What we shipped, week by week. Subscribe to get it in your inbox.
Failed forks used to return an opaque 500 with no server-side trace. Permission and not-found failures now surface as proper 403/404 responses, and unexpected errors are logged so they can actually be diagnosed.
Release builds of the mobile app were failing to bundle JavaScript due to a missing Babel preset. Production Android builds now complete successfully.
Setting an unprefixed width like max-w-2xl or max-w-5xl on a dialog was silently ignored on desktop, leaving it stuck at 384px. Dialogs now widen as requested, both in generated apps and across the platform (screenshots, chat gallery, feature catalog, and more).
The Android tab bar mixed tinted line icons with a full-color 🔔 emoji for notifications. All tabs now render as matching single-color line icons in both active and inactive states. iOS is unchanged.
Shared collection rows now carry updatedAt and updatedBy end to end, so apps can badge rows that have changed since a viewer last saw them. Anonymous, link-grant, and scheduled writes intentionally leave updatedBy unset so per-viewer "unseen" logic can't be fooled by system-attributed writes.
In the app overflow menu, clicking Edit on an app you weren't a member of would silently fork it with no indication a copy was being made. The fork action is now spelled out as "Fork & edit," while "Edit" only ever opens the studio on apps you can edit directly.
The "‹ Apps" back control sat flush against the app title and read as one run-on label. It now has its own spacing and a slightly larger tap target.
The native app grid and browse lists now show each app's actual icon — the same gradient tile with lucide glyph you see on the web — instead of a plain colored box with the first letter of the name.
The mobile app now ships with the real stacked-squares brand mark across the iOS launcher, Android adaptive icon (including the themed monochrome variant), splash screen, and Play Store listing — replacing the earlier placeholder chevron.
Setting a wider max-width on a dialog (like max-w-2xl or max-w-5xl) previously had no visible effect on desktop — dialogs stayed capped at 384px. Custom widths now apply correctly, both in generated apps and across platform dialogs like screenshots, chat gallery, and the feature catalog.
Replaced the mismatched color emoji notification icon on Android with a clean line icon, so all tabs now render as consistent single-color icons that respect the active/inactive tint. iOS is unchanged.
Fixed a missing dependency that caused production Android builds to fail during JavaScript bundling. Release builds now complete reliably.
Added breathing room between the back button and the app title so the back control reads as its own button — and gets a slightly larger tap target.
Fork failures now return meaningful status codes (403 for permission issues, 404 for missing apps) instead of a generic 500, and unexpected errors are logged so problems can actually be diagnosed.
When you don't have direct edit access to an app, the overflow menu now clearly shows "Fork & edit" instead of a generic "Edit" item, so it's obvious when clicking will create a copy. Members of the app's workspace still see a plain "Edit" that opens the studio directly.
Image upload fields now accept pasted images from your clipboard. Focus or hover the uploader you want, paste, and it goes through the same upload path as drag-and-drop. The empty-state hint has been updated to mention paste.
Server-side analytics events now require an explicit deploy label to fire, so running a production build locally or in test suites can no longer send events into the real PostHog project tagged as production.
Apps now carry a content rating, collected from creators at publish time and independently assessed by an automated screener that caps ratings at 12+. Viewers of a rated app are asked once for their birth year (stored on the account when signed in, or in a private cookie when anonymous) and can't reach content above their age. The gate is enforced on both the page and the data layer, and it never leaks the existence of unpublished or private apps to outsiders.
Groundwork for a native mobile shell on iOS and Android: a shared bridge that lets generated apps run inside a native WebView the same way they run in the web iframe, native push support alongside web push, bearer-token sign-in with a secure session store and automatic 401 handling, an Apps tab with workspace switcher and Browse directory, a notification inbox with deep-link routing, in-app reporting and age-gate flows, camera and consent handling, and universal-link verification files served from the web.
Signed-in viewers can block a creator from the app detail page. Their apps disappear from your directory, search, New, Popular, related apps, and the featured slot, and you stop getting notifications sourced from them. Blocking is silent and one-sided — the creator is never told, and no one else is affected.
The Terms now include a dedicated section on objectionable content and moderation: our zero-tolerance stance, that every publish is automatically screened and every report is reviewed by a person, how to report from inside the product or by emailing abuse@feldova.com without an account, the 72-hour decision commitment, and what happens to repeat offenders.
The invite dialog no longer displays a hand-computed cost estimate. It now asks Stripe for a real invoice preview so the hint reflects your plan's interval, current discounts, VAT, and how proration will actually be charged when you add a seat.
Reports now have their own dedicated rate limit — a tighter per-IP bucket plus a per-user bucket — so a single source can't flood the human-triaged queue, and legitimate reporters sharing a carrier NAT aren't punished for someone else's abuse.
When an app, workspace, or creator is suspended, the app disappears from directories, search, New, Popular, related apps, the workspace browse page, the public listing page, its metadata and social preview cards, the featured slot, the newsletter, the sitemap, and the fork button — everywhere a passerby might encounter it. The creator can still open the app in studio preview against a sandboxed draft so they can see and fix what got it suspended, and receives an email explaining the decision with an appeal path.
When an installation owner removes a collaborator (or someone leaves an installation themselves), any per-row grants tied to that person's identity are revoked in the same step as the membership. Removed really means removed — a former collaborator can no longer reach previously granted rows by identity.
Publishing an app — or swapping in new code under an already-public app — now runs the name, description, frontend, and server code through an automated content classifier. Clearly disallowed content is blocked with a specific, appealable reason; borderline cases are flagged for a human. Suspended creators can no longer push new code to existing public apps to work around a suspension.
You can now report any app you come across — from its public listing page, from inside the running app, or from your workspace sidebar — whether or not you're signed in. Pick from a shared set of reasons, add a note, and get a clear 72-hour follow-up commitment. Anonymous reporters who leave a valid email will hear back; the flow no longer promises follow-up for addresses we can't actually reach.
Fixed an issue that could prevent comment digest and certain sign-up notification emails from being delivered.
You can now add comments directly on records in your generated apps. Threads are shared across everyone with access, watchers get email digests when new replies come in, and comment activity shows up alongside other updates in the Activity feed.
The AI assistant now preserves its reasoning across tool-use steps, preventing cases where multi-step changes would collapse into tiny or empty edits. Requests like adding a confirmation dialog now consistently produce the full intended change.
Hardened the runtime boot process so apps start up more reliably.
When the Assistant writes data on your behalf, the changes now show up live in the open app instead of waiting for a reload. Each Assistant step is also clearly labeled so you can see what it did.
The Assistant no longer mistakes readable collections for read-only mirrors. Actions like adding cards to a board now work instead of being refused with a confusing 'no ingest surface' message.
Images you attach in studio chat are now inlined directly into the request instead of sent as a URL for the provider to fetch. Runs that previously failed on providers that reject remote image URLs now succeed.
If the UI component bundle is missing, the server now fails fast with a clear error instead of silently rendering interactive elements like Dialog, Select, and Tabs as blank. This is verified in CI so it can't regress.
New apps are generated with Kimi K3 by default, with pricing and credit weights tuned to match. The composer's High-tier cost hint now reflects real usage against the new model instead of the older GLM ratio.
Fixed a schema quirk that caused tool-using requests to silently fall through to a much more expensive backup provider. Requests now stay on the primary router as intended.
The privacy policy and terms now describe AI sub-processors by category rather than by name, with the current provider list available on request. International data transfer language has also been updated to reflect where generation actually runs.
Previously, a generation run that produced no code changes would still create a new app version, advance your current version pointer, and charge credits as if work had landed. These no-op runs are now correctly recognized so your version history stays clean and you aren't billed for empty builds.
The "Update to latest platform standard" action has moved from the chat panel into the studio top bar, next to App settings — with its full label visible so it's easier to find when a new platform version is available.
Until now, once a file was created in your app it could never be removed — old files lingered as dead code, got sent to the model as context on every run, and drifted out of sync with the rest of your app. Generations can now properly delete files, keeping your codebase lean and your app easier for the AI to reason about.
Updated the default Open Graph image alt text and the web app manifest description so Feldova looks sharper when shared as a link or installed as a web app.
Buttons and other interactive elements in your generated apps now show the pointer cursor on hover again, making them feel more responsive and clickable.
Errors caught by the app's React error boundary are now persisted alongside other runtime errors, so render crashes surface in your error history — not just in the live studio banner.
DropdownMenu, Dialog, Popover, Select, Sheet, Tabs, Tooltip, Collapsible, and RadioGroup in your generated apps are now powered by the real Base UI components instead of hand-written shims. This brings proper keyboard navigation, focus management, exit animations, portaled content, collision-aware positioning, and real Sheet side-panels (previously Sheet was just a centered Dialog and the `side` prop did nothing). A compatibility translator keeps Radix-style patterns like `asChild` and `onSelect` working.
Clicking an item inside a dropdown, dialog, popover, select or sheet no longer accidentally triggers the onClick of a clickable ancestor (like a list row that owns an overflow menu). Portaled popups are now properly isolated from their React ancestors.
Fixed a class of bugs where two files declaring the same type alias, function, or class would ship to your iframe and crash at runtime with an error the assistant couldn't diagnose. Lint now parses the assembled code, and iframe compile errors now name the specific file and line involved.
Buttons that trigger a dropdown, dialog, popover, tooltip, collapsible or select no longer silently fail when they're wrapped inside a styling component. The trigger context is now delivered through React context at any nesting depth, matching how shadcn/Radix compositions are expected to work.
Fixed a layout regression where generated apps rendered tab triggers beside their panels instead of above them. The sandbox now includes shadcn's Tailwind layer so orientation variants resolve correctly.
New app versions are now precompiled server-side with esbuild instead of being compiled in your browser with Babel on every load. Boot errors report the exact source file and line through inline sourcemaps. Legacy apps continue to work unchanged via the previous render path.