Changelog

Security hardening sprint: enabled RLS across all 31 database tables, added PDF proxy SSRF protection, fixed 15MB DoS limit, and added invitation rate limiting.

• SecurityEnabled Row Level Security (RLS) + FORCE RLS on all 31 public tables in Supabase PostgreSQL
• SecurityPDF proxy now validates outbound URLs for SSRF (blocks localhost, RFC1918, link-local ranges)
• SecurityFile upload limit enforced at 15MB on both frontend and backend
• SecurityLab member invitation requests rate-limited to 20/day per user (Redis, HTTP 429)
• SecurityRemoved duplicate route definitions in auth router that caused route shadowing
• ImprovedFrontend invite error handler now correctly parses rate-limit detail objects
• ImprovedFrontend PDF upload UI displays correct 15MB limit (was showing 10MB)

Major feature additions: AI Research Digest, Lab Shared Library, Knowledge Graph, and Scoop Monitor.

• NewAI Research Digest: weekly AI-generated paper summaries matching your research interests (Starter+ plan)
• NewLab Shared Library: teams can share PDF collections and notes within their lab workspace
• NewKnowledge Graph: visualize connections between papers, authors, and concepts in your library
• NewScoop Monitor: alerts when a newly published paper closely matches your active research topic
• NewAnnotation viewer: highlight and comment on PDFs directly in the browser
• ImprovedPaper search now pulls from OpenAlex API with improved result ranking
• ImprovedLab activity feed shows member actions in real-time

Research pipeline modes: EXPLORE, DEVELOP, and VALIDATE launched for Starter and Lab plans.

• NewEXPLORE mode: validate a research idea in ~5 min using OpenAlex gap analysis (~$0.50/run)
• NewDEVELOP mode: 5-stage pipeline from Gap Analysis to Peer Review (~45 min, ~$3.00/run)
• NewVALIDATE mode: 6-check pre-submission QA pipeline including citations, structure, readability (~$8.00/run)
• NewConference Tracker: track key conferences and submission deadlines in your field
• NewAI Writing Assistant: structured prompt templates for academic writing
• FixFixed PDF metadata extraction for arXiv papers with complex DOI formats

Lab plans, peer review system, and smart alerts shipped.

• NewLab Plans: team workspaces with up to 20 members, shared library, and role management
• NewSmart Alerts: keyword and topic monitoring with daily email digests
• NewPeer Review system: structured feedback workflows within labs
• NewPersonal library supports PDF upload (up to 15MB), DOI/PMID/ArXiv import
• ImprovedCitation export: BibTeX, APA, IEEE formats all available
• SecurityAuthentication rebuilt with JWT + Supabase session management

STEMIND public launch with paper search, personal library, and DOI import.

• NewPaper search across arXiv, PubMed, and Semantic Scholar
• NewDOI / PMID / ArXiv direct import with auto-metadata extraction
• NewPersonal library with tags, notes, and collections
• NewUser accounts with email verification via Supabase Auth