June 25, 2026
Safe harbor shelter guidance
- FeatureSafe harbor router — finds the nearest protected anchorages ranked along your route
- FeatureWeather-triggered shelter suggestions surface automatically in trip briefings, with one-tap reroute from the dashboard
- FeatureNew safe harbors API for querying protected anchorages along any route
- FixDeparture-window forecast fetch reliability fix
June 21, 2026
Security fix & free-tier cleanup
- SecurityClosed an open-redirect vulnerability in the login page's returnTo handling — redirects to external domains are now rejected
- FixCrew invite acceptance now lands on the correct boat subdomain dashboard instead of falling back to the generic login page
- FixMobile app login now auto-accepts pending crew invites, matching web login behavior
- FixFree plan pricing card corrected to list only the two currently available locations (Annapolis & Baltimore)
- ImproveServer-side caching for NOAA chart tiles and metadata, with optional Cloudflare R2/CDN backing for faster global chart loading
- FixHero heading was invisible in light theme
June 20, 2026 v1.4.0
Crew access & departure windows
- FeatureBoat membership RBAC — invite crew with roles (admin, editor, captain, crew, viewer) and grant dashboard access without sharing your login
- FeatureMember & invite API — add/remove members, send email invites, accept by token
- FeatureDeparture windows endpoint — scores optimal leave times from NOAA hourly wind and your boat's polar
- FixPolar target-speed calculation — corrected argument order affecting departure window scores
- FixDashboard loading — api.js must load before inline script; CI guard prevents regression
- SecurityP1 hardening — auth rate limits, JWT Bearer support, anti-enumeration register, conditions rate limiting
- Improve454 API tests — new boat membership and RBAC permission coverage
May 19, 2026 v1.3.1
Aurora dashboard loading fix
- FixRestored authenticated dashboard loading after a malformed script stopped boat dashboards at the loading screen
- ImproveVerified the production deploy on the Aurora subdomain after CloudFront invalidation
May 4, 2026 v0.0.4
Marine-aware departure decision tool
- FeatureSafety briefing card with crew preparedness assessment
- FeatureRoute analysis for trip briefings — wind angle, distance, bearing
- FeatureMarine alert classification — gale, SCA, storm warnings
- FeatureSCA compound risk scoring (solo + night + gusts = no-go)
- FeatureDepth window calculation with shoal risk detection
- FeatureWind-against-tide opposition detection
- FeatureBest departure window finder from 7-day forecast
- FeatureStripe webhook activation flow with test coverage
- FixXSS vulnerability in theme-mode.js — DOMParser + appendChild
April 8, 2026 v0.0.3
Dashboard map layers & safety features
- FeatureSafety Briefing Card — PFD, hypothermia, thermal protection alerts
- FeatureRoute analysis with wind angle to course calculation
- FixNOAA chart tiles — layer ordering, CSP, and minZoom alignment
- FixDashboard map layer ordering — seamark visibility and WMS zoom range
- FixServer startup crash from stray top-level code in server.ts
April 4, 2026
Login & authentication hardening
- FixDouble-login on subdomain redirect — API calls through CloudFront
- FixLogin overlay hanging on "Signing in…" for paid customers
- FixNull-guard helpers and button state management on login re-show
- ImproveLoading spinner on sign-in buttons with proper cleanup
- SecurityDEBUG_AUTH logging for session persistence diagnosis
- ImproveGitHub Actions upgraded to Node.js 24-compatible versions
April 3, 2026 v0.0.2
Performance, security & test foundation
- FeaturePerformance controls — timeouts, retries, rate limiting
- FeatureRoadmap published — phased feature plan for captains & crew
- FixAuth hardening — Ko-fi token, session secret, startup guardrails
- FixPrivate boat endpoints protected with auth + ownership checks
- FixAPI deduplication — single source of truth in routes.ts
- ImproveComprehensive test coverage for sailing engine, polars, and auth
- ImproveOnboarding flow — memberDestination for frontend shell transition