We deleted packages/api. Versioning is not an addon. It belongs next to Get / Group / RegisterAPI.
routing.Version now lives in the kernel: /api/{version}, X-API-Version, FromRequest, RequireVersion. contracts.App did not grow. No Auth(). No API(). Still From(app).
Auth is one package, two surfaces. make:auth HTML and JSON now match: login, register, verify, resend, GET /user, 2FA. Email confirmation is a single flag, default off AUTH_MUST_VERIFY_EMAIL=true when you want the gate.
Fewer packages. Sharper primitives. Same frozen ABI.