Skip to main content
Back to Home

CHANGELOG

Track the evolution of Boottify — every feature, fix, and improvement since day one

3.2.0

Latest Version

20

Releases

275

Features Added

35

Bugs Fixed

52

Improvements

Nov 2024

Development Started

v3.2.0

LATESTFebruary 21, 2026

User Invite, Owner Role & Infrastructure Expansion

New Features(21)

  • Admin user invite page — send email invitations or generate temporary passwords for new users
  • OWNER role with unrestricted platform control — manage, elevate, and delete any user including admins
  • Kubernetes CronJobs management — schedule, view, and manage recurring workloads
  • Kubernetes DaemonSets management — deploy and monitor node-level workloads
  • Kubernetes StatefulSets management — manage stateful workloads with persistent storage
  • Kubernetes Jobs management — run and track one-off batch workloads
  • Kubernetes Network Policies — define and enforce pod-to-pod network access rules
  • Kubernetes Resource Quotas — set namespace-level CPU, memory, and object limits
  • Kubernetes ConfigMaps management — create and edit configuration data for pods
  • Kubernetes YAML editor — apply raw YAML manifests directly to the cluster
  • Server backup manager with encryption — create, schedule, and restore encrypted backups with S3 upload
  • Server cron job manager — view, create, and manage system-level cron schedules
  • Server database manager — MySQL database creation, backup, and credential management
  • Server Nginx manager — edit configurations, reload server, manage virtual hosts
  • Server Redis manager — monitor memory usage, key counts, and configuration
  • Server package manager — install, update, and remove system packages via apt
  • Server certificate manager — view SSL certificates with expiration alerts
  • Server performance monitoring — CPU, memory, disk, and network load graphs over time
  • S3 object storage configuration and connectivity testing
  • Deleted apps recovery — 30-day grace period with restore option before permanent deletion
  • Social media links configuration in admin settings

Improvements

  • Workflow visualization data regeneration now runs after every code change
  • Standardized loading skeletons across all admin and client pages
  • Infrastructure overview page consolidating server, cluster, and service status

Bug Fixes

  • Fixed invite link routing — /admin/users/invite no longer falls through to dynamic [id] route
  • Fixed Docker image names to conform to OCI lowercase specification

v3.1.0

February 14, 2026

Blog Engine & Content Platform

New Features(19)

  • Full blog system with posts, categories, tags, and comment moderation
  • TipTap rich-text editor with toolbar — bold, italic, headings, lists, blockquotes, and code blocks
  • Image upload dialog for embedding images into blog posts
  • YouTube embed dialog for inline video content
  • GitHub import dialog — pull code snippets and content directly from repositories
  • Blog post scheduling — set publish dates in the future with automatic release
  • Blog comment moderation panel — approve, reject, and flag spam comments
  • Blog tag merge tool — consolidate duplicate tags without losing associations
  • Blog analytics — per-post view counts, engagement rates, and comment activity
  • Blog likes and bookmarks — readers can like and save articles
  • Reading progress indicator on blog post pages
  • Auto-generated table of contents from article headings
  • Related posts recommendation engine based on tags and categories
  • Social share buttons on blog posts (Twitter, LinkedIn, Facebook)
  • Blog search with full-text filtering across titles, content, and tags
  • Blog author pages showing posts by each contributor
  • Recent blog posts carousel on the landing page
  • Blog post featured image with auto-generated cyber-industrial style thumbnails
  • Admin legal pages editor — manage Terms of Service and Privacy Policy content from the dashboard

Improvements

  • Replaced ~3,796 hardcoded color values across 148 files with CSS design tokens
  • Seed scripts for blog content and help articles

Bug Fixes

  • Fixed TipTap SSR hydration mismatches in editor components
  • Fixed blog post slug generation with special characters

v3.0.0

February 10, 2026

WebAuthn Biometrics & Security Hardening

New Features(15)

  • WebAuthn biometric authentication — Touch ID, Face ID, and Windows Hello support
  • Passwordless login with discoverable passkey credentials (resident keys)
  • Multi-device credential management — register and manage biometric devices across platforms
  • Smart device nicknames — auto-detected names like "Windows Hello", "Touch ID (Mac)", "Face ID (iPhone)"
  • Device fingerprinting — SHA-256 fingerprint from browser, OS, and language for cross-device tracking
  • Device trust management — mark devices as trusted, view device activity, and unlink devices
  • Session-to-device binding — every session linked to the device that created it
  • Credential backup status tracking — shows if passkeys are synced to cloud
  • Biometrics can optionally skip 2FA verification for faster login
  • Device management API — view all registered devices with browser, OS, and last-seen metadata
  • User preferences API — session timeout and display settings persisted per user
  • 5-tier rate limiting across all 23 authentication API routes
  • Rate limit response headers — X-RateLimit-Remaining, X-RateLimit-Reset, Retry-After
  • SSH hardening — key-only authentication, fail2ban with permanent bans, GeoIP blocking for 54 countries
  • UFW firewall restricted to authorized IP addresses only

Improvements

  • Console.log replaced with structured logger across 10 infrastructure files (~147 statements)
  • Composite database indexes on 5 high-traffic query patterns
  • Revalidation caching on 7 high-traffic API routes
  • SkipLink and ARIA landmarks added across all layouts for screen reader support
  • 24 TODO/FIXME comments resolved across the codebase

Bug Fixes

  • Fixed OAuth callback collision with 2FA token verification
  • Fixed WebAuthn RP ID mismatch when authenticating across subdomains

Breaking Changes

  • WebAuthn RP ID migrated from control.boottify.com to boottify.com — existing credentials use dual-RP verification
  • proxy.ts replaces middleware.ts for Next.js 16 compatibility

v2.8.0

January 27, 2026

Session Management & Profile Enhancements

New Features(8)

  • Active sessions management — view all sessions across devices with browser, OS, IP, and location
  • Remote session revocation — sign out any session from the security settings panel
  • Session idle timeout with progressive warnings at 2 minutes and 1 minute before auto-logout
  • Heartbeat endpoint to extend active sessions without page reload
  • User avatar display in the sidebar navigation
  • Avatar upload with image cropping in profile settings
  • Notification preferences — control email notifications per category (billing, security, marketing)
  • Session activity tracking — monitors mouse, keyboard, touch, and scroll events with 1-second throttle

Improvements

  • Badge component refactored to semantic <span> element for valid nested HTML
  • Hydration compatibility improvements across all client components
  • Mobile sidebar responsiveness improved with touch-safe interactions

Bug Fixes

  • Fixed hydration error with Badge component when rendered inside buttons
  • Fixed View Sessions button not opening the sessions dialog
  • Fixed session cookie not persisting across subdomain navigation

v2.5.0

January 15, 2026

Control Center 2.0 — Full Platform Redesign

New Features(23)

  • Complete cyber-industrial design system — dark high-contrast theme with #d2f800 brand accent
  • Multi-domain architecture — boottify.com for marketing, control.boottify.com for dashboard
  • Redesigned landing page with hero section, feature grid, pricing cards, and blog carousel
  • Interactive tech stack page with architecture layers, role hierarchy pyramid, and animated terminal
  • Contact page with topic selector, location cards, and enterprise inquiry form
  • About page with company story, values section, and hiring CTA
  • Changelog page with version history, stats, and categorized change types
  • Careers page with department filters and open position cards
  • Responsive sidebar navigation with role-based menu visibility
  • PageHeader component with breadcrumbs across all admin and client pages
  • ResponsiveTable component — mobile-friendly data tables with card view on small screens
  • BottomSheet component for mobile-optimized action menus and modals
  • ResponsiveModal that switches between dialog (desktop) and bottom sheet (mobile)
  • ResponsiveTabs that collapse into a dropdown on mobile viewports
  • DataPageShell component for consistent data page layouts with search, filters, and pagination
  • EmptyState component for zero-data pages with illustrations and CTAs
  • StatusBadge, RoleBadge, PriorityBadge, and CategoryBadge components
  • ActionMenu and ContextMenu components for row-level actions
  • ConfirmDialog component for destructive action confirmation
  • SearchInput with built-in debouncing
  • TouchSafeClick wrapper for reliable mobile touch interactions
  • Cookie consent provider with preference persistence
  • Scroll-reveal animations on landing page sections

Improvements

  • Every button uses squared corners (rounded-[2px]) per design system
  • All headings are uppercase, extra-bold (font-black), tight tracking
  • Cards have subtle border-white/10 borders with #d2f800 hover accents
  • Background grid overlay pattern at 5% opacity for visual depth
  • Gradient section backgrounds from #080c14 to #121620
  • Monospace font for labels, counters, and code snippets
  • cn() utility for class name merging (clsx + tailwind-merge)

Breaking Changes

  • Authentication routes moved from boottify.com to control.boottify.com
  • Old URL paths without /admin or /client prefix no longer resolve

v2.0.0

December 15, 2025

Kubernetes Orchestration & App Deployment Platform

New Features(18)

  • Full Kubernetes cluster management dashboard — pods, deployments, namespaces, services, and nodes
  • Pod management — view status, resource usage, restart, and stream live container logs
  • Deployment management — create, scale replicas, trigger rolling updates, and rollback to previous versions
  • Namespace management — create isolated environments with resource quotas
  • Kubernetes Services — configure ClusterIP, NodePort, and LoadBalancer service types
  • Ingress management — HTTP/HTTPS routing rules with TLS certificate binding
  • Kubernetes Secrets management — securely store and rotate credentials and API keys
  • Kubernetes Autoscaling — Horizontal Pod Autoscaler (HPA) configuration based on CPU/memory metrics
  • Kubernetes Storage — manage PersistentVolumes, PersistentVolumeClaims, and StorageClasses
  • Kubernetes Events viewer — real-time cluster events with resource filtering
  • Kubernetes Node monitoring — capacity, allocatable resources, conditions, and system info
  • 10-step automated deployment pipeline — domain verification, DNS, database, storage, config, deploy, Nginx, SSL, health check, email provisioning
  • Deployment rollback with automatic cleanup of failed deployments
  • Docker container lifecycle management — create, start, stop, restart, remove, and inspect containers
  • Docker image management — list, pull, and cleanup unused images
  • Docker network management — create networks and attach containers
  • Real-time deployment status via WebSocket streaming
  • App sleep/wake for cost optimization — scale to zero when inactive

Improvements

  • Deployment events now emit real-time status updates at each pipeline step
  • Pod log viewer supports multi-container pods with container selector
  • Kubernetes client auto-detects kubeconfig vs in-cluster configuration

Bug Fixes

  • Fixed K8s namespace naming to use app-${fullAppId} pattern consistently
  • Fixed Traefik global HTTP-to-HTTPS redirect blocking ACME HTTP-01 challenges

Breaking Changes

  • K8s namespace naming changed from boottify-${shortId} to app-${fullAppId}

v1.8.0

November 20, 2025

Email Marketing & Campaign Platform

New Features(14)

  • Email marketing dashboard with campaign, template, list, and subscriber metrics
  • Campaign builder — create campaigns with recipient lists, templates, subject lines, and scheduling
  • Campaign analytics — send/delivery counts, open rates, click-through rates, bounce rates, and unsubscribe tracking
  • Email template editor — WYSIWYG editor with desktop/mobile preview and raw HTML source view
  • Subscriber list management — create lists, add/remove subscribers, bulk import/export
  • Double opt-in support with customizable welcome emails
  • Campaign batch sending with per-minute rate limiting to avoid spam filters
  • Click and open tracking pixels embedded in campaign emails
  • IMAP email client — connect external email accounts with full inbox, compose, and folder management
  • Email account switcher for managing multiple connected mailboxes
  • Email compose modal with to/cc/bcc fields, formatting, and attachments
  • Email folder navigation with unread counts and label management
  • Email search across all connected accounts
  • Admin email mailbox provisioning — create mailboxes for deployed applications

Improvements

  • IMAP client split into connection, commands, and parser modules for maintainability
  • Campaign sender split into builder, executor, and tracking modules

Bug Fixes

  • Fixed IMAP connection timeout on large mailboxes
  • Fixed campaign send failing silently when template contained invalid HTML

v1.6.0

October 25, 2025

Webhooks, Job Postings & Help Center

New Features(11)

  • Webhook management — create webhooks with event type filtering, custom headers, and retry logic
  • Webhook delivery logs — full request/response history with status codes and timing
  • Webhook testing — send mock payloads to verify endpoint configuration
  • Job postings system — create and manage career listings with department, location, and salary info
  • Job posting analytics — track views and application counts per listing
  • Help center with searchable knowledge base and category-organized articles
  • Help article editor with markdown support and category assignment
  • Help categories management — organize articles for intuitive navigation
  • Support ticket system — customers can submit tickets with priority levels
  • Ticket detail view with conversation history and status updates (Open, In Progress, Resolved, Closed)
  • Feature flags system — toggle features on/off with category grouping for A/B testing and gradual rollouts

Improvements

  • Shared job posting form for both create and edit flows (~520 lines saved)
  • Webhook retry logic with exponential backoff

Bug Fixes

  • Fixed webhook event filtering not applying to nested event types
  • Fixed help article search not indexing newly created content

v1.4.0

September 28, 2025

Marketplace, Templates & App Store

New Features(8)

  • App marketplace — searchable, filterable catalog of pre-built application templates
  • App template detail pages with description, screenshots, tags, requirements, and deploy button
  • Admin app template management — create templates with GitHub repository, icon, tags, and category
  • One-click deploy from marketplace — select template, configure name/domain, choose plan, and deploy
  • Template deployment tracking — view how many times each template has been deployed
  • Featured templates with promoted placement in the marketplace
  • Category and tag filtering in the marketplace with search
  • Marketplace admin curation — approve, reject, and feature community templates

Improvements

  • Template cards show deployment count and rating
  • Marketplace search returns results across title, description, and tags

v1.3.0

September 5, 2025

Status Page & Real-Time Monitoring

New Features(10)

  • Public status page showing real-time health of all platform services
  • Service health grid — operational, degraded, and outage states for Database, API, Auth, CDN, Redis, and WebSocket
  • 90-day uptime chart with daily breakdown and incident markers
  • Performance metrics panel — response time, requests per minute, and error rate graphs
  • Real-time system metrics — CPU, memory, disk, and network usage with WebSocket push (500ms) and polling fallback (2s)
  • Incident timeline — active and resolved incidents with timestamped status updates
  • Incident notification subscription — email alerts when services degrade
  • Prometheus-compatible /api/metrics endpoint for external monitoring tools
  • Domain status page — shows app provisioning state, suspension notices, DNS instructions, and termination countdowns
  • Health route with degraded mode — returns 200 when Redis is down, 503 only when database is unreachable

Improvements

  • Status page auto-refreshes without full page reload
  • Metrics history cached for 60 seconds to reduce database load

Bug Fixes

  • Fixed WebSocket reconnection loop when server restarts
  • Fixed uptime calculation not accounting for partial-day incidents

v1.2.0

August 10, 2025

Domain Management & SSL Automation

New Features(10)

  • Custom domain management — add, verify, and configure domains for deployed applications
  • DNS verification via TXT records for domain ownership proof
  • Automatic SSL certificate provisioning via DNS-01 ACME challenge with Hetzner DNS API
  • SSL certificate monitoring dashboard — view all certificates with expiration dates and renewal status
  • Nginx reverse proxy auto-configuration for custom domains pointing to Kubernetes services
  • Subdomain availability checker — validates and reserves app subdomains
  • DNS record sync service — keeps Hetzner DNS records in sync with application configuration
  • Certbot integration for HTTP-01 challenges on Kubernetes app custom domains
  • SSL auto-renewal with cron-based scheduling
  • Certificate import for externally-issued SSL certificates

Improvements

  • SSL certificates stored at /home/boottify/certs/ for reliable access permissions
  • ACME account key persisted in environment variables for consistent certificate issuance

Bug Fixes

  • Fixed DNS-01 challenge TXT record cleanup after certificate issuance
  • Fixed Nginx config reload failing when syntax validation errors are present

v1.1.0

July 18, 2025

Server Administration Panel

New Features(18)

  • Server overview dashboard — system status, CPU/memory/disk usage, key services, and uptime
  • Process manager — real-time process list with CPU/memory usage, process tree view, and signal controls (kill, pause, resume)
  • Systemd service manager — start, stop, restart, enable, and disable services with status monitoring
  • Systemd timer viewer — scheduled timer jobs with next-run countdown
  • Network interfaces panel — IP addresses, MTU settings, and link status per interface
  • Active network connections table — TCP/UDP connections with associated process info
  • Listening ports overview — all open ports with service identification
  • IP routing table viewer and editor
  • ARP cache table — MAC address resolution and neighbor discovery
  • Firewall management — UFW rule creation, port blocking, and IP allow/deny lists
  • Storage overview — mounted filesystems, usage percentages, and inode information
  • Block devices panel — partitions, mount status, and device hierarchy
  • Disk I/O statistics — read/write rates and operations per device
  • Security dashboard — fail2ban jails, SSH session monitoring, and failed login history
  • Server logs viewer with severity filtering and search
  • Platform audit logs — comprehensive activity trail with user, action, resource, and timestamp filtering
  • Log settings — configure retention policies and log level thresholds
  • Server update manager — view available system updates and apply security patches

Improvements

  • Process detail modal shows full command line, environment, and resource limits
  • Service detail panel shows unit file, dependencies, and recent journal entries

Bug Fixes

  • Fixed process tree not rendering child processes correctly on multi-core systems
  • Fixed firewall rule ordering not being preserved after reload

v1.0.0

June 15, 2025

General Availability — Billing, Subscriptions & Checkout

New Features(17)

  • Stripe payment integration with checkout sessions and webhook handling
  • Subscription management — create, pause, cancel, and resume recurring subscriptions
  • Invoice generation and tracking with line items, tax calculations, and payment status
  • Refund processing — submit, approve, and track refund requests with audit trail
  • Admin billing dashboard with MRR calculation, churn rate, and revenue metrics
  • Subscription plans with monthly/yearly billing periods, feature lists, and pricing tiers
  • Shopping cart with item management, quantity updates, and pricing breakdown
  • Checkout flow with Stripe payment form, cart review, and order confirmation
  • Client billing portal — view invoices, payment history, and subscription details
  • Tax rate management — configure tax rates per region for invoice calculations
  • Payment method storage for recurring billing
  • Billing email notifications — invoice generated, payment success/failure, subscription changes, refund updates
  • Deploy wizard — multi-step flow: template selection, app naming, domain setup, plan choice, and payment
  • Deploy success/cancel pages with auto-close popup support for embedded checkout
  • Usage tracking — monitor API calls, storage, bandwidth, deployments, and build minutes per billing period
  • Usage aggregation for plan limit enforcement with overage alerts
  • Plan upgrade flow — compare plans, select billing period, and confirm with prorated pricing

Improvements

  • Stripe webhook handlers for invoice and subscription lifecycle events
  • Payment confirmation emails sent asynchronously to avoid blocking checkout

Bug Fixes

  • Fixed Stripe webhook signature verification failing on certain payload formats
  • Fixed subscription status not updating after successful payment retry

v0.9.0

May 15, 2025

GitHub Integration & CI/CD Pipeline

New Features(11)

  • GitHub App integration — connect repositories with OAuth and installation-based access
  • GitHub repository browser — list, search, and select repositories for deployment
  • GitHub Actions workflow management — trigger, monitor, and view workflow runs
  • Deployment workflow file generation — auto-create GitHub Actions deploy pipelines for connected repos
  • Real-time deployment step webhooks — progress updates at each pipeline stage
  • Admin GitHub connection panel — manage installations, test connectivity, and view access tokens
  • Repository commit history viewer — browse recent commits per connected repo
  • Figma integration — connect design files for design-to-code sync
  • Figma frame viewer with design token extraction
  • Side-by-side Figma vs implementation comparison view
  • Figma sync status tracking with manual refresh

Improvements

  • Resilient npm install with fallback strategies for Docker builds
  • GitHub webhook signature verification for secure event handling

Bug Fixes

  • Fixed GitHub OAuth state parameter not being validated on callback
  • Fixed Docker build failing when package-lock.json is out of sync

v0.7.0

April 10, 2025

Application Management & Client Portal

New Features(12)

  • Client application dashboard — grid/card view of deployed apps with status, plan, and last activity
  • Application detail page — deployment status, subscription info, plan features, usage metrics, and danger zone
  • Environment variable management — add, edit, delete env vars with secret masking and visibility toggle
  • Application logs viewer — real-time logs filtered by type (deployment, build, app, error) with auto-refresh
  • Deployment history — view past deployments with status, duration, and trigger info
  • App feature breakdown by category — applications, storage, API, and bandwidth with usage limits
  • Application usage metrics — API calls, storage, bandwidth with percentage of plan limit and alerts
  • Admin applications table — view all platform applications with status filtering, search, and management actions
  • App cleanup utility — identify and remove orphaned or stale applications
  • Multi-tenant app hosting — serve deployed apps at *.boottify.com subdomains with isolated routing
  • Tenant database provisioning — per-app MySQL databases with encrypted credentials
  • Tenant storage provisioning — isolated file storage paths per application

Improvements

  • Application cards show real-time deployment status indicator
  • Admin applications table supports bulk actions (suspend, delete)

Bug Fixes

  • Fixed env var editor losing unsaved changes on page navigation
  • Fixed application status not reflecting latest deployment state

v0.5.0

March 5, 2025

Order System & Admin Dashboards

New Features(9)

  • Order management system — create, view, and manage customer orders with line items and pricing
  • Order detail page with status timeline, payment tracking, and action buttons (approve, pay, refund, cancel)
  • Order messaging — threaded communication between admin and client on each order
  • Admin dashboard with real-time metrics — total users, applications, orders, and system health widgets
  • Admin analytics page — user/order distribution by role and status, 30-day trend charts
  • Admin services management — create and manage platform add-on services with pricing and feature lists
  • Admin plans management — create subscription plans with pricing, billing periods, and feature configuration
  • Plan duplication — copy existing plans as templates for quick creation
  • Client dashboard — personal overview of active apps, pending orders, recent activity, and quick actions

Improvements

  • Dashboard widgets auto-refresh every 60 seconds
  • Analytics charts support 7-day, 30-day, and 90-day ranges

Bug Fixes

  • Fixed order total calculation not including tax rates
  • Fixed dashboard widget counts showing stale data after mutations

v0.4.0

February 10, 2025

Two-Factor Authentication & OAuth Providers

New Features(14)

  • TOTP-based two-factor authentication — 6-digit codes with 30-second rotation
  • 2FA setup wizard with QR code generation for authenticator apps
  • 10 cryptographically-secure backup codes generated on 2FA activation
  • Backup code regeneration with password verification
  • 2FA verification flow as secondary challenge after password login
  • Method switcher — choose between TOTP code and backup code during verification
  • Google OAuth integration — sign in with Google account
  • GitHub OAuth integration — sign in with GitHub account
  • OAuth account linking — connect social accounts to existing platform accounts
  • OAuth-only accounts — users created via social login without password
  • OAuth first-time signup — automatic account creation on first social login
  • CLI device code authentication — RFC 8628 Device Authorization Grant for command-line login
  • CLI user code approval page — browser-based code confirmation for CLI sessions
  • CLI token exchange — device code exchanged for API token after approval

Improvements

  • 2FA disable requires password verification for safety
  • Failed 2FA attempts tracked in database for security auditing
  • OAuth state parameter validation with PKCE for CSRF protection

Bug Fixes

  • Fixed TOTP verification failing during the 30-second code transition window
  • Fixed OAuth callback not handling email-unverified accounts from GitHub

v0.3.0

January 15, 2025

User Management & Role-Based Access Control

New Features(14)

  • User management panel — view, filter, search, and manage all platform users
  • 5-tier role hierarchy — Owner, Admin, Manager, Developer, and Client with numeric permission levels
  • Role-based dashboard routing — users automatically redirected to their appropriate zone after login
  • Admin zone protection — Owner, Admin, and Manager roles only
  • Client zone protection — all authenticated users with role-appropriate menu visibility
  • User profile editing — update name, email, role, and account status
  • User status management — Active, Inactive, Suspended, and Banned states
  • Account deactivation with session termination — all sessions invalidated when account is disabled
  • Admin user detail page with profile section, role info, and account activity
  • Structured API error handler with error codes, trace IDs, and detailed responses
  • Request tracing with X-Trace-ID headers for end-to-end debugging
  • Structured logging system with DEBUG, INFO, WARN, ERROR, and CRITICAL levels
  • Log deduplication via fingerprinting to prevent log spam
  • Asynchronous log persistence to error_logs database table

Improvements

  • Role hierarchy supports hasMinimumRole() for permission comparison
  • Error responses include actionable details and trace IDs

Bug Fixes

  • Fixed Manager role being able to modify Admin user accounts
  • Fixed role-based redirect loop when user has no matching zone

v0.2.0

December 10, 2024

Authentication System & Session Management

New Features(13)

  • Lucia v3 session-based authentication with database-backed sessions
  • Sign-up flow with email, password validation (8+ chars, uppercase, lowercase, numeric)
  • Sign-in flow with email/password and failed login attempt tracking
  • Password reset flow — forgot password email with cryptographic tokens (1-hour expiry)
  • Password change with current password verification and all-session invalidation
  • Session persistence with 30-day expiration and cross-subdomain cookie sharing
  • Session validation middleware via proxy.ts for protected route enforcement
  • API token authentication — Bearer tokens (btfy_ prefix) with fine-grained scopes (deploy, apps:read/write, env, domains)
  • API token management — generate, list, activate/deactivate, and delete tokens with 25-token limit per user
  • API token usage tracking — last used timestamp, IP address, and usage count
  • Security email notifications — password changed, new login alerts, failed login alerts
  • Security headers — X-Frame-Options, X-Content-Type-Options, CSP, Referrer-Policy, Permissions-Policy
  • HttpOnly secure cookies with SameSite=lax policy

Improvements

  • Bcrypt with 12 salt rounds for secure password storage
  • Email verification tokens use identifier + token pattern for double verification

Bug Fixes

  • Fixed session cookie not being set on first login after signup
  • Fixed password reset tokens being reusable after first use

v0.1.0

November 15, 2024

Project Bootstrap & Foundation

New Features(10)

  • Next.js project initialization with TypeScript, Tailwind CSS, and App Router
  • Prisma ORM setup with MySQL database and 268+ model schema
  • Database models for users, sessions, applications, orders, billing, content, and infrastructure
  • Project directory structure — route groups for auth, control center (admin/client), and public pages
  • Environment configuration with .env support for database, auth, email, DNS, and payment credentials
  • Sitemap generation for SEO
  • Error pages — custom 404 Not Found, 500 Server Error, Global Error, and 403 Forbidden
  • ESLint and TypeScript strict mode configuration
  • Comprehensive documentation system — 21 docs pages covering getting started, platform, API, CLI, integrations, security, billing, and troubleshooting
  • Docs search with client-side full-text filtering across all documentation pages

Improvements

  • Path alias @/ mapped to src/ for clean imports
  • Geist Sans and Geist Mono fonts configured as primary typography

Change Types

New Features
Improvements
Bug Fixes
Breaking Changes