chore(main): release 0.2.0

[github-actions]

🤖 I have created a release beep boop

0.2.0 (2026-09-16)

✨ Features

• dashboard: add API Keys page, tabbed hero demo, and interface polish (42b30dc)
• dashboard: apply shadcn preset b3mPJeumm and drop the tab scrollbar (#426) (0658845)
• dashboard: bold redesign of marketing home to design-system v2 (D1) (#250) (c62c181)
• dashboard: make TUI editor tabs switch between projects (#432) (5bf313b)
• dashboard: migrate marketing scope to design-system-v2 fonts (#241) (200bd9b)
• dashboard: pricing page is free-only, no paid tier (#402) (e33b544)
• dashboard: pricing page, how-it-works viz, SDK catalog, Shiki (#398) (c8bffa1)
• dashboard: redesign analytics to design-system v2 tokens (3e0669a)
• dashboard: redesign projects listing and project detail (D3) (#253) (c46186c)
• dashboard: restore primitives grid, comparison table, API surface (#356) (f5f811f)
• dashboard: restyle landing and app as a terminal TUI (#429) (ec3def3)
• dashboard: shadcn/ui redesign — landing page, dashboard spacing, chat components (#339) (ce9a1fa)
• dashboard: syntax highlighting for docs code blocks (#403) (95c39d9)
• dashboard: unified design-system v2 foundation (a96906c)
• enable Cloudflare Workers Cache for public read-only endpoints (#281) (dcea999)
• merge redesign/v2 (design-system v2 + API reference reconcile) into main (29e236d)

🐛 Bug Fixes

• address codebase-analysis findings across API, SDKs, MCP, and dashboard (#276) (4ed75ef)
• api: 404 missing /_astro modules instead of SPA HTML (#399) (003ac58)
• api: bind org GET/sync to the Clerk session org (#422) (1ed7f7d), closes #421
• api: claim idempotency keys before state mutations (#385) (817467e)
• api: CORS credential leak + empty-scopes privilege escalation (#376) (a6a0650)
• api: dedupe supported webhook event types into one constant (#384) (7bb8640), closes #378
• api: guard lease renew/release updates with state predicates (#382) (d3a329e)
• api: invalidate analytics cache on conversation create/delete (#370) (943f2d8), closes #352
• api: invalidate analytics cache on MCP conversation writes (#415) (4b0928f)
• api: mount domain routes at /:projectId/domains (#423) (5ebfdaf), closes #420
• api: pad scope-denied timing, share AUTH_CACHE in scopedAuth, add dashboard CSP (#383) (3317387)
• api: search snippet source and MCP list cursor (#424) (5c905ba)
• api: tighten input validation for slugs, tags, and conversation ids (#238) (9c8be76)
• api: traces pagination, trace scoping, and claim:read scope (#381) (1ea5907)
• api: webhook exact-match, parallel delivery, retry tests, replay-safe signatures (#380) (3a582a3)
• batch of triaged correctness bugs and small dashboard/SDK fixes (#355) (aaf05ac)
• conversations: paginate project list so Load more does not duplicate (#419) (dcb9545), closes #410
• dashboard: a11y and UX fixes — focus trap, keyboard nav, confirmations, error states (#379) (bc0b32a)
• dashboard: add /compare to sitemap.xml (fd306ea)
• dashboard: auto-activate Default Organization for empty project list (#400) (fa6ad50)
• dashboard: domains page never leaves skeleton (#409) (#417) (241ac90)
• dashboard: make dark the CSS default for the TUI (#430) (2a9f71b)
• dashboard: page traces with API next_cursor (#414) (8b2ab7a)
• dashboard: paginate members and hide invite from non-admins (#416) (65b4f6c), closes #408
• dashboard: reachable mobile nav, no redirect hops, drop redundant Sign in (#401) (79ba9c9)
• dashboard: rename TUI chrome host to ~/as (#431) (bbfd1f3)
• dashboard: render code-tabs lines as blocks + auto-activate sole org (#391) (9a12ed2)
• dashboard: stop /dashboard/project/ spinning without slug (#413) (7295b04), closes #407
• dashboard: stop the landing hero overflowing the viewport on mobile (#405) (ea80450)
• dashboard: trailing slashes the #401 sweep missed (#406) (39c28e4)
• deps: update all non-major dependencies (#392) (a7f421c)
• deps: update all non-major dependencies to v19.3.0 (#439) (f6f4ec1)
• deps: update dependency motion to v13 (#397) (36c3d7a)
• deps: update dependency nanoid to v6 (#427) (dd48e9a)
• make the active org visible and org orphaning observable (#390) (5ff291a)
• seo: robots.txt, noindex, JSON-LD, sitemap drift check, keywords, README badges (#358) (2657e5d)

♻️ Refactoring

• dashboard: fix the hero diagram's mental model, cut duplicated landing sections (#404) (967517c)
• dashboard: redesign traces page to design-system v2 (D4) (#252) (ac52fb5)

---

This PR was generated with Release Please. See documentation.

Summary by Sourcery

Release version 0.2.0 and document the accumulated dashboard, API, MCP, and reliability improvements since 0.1.4.

Enhancements:

• Align the API, dashboard, MCP server, and repository metadata with the 0.2.0 product release.
• Record the 0.2.0 release changelog, including dashboard redesigns, API improvements, security fixes, and usability enhancements.

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Release PR 0.1.5 generated by Release Please: adds a changelog entry for the new version and updates the release manifest to reflect the 0.1.5 package version that includes an API input validation bugfix.

File-Level Changes

Change	Details	Files
Document the 0.1.5 release and its key bugfix in the changelog.	Add a new 0.1.5 section with comparison link and release date. Record the API bugfix for tightened input validation on slugs, tags, and conversation IDs under the bug fixes subsection.	CHANGELOG.md
Update the Release Please manifest to bump the project version to 0.1.5.	Adjust the version field used by Release Please so future releases build on 0.1.5. Keep manifest structure aligned with Release Please expectations for automated releases.	.github/.release-please-manifest.json

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[sourcery-ai]

Sourcery assessment

Approved.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: e7d9c8a4-69d6-4d74-bb8c-c29707f35709

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

Sourcery withdrew this approval because the latest commits introduced blocking findings.

[github-actions]

🤖 Created releases:

• v0.2.0

🌻