Changelog

Features, improvements, and fixes in every release.

v1.4.0March 29, 2026
Skill evals and setup hardening
Every skill now ships with eval definitions for repeatable quality measurement. Setup flow hardened for edge cases in SSH detection and JSON escaping.
Added
- Eval definitions (evals.json) added to 15 skills with pass/fail expectations and baseline scorecardFeature
- Anthropic skill-creator eval plugin integrated for automated trial runs during skill developmentFeature
- Design system viewer upgraded to flat shared-border grid layout with richer icon, token, and component visualsFeature
Changed
- Improved copy-review skill based on findings from the initial eval runImprovement
- Aligned eval expectations with actual script behavior for mixed-format parsing and deduplicationImprovement
Fixed
- Hardened setup flow for SSH URL auto-detection and JSON escaping edge casesFix
- Fixed prepare-pr to correctly skip merged and closed PRs when detecting existing PRsFix
v1.3.0March 27, 2026
Monorepo consolidation and middleware pipeline
Four major refactors flatten the project structure into fewer packages. Composable middleware pipeline replaces boilerplate across all AI route handlers. AI-powered CI workflows for migration review and bundle analysis.
Added
- Composable middleware pipeline for AI route handlers with auth, rate-limit, and validation presetsFeature
- AI migration reviewer and bundle analyzer CI workflows that flag regressions in pull requestsFeature
- Claude Code hooks upgraded to AI-powered quality gates using Haiku instead of regexFeature
- Billing webhook handlers decoupled from email templates via a notification facadeFeature
Changed
- Consolidated packages/ai, packages/types, and packages/utils into apps/web for fewer cross-referencesImprovement
- Unified lib/stripe and lib/webhooks/stripe into lib/billing, centralized sanitization in lib/sanitizeImprovement
Fixed
- Fixed command injection in getDiffForFiles by replacing execSync shell interpolation with execFileSync argument arrayFix
- Patched environment variable leakage in notifications testFix
v1.2.0March 23, 2026
Security and observability
12 security improvements across auth, rate limiting, and CSP. Structured JSON logging via pino on all API routes. New planning skills for Claude Code.
Added
- 12 security hardening improvements: rate limiting fails closed, CSP Level 3, CSRF validation, GDPR-compliant log redaction, and tighter error responsesFeature
- Structured JSON logging via pino across all API routes with request context and stack tracesFeature
- New Claude Code skills: /think for structured ideation, /prd for product specs, /health for codebase auditsFeature
- JSON-LD structured data on public pages for search engine rich snippetsFeature
Changed
- Migrated from pnpm 9 to pnpm 10Improvement
- Upgraded @ai-sdk/anthropic from v2 to v3, plus 19 dependency updates including 4 major versionsImprovement
- Patched Next.js to 16.1.7 (security advisory GHSA-mq59-m269-xvcx)Improvement
Fixed
- Fixed admin webhook replay to use dedicated secret with timing-safe comparisonFix
v1.1.0March 16, 2026
Command shortcuts and upstream sync
5 short command aliases for daily workflows. Smarter /update skill for pulling Sinter improvements. Security patches for tar, flatted, and undici.
Added
- 5 short command aliases: /commit, /pr, /cleanup, /learn, /verifyFeature
- Adopted Claude Code native features: worktrees, plan mode, and background agentsFeature
- PR creation now documents draft-by-default behavior, with --ready flag for non-draftFeature
Changed
- Improved /update skill with better conflict resolution and clearer outputImprovement
- CI runners now configurable via repository variable (vars.RUNNER) with ubuntu-latest fallbackImprovement
Fixed
- Resolved tar symlink traversal vulnerability (GHSA-9ppj-qmqm-q256)Fix
- Patched flatted and undici vulnerabilities via pnpm overridesFix
v1.0.0March 9, 2026
Initial release
Production-ready Next.js starter built for Claude Code. Auth, payments, email, design system, testing, CI/CD, and 22 built-in slash commands.
Added
- Supabase Auth with email/password, magic links, and OAuth providersFeature
- Stripe payments with webhooks and subscription managementFeature
- React Email templates with Resend for transactional emailFeature
- Token-based design system with interactive component viewer at /designFeature
- Playwright E2E tests, Vitest unit tests, and AI-powered test agentsFeature
- GitHub Actions CI/CD pipeline with quality gatesFeature
- 22 built-in Claude Code slash commands, skills, agents, and verification protocolFeature
- Pre-commit hooks, pre-push checks, and pnpm doctor health checkFeature

Start building with Sinter

Pay once. Own the code. Updates included.

Get Sinter: $249

Pay once. Own the code. Updates included.

Changelog

Skill evals and setup hardening

Added

Changed

Fixed

Monorepo consolidation and middleware pipeline

Added

Changed

Fixed

Security and observability

Added

Changed

Fixed

Command shortcuts and upstream sync

Added

Changed

Fixed

Initial release

Added

Start building with Sinter

Changelog

Skill evals and setup hardening

Added

Changed

Fixed

Monorepo consolidation and middleware pipeline

Added

Changed

Fixed

Security and observability

Added

Changed

Fixed

Command shortcuts and upstream sync

Added

Changed

Fixed

Initial release

Added

Start building with Sinter