v0.32.2

docs/API.md

@@ -397,6 +397,26 @@ and rust_proxy_http3_requests_total. See source `metrics.rs` for exact HELP/type
 contracts and INTEGRATIONS_040.md for configuration examples.
 
 
+## 0.32.3 Overview registry and compatible upstream modes
+
+The backend `protocol` wire values are `http1` (default), `auto`, `http2`
+(legacy HTTPS H2/H1 ALPN fallback or cleartext H2C) and new `h2` (strict
+HTTPS H2 or cleartext H2C). Old `http2` configurations are not rewritten.
+See [Vhosts](VHOSTS.md).
+
+The authenticated `/api/preferences` Dashboard card ID lists are backed by a
+shared server/frontend registry with **49** IDs: the original 16, fourteen
+optional HTTP backend cards, twelve optional performance charts and seven existing
+full-width panels (live traffic, system, connections, cache, process, network,
+backend diagnostics). OpenAPI `dashboard_widgets` and
+`dashboard_hidden_widgets` enum, `maxItems` and defaults reflect that registry.
+Existing saved card order is retained. New performance charts are opt-in,
+while previously displayed full-width sections remain visible by default.
+Unknown saved IDs are ignored rather than failing a whole profile.
+The visual editor offers a default-layout preview and a confirmed Reset layout,
+both using the existing per-account preference endpoint.
+No new routes, tokens or permissions are introduced.
+
 ## 0.22.3 certificate hot reload and external deployment
 
 `POST /api/certificates/reload` is an administrator-session-only, Origin/CSRF-protected control-plane
@@ -622,6 +642,6 @@ The revisioned `/api/config` vhost rate-limit object accepts optional `user_agen
 
 `GET /api/status` retains `streams.active`, `streams.desired`, `streams.restart_required` and `streams.metrics`. Each active Stream metric view includes `backends[]` for health/active information and optional detailed counters. `/api/status?view=live` and the existing authenticated SSE snapshots carry the same backend observations inside `streams.metrics` without a separate polling source. Backend status is `unverified`, `checking`, `healthy`, `unhealthy` or `disabled`.
 
-`GET`/`PUT /api/preferences` continue to own `dashboard_widgets` and `dashboard_hidden_widgets` (now 16 supported IDs, adding `stream_overview`, `stream_traffic`, `stream_sessions`, `stream_backend_health`). Legacy accounts have their missing Stream widget IDs appended **hidden**. Preferences affect only Dashboard presentation, not proxy configuration or metrics export. No new endpoint or permission was introduced.
+In the 0.32.0 Stream addition, `GET`/`PUT /api/preferences` own `dashboard_widgets` and `dashboard_hidden_widgets` (at that stage 16 supported IDs, adding `stream_overview`, `stream_traffic`, `stream_sessions`, `stream_backend_health`). Legacy accounts have their missing Stream widget IDs appended **hidden**. Preferences affect only Dashboard presentation, not proxy configuration or metrics export. No new endpoint or permission was introduced.
 
 Detailed backend metrics default to off in v0.32.0; per-Stream `metrics_enabled` sets the inherited value for its backends, and explicit per-backend `metrics_enabled` overrides it. Basic per-Stream counters remain available regardless of these flags.