Changelog

0.1.1

Changes

• Uploads are private by default (isPublic: false in API, DB default, and inserts). Mark assets public when you need unauthenticated URLs. Demo seed still marks sample assets public.
• CMS_REQUIRE_API_KEY defaults to true.
• AI flags default to false; enabling drafts or the agent requires OPENROUTER_API_KEY.
• Server env validated with @t3-oss/env-core (including production startup checks).
• Migration 0008 for the files public-access default.
• Docs site (getting started, architecture, deploy, operations).

Upgrade

1. Bump to 0.1.1 and run migrations (includes 0008).
2. Mark assets public if you depended on public-by-default uploads.
3. Set CMS_REQUIRE_API_KEY=false only if you intentionally want an open content API.
4. For AI drafts/agent: enable the flags and set OPENROUTER_API_KEY.

---

0.1.0

First tagged line: container images, collections/drafts/assets, Better Auth, optional AI, and Compose layouts (plus an optional TLS-termination example).