0.13.4: Private distribution + portal-gated downloads
Downloads are now portal-only. The .mcpb moved off the public GitHub mirror to a private Railway-backed bucket. Unauthenticated requests to the download endpoint are redirected to sign in or create a free account.
What shipped
•Downloads are now portal-gated. /api/mcpb-download requires a valid session cookie — either from a Stripe contribution or from the free account-creation flow. Unauthenticated hits get redirected to /download with a 'Sign in first' banner so the path to the binary is always clear.
•The .mcpb file itself moved off the public orbit-for-claude-dl GitHub mirror onto a private Railway-backed Tigris bucket. Each download returns a 5-minute signed URL to the bucket — the raw bucket endpoint is never exposed, and shared links expire quickly.
•Installed MCPBs check for updates via a new public endpoint at /api/orbit/latest-version (proxies the bucket's manifest). Version-check still works after the old GitHub mirror is retired.
•CI now publishes every release directly to the bucket (no more DL_REPO_TOKEN PAT to rotate). Distribution path: build on GitHub Actions → upload to bucket → website serves signed URL per authenticated download.