Relaticle v3.5.5

This release rebuilds how you sign in, stops the onboarding wizard and the chat client from losing your place, and finishes the marketing and docs surfaces.

You type your email once and the page decides what to ask next: run a passkey ceremony, ask for a password, point you at the provider you originally signed up with, or open a signup branch if the address is new. The separate register page is gone.

Passkeys work end to end: sign in with one, manage them in your profile, and every passkey event is logged.
A single identity-confirmation gate replaces the three separate “type your password again” prompts that used to sit in the profile.
Microsoft replaces GitHub as the second social provider, alongside Google.

The onboarding wizard no longer strands you

Changing your use case on step 3 used to leave the previous sub-options in form state: invisible, invalid, and failing validation under an error key the field never rendered. Continue silently did nothing and there was no way out. The field now clears its sub-options when you change it, and a blocked Continue tells you why.

Chat survives a reload mid-answer

Reloading while a turn was still streaming used to render an idle page: your message gone, no streaming indicator, and any proposals the assistant had already created invisible until the next broadcast arrived. The client now rebuilds the in-flight turn on mount and re-docks pending proposals immediately.

Marketing, docs and blog

The Product and Resources menus open on hover, sharing one card that slides between panels. Click still toggles for touch and keyboard, and Escape closes it and returns focus.
The help centre gets a direct contact path on the hub and on every article, plus a rebuilt layout that removes the dead right-hand column between 768px and 1280px.
Blog covers render uncropped. The listing thumbnail used to cut 48% off every 1200x630 cover and slice the title baked into it.

Email

Outgoing mail can now carry a working Reply-To. Transactional mail was sent from a subdomain with no MX record, so anyone replying to a task assignment, digest or invite got a bounce.
/.well-known/security.txt (RFC 9116) is published, with a security contact and a privacy contact.

Upgrading

Run php artisan migrate. This release adds a passkeys table.
GITHUB_CLIENT_ID and GITHUB_CLIENT_SECRET are no longer used. Set MICROSOFT_CLIENT_ID and MICROSOFT_CLIENT_SECRET to offer Microsoft sign-in; the button stays hidden until they are set. Register https://<your-host>/auth/callback/microsoft as the redirect URI.
Anyone who only ever signed in with GitHub has no password. They are not locked out: the login page falls through to the password branch and the “Forgot password?” link works for them. Tell them to use it once.
MAIL_REPLY_TO_ADDRESS is optional. Reply-To stays inert until you set it, so nothing changes for self-hosted installs that leave it alone.

Full Changelog: https://github.com/relaticle/relaticle/compare/v3.5.4…v3.5.5