dsn and crud

.github/workflows/sdks-go.yml

@@ -48,7 +48,7 @@ jobs:
         if: matrix.os == 'ubuntu-latest'
         run: |
           pip install pytest
-          pip install -e sdks/py
+          pip install -e ../py
 
       # --- Build + Vet ---
 

.github/workflows/sdks-py.yml

@@ -42,10 +42,10 @@ jobs:
       # --- Lint ---
 
       - name: Lint (ruff check)
-        run: ruff check src/ tests/
+        run: ruff check src/loza/ tests/
 
       - name: Format check (ruff format)
-        run: ruff format --check src/ tests/
+        run: ruff format --check src/loza/ tests/
 
       # --- Type check (enable when mypy is configured in pyproject.toml) ---
       # Uncomment the steps below once [tool.mypy] is added to pyproject.toml

.github/workflows/sdks-rs.yml

@@ -102,7 +102,7 @@ jobs:
       - name: Install conformance dependencies
         run: |
           pip install pytest
-          pip install -e sdks/py
+          pip install -e ../py
 
       - name: Conformance runner
         working-directory: spec

.github/workflows/spec-ci.yml

@@ -51,6 +51,12 @@ jobs:
         with:
           go-version-file: sdks/go/go.mod
       - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+      - name: Install JavaScript SDK dependencies
+        run: npm ci
+        working-directory: sdks/js
       - name: Install conformance dependencies
         run: python -m pip install --upgrade pip jsonschema pytest
       - name: Install Python SDK

.github/workflows/spec-validate.yml

@@ -21,6 +21,15 @@ jobs:
         with:
           python-version: '3.11'
 
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+
+      - name: Install JavaScript SDK dependencies
+        run: npm ci
+        working-directory: sdks/js
+
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip

CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to the LOZA project are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/0.2.0/).
 
+## [0.3.0] - 2026-08-14
+
+### Security
+
+- **Collector-scoped API keys**: Bearer API keys can now bind directly to one
+  configured collector with explicit `events:read`, `events:write`,
+  `events:delete`, or `project:admin` permissions and required environments.
+  Canonical collector routes reject mismatched collector, environment, and
+  permission scopes by default.
+
+### Changed
+
+- **Authorization configuration**: Documented scoped API-key configuration and
+  canonical `/collectors/{collector}/...` usage. Legacy unscoped API keys
+  remain restricted to explicit root-route migration paths.
+
 ## [0.2.6] - 2026-05-30
 
 ### Security

README.md

@@ -13,7 +13,7 @@
     <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
   </a>
   <a href="https://github.com/astraive/loza/releases">
-    <img src="https://img.shields.io/badge/version-v0.2.6-green.svg" alt="Version">
+    <img src="https://img.shields.io/badge/version-v0.3.0-green.svg" alt="Version">
   </a>
   <br>
   <a href="https://github.com/astraive/loza/actions/workflows/collector-ci.yml">
@@ -22,11 +22,11 @@
   <a href="https://github.com/astraive/loza/actions/workflows/sdks-go.yml">
     <img src="https://github.com/astraive/loza/actions/workflows/sdks-go.yml/badge.svg" alt="Go SDK CI">
   </a>
-  <a href="https://github.com/astraive/loza/actions/workflows/sdks-py-ci.yml">
-    <img src="https://github.com/astraive/loza/actions/workflows/sdks-py-ci.yml/badge.svg" alt="Python SDK CI">
+  <a href="https://github.com/astraive/loza/actions/workflows/sdks-py.yml">
+    <img src="https://github.com/astraive/loza/actions/workflows/sdks-py.yml/badge.svg" alt="Python SDK CI">
   </a>
-  <a href="https://github.com/astraive/loza/actions/workflows/sdks-rs-ci.yml">
-    <img src="https://github.com/astraive/loza/actions/workflows/sdks-rs-ci.yml/badge.svg" alt="Rust SDK CI">
+  <a href="https://github.com/astraive/loza/actions/workflows/sdks-rs.yml">
+    <img src="https://github.com/astraive/loza/actions/workflows/sdks-rs.yml/badge.svg" alt="Rust SDK CI">
   </a>
   <a href="https://github.com/Astraive/lozana/actions/workflows/lozana-ci.yml">
     <img src="https://github.com/Astraive/lozana/actions/workflows/lozana-ci.yml/badge.svg" alt="Lozana CI">
@@ -420,7 +420,7 @@ flowchart TD
 
 | Language                | Command                                          |
 | ----------------------- | ------------------------------------------------ |
-| Go                      | `go get github.com/astraive/loza/sdks/go@v0.2.6` |
+| Go                      | `go get github.com/astraive/loza/sdks/go@v0.3.0` |
 | Python                  | `pip install loza`                               |
 | Rust                    | `cargo add loza`                                 |
 | JavaScript / TypeScript | `npm install @astraive/loza`               |

cli/loza-cli.yaml

@@ -1,6 +1,6 @@
 name: loza-cli
 kind: cli
-version: 0.2.6
+version: 0.3.0
 description: Local operator and developer CLI for LOZA
 license: MIT
 repository: https://github.com/Astraive/loza