August 16, 2026 v1.6.0
AI Briefing — your intelligent sailing co-pilot
- FeatureAI Briefing button on the dashboard — one tap generates a plain-English sailing narrative from live weather, tide, and boat data
- FeatureAI is boat-aware — briefing accounts for LOA, draft, displacement, keel type, and crew experience level
- FeatureAI synthesizes go/no-go verdict, wind-against-tide chop, depth windows, marine alerts, and crew preparedness into a single 3-paragraph verdict
- FeatureTL;DR verdict line — "GO / WAIT / NO-GO" with the one-sentence reason
- FeatureKey risks and departure advice highlighted in every briefing
- FeatureThumbs-up/down feedback on every briefing — helps train the model over time
- FeatureFreemium sample briefing shown to all subscribers — AI is always included
- FeatureAI is included in every paid plan — no add-ons, no separate AI tier
- FeatureServer-side LRU caching — identical conditions don't regenerate the same briefing
- FeatureRate-limited AI endpoint — 10 requests per 15 minutes to control inference costs
- ImproveSimplified to single SubscriptionPlan value, ai_enabled is always true for paid subscriptions
August 15, 2026 v1.5.0
Type-checking guardrails & boat inventory
- FeatureTypeScript tsc --noEmit type checking in CI pipeline — catches type errors before any deploy
- FeatureCI coverage reports with performance regression guards — tests fail on significant throughput drops (fixes #70)
- FeatureRoute catalog drift guard — CI validates every registered route has a test and handler entry
- FeatureShopping list and inventory management for boat supplies — track consumables, spares, and provisioning
- FeaturePre-departure safety gear inventory checklist — verify PFDs, flares, fire extinguishers, and VHF before casting off (closes #59)
- FeatureBoat-class-aware SCA safety engine — thresholds calibrated for larger/heavier vessels like cruisers and ketches
- FeatureRate limiting on crew SMS verify/confirm endpoints — auth rate controls cover the full crew pipeline
- FeatureMobile device token routes and logout — manage logged-in devices from the dashboard
- FixextractClientIp empty-string edge case — rate limiters no longer block valid requests on missing IPs
- FixCorrupted migration ordering — safety_gear tables isolated to their own migration after a v5/v6 collision on production DBs
- FixJWT config fallback — Lightsail production startup now falls back correctly when explicit env vars are absent
- FixDeploy reliability — user-mode systemd (no sudo), journald logging, auto-created log directories, systemd unit synced on every deploy
- ImproveFAQ expanded with 5 new questions covering departure windows, safe harbor routing, route planner, crew sharing, and float plans
- ImproveLiability disclaimers added across all site pages
- ImproveRate-limit and auth-throttle test coverage — new edge cases for device token routes and mobile logout
July 31, 2026
SMS crew verification & safety engine tuning
- FeatureTwilio SMS phone verification for crew contacts — confirm a crew member's phone before including them in safety briefings
- FeatureRate limiting on crew SMS verify/confirm endpoints
- FixSafety engine conservativeness — boat-class-aware thresholds prevent false no-go verdicts on larger vessels
July 19, 2026
R2 chart tile pipeline fix
- FixR2 chart tile upload switched from AWS CLI to rclone — reliable multipart uploads for the NOAA chart tile CDN pipeline
July 1, 2026
Trip-duration crew preparedness
- FeatureTrip duration aware crew preparedness scoring — safety briefings now factor trip length into readiness assessment (KAN-120)
June 25, 2026
Safe harbor shelter guidance
- FeatureSafe harbor router — finds the nearest protected anchorages ranked along your route
- FeatureWeather-triggered shelter suggestions surface automatically in trip briefings, with one-tap reroute from the dashboard
- FeatureNew safe harbors API for querying protected anchorages along any route
- FixDeparture-window forecast fetch reliability fix
June 21, 2026
Security fix & free-tier cleanup
- SecurityClosed an open-redirect vulnerability in the login page's returnTo handling — redirects to external domains are now rejected
- FixCrew invite acceptance now lands on the correct boat subdomain dashboard instead of falling back to the generic login page
- FixMobile app login now auto-accepts pending crew invites, matching web login behavior
- FixFree plan pricing card corrected to list only the two currently available locations (Annapolis & Baltimore)
- ImproveServer-side caching for NOAA chart tiles and metadata, with optional Cloudflare R2/CDN backing for faster global chart loading
- FixHero heading was invisible in light theme
June 20, 2026 v1.4.0
Crew access & departure windows
- FeatureBoat membership RBAC — invite crew with roles (admin, editor, captain, crew, viewer) and grant dashboard access without sharing your login
- FeatureMember & invite API — add/remove members, send email invites, accept by token
- FeatureDeparture windows endpoint — scores optimal leave times from NOAA hourly wind and your boat's polar
- FixPolar target-speed calculation — corrected argument order affecting departure window scores
- FixDashboard loading — api.js must load before inline script; CI guard prevents regression
- SecurityP1 hardening — auth rate limits, JWT Bearer support, anti-enumeration register, conditions rate limiting
- Improve454 API tests — new boat membership and RBAC permission coverage
May 19, 2026 v1.3.1
Aurora dashboard loading fix
- FixRestored authenticated dashboard loading after a malformed script stopped boat dashboards at the loading screen
- ImproveVerified the production deploy on the Aurora subdomain after CloudFront invalidation
May 4, 2026 v0.0.4
Marine-aware departure decision tool
- FeatureSafety briefing card with crew preparedness assessment
- FeatureRoute analysis for trip briefings — wind angle, distance, bearing
- FeatureMarine alert classification — gale, SCA, storm warnings
- FeatureSCA compound risk scoring (solo + night + gusts = no-go)
- FeatureDepth window calculation with shoal risk detection
- FeatureWind-against-tide opposition detection
- FeatureBest departure window finder from 7-day forecast
- FeatureStripe webhook activation flow with test coverage
- FixXSS vulnerability in theme-mode.js — DOMParser + appendChild
April 8, 2026 v0.0.3
Dashboard map layers & safety features
- FeatureSafety Briefing Card — PFD, hypothermia, thermal protection alerts
- FeatureRoute analysis with wind angle to course calculation
- FixNOAA chart tiles — layer ordering, CSP, and minZoom alignment
- FixDashboard map layer ordering — seamark visibility and WMS zoom range
- FixServer startup crash from stray top-level code in server.ts
April 4, 2026
Login & authentication hardening
- FixDouble-login on subdomain redirect — API calls through CloudFront
- FixLogin overlay hanging on "Signing in…" for paid customers
- FixNull-guard helpers and button state management on login re-show
- ImproveLoading spinner on sign-in buttons with proper cleanup
- SecurityDEBUG_AUTH logging for session persistence diagnosis
- ImproveGitHub Actions upgraded to Node.js 24-compatible versions
April 3, 2026 v0.0.2
Performance, security & test foundation
- FeaturePerformance controls — timeouts, retries, rate limiting
- FeatureRoadmap published — phased feature plan for captains & crew
- FixAuth hardening — Ko-fi token, session secret, startup guardrails
- FixPrivate boat endpoints protected with auth + ownership checks
- FixAPI deduplication — single source of truth in routes.ts
- ImproveComprehensive test coverage for sailing engine, polars, and auth
- ImproveOnboarding flow — memberDestination for frontend shell transition