What We Shipped

Uploading a file that already exists in a folder now shows a conflict dialog instead of silently creating a duplicate.

• Three resolution options per file: keep both (auto-rename with a suffix), replace existing, or skip
• Apply to all checkbox for batch resolution when multiple files conflict
• Replace preserves history the existing asset is updated in-place via a new /api/assets/[id]/replace endpoint, so linked products and metadata stay intact
• Filename tooltips long filenames in the gallery now middle-truncate with the extension visible, and show the full name on hover
• Hotkey suppression keyboard shortcuts no longer fire through open dialogs

New /create page inside the dashboard with a split workspace layout for AI image generation and transformation.

Generate mode turns text prompts into images. Pick a model (Nano Banana 2, Flux2, Seedream, GPT Image), set your aspect ratio and resolution, type a prompt, and hit Generate. Results auto-save to your library. You can refine the output with follow-up edits without starting over.

Transform mode takes an existing image (upload, pick from library, or paste a URL) and transforms it with AI. Style transfer, background changes, artistic effects. Same model picker, same auto-save flow.

Both modes share a history grid at the bottom showing your recent generations and transforms. The workspace uses a viewfinder-style preview that updates as you change aspect ratio and resolution settings.

AI tools now run directly from the asset modal. Open any image, switch to the AI tab, and run background removal, upscale, or any other tool with a before/after comparison right there.

• Context menu shortcuts open the modal on the AI tab and auto-start the selected tool
• Bulk AI processing from the batch action bar. Select multiple assets, pick a tool, process them all at once
• Auto-save derivatives processed results save as derivatives linked to the original asset
• State recovery if you refresh the page mid-processing, the tool state restores from sessionStorage
• PDF preview thumbnails for translated document derivatives

Two new additions to the generation tools.

SVG Generation (/tools/svg-generation) creates vector graphics from text prompts using the QuiverAI Arrow model. Output is valid SVG you can edit in Figma, Illustrator, or any vector tool. 15 credits per generation.

Nano Banana 2 is a new image generation model on fal.ai. Fast, affordable, with 1K/2K/4K resolution tiers and web search support. 5 credits per image.

API routes now support both session cookies and Bearer tokens through a single requireAuth() helper. Previously, some routes only worked with cookies and others had their own token handling.

• Bearer token auth gets the same permission checks as session-based auth
• Middleware decomposed into composable pieces (anonymous guard, credit checks, usage logging)
• MCP server switched from hand-rolled JWT verification to jose
• New /api/organizations endpoint and MCP tool for listing organizations

Two new ways to get files into your library. Paste images directly from your clipboard with Ctrl+V, or drag entire folders into the upload zone. Folders are auto-created in the DAM to match the structure you drop.

• Clipboard paste works anywhere the upload zone is visible
• Folder drag & drop preserves your folder structure
• Resilient upload retry on network failures
• Unified upload component across all pages

Pages now load faster across the board. We cut ~2.1 MB from the client-side JavaScript bundle through barrel file tree-shaking, moving mammoth to server-side only, and lazy-loading Sentry Replay.

On top of that, a full dead code audit removed over 7,000 lines of unused code across 40+ files using knip.

Permission checks are faster and more reliable. The RBAC cache now uses deterministic invalidation instead of pattern-based key deletion, with split TTLs for different permission types.

Added a circuit breaker for Redis failures so permission checks fall back gracefully instead of blocking requests when Redis is down.

A full security audit identified and fixed 20 issues across critical, high, and medium severity.

• SQL injection vulnerability patched in smart collection filters
• Vendor upload authorization now properly enforced
• Smart collection validation prevents invalid filter configs
• Unbounded array queries capped to prevent memory exhaustion
• N+1 query eliminated in asset listing
• Atomic rate limiter with separate upload/read/write buckets

Navigation inside the dashboard is now noticeably faster. We eliminated the white flash between pages, reduced redundant API calls, and pre-populate sessions on the server.

• Sidebar navigation no longer triggers full page reloads
• SSR skipped for DAM shell with client-side prefetch instead
• Lightweight auth in dashboard layout cuts initial load time
• Org switching works across layout boundaries without flashing