server: v0.2.0

0.2.0 (2026-08-03)

⚠ BREAKING CHANGES

• replace path-pattern access with a per-site public/private switch and rename --subdomain to --site

Features

• activate Cloudflare proxy domains (208160f)
• activate direct custom domains (0daeb6d)
• add Buzz Access owner protection (04c37ac)
• add drag-and-drop site upload to the dashboard (d817647)
• add favicon to the app (b7b370f)
• add GitHub OAuth authentication (1aee1c4)
• add passkey authentication, account page, and browser device authorization (c546136)
• add privacy-preserving site analytics (a57e674)
• add registration toggle and GitHub username allowlist (d1f9705)
• add site detail page with file tree, manage/view-live buttons, and design refinements (fdc20ca)
• add SPA support via 200.html fallback (291707e)
• add staged custom domain routing (6be6984)
• add web dashboard with cookie auth, login flow, and XSS-safe rendering (d6f1a39)
• adopt updated reference design system styles (0fc1e2e)
• automate custom domain transitions (b2bb57a)
• collapse custom domain details (1104b47)
• diagnose Cloudflare proxy domains (1b67e0e)
• extract AuthService with GitHubClient protocol for testable auth (e99e604)
• extract SiteStore and deploy helpers with tests, harden zip handling (d017ae6)
• isolate tenant hosts and harden site publication (7b0a2cc)
• manage custom domains from the CLI (6bb3735)
• migrate from Caddy to Traefik v3 and add Coolify support (5429fb4)
• progressive disclosure on site detail page (5be6a2d)
• publish versioned server Docker images (3f61bbd)
• redesign dashboard in gov.uk style (9ced831)
• redesign dashboard UI with warm amber theme, refined typography, and polished interactions (93d5fcd)
• refine account passkey list layout, date formatting, and remove dialog (37df2a6)
• replace path-pattern access with a per-site public/private switch and rename --subdomain to --site (100ccfe)
• share private sites with GitHub readers (7cae90c)
• show google search terms in site analytics (391645c)
• show site views in dashboard (75df7aa)
• simplify custom domain workflow (d448aae)
• support multiple custom domain aliases (3f5fe0f)
• surface a point-directly task when cloudflare is detected but unsupported (0dbbbdd)
• use GitHub OAuth browser login (13bfb69)

Bug Fixes

• accept 65535-entry archives and purge deploy tokens on site delete (b1ef84e)
• add path traversal protection and unify subdomain validation (5132073)
• align Buzz Access UI with Achroma (8f74d06)
• align table cell padding with card header in dashboard (c134cf2)
• balance custom domain spacing (cf66483)
• bundle cloudflare ip ranges inside the package so RANGE_PATH resolves (a6e72bc)
• clarify access visibility states (b27c8cd)
• deploy: stage drops behind an explicit Deploy click (fc059fa)
• harden deploy paths and CLI errors (21d9e67)
• hide active domain verification URLs (1f663bc)
• hide withdrawn domain connection state (73db490)
• improve analytics chart (d3290df)
• improve sparse analytics chart (99642af)
• include landing.html in Docker image (60f162e)
• keep breakdown card spacing intact at column edges (0a53425)
• make coolify wildcard cert config durable (291cdeb)
• make tokens table buttons consistent with sites table style (2f8d523)
• move Coolify compose to repo root (e53c701)
• pack analytics breakdown cards masonry-style (b1699c8)
• polish custom domain summaries (899026c)
• preserve domain transition target after source failure (cac65bb)
• replace Manage button with clickable site name link in dashboard (98a09f0)
• restore domain disclosure affordance (3628a74)
• scan dashboard JavaScript for Tailwind classes (cc7f981)
• simplify domain verification indicator (b9f1e56)
• tolerate unroutable Cloudflare IPv6 edges (c4d108b)
• unify dashboard disclosure signals (df239e1)
• use consistent text-primary color for site name links (b37941d)
• use explicit volume names to preserve data across deploys (2d87ffc)
• use Traefik v3.6 for Docker 29 API compatibility (9f824c2)

Performance Improvements

• skip the database for public sites and run access checks off the event loop (62cd65d)

Documentation

• add public documentation site (523fbc1)
• serve documentation from buzzstatic.dev (b84467d)
• update Coolify instructions with raw compose and SSL details (118b393)