v0.1.6

Changelog

Features

• 85cb558 feat(analytics): move Insights aggregation to the backend
• abc9a49 feat(analytics): redesign Insights page - date range, global KPI card, mobile carousel
• 969e0de feat(app): tighten the mobile tab bar into a native-feeling four-tab bar
• b3e979f feat(backend): cap shared storage at 1 GiB per user
• 21c1d8a feat(backend): write-freeze, refresh-token cookie, and a gated mock adapter
• cf545a7 feat(dashboard): quick-filter popover, undo toast, drop-anywhere upload, inline rename, recently-viewed, bulk move/share
• 7614425 feat(files): share the layered folder and document tiles with the vault explorer
• a0ce865 feat(load): docker sandbox for k6, never touching Neon or real platforms
• d9095ef feat(marketing): /preview v2, The Vault
• 6b1a0dd feat(marketing): /preview-v2, the storage-first landing
• f08c937 feat(marketing): four standalone landing prototypes under /prototype
• 57141d4 feat(marketing): give every marketing page the homepage's design language
• e490e30 feat(marketing): landing rebuild at /preview, plus the bugs it uncovered
• 1827e80 feat(marketing): make the product-first landing the homepage
• 2f01b23 feat(marketing): rebuild /preview-v2 as a product-first landing
• 17f3ab9 feat(reseal): freeze writes during MASTER_KEY rotation, and test it
• 9402754 feat(ui): add the missing Popover primitive

Bug fixes

• cc05495 fix(analytics): honest 429 messaging, from-scratch range calendar
• dc703cf fix(analytics): raise the per-user analytics rate limit to a realistic ceiling
• eff1411 fix(auth): make web logout actually revoke the refresh cookie
• 5d7ae52 fix(auth): stop persisting the refresh token in localStorage on the web
• 6cc0e23 fix(backend): resolve new-code lint findings surfaced by the 3-branch merge
• 6d8fdc3 fix(backend): restore the Go doc-comment form the de-dash pass broke
• ba1b4c0 fix(backend): satisfy the new-code lint gate on the analytics endpoints
• ee9ac23 fix(ci): deploy the backend from CI again
• 455b1dc fix(ci): repair the neon-watch workflow the de-dash pass invalidated
• d343d6b fix(ci): stop Dependabot desktop builds dying on a secret they cannot have
• 617c5f9 fix(frontend): wire Popover into the date-range control, drop dead exports
• 6c8c080 fix(marketing): place the hero window before first paint
• c0db064 fix(marketing): render the hero window on the server instead of a placeholder
• 631b635 fix(marketing): stop the homepage flashing and replaying its entrance on load
• 5f958ba fix(onboarding): show the welcome screen to everyone who has never seen it
• b0de596 fix(ops): freeze writes around the Neon dump-to-cutover window
• 3773b43 fix(ops): isolate golangci-lint's cache per checkout, not shared globally
• c99803c fix(ops): let Railway deploy, but make a missed deploy visible
• e44d6ef fix(ops): stop pinning pg_dump's major version, always use the newest
• 045555f fix(updater): macOS updates resolved to a 404
• fccce3a fix: gate failures surfaced by the merge

Performance

• 7cb76b9 perf(marketing): render marketing pages without the auth gate

Other changes

• 45af6ef Merge branch 'feat/insights-redesign'
• cd68c87 Merge branch 'main' into feat/landing-v2
• 49ea720 Merge branch 'main' of https://github.com/Wosmos/zcrypt
• 35aa3d7 Merge pull request #18: product-first landing, site-wide design, logout fix, native mobile nav
• 20b3c85 chore(dashboard): consolidate duplicate delete/move confirm dialogs
• 654500b chore(frontend): relocate pre-rebuild file-card/table components out of components/files
• d625efe chore(marketing): drop the remaining unused @gsap/react dependency
• cf75bfa chore(marketing): remove the experimental /preview v1 duplicate from main
• 558191e chore(marketing): remove the stale standalone HTML landing prototypes
• e1c39bb chore(neon): rotation, cutover succeeded: active=divine-hill-82902164, old project parked as standby (dormant, quota refills next month)
• aa2e6cd chore(release): 0.1.6
• 0947704 chore(security): add gitleaks secret scanning, advisory for now
• 56d7d8b merge: feat/testing-hardening — write-freeze, refresh cookie, MASTER_KEY rotation, gitleaks
• 81aa7f6 merge: fix/neon-pg18-client — stop pinning pg_dump's major version
• 0427113 refactor(frontend): drop the em dashes from the app, styles and scripts
• 3b8a721 refactor(go): drop the em dashes from backend and TUI comments
• 2c82c55 refactor(rust): drop the em dashes from core, desktop and the Android activity
• cb732b5 style(analytics): biome format fix on calendar.tsx
• c22034f test(analytics): cover the new hooks/store/lib additions to restore 100%
• b0c2df5 test(backend): cover the commit field on /api/health
• 735d0be test(backend): integration and chaos coverage for the upload pipeline
• 65cc1a1 test(frontend): cover markOnboarded, closing a pre-existing 100% gap
• 014f339 test(frontend): give the 50MB streaming MAC test room to finish
• fd12258 test(store): cover the passphrase remember-pref read when storage throws