What We Shipped

Per-item actions on phones and tablets are easier to reach across the assets and products tables.

• Row actions stay reachable: action buttons in the library and products tables collapse into a menu on small screens instead of being cut off or overflowing.
• Long-press opens the row menu: pressing and holding a row on a touch device opens its context menu, so you get the same actions without a right-click.

Supplier SFTP credentials are no longer included in welcome emails, removing a sensitive value from your inbox and theirs.

• Set it in the portal: suppliers generate their SFTP password on the FTP Upload page with Reset password instead of reading it from an email
• One less thing to leak: the password never travels in a message that could be forwarded or sit in an inbox

Team permission settings are easier to read and edit, so you can see who can do what without decoding a wall of toggles.

• On/off switches with overrides: individual permissions use clear switches, and overrides are colour-coded so exceptions stand out
• Roles explained first: base roles are spelled out before you set per-resource exceptions
• Exceptions at a glance: each member shows their access exceptions up front, with temporary access flagged so it is easy to spot

A new image specs entity for managing and reusing image validation rules.

• Specs catalog with all available image checks and their configurations
• Create, edit, and delete specs through the UI or API
• Slot thumbnail strip shows all slots with group containers and fade overflow for quick visual reference

Keyboard navigation in the library grid is faster and the whole grid is now accessible to screen readers.

• ARIA grid roles added across the data grid, so screen readers can announce rows, columns, sort state, and selection
• Focus recovery after toolbar use: arrow keys recapture grid focus after interacting with sort, filter, or view mode controls
• No more selection ghosting: recycled virtualizer rows no longer show stale checkbox state during rapid keyboard scrolling
• Debounced selection commits so holding arrow keys feels smooth instead of causing checkbox flicker
• GPU-composited cursor ring replaces the old outline, which was slow to repaint inside the virtualized scroll container

Several fixes for the library's list view and selection behavior.

• Folder double-click fixed: the second click of a double-click no longer triggers selection, which was causing navigation to fail intermittently
• ThumbHash placeholders in list view so rows show blurred previews while thumbnails load
• Column resize and reorder work correctly with DOM-direct drag for smooth performance
• Selection flicker gone: keyboard navigation no longer causes checkbox flickering during rapid arrow key holds
• Sidebar resize is smoother with inline-size containment and no inset freeze

Fixed a bug where video generation cost estimates in the UI were 2-4x lower than actual charges.

• The UI was reading from a stale pricing file instead of the authoritative credit table
• Video cost estimates and pipeline step calculations now use the correct values
• The stale pricing file has been removed to prevent future drift

A focused audit across the vendor portal covering security, database safety, and UI consistency.

• Error messages no longer leak internals: three vendor API routes now return safe client messages instead of raw error details
• Request validation added to the notifications endpoint with zod, and notification queries are scoped to the caller's org
• Faster product and requirements pages from parallelized database queries
• ShadCN components replace raw HTML buttons, inputs, selects, and tables across vendor pages
• Cache key fix in vendor SFTP hook that caused stale credentials after reconnect

Opening folders in the library is now noticeably faster with smarter prefetching and fewer loading flashes.

• Intent-based prefetch fires on pointer hover and keyboard focus, so folders feel ready before you click
• No more stale folder flashes: switching folders shows a clean loading state instead of briefly displaying the previous folder's content
• Lighter prefetch requests skip exact totals and tag hydration, then backfill in the background after navigation
• Cache-aware guards prevent duplicate prefetch requests when a folder is already fresh or loading

The review autofix flow is now more predictable and transparent.

• Repairs don't auto-approve: applying an autofix keeps the asset in review so you still make the final approval decision
• Bulk autofix is queued: repair previews generate in the background and you approve or reject each one individually
• Credits shown upfront: the UI now clearly shows when previews are being generated, when credits are charged, and when a repaired asset still needs your review
• Quality-aware repairs: whitespace margin fixes only add paid AI upscale when the crop would noticeably enlarge the source, and block repairs on already blurry assets