Changelog

January 13, 2026

• •Added CSRF protection for all form submissions
• •Implemented secure password reset flow with email verification
• •Added session timeout with 30-minute auto-logout
• •Improved device activation with race condition handling
• •Added comprehensive rate limiting (30/min read, 10/min write)
• •Created settings API for profile management

January 12, 2026

• •Added security headers (CSP, X-Frame-Options, HSTS)
• •Implemented input validation with XSS prevention
• •Added rate limiting to all API endpoints
• •Enhanced webhook signature verification

January 10, 2026

• •Complete web dashboard with dark theme
• •LemonSqueezy payment integration (Monthly/Yearly/Lifetime)
• •Device license management with activation limits
• •OAuth authentication (GitHub, Google)
• •Real-time device status monitoring
• •Subscription billing portal

January 8, 2026

• •App-agnostic screenshot watcher
• •MCP server integration for Claude
• •Automated state tracking daemon
• •License validation system

January 5, 2026

• •Commercial package with CLI tools
• •ARM64 macOS binary distribution
• •Launchd daemon support
• •Supabase backend integration