/ changelog

What just shipped.

Release notes from the operator workspace. Newest first.

  1. shippedv1.6.0

    Account self-serve, MFA, and audit log

    • TOTP MFA enrollment in /account/security
    • GDPR data export + 30-day soft delete in /account/data
    • Admin audit log with CSV export at /admin/audit
    • Command palette (⌘K) for fast navigation
  2. securityv1.5.0

    CSP Report-Only + hardened headers

    • Stripe-safe Content-Security-Policy in report-only mode
    • Permissions-Policy and Strict-Transport-Security on https
    • CSP violation endpoint at /api/public/csp-report
  3. shippedv1.4.0

    Password meter + paywall events

    • Live password strength meter on signup and reset
    • Paywall event tracking + admin analytics
    • Subscription pause / resume from billing portal
  4. shippedv1.3.0

    Assistant streaming + CSV exports

    • Reusable useCsvExport hook across admin views
    • Improved chat token accounting