chore: bump version to 1.3.0-beta + CHANGELOG

Author: cmos486

CHANGELOG.md

@@ -4,6 +4,44 @@ All notable changes to argos-edge are documented here. Format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/);
 versions use [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.0-beta] - 2026-04-21
+
+UI for the DNS providers expansion (sub-phase B). No backend changes.
+See [release notes](docs/release-notes/v1.3.0-beta.md) for details +
+screenshots.
+
+### Added
+
+- **Settings → DNS providers** section: cards grid with per-provider
+  enable toggle, credential form, Configured / Not configured
+  badges, `__UNCHANGED__` sentinel + Edit button on secret fields
+  so operators can rotate one credential without retyping others,
+  "How to get credentials" deep link to the upstream docs, and a
+  trust-boundary callout pointing at
+  [Persistence docs](docs/operations/persistence.md). Save triggers
+  automatic reconcile and surfaces Caddy's reconcile-error string
+  inline when the DB write succeeded but the next `/load` failed.
+- **Host form DNS provider dropdown**: appears under the DNS-01
+  radio when `tls_mode=auto` + `tls_challenge=dns`. Auto-selects
+  the sole enabled provider, offers a native `<select>` for
+  multiples, amber-warns + blocks Save when none are enabled, and
+  tags out-of-sync saved values with a "(not enabled)" label + note
+  instead of silently rewriting.
+- **Docs refresh**:
+  [DNS providers feature page](docs/features/dns-providers.md)
+  now leads with the UI; the API section stays for scripting.
+  [Add a host workflow](docs/workflows/add-host.md) step 3 covers
+  the new **DNS provider** field.
+- **Screenshot placeholders** `settings-dns-providers.png` and
+  `host-form-dns-provider-dropdown.png` added with capture-checklist
+  entries.
+
+### Not changed
+
+No Go code touched. The v1.3.0-alpha API surface remains stable and
+fully supported for scripting (compose bootstrap, CI-driven
+rotation, bulk onboarding).
+
 ## [1.3.0-alpha] - 2026-04-21
 
 First alpha of the DNS providers expansion. Backend-only — Settings

backend/cmd/argos/main.go

@@ -43,7 +43,7 @@ import (
 // The source-tree default tracks the most recent released tag; CI
 // overrides with the exact tag on release builds and with
 // "<tag>-dev-<short-sha>" on main builds between tags.
-var argosVersion = "1.3.0-alpha"
+var argosVersion = "1.3.0-beta"
 
 // argosCommit is baked in at build time via -ldflags "-X main.argosCommit=...".
 var argosCommit = ""

docs/release-notes/v1.3.0-beta.md

@@ -0,0 +1,99 @@
+# v1.3.0-beta — 2026-04-21
+
+UI layer for the DNS providers expansion. Sub-phase B closes the loop
+between the sub-phase A backend (encrypted credentials + inline
+Option 2 pipeline) and the operator — you no longer need curl to
+configure cloudflare or route53.
+
+## What landed
+
+### Settings → DNS providers
+
+New section on the existing Settings page. Cards grid, one per
+supported provider (Cloudflare, Route 53). Each card renders:
+
+- **Enabled** toggle.
+- **Configured / Not configured** badge so you see at a glance which
+  providers have credentials stored.
+- One input per credential field from the catalogue (1 field for
+  Cloudflare / Hetzner-style providers; 2-3 for Route 53 / Porkbun;
+  more for OVH / acmedns in later sub-phases).
+- Secret fields use `type=password` + the `__UNCHANGED__` sentinel
+  on already-configured providers: the input shows a masked
+  placeholder with an **Edit** button, so you can rotate one field
+  without retyping others.
+- **How to get credentials →** link to the provider's docs.
+- Trust-boundary callout above the grid: credentials are decrypted
+  in the panel and streamed plaintext through Caddy's admin API
+  (which is never published outside the `argos_net` Docker network).
+
+Saving triggers an automatic reconcile. A post-save banner inside
+the card surfaces the exact Caddy error when reconcile rejects the
+new value (e.g. Cloudflare's syntactic "API token appears invalid"
+check) while the DB write itself succeeded — you see both states
+explicitly.
+
+![Settings DNS providers](../screenshots/settings-dns-providers.png)
+
+### Host form DNS provider dropdown
+
+The TLS challenge radio group in the host form gains a DNS provider
+selector, visible only when **DNS-01** is picked. Three states:
+
+- **One enabled** → auto-selected with a caption "Using
+  <provider> from Settings" and a deep link.
+- **Multiple enabled** → native `<select>` with only the enabled +
+  configured providers. Default = the host's currently-saved value
+  or `cloudflare`.
+- **None enabled** → amber warning with a deep link to Settings; the
+  form blocks Save client-side (the backend would reject too with a
+  400, but catching here keeps the UX clean).
+
+Editing a host whose saved provider was disabled AFTER creation
+shows a "(not enabled)" option in the dropdown with a yellow note,
+so the drift is visible rather than silently rewritten.
+
+![Host form DNS provider dropdown](../screenshots/host-form-dns-provider-dropdown.png)
+
+### Docs
+
+- [DNS providers](../features/dns-providers.md) rewritten to lead
+  with the UI flow; the API surface stays documented for scripting
+  and automation.
+- [Add a host](../workflows/add-host.md) step 3 covers the new
+  **DNS provider** field, including the three picker states.
+- Screenshot placeholders `settings-dns-providers.png` and
+  `host-form-dns-provider-dropdown.png` added to
+  `docs/screenshots/README.md` with the capture checklist entry.
+
+## No backend changes
+
+Zero Go code changes since v1.3.0-alpha. The API surface
+(`GET /api/dns-providers`, `GET /api/dns-providers/{name}`,
+`PUT /api/dns-providers/{name}`) and the host validation path
+(`validateDNSProvider`) are unchanged. The UI talks to the
+endpoints that already shipped.
+
+## Migration
+
+```bash
+cd argos-edge
+git pull
+docker compose build
+docker compose up -d
+```
+
+No migrations run. No env-var changes. If you configured credentials
+via curl during the alpha, the Settings page will show them as
+**Configured** on first visit.
+
+## Related
+
+- [DNS providers](../features/dns-providers.md) — feature reference
+  with the UI + API paths side by side.
+- [v1.3.0-alpha release notes](v1.3.0-alpha.md) — backend + Option 2
+  pipeline story.
+- [dns-providers-analysis.md](https://github.com/cmos486/argos-edge/blob/main/docs/internals/dns-providers-analysis.md)
+  — scoping doc with the Tier 1 / Tier 2 split; sub-phase C expands
+  the catalogue with gandi / desec / ovh / duckdns / porkbun /
+  hetzner / digitalocean / acmedns.

frontend/package.json

@@ -1,7 +1,7 @@
 {
   "name": "argos-edge-frontend",
   "private": true,
-  "version": "1.3.0-alpha",
+  "version": "1.3.0-beta",
   "type": "module",
   "scripts": {
     "dev": "vite",

mkdocs.yml

@@ -151,6 +151,7 @@ nav:
       - reference/cli.md
       - reference/database-schema.md
   - Release notes:
+      - v1.3.0-beta: release-notes/v1.3.0-beta.md
       - v1.3.0-alpha: release-notes/v1.3.0-alpha.md
       - v1.2.0: release-notes/v1.2.0.md
       - v1.1.1: release-notes/v1.1.1.md