Changelog

Batch export, and an end to the CSV encoding bug

The export queue now runs off the same worker pool as reconciliation, which removed the class of failure where a large export starved everything else on the box.

Added

• POST /v4/exports accepts up to 50,000 rows per request
• Exports can be scheduled with a cron expression instead of polled
• Webhook export.completed carries a signed download URL, valid one hour

Fixed

• CSV exports containing non-Latin names were written as UTF-8 without a BOM, which Excel read as mojibake. They now carry a BOM.
• A rounding error on multi-currency totals affected 0.02% of reports generated between 4.6.0 and 4.6.2.

POST /v4/exports
Content-Type: application/json

{
  "report": "reconciliation",
  "format": "csv",
  "schedule": "0 6 * * 1",
  "notify": "webhook"
}

Three fixes, no API changes

• Session cookies were reissued on every request, which invalidated concurrent tabs for some users.
• The audit log recorded the acting user's ID but not their session origin.
• Timezone handling on the reconciliation summary used the server zone rather than the account zone.

Audit log, and SSO for every plan

SSO moved out of the enterprise tier. Charging extra for the security feature that protects everyone was a pricing decision we stopped defending.

• SAML and OIDC available on all paid plans
• Audit log retained 400 days, exportable
• Per-key rate limits visible in the dashboard

Multi-currency reconciliation

Accounts can now reconcile in a settlement currency separate from the account currency, with the rate frozen at capture time.