AES-256-GCM encryption for credential storage, YAML seed config parser with validation, and transactional import into SQLite. Credentials (registry tokens, NPM password) encrypted before storage.
Add multi-instance support, UI-managed config (SQLite), secret webhook URLs, quick deploy flow, and Cloudflare wildcard DNS strategy. Remove per-project DNS automation in favor of wildcard record.