Studio Vault

Changelog

What's new

Release history for Studio Vault. Latest version v0.5.0.

v0.5.0

Latest

Encrypted credential vault

API keys and webhook secrets now encrypt at rest in IndexedDB with Web Crypto. Device-bound mode is automatic for solo devs; passphrase vault with auto-lock is opt-in for studios.

Added

  • Credential vault — AES-GCM encryption in IndexedDB; profile metadata stays in localStorage.
  • Device-bound mode (default) — auto-encrypt on first visit with zero unlock friction.
  • Passphrase vault (opt-in) — unlock modal, auto-lock, tab-blur lock, remember-on-device.
  • Automatic v4 → v5 migration from plaintext localStorage keys to encrypted storage.

Changed

  • Docs links point to github.com/star-ot/studio-vault on the master branch.

v0.4.0

Teams, pipeline & studio ops

Self-hosting for studios, asset versioning with previews, upload policy validation, observability, webhooks, and CI gates — plus the /teams page and Git library sync.

Added

  • /teams page for studios — security architecture diagram, deployment options, comparison table, and security reviewer FAQ.
  • Asset version pipeline — replace library entries with new rbxassetids, archive prior IDs with optimized previews, compact v3 export, and a responsive version dropdown in the library.
  • Upload policy settings and studio-vault validate for CI — naming patterns, image dimensions, duplicate queue warnings.
  • Observability: GET /api/metrics (Prometheus + JSON), upload counters on /api/health, and a live metrics panel in Settings.
  • Webhook notifications on batch complete (Slack/Discord-compatible) via Settings and POST /api/notify.
  • GitHub Actions workflow (studio-vault-upload.yml) with fixture validation and optional Open Cloud upload.
  • docs/SECURITY.md, DEPLOYMENT.md, TEAM-WORKFLOWS.md, AUDIT-LOGGING.md, and CI.md.
  • Dockerfile, docker-compose.yml, GET /api/instance, security headers middleware, and expanded .env.example.
  • Optional structured audit logging (RBLXUPLOADS_AUDIT_LOG) — never logs API keys or file bytes.
  • studio-vault CLI — headless upload, patch, library export, and validate commands.
  • Library sync from repo with conflict resolution, .studio-vault/library.manifest.json schema, and profile metadata export/import.
  • Workspace onboarding checklist, toast notifications, keyboard shortcuts modal, and Instance info panel in Settings.

Improved

  • Roblox API errors translated to actionable fixes; library loading skeletons and richer empty states.

v0.3.0

Studio Vault launch

Full landing experience, refreshed workspace UI, and SEO polish for the Studio Vault rebrand.

Added

  • Marketing landing page with live demos for credentials, library browsing, model packages, InsertService scripts, and workflow walkthroughs.
  • Changelog page for tracking releases and product updates.

Improved

  • Open Graph, Twitter cards, JSON-LD, sitemap, and FAQ content for discoverability.

Changed

  • Rebranded from RblxUploads to Studio Vault with updated typography, layout shells, and component styling.

Fixed

  • Cumulative layout shift on the landing hero and demo sections.

v0.2.0

Library explorer & asset types

IndexedDB-backed library with folder tree, thumbnails, and support for audio and mesh uploads.

Added

  • Folder tree explorer with nested organization, bulk move, and root-level asset counts.
  • Upload thumbnails in the queue and library for faster visual scanning.
  • Audio uploads (MP3, OGG, WAV, FLAC) and Mesh uploads via Open Cloud.
  • IndexedDB persistence for large local libraries with export/import (JSON and CSV).

Improved

  • Gooey search and filter controls in the asset library.

Fixed

  • Explorer root folder selection and direct asset count display.

v0.1.0

Initial release

Local-first batch uploader for Roblox Open Cloud image and model assets with a credential-backed upload queue.

Added

  • Drag-and-drop batch uploads for images (PNG, JPG, JPEG, WEBP) and models (FBX, GLTF, GLB, RBXM, RBXMX).
  • Concurrency-limited upload queue with per-item status, retries, and CSV/JSON export of rbxassetid results.
  • Automatic filename → Roblox display name formatting with per-file overrides.
  • Credential panel with Open Cloud API key, creator ID, parallel upload limit, and retry settings — stored in localStorage only.
  • Local Next.js proxy to Roblox Open Cloud (browser CORS workaround) with operation polling.

Security

  • No server-side credential storage, no telemetry, and no external runtime CDN dependencies.