Tribu

Highlights

• Adds Shared Home Display mode for wall tablets and dashboards, including secure display sessions and a dedicated display route.
• Adds the Shared Display layout composer with home-focused presets, live previews, and controlled slot editing.
• Polishes the display composer and dashboard presentation for a cleaner setup and day-to-day display experience.
• Adds managed calendar subscription feeds, manual ICS subscriptions, and an import preview flow.

Security and hardening

• Separates instance-level admin actions from family admin permissions.
• Blocks open registration after initial setup unless it is explicitly enabled.
• Hardens initial setup restore with a dedicated restore token and upload size limit.
• Enforces CalDAV and CardDAV scopes per collection type.
• Prevents the service worker from caching tokenized and sensitive runtime routes.
• Validates recipe source URL schemes and avoids rendering unsafe legacy URLs as links.
• Uses proxy-safe shopping WebSocket URLs.
• Hardens the frontend Docker image with deterministic installs, Next standalone output, and a smaller runtime dependency surface.
• Removes production stack trace and error detail exposure from the top-level client error boundary.

Fixes and reliability

• Improves household onboarding flow.
• Improves reminder delivery reliability.
• Strengthens calendar import provenance.
• Improves admin section navigation.

Validation

• Main branch checks passed for the release commit.
• E2E checks passed.
• Docker image build passed for backend and frontend.
• Production dependency audit for the frontend passed with no moderate-or-higher findings.