chore(main): release 0.1.5

[github-actions]

🤖 I have created a release beep boop

0.1.5 (2026-07-17)

✨ Features

• dashboard: add API Keys page, tabbed hero demo, and interface polish (42b30dc)
• dashboard: bold redesign of marketing home to design-system v2 (D1) (#250) (c62c181)
• dashboard: migrate marketing scope to design-system-v2 fonts (#241) (200bd9b)
• dashboard: redesign analytics to design-system v2 tokens (3e0669a)
• dashboard: redesign projects listing and project detail (D3) (#253) (c46186c)
• dashboard: restore primitives grid, comparison table, API surface (#356) (f5f811f)
• dashboard: shadcn/ui redesign — landing page, dashboard spacing, chat components (#339) (ce9a1fa)
• dashboard: unified design-system v2 foundation (a96906c)
• enable Cloudflare Workers Cache for public read-only endpoints (#281) (dcea999)
• merge redesign/v2 (design-system v2 + API reference reconcile) into main (29e236d)

🐛 Bug Fixes

• address codebase-analysis findings across API, SDKs, MCP, and dashboard (#276) (4ed75ef)
• api: claim idempotency keys before state mutations (#385) (817467e)
• api: CORS credential leak + empty-scopes privilege escalation (#376) (a6a0650)
• api: dedupe supported webhook event types into one constant (#384) (7bb8640), closes #378
• api: guard lease renew/release updates with state predicates (#382) (d3a329e)
• api: invalidate analytics cache on conversation create/delete (#370) (943f2d8), closes #352
• api: pad scope-denied timing, share AUTH_CACHE in scopedAuth, add dashboard CSP (#383) (3317387)
• api: tighten input validation for slugs, tags, and conversation ids (#238) (9c8be76)
• api: traces pagination, trace scoping, and claim:read scope (#381) (1ea5907)
• api: webhook exact-match, parallel delivery, retry tests, replay-safe signatures (#380) (3a582a3)
• batch of triaged correctness bugs and small dashboard/SDK fixes (#355) (aaf05ac)
• dashboard: a11y and UX fixes — focus trap, keyboard nav, confirmations, error states (#379) (bc0b32a)
• dashboard: add /compare to sitemap.xml (fd306ea)
• dashboard: render code-tabs lines as blocks + auto-activate sole org (#391) (9a12ed2)
• make the active org visible and org orphaning observable (#390) (5ff291a)
• seo: robots.txt, noindex, JSON-LD, sitemap drift check, keywords, README badges (#358) (2657e5d)

♻️ Refactoring

• dashboard: redesign traces page to design-system v2 (D4) (#252) (ac52fb5)

---

This PR was generated with Release Please. See documentation.

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Release PR 0.1.5 generated by Release Please: adds a changelog entry for the new version and updates the release manifest to reflect the 0.1.5 package version that includes an API input validation bugfix.

File-Level Changes

Change	Details	Files
Document the 0.1.5 release and its key bugfix in the changelog.	Add a new 0.1.5 section with comparison link and release date. Record the API bugfix for tightened input validation on slugs, tags, and conversation IDs under the bug fixes subsection.	CHANGELOG.md
Update the Release Please manifest to bump the project version to 0.1.5.	Adjust the version field used by Release Please so future releases build on 0.1.5. Keep manifest structure aligned with Release Please expectations for automated releases.	.github/.release-please-manifest.json

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}