v0.1.1 β2026-03-07
Platform Expansion, Security, and UX Polish
Expanded the MVP with campaign tooling, admin controls, stronger account security, and a full visual/navigation pass across core flows.
- Added sign-in and sign-up rate limiting.
- Reduced auth account-enumeration risk with generic failure paths.
- Added strict server-side validation and numeric bounds for character actions.
- Added secure PostgreSQL SSL mode compatibility handling to remove connection-mode warnings.
- Introduced account tiers (Base, Premium Tier 1/2, Admin) with tier pills in signed-in UI.
- Enforced admin 2FA requirement and added TOTP setup flow with QR + raw secret support.
- Added in-settings password reset flow and forgot-password guidance on sign-in.
- Added 2FA-gated admin panel unlock with global controls (disable sign-ups, admin-only site mode, admin password resets).
- Added profile settings for display name and profile image URL (HTTPS, limited to imgur/gravatar/nfn.lol).
- Added dark mode as default, plus improved light/dark consistency across auth, characters, and shared surfaces.
- Added dedicated themed sign-out page and updated auth routes to use custom sign-in/sign-out screens.
- Expanded character tools with d4, d8, d10, d100, and coin flip support.
- Upgraded HP controls to amount-based add/subtract plus kill and fully heal actions.
- Added character ownership deletion flow and revalidation for linked pages.
- Added tier-based character slot limits (Base 20, Premium Tier 1 100, Premium Tier 2/Admin unlimited) with server-side enforcement.
- Added slot usage displays (for example 2/20) on character and join flows.
- Launched My Realities campaign feature with membership controls, invite links, and per-reality character assignment.
- Implemented reality visibility defaults and Reality Master access patterns for private character sheet data.
- Added home dashboard enhancements: display-name greeting, tier pill, character/reality counts, and quick-open last character/reality actions.
- Introduced top navigation with Play Eradusk mega-menu, Profile dropdown consolidation, and contextual Admin access.
- Added More Tools and external resources with third-party affiliation confirmation prompts.
- Added About page profile attribution links and release metadata pages (changelog + version footer).
- Added favicon and refined menu spacing, section typography, and dropdown contrast/fit behavior.