Changelog

0.1.3

Changes

• Admin UI branding (wordmark, accent, stacked forms) and a header theme toggle.
• Collections: items browse, a settings page, and a two-up card grid.
• File library: kind marks plus list/grid cards.
• Isolated local worktrees (worktrunk + helper scripts).
• Dependency audit: patched react-router, mermaid, postcss, tsx, and related transitive overrides. Workspace Sharp now resolves only the reviewed 0.35.3 / libvips 1.3.2 pair.

Known

• @better-auth/oauth-provider stays on 1.6.x. The advisory is patched only on the 1.7 RC line (breaking, needs a schema migration).

Upgrade

1. Bump to 0.1.3 and pull the 0.1.3 images. No new migrations.

---

0.1.2

Changes

• TipTap no longer crashes under React Strict Mode (destroyed editor / immediatelyRender).
• README, licensing, and deploy docs updates.

Upgrade

1. Bump to 0.1.2. No new migrations.

---

0.1.1

Changes

• Uploads are private by default (isPublic: false in API, DB default, and inserts). Mark assets public when you need unauthenticated URLs. Demo seed still marks sample assets public.
• CMS_REQUIRE_API_KEY defaults to true.
• AI flags default to false; enabling drafts or the agent requires OPENROUTER_API_KEY.
• Server env validated with @t3-oss/env-core (including production startup checks).
• Migration 0008 for the files public-access default.
• Docs site (getting started, architecture, deploy, operations).

Upgrade

1. Bump to 0.1.1 and run migrations (includes 0008).
2. Mark assets public if you depended on public-by-default uploads.
3. Set CMS_REQUIRE_API_KEY=false only if you intentionally want an open content API.
4. For AI drafts/agent: enable the flags and set OPENROUTER_API_KEY.

---

0.1.0

First tagged line: container images, collections/drafts/assets, Better Auth, optional AI, and Compose layouts (plus an optional TLS-termination example).