Changelog

fix: incremental changelog builder with atomic writes — append-only, no data loss on crash

standardize advanced tools: max-w-7xl containers, centered titles, consistent back-link SVG

fix: remove coming-soon from Localix, fix changelog (server-side pagination), delete monthly page

fix: NetworkStatusPill — use Cloudflare geo-headers for location, add ip-api.com fallback for ISP

fix: getServerSession argument order (env/cookies swap) + remove Localix coming-soon CTA

localix: update download URL to GitHub Release

localix: released v1.2.0 with download button on page

standardize tool page layout: consistent back links, h1 patterns, containers, bg

Reapply "standardize tool pages border radius, card backgrounds, and button styles" This reverts commit .

Revert "standardize tool pages border radius, card backgrounds, and button styles" This reverts commit .

standardize tool pages border radius, card backgrounds, and button styles

add pagination to changelog (25 commits per page)

remove all open source and github references from localix and software pages

add SmolRefuel to crypto resources on resources page

add VoidMob (anonymity) and Crypton.sh (communication) to resources page

fix localix hero: align left column to top instead of center change items-center to items-start on hero grid so title, logo, and description stay anchored at the top while screenshots on the right load

security audit: fix 23 vulnerabilities across 4 phases Phase 1 (critical): - remove debug backdoor in server-session.ts - reactivate host header validation in middleware.ts - add rate limiting + content-length check to login.ts - replace external QR API with client-side qrcode generation - require TOTP code before disabling 2FA - move encryption key reading from build-time to runtime Phase 2 (high): - generic login error messages to prevent email enumeration - isolate SUPABASE_SERVICE_ROLE_KEY from client-reachable code - store CSP violation reports in KV with logging - dynamic WebAuthn RP ID from request hostname Phase 3 (medium): - SameSite=Strict on all cookies - COEP: credentialless instead of require-corp - deprecate custom TOTP in favor of Supabase MFA - server-only guard on supabase service client - lazy runtime eval of RATE_LIMIT_SALT - WebAuthn attestation: direct mode Phase 4 (low): - SSR-compatible escapeHtml without DOM API - clean sensitive data from console logs

fix login button: replace inline style with tailwind classes to comply with CSP

fix header logo: replace inline style with tailwind class to comply with CSP style-src

move localix logo above text block, tighten vertical spacing

fix xor secret sharing icon: remove extraneous dot in center rectangle

tighten localix hero spacing: remove pt-6, reduce margins for tighter vertical layout

standardize page titles, tool icon containers, and localix layout - Standardize all 16 page h1 titles to consistent format (text-5xl/6xl/7xl, two-line gradient, mb-4, leading-[1.1], font-display) - Fix beacon gradient ('.' -> 'Silent deadman.') - Split pii-sanitizer, operator-channel, pgp-vault, pqc-key-forge, privacy-rights-generator into two-line gradient titles - Enlarge tools icon containers w-14->w-16 (56px->64px) - Center PGP Vault icon via viewBox shift (0 0 -> 0 17) - Enlarge localix icon containers w-[72px]->w-24 (72px->96px) - Move localix title/description to top of page, merge badges into hero

standardize all tool icon sizes across tools page - all 14 icon containers: w-14 h-14 (56px) — Advanced Tools, Everyday Tools, Pseudonym Forge, PII Sanitizer all identical - all 14 SVGs: w-12 h-12 (48px) — standardized across all tools - removed responsive size variants (lg:w-14, lg:w-6, etc.) — unified sizes - container now has proper padding around icon (no more cramped look)

increase icon sizes: localix feature cards x3, tools page x2 - localix: icon container 48px→72px, SVG 24px→72px (x3, same size) - tools: all 3 tool SVGs 24px→48px (x2), standardized 3rd from 28px to 48px container stays 48px so icon fills it completely