What has shipped, what is moving now, and what is queued. Every item below maps to a shipped change or an open, dated commitment.
✓Shipped12 items
Outbound webhook channel with HMAC-SHA256 signing
Subscribers register a URL + secret; LensWave signs every delivery (X-Sign-Ts / X-Sign-Nonce / X-Sign) and retries with exponential backoff up to 5 attempts.
ComfyUI & LibTV canvas import-export
Canvas export reads ComfyUI class_type / links schema and LibTV format, so a workspace can round-trip between editors.
Subgraph black-box with Blueprint publishing
Box-select nodes, wrap into a subgraph, publish as a reusable Blueprint; external callers can tweak exposed parameters from the panel.
TV Director node with manual review
Chat-to-plan: the director drafts a node plan, the human approves or edits it, then generation runs — mirroring the LibTV v1.5 workflow.
Project-level snapshot versions
Canvas state is snapshotted to local storage with a version list, diff view and one-click rollback — the 50-step in-memory undo no longer dies on refresh.
Creem checkout live end-to-end
Store buttons now open a Creem checkout with a local pending order, EU right-of-withdrawal confirmation, and HMAC-verified webhook settlement.
Real works feed + one-click Clone
Featured and community pages now fetch /api/works with category filter and search; cards have a Clone button that copies the workflow into your canvas.
14 providers / 47 models with real capability matrix
model-caps.json holds per-model resolution, duration and reference-image limits pulled from official docs; switching a model updates the parameter panel from truth.
CRDT real-time collaboration
WebSocket /crdt handshake with token auth, multi-cursor broadcast, and a 1006 reconnect fix — two tabs on the same canvas converge.
Canvas parameter chain fully wired
Seven breakpoints between parameter UI and the task queue are fixed — save, switch node, reload, re-run: the new prompt actually changes the output.
GDPR account deletion & OFAC geo-block
Profile Delete calls DELETE /api/gdpr/erase; GEO_BLOCK=1 is forced on and SDN screening is wired into the request path.
Admin security center, exports & tickets
Admin console now exposes device/IP/card-fingerprint bans, CSV exports (orders, logs, AML) and a ticket reply/close workflow.
●In progress3 items
Webhook named-event wiring
The channel (subscribe, sign, deliver, retry) is live, but business events have not yet been routed through dispatchOutbound — see the Webhook docs for which events are queued.
Legacy alias model cleanup
Seven legacy display names (e.g. "Kling 4.0 (Legacy)", "Veo 3.1 (Legacy)") are still in the model picker; deprecation list is pending product sign-off.
Legal-page translations (zh / ja)
i18n coverage is 100% for product UI; a small set of legal-page strings (terms, privacy, refund policy) remain English placeholders pending legal review.
○Planned4 items
Webhook event catalog GA
task.completed, task.failed, balance.low and subscription.changed will be dispatched as first-class events once the business hooks land.
plannedOutbox → outbound webhook bridge
The internal outbox already records task_enqueued and order_paid; a bridge will fan those out to subscribed webhook URLs with dedup.
plannedIdempotent DB migrations
Startup currently logs 40+ duplicate-column warnings from non-idempotent ALTER TABLE statements; switch to PRAGMA checks / IF NOT EXISTS.
plannedSDN person-name screening live test
GEO_BLOCK is enforced, but SDN person-name screening has not been exercised against a fixture set — staging test is queued.
plannedRoadmap items are indicative and may shift as releases land. See the Changelog for what has shipped.