v1.2.0

Scoped API keys and safer sketch editing

Everything in this release

  • Saved cloud models and their available revisions now use persistent document storage; production refuses to start with temporary in-memory storage.
  • API keys can be limited to one saved project or cover all projects; the key list shows each key's access, and project keys cannot reach other projects or account controls
  • Joining sketch points preserves their horizontal/vertical alignment, spline attachments, tangent connections and circle-clearance dimensions
  • Sketch constraints and point joins that cannot be solved now preserve the previous geometry and undo/redo history; rejected snaps keep the valid move without adding a broken connection
  • Equal-length, parallel and perpendicular constraints keep fixed endpoints in place, and joining a free point to a fixed one preserves the fixed point's position
  • Joining sketch points no longer silently deletes an arc's driving radius; a join that would lose a driving dimension preserves the original sketch
  • Local development can start with a ready-to-use, verified Pro/admin test account using `pnpm api:dev`
  • Your account can hand out API keys — Account → API keys — so a script or an AI assistant can use everything the app does as you, with a key instead of a browser sign-in: each key is named, shows when it was last used, and stops working the moment you revoke it; the secret is shown once when you make it, keys are only ever made and revoked from a signed-in browser, and an admin can mint one for a specific account to reproduce a reported bug as the person who reported it
  • The modeller now works signed out as a scratch pad: every tool is usable, and nothing is kept — a banner says plainly, before you have put the work in, that what you draw is not being saved, the project list asks you to sign in instead of listing work it cannot keep, and the moment you do sign in with a free account, what you drew is adopted as a real project exactly where you left it
  • Product analytics — which pages you use and for how long, where each visit came from, and a session replay of the drawing surface with every input masked and the sign-in screen never recorded — are on for every signed-in account, as a condition of using the app; the Settings page now says so instead of offering a toggle
  • The admin panel reads where accounts come from: the referring site and campaign of each visit, the browser and screen it ran on, and the real visitor address — shown beside the usage, events and replays already there
  • The control panel loads again and opens a user when clicked — the shelf of one-row-per-day usage numbers the server relied on was a shelf it never made room for, and every request for a minute tally fell over on it
  • An account with no projects no longer paints an invisible layer over the explorer that ate every click aimed at the buttons beneath it