1.2.3 Latest August 6, 2026

· build

Fixed

• Menubar no longer crashes the app — per-project server controls are now created when the project list changes rather than during view rendering, fixing an intermittent crash (SIGABRT) triggered from the menubar.
• Exported Vapor sites render pages that contain # — page content such as anchor links, CSS hex colors, and id selectors was being parsed as Leaf tags and returned a 500 error; the exporter now escapes # in page content so those pages load correctly.

1.2.2 August 6, 2026

· build

Changed

• Exported Vapor apps redirect to your canonical domain — Pixla Sites projects exported to Vapor now include canonical-host middleware that 301-redirects direct hits on the <app>.fly.dev and grey <sub>.pixla.app hostnames to your verified custom domain, so search engines index a single URL. Only safe (GET/HEAD) navigations are redirected, deep links are preserved, and it stays a no-op until a custom domain is active.

1.2.1 August 5, 2026

· build

Changed

• Direct CDN links for downloads on apex sites — Exporting a Pixla Sites project now emits a direct, isolated cdn.pixla.app link for a Host-on-CDN download even when the site has no publish subdomain (a first-party apex site), resolving it under its own downloads/<slug>/ folder instead of falling back to a same-site path that relied on a redirect.

1.2.0 August 5, 2026

· build

Added

• Timing-based spam protection in exported forms — forms in projects exported from Pixla Sites now include a hidden timing field that records how long a visitor spent filling out the form. The generated server flags implausibly fast submissions as scripted bots, complementing the existing honeypot and Turnstile defenses. Fully offline-safe with a tiny inline script — no third-party or CDN dependency — and each form on a page times independently.

1.1.0 August 4, 2026

· build

Added

• Spam filtering for exported form submissions — Vapor apps generated from Pixla Sites projects now score public form submissions with a content-based heuristic (links, solicitation phrases, self-promotion, submit timing). Submissions that look like spam are quarantined: still stored and recoverable, but never trigger a notification.
• Cloudflare Turnstile on exported forms — generated forms can opt into bot verification, with the token checked server-side on submit. It activates only when Turnstile keys are configured, so sites without it ship no third-party script, and it fails open during a Cloudflare outage so an upstream problem can't take a form offline.

1.0.8 August 4, 2026

· build

Changed

• Namespaced CDN download links in exported Sites — when exporting a Pixla Sites project to a Vapor app, CDN-hosted download links now resolve to an isolated cdn.pixla.app/downloads/<namespace>/<file> path (namespaced by the site's publish subdomain) instead of a shared root path, so downloads from different projects can't collide or be guessed. Projects without a publish subdomain fall back to a same-site link.

1.0.7 August 3, 2026

· build

Added

• CDN-hosted downloads in Pixla Sites export — when a download is flagged "Host on CDN" in Pixla Sites, exporting the site to a Vapor app now links buttons and CTAs straight to its cdn.pixla.app URL and skips bundling the file into the project, so large per-release binaries stay out of the exported app.

1.0.6 August 2, 2026

· build

Fixed

• Pixla Sites import — opening or importing a Pixla Sites (.pxs) project no longer fails with a date-format error; the project's .pxs file now decodes with the canonical ISO8601 date format.

1.0.5 August 2, 2026

· build

Changed

• Consistent Pixla Sites exports — Pixla Sites projects exported to Vapor now render through the same shared page renderers as Pixla Sites itself, so the generated HTML, styling, and dark-mode chrome stay in sync with the builder (correcting places where the exporter's output had drifted).

1.0.4 August 2, 2026

· build

Fixed

• Environment tab no longer carries "Undo" or import state across projects — Switching to a different project now clears any pending delete-undo and import notice, so an "Undo" can't act on the wrong project (which could re-insert the previous project's variable into the one now shown).

1.0.3 August 2, 2026

· build

Fixed

• Exported site buttons stay legible — Secondary and ghost buttons in Vapor projects exported from Pixla Sites now use accent-deep text with a themed hairline border, so they still read as buttons even when the light brand tint sits close to the page background.

1.0.2 July 31, 2026

· build

Fixed

• Environment variable editor no longer leaves your project dirty — when the env editor updates .gitignore to keep .env and its credential backups out of git, it now commits that one change for you, so editing environment variables doesn't leave an uncommitted file behind.
• {filesize} now resolves for referenced downloads in exported sites — when exporting a Pixla Sites project to Vapor, a {filesize} placeholder next to a download link for a referenced file (such as a .dmg) now shows the correct size (e.g. 8.6 MB) instead of coming out empty.

1.0.1 July 31, 2026

· build

Fixed

• The env editor now keeps .env and its timestamped backups out of git, so credential copies can't be accidentally committed.

1.0.0 July 31, 2026

· build

First release of Vaporware.

Added

• Local Vapor development environment — open or scaffold a Vapor project and run it with one click; no manual swift run, Docker, or config. Each project gets a live status bar (Starting → Building → Running) with uptime and PID.
• Per-project Swift toolchains — build each project with a chosen Swift version, recorded in a standard .swift-version file.
• Managed database engines — PostgreSQL, MySQL, Redis, and SQLite, run and monitored from the app with no Homebrew or Docker; each gets its own port to avoid clashes (e.g. Herd).
• One-step provisioning — create a database while scaffolding a project and have its credentials written straight into .env, with credential editing, connection-string copying, and "Show Data in Finder".
• Pretty .test domains with automatic HTTPS — reach a project at myapp.test via a built-in DNS resolver and reverse proxy (no /etc/hosts edits), optionally over trusted local HTTPS. Offers to take over ports 80/443 when another tool holds them.
• Environment variable editor — add/edit/remove, comment out lines, drag to reorder, flag duplicates, undo deletes, and import/export .env files.
• Real-time log viewer — stream requests and errors with method/path/status/duration, colour-coded and filterable.
• Built-in mail catcher — a local SMTP server (port 1025) that captures outgoing mail into an in-app inbox; view as HTML, text, or raw source, save attachments, search, and persist as .eml.
• Database backups — snapshot and restore PostgreSQL and MySQL on demand or on a schedule (6 hours / daily / weekly) with retention, plus restore from an external .sql dump.
• Quick actions — Open in Browser, Show in Finder, Open in Terminal, Open in Editor (Xcode, VS Code, Cursor, Zed, Sublime Text, Pixla Editor, or default), Update Packages, and Export as .zip. Preferred-terminal picker (Terminal, iTerm, Warp, Ghostty) and per-database psql/mysql/redis-cli/sqlite3 consoles with credentials pre-wired.
• Menubar utility and background operation — run from the menubar, keep services running with the window closed, Start All / Stop All, and optional run-at-login.
• vw command-line tool and background daemon — script Vaporware (vw status --watch, doctor, and project/server/db/env/domain/dns/proxy groups) with --json output and shell completions; an optional vaporwared daemon keeps services running headless.
• Publish to Pixla Hosting — one-click hand-off: pick a yourname.pixla.app subdomain, server size, region, machine count, and an optional database, then watch the remote build stream live. Re-deploy and Reset & Retry for existing sites.
• Pixla Sites → Vapor export & re-sync — turn a no-code Pixla Sites project into a runnable Vapor 4 app (pages → Leaf, forms → Fluent routes); "Re-sync Design" regenerates the design while leaving your server code untouched.
• Automatic updates and a first-launch tour with an offer to move into Applications.
• In-app help, feedback, and a one-click uninstaller that cleanly removes .test routing, the local HTTPS certificate, CLI tools, and app data.