Hivekeep v1.6.0

What's Changed

Features

• add native SearXNG search provider
• add openai-compatible embedding capability
• add generic openai-compatible LLM provider
• close the iframe cookie hole: opaque origin + scoped token (layer 2)
• rich shared footer + privacy-friendly Plausible analytics
• sandbox iframes to their own namespace (origin guard, layer 1)
• ctx.platform: background access to platform resources
• ctx.on: react to platform events (SSE bus tap)
• platform API gateway: manage any resource from a mini-app
• /tour: a 39-screenshot guided tour from a seeded showcase instance

Fixes

• pick a valid model for wizard config generation
• CORS on SDK asset routes + CSP includes publicUrl (layer-2 prod fix)
• validate profile before signup, share the rules (#18)
• theme on iframe load + guard localStorage at opaque origin

Refactor

• self-hosted Umami analytics instead of Plausible

Documentation

• document the openai-compatible provider (LLM + embeddings)
• localStorage is in-session only at opaque origin; use Hivekeep.storage
• translate api.md from French to English
• add a screenshot gallery and inline product shots

Other changes

• chore(release): v1.6.0
• Reapply "Merge branch 'feat/mini-app-iframe-token': harden mini-app iframe (opaque origin + scoped token)"
• Revert "Merge branch 'feat/mini-app-iframe-token': harden mini-app iframe (opaque origin + scoped token)"

---

Installation

One-liner (Linux/macOS):

curl -fsSL https://raw.githubusercontent.com/MarlBurroW/hivekeep/main/install.sh | bash

Docker (amd64 + arm64):

docker run -d \
  --name hivekeep \
  -p 3000:3000 \
  -v hivekeep-data:/app/data \
  ghcr.io/marlburrow/hivekeep:latest

For all installation methods and an interactive configurator, see the install guide.