Core SaaS Release Baseline

This page describes the package set for the selected docs line.

• Published versions are behaviorally frozen for existing adopters.
• New behavior must ship under a new package version.
• Frozen docs lines may receive only typo fixes, broken-link fixes, and clarifications that do not change behavior claims.

Only modules with a validated public surface are listed below. Hidden roadmap items and not-yet-shippable modules are tracked in internal release manifests and are intentionally excluded from this public baseline page.

Identity Broker

Release status: Partial

Public docs: Identity Broker

Summary: Browser session lifecycle, enterprise login providers, and app bootstrap surfaces for browser-first SaaS applications.

Packages:

• PrimusSaaS.Identity.Broker 2.6.0
• PrimusSaaS.Identity.Broker.EntityFrameworkCore 1.0.0
• PrimusSaaS.Identity.Broker.Redis 1.0.0
• PrimusSaaS.Identity.Broker.Routing 0.2.0
• PrimusSaaS.Identity.Broker.Routing.EntityFrameworkCore 0.1.0
• PrimusSaaS.Identity.Broker.Tokens 0.2.0
• PrimusSaaS.Identity.Broker.Tokens.EntityFrameworkCore 0.1.0

Known gaps:

• Upstream provider token refresh is still incomplete.
• Cross-package composition guidance is still thinner than the package surface.

Identity Validator

Release status: Completed

Public docs: Identity Validator

Summary: Multi-issuer JWT validation and claim normalization for API, worker, and service authentication paths.

Packages:

• PrimusSaaS.Identity.Validator 2.0.0

Known gaps:

• Internal user mapping and identity-context composition remain outside the package.

Memberships

Release status: Partial

Public docs: Memberships

Summary: Tenant membership lifecycle, invites, bootstrap-admin setup, active-tenant selection, and bridges into Broker and RBAC.

Packages:

• PrimusSaaS.Memberships 0.1.0
• PrimusSaaS.Memberships.AspNetCore 0.2.0
• PrimusSaaS.Memberships.Broker 1.0.0
• PrimusSaaS.Memberships.Dapper 1.0.0
• PrimusSaaS.Memberships.EFCore 0.1.0
• PrimusSaaS.Memberships.InMemory 0.1.0
• PrimusSaaS.Memberships.Rbac 1.0.0

Known gaps:

• Join-request and approval workflows are not complete.
• Domain-aware onboarding and richer service-account evidence are still limited.

Multi-Tenancy

Release status: Partial

Public docs: Multi-Tenancy

Summary: Tenant resolution, canonical tenant context, propagation, pooled-tenancy enforcement, entitlements, and rate limits.

Packages:

• PrimusSaaS.MultiTenancy 1.1.0
• PrimusSaaS.MultiTenancy.AspNetCore 1.1.0
• PrimusSaaS.MultiTenancy.Dapper 1.0.0
• PrimusSaaS.MultiTenancy.EFCore 1.0.0
• PrimusSaaS.MultiTenancy.FeatureFlags 1.0.0
• PrimusSaaS.MultiTenancy.InMemory 1.1.0

Known gaps:

• External tenant-id mapping is still app-owned.
• Dedicated database and schema orchestration are not a first-class productized surface.

RBAC

Release status: Partial

Public docs: RBAC

Summary: Roles, permissions, scopes, deny-first evaluation, audit traces, and API integration helpers.

Packages:

• PrimusSaaS.Rbac 2.0.0
• PrimusSaaS.Rbac.AspNetCore 2.0.0
• PrimusSaaS.Rbac.Dapper 1.0.0
• PrimusSaaS.Rbac.EFCore 2.0.0
• PrimusSaaS.Rbac.InMemory 2.0.0
• PrimusSaaS.Rbac.Redis 1.0.0

Known gaps:

• Legacy migration tooling is not finished.
• Permission vocabulary management and SoD controls are still missing.

Feature Flags

Release status: Partial

Public docs: Feature Flags

Summary: Feature flag evaluation with targeting, percentage rollouts, time windows, and tenant-aware bridging.

Packages:

• PrimusSaaS.FeatureFlags 2.0.0
• PrimusSaaS.FeatureFlags.AzureAppConfiguration 1.0.0

Known gaps:

• This is not a full entitlements, plans, or trials control-plane.
• Plan and quota lifecycle still need a dedicated package surface.

Notifications

Release status: Partial

Public docs: Notifications

Summary: Email, SMS, templating, queueing, delivery outcomes, and optional real-time SignalR delivery.

Packages:

• Primus.Notifications 2.0.0
• PrimusSaaS.Notifications.Realtime 1.0.0

Known gaps:

• The generic outbound webhook story is still narrower than a full integration-event platform.
• Current builds surface dependency vulnerability warnings in the core package.

Observability

Release status: Partial

Public docs: Observability

Summary: OpenTelemetry-based logs, traces, metrics, and request correlation enrichment.

Packages:

• PrimusSaaS.Observability 1.0.0

Known gaps:

• The package does not yet present a broader health-check and worker/queue convention surface.

Security

Release status: Partial

Public docs: Security

Summary: Static scanning, secret detection, dependency analysis, reporting, and policy/quality-gate workflows.

Packages:

• PrimusSaaS.Security 3.0.0
• PrimusSaaS.Security.AI 2.4.9
• PrimusSaaS.Security.Api 3.0.0
• PrimusSaaS.Security.Contracts 2.4.9
• PrimusSaaS.Security.Data 3.0.0
• PrimusSaaS.Security.Heuristics 2.0.1
• PrimusSaaS.Security.Reporting 3.0.0

Known gaps:

• The family is still preview-grade for release posture.
• Polyglot support remains inconsistent between implementation, tests, and docs.

Storage

Release status: Completed

Public docs: Storage

Summary: Tenant-isolated provider abstraction for Azure Blob, S3, and local storage with pre-signed URL support.

Packages:

• Primus.Storage 2.0.0

Known gaps:

• This package is intentionally narrow and does not replace a document-management system.

Export / Document Output

Release status: Partial

Public docs: Export / Document Output

Summary: Document rendering and PDF generation for reports and tenant-scoped output delivery.

Packages:

• Primus.Documents 2.0.0
• Primus.PdfGenerator 2.0.0

Known gaps:

• Rich HTML and Markdown fidelity remain limited in the document renderer.
• The PDF providers shipped in-repo are still reference-grade implementations.

AI Core

Release status: Partial

Public docs: AI Core

Summary: Provider-agnostic LLM client abstraction with tenant isolation, token budgets, and prompt-injection checks.

Packages:

• Primus.AI 2.0.0

Known gaps:

• A reusable first-class AI copilot package is not present in the SDK.
• The package is an AI core, not a complete SaaS copilot surface.