/ changelog
What just shipped.
Release notes from the operator workspace. Newest first.
- shippedv1.6.0
Account self-serve, MFA, and audit log
- →TOTP MFA enrollment in /account/security
- →GDPR data export + 30-day soft delete in /account/data
- →Admin audit log with CSV export at /admin/audit
- →Command palette (⌘K) for fast navigation
- securityv1.5.0
CSP Report-Only + hardened headers
- →Stripe-safe Content-Security-Policy in report-only mode
- →Permissions-Policy and Strict-Transport-Security on https
- →CSP violation endpoint at /api/public/csp-report
- shippedv1.4.0
Password meter + paywall events
- →Live password strength meter on signup and reset
- →Paywall event tracking + admin analytics
- →Subscription pause / resume from billing portal
- shippedv1.3.0
Assistant streaming + CSV exports
- →Reusable useCsvExport hook across admin views
- →Improved chat token accounting