Changelog
Recent releases, design updates, and what we're working on next.
Admins can now permanently remove user accounts from /account/admin/users. Two-step confirmation: type the username to match before deletion. Cascades through every story, comment, reaction and upload that user touched.
Tap the eye in any password input to peek at what you typed; tap again to hide. Animated icon morph and a soft press feedback.
Forgot password is now a real flow. Enter your email, click the link in your inbox, set a new one. Doesn't leak whether the address is registered.
Sign-in, signup, reset, comments, story posts and search are now throttled per IP and per user — a long way against credential stuffing and spam. Also: the OAuth callback's `next` parameter is now strictly validated so a phishing link can't bounce you off-site.
Posted something with a typo? Authors can now edit their own stories — title, body, category, tags, media. Edits don't reset the published date.
Stories now track unique views. One per reader, per story — refresh doesn't pad the number. Shows on every feed card.
Every new story will get a small AI-generated card: emotion, drama, viral potential, and a one-line summary that replaces the boilerplate preview. Schema's already there; wiring is up next.