@@ -1,12 +1,12 @@
-[build]
-
 [alias]
 dev = "run -- dev"
 
+[build]
+
 [env]
-DUCKDB_STATIC = "1"
 DUCKDB_DISABLE_EXTENSION_LOAD = "1"
 DUCKDB_DISABLE_JEMALLOC = "1"
+DUCKDB_STATIC = "1"
 
 [target.x86_64-unknown-linux-musl]
 rustflags = ["-C", "target_cpu=x86-64-v3"]
@@ -27,6 +27,11 @@ Since this is not a library, this changelog focuses on the changes that are rele
 - Added left and right arrow keyboard shortcuts for navigating dashboard date ranges
 - Added authenticated batch event ingestion endpoint
 - Added API key management UI
+- Added teams for assigning project read access to groups of users and internal projects visible to signed-in users
+
+### ⚠️ Breaking Changes
+
+- Direct per-user project assignments no longer grant access. Reassign users to teams to restore private-project access.
 
 ## [v1.7.0] - 2026-09-13
 
 
@@ -11,6 +11,12 @@ homepage = "https://liwan.dev"
 repository = "https://github.com/explodingcamera/liwan"
 license = "Apache-2.0"
 
+[workspace.lints.rust]
+unsafe_code = "forbid"
+
+[workspace.lints.clippy]
+too_many_arguments = "allow"
+
 [profile.dev]
 opt-level = 1
 
 
@@ -44,3 +44,6 @@ url = "2"
 [dev-dependencies]
 axum = "0.8"
 tokio = { version = "1", features = ["macros", "rt-multi-thread", "time", "sync"] }
+
+[lints]
+workspace = true
@@ -336,20 +336,28 @@ async fn send_batch<T: Transport>(config: &Builder<T>, entity_id: &str, events:
 /// A client error.
 #[derive(Debug, Clone, PartialEq, Eq, thiserror::Error)]
 pub enum Error {
+    /// The event queue has reached its capacity.
     #[error("event queue is full")]
     QueueFull,
+    /// The client is no longer accepting events.
     #[error("client is closed")]
     Closed,
+    /// Liwan rejected the API key.
     #[error("Liwan rejected the API key")]
     Authentication,
+    /// Liwan rejected the event batch.
     #[error("Liwan rejected the event batch")]
     InvalidRequest,
+    /// Delivery failed after all retries.
     #[error("event delivery retries were exhausted")]
     RetriesExhausted,
+    /// The background worker stopped before completing the operation.
     #[error("event delivery worker stopped")]
     WorkerStopped,
+    /// Liwan returned an unexpected HTTP status.
     #[error("Liwan returned HTTP status {0}")]
     Response(StatusCode),
+    /// A client setting is invalid.
     #[error("{0}")]
     InvalidConfiguration(&'static str),
 }
 
@@ -7,9 +7,13 @@ use serde::Serialize;
 /// Metadata captured from an HTTP request.
 #[derive(Debug, Clone, Default)]
 pub struct RequestMetadata {
+    /// The full URL of the request.
     pub url: String,
+    /// The referrer, if supplied.
     pub referrer: Option<String>,
+    /// The resolved client IP, if available.
     pub ip: Option<IpAddr>,
+    /// The user-agent header, if supplied.
     pub user_agent: Option<String>,
 }
 
@@ -105,6 +109,7 @@ impl Event {
 
 /// Converts supported timestamp types to RFC 3339.
 pub trait IntoTimestamp {
+    /// Formats this timestamp as an RFC 3339 string.
     fn into_timestamp(self) -> String;
 }
 
 
@@ -1,6 +1,6 @@
 //! A framework-neutral client for the Liwan API.
 
-#![forbid(unsafe_code)]
+#![deny(missing_docs)]
 
 mod client;
 mod client_ip;
 
@@ -21,13 +21,12 @@ name = "reports"
 [dependencies]
 # async/concurrency
 arc-swap = "1.9"
-futures-lite = { version = "2.6", default-features = false, features = ["alloc"] }
+futures-util = { version = "0.3", default-features = false, features = ["std"] }
 quick_cache = { version = "0.7" }
-tokio = { version = "1.53", default-features = false, features = ["macros", "rt-multi-thread", "signal", "sync"] }
+tokio = { version = "1.53", default-features = false, features = ["macros", "net", "rt-multi-thread", "signal", "sync", "time"] }
 tokio-util = { version = "0.7", features = ["io", "time"] }
 
 # encoding
-hex = { version = "0.4" }
 md-5 = { version = "0.11.0" }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0" }
@@ -67,12 +66,13 @@ axum = { version = "0.8", default-features = false, features = [
   "tokio",
 ] }
 axum-extra = { version = "0.12", default-features = false, features = ["cookie", "typed-header"] }
+base64 = "0.23"
 headers = "0.4"
 http = "1.5"
 ipnet = "2.12"
 oauth2 = { git = "https://github.com/explodingcamera-contrib/oauth2-rs", default-features = false }
 openidconnect = { git = "https://github.com/explodingcamera-contrib/openidconnect-rs", default-features = false }
-reqwest = { version = "0.13", default-features = false, features = ["charset", "json", "rustls", "stream"] }
+reqwest = { version = "0.13", default-features = false, features = ["json", "rustls", "stream"] }
 rust-embed = { version = "8.12", features = ["mime-guess"] }
 schemars = { version = "1.2", features = ["chrono04", "derive"] }
 tower = { version = "0.5", default-features = false }
@@ -96,11 +96,9 @@ refinery = { version = "0.9", default-features = false }
 refinery-core = { version = "0.9", default-features = false }
 rsntp = { version = "4.1.2", default-features = false, features = ["async"] }
 rusqlite = { version = "0.40", features = ["bundled", "chrono", "modern_sqlite"] }
-base64 = "0.23"
 
 [dev-dependencies]
 axum-test = { version = "21" }
-cookie = { version = "*", default-features = false }
 criterion = { version = "0.8", default-features = false }
 tempfile = { version = "3" }
 tower = { version = "*", features = ["util"] }
@@ -109,5 +107,5 @@ tower = { version = "*", features = ["util"] }
 default = ["geoip"]
 geoip = ["dep:maxminddb"]
 
-[lints.clippy]
-too_many_arguments = "allow"
+[lints]
+workspace = true
@@ -7,6 +7,7 @@ mod projects;
 pub mod reports;
 mod sessions;
 mod settings;
+mod teams;
 mod users;
 
 pub use api_keys::{ApiKeyAccess, LiwanApiKeys};
@@ -19,6 +20,7 @@ pub use onboarding::LiwanOnboarding;
 pub use projects::LiwanProjects;
 pub use sessions::LiwanSessions;
 pub use settings::{LiwanProjectSettings, LiwanSettings};
+pub use teams::LiwanTeams;
 pub use users::LiwanUsers;
 
 #[cfg(feature = "geoip")]