This release adds the platform operator console and the mail plumbing behind it. Platform admin is a separate role from workspace membership, re-checked on the server for every admin request rather than trusted from the caller.
Added
- Admin panel — an operator console covering users (ban, set platform role, impersonate, delete), workspaces (list, detail, plan switch, delete), endpoints (cross-workspace list, pause and resume), and live tunnels (unscoped list, force disconnect). A platform activity view surfaces the audit trail and alert firings.
- Plans as data — plans move into the database with an admin editor, so plan limits are validated against stored tiers instead of hard-coded values. The billing view reads its tiers from the same source.
- System SMTP — a system mailer with an admin-managed SMTP configuration (the stored password is sealed, never echoed back). Auth emails now send through this mailer, and recipient and subject fields reject CR/LF header injection.
Improved
- Admin screens sit behind the same session-TTL, IP allowlist, and 2FA gates as the rest of the dashboard, and an admin cannot demote or delete their own account.
Notes
Release date comes from the v1.2.0 git tag (8 July 2026).