Changelog

v3.10.0 — Documentation Migration to Starlight

Released: February 2026

Note

Dedicated Documentation Site

• Migrated ~2900 lines of inline documentation to a standalone Astro Starlight site at docs.fjzippin.com
• 40 MDX pages organized in 12 sidebar groups (Overview, Infrastructure, Database, API, Auth, Security, Monitoring, TUGA Doors, Zippin, Hardware & Network, Design System, Release Notes)
• Full-text search via Pagefind
• Dark mode support with ported arch-* and doc-diagram-* CSS styles
• Deployed on Cloudflare Pages with @astrojs/cloudflare adapter
• Old /documentation URLs redirect to docs.fjzippin.com (301)
• Removed ~3400 lines from the main app (HTML, JS, CSS)

2026-02-26 — UI Select-Site Update

• Removed the arrow_forward icon from site cards
• Replaced inline border styling with CSS classes .ss-card-alert.offline and .ss-card-alert.warning
• Cleaner visual hierarchy for site status indicators

v3.9.0 — Platform Audit (Security, Robustness, UX, Accessibility)

Released: February 2026

Note

Security

• HMAC-SHA256 signed permission cache (server-side, PERM_HMAC_SECRET)
• Secrets masked by default — per-secret reveal with audit logging

Note

Robustness

• Centralized apiFetch() wrapper with timeout, error handling, GET request deduplication (5s TTL)
• Migrated home.js fetch calls (~20) to apiFetch

Note

DRY / Maintenance

• Centralized RPI mappings in src/js/utils/rpi-map.js (single source of truth for 5 files)
• Merged troubleshooting + error codes + escalation into tabbed Reference page

Note

UX & Performance

• Skeleton loading states on dashboard widgets
• Custom async confirm dialog (fjConfirm()) replacing native window.confirm()

Note

Accessibility

• aria-live on toast container for screen readers
• Skip-to-content link (visible on keyboard focus)
• Improved --gray-500 contrast ratio (4.48:1 → 5.5:1 WCAG AA)

v3.8.2 — Dual-Source Zippin Architecture

Released: February 2026

Note

• Dual Zippin sources: onsite Gateway API (CF Tunnel) + Cloud API (api.getzippin.com)
• 6 store status modes: UP, DOWN, BROKEN, CREW_ONLY, MAINTENANCE, HIBERNATE
• 2 new health endpoints: Zippin Gateway API + Zippin Cloud API (17 → 19)
• Gateway Info section on Zippin Store page
• Null-safe camera triggers when only Gateway is configured
• Per-section graceful fallback with “not configured” states

v3.8.1 — Quality, Observability & Developer Experience

Released: February 2026

Note

• Automated test suite (vitest) covering all API endpoints, middleware, auth, RBAC
• Alert notifications via Slack webhook for critical triggers
• CSV export on all data pages (logs, health, triggers, zippin, RPi snapshots)
• RBAC audit trail — rbac_audit_log table (migration v14)
• Smart alerts with moving average anomaly detection
• Code splitting with lazy-loaded widget chunks
• API versioning — all endpoints prefixed with /api/v1/

v3.8.0 — Zippin Integration & AI Improvements

Released: February 2026

Note

Zippin Cloud API Integration

• New API proxy (/api/zippin) for store status, cameras, sessions, carts
• Dedicated Zippin Store monitoring page with status banner, camera grid, sessions table, snapshot history
• 3 automated triggers: store offline, camera offline, low camera coverage
• Dashboard widgets: store status doughnut + camera grid
• DB migration v12: zippin_snapshots table
• Cron worker polls Zippin every 3 minutes with 30-day retention cleanup

Note

AI Support — “Solve with AI” (Beta)

• New Solve with AI button on error codes and troubleshooting pages
• Contextual AI assistance powered by Langflow RAG pipeline
• AI Support page with conversation history and knowledge base search
• Status: Beta — responses may be incomplete or require validation

Note

Documentation & UI

• All diagrams converted from Mermaid to clean HTML/CSS (removed mermaid dependency)
• Corrected network topology (USW-Pro-24-PoE, full MikroTik chain)
• API Health: Zippin Cloud gets its own group
• Notification panel: Zippin alerts with dedicated store icon
• Added Zippin Store Monitoring documentation section
• Added Release Notes section

v3.7.9 — Security Hardening

Released: February 2026

Note

• JWT signature verification (RS256) against Cloudflare JWKS
• CSRF protection via Origin header validation
• Tiered rate limiting on all API endpoints
• Removed hardcoded infrastructure from HTML source
• Cache headers + reduced polling intervals

v3.7.0 — Multi-Site & i18n

Released: January 2026

Note

• Full internationalization (EN/FR) with i18next
• Site filtering across operations, dashboard, and monitoring
• Onboarding flow with team system
• Profile page with user preferences
• ES module migration for all page scripts

v3.0.0 — Initial Release

Released: December 2025

Note

• Control Center MPA on Cloudflare Pages
• TUGA door monitoring (4 RPi controllers)
• Operations dashboard with real-time status
• Trigger alerts system + RBAC
• Receipt API monitoring (Azure)
• UniFi network monitoring
• Dark mode with MD3 design system