v0.3.1
July 14, 2026Device-level authentication security
- Added per-device access and refresh session families with credential rotation, replay isolation, and selective revocation.
- Added active-session visibility and controls for users and administrators, plus server-side version checks for admin and guest sessions.
- Hardened registration by separating email verification from password setup, preventing unverified-account takeover, and moving GitHub OAuth state to server-managed one-time credentials.
Refined AI workbench
- Finalized the responsive full-canvas Playground for desktop and mobile with provider-defined UI metadata and samples.
- Unified generation history with the asset library and improved empty, unavailable, progress, and result states across light and dark themes.
- Improved Admin user session management, modal hierarchy, responsive layout, multilingual copy, D1 migrations, and auth/provider regression coverage.
