a lightweight self-hosted webhook gateway.
- Improved production environment example.
- Improved local environment example.
- Improved delivery queue documentation.
- Improved HTTP forwarding documentation.
- Improved admin UI documentation.
- Improved architecture documentation.
- Improved API documentation.
Security
- Source tokens remain hashed and are shown only on create/rotate.
- Admin API remains protected by
X-API-Key. - HMAC keys remain write-only from API/UI perspective.
- HTTP forwarding blocks localhost/private/internal destinations by default.
- Webhook token redaction and security headers remain enabled.
- Release docs explicitly warn against leaking tokens, keys and private payload data.
Operational notes
Recommended upgrade path:
- Pull the new release tag.
- Review
.env.production.example. - Use
SIGNALBOX_VERSION=v1.1.0. - Restart the production Compose stack.
- Check
/healthz,/readyz,/metrics. - Open
/adminand verify events, deliveries and source diagnostics.
Known notes
- The HTTP provider architecture is being introduced gradually.
- HTTP enqueue now uses provider payload building.
- The existing delivery worker path remains stable while provider dispatch extraction continues.
- Admin UI JavaScript syntax CI and JSON example validation are planned next quality gates.
Upgrade
For production Compose deployments:
cp .env.production.example .env.production
# set SIGNALBOX_VERSION=v1.1.0
docker compose --env-file .env.production -f docker-compose.prod.yml pull
docker compose --env-file .env.production -f docker-compose.prod.yml up -d