v1.16.0 — private review and automatic history

HTML Drop 1.16.0 adds private remote review to edit mode and includes document history on every publish.

• Review safe linked images, CSS and downloads next to your HTML, with dependency reload.
• Use expiring edit share links behind your private HTTPS proxy. Reviewers can comment and request changes; local agent controls stay separate.
• Track layout findings through queued, ignored and verified resolution states at the current page revision and viewport.
• Browse previous published versions and compare added or removed text, independently of whether feedback is enabled. Private revisions retain their original encryption.
• Receive live comment and reply updates without losing unsent drafts.
• Preserve local staging after failed deployment and block former public Worker snapshots when switching to private publishing.

Publishing still requires one self-contained HTML file; linked local assets are checked before upload. Existing history begins with publishes made using this release. Excalidraw, comments attached to shapes and MCP are planned together for milestone 2.

Install: npm install -g @yeefeiooi/htmldrop@1.16.0

Validation: 39 feature tests, 3 encryption checks and 10 access-token checks passed, with independent review and Node 20/22 CI on the merged commit. Production Worker and a fresh synthetic Surge site passed live history, browser unlock and public-to-private access checks. The private HTTPS reviewer flow passed verified TLS, authentication, live replies and dependency reload from the host; a reviewer Mac was not part of this verification.

Delivery: PR #4, merged-commit CI.