Skip to content

CHANGELOG.md

Latest commit

 

History

History
409 lines (311 loc) · 14.1 KB

CHANGELOG.md

File metadata and controls

409 lines (311 loc) · 14.1 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

[Unreleased]

Added

  • CONTRIBUTING.md and SECURITY.md
  • README badges (CI, license, Bun, TypeScript, Cloudflare Workers)

Changed

  • README: How it works (request flow, tenancy, realtime, auth, security, offline)
  • CHANGELOG.md moved to repository root

Removed

  • CodeRabbit pull request review badge and agent references
  • docs/ directory (unused images and index)
  • ARCHITECTURE.md (content folded into README)
  • scripts/migrate-to-d1.ts (one-time PostgreSQL → D1 migration; platform migration complete)

[0.4.0] - 2026-05-19

Added

  • Financial accounts — financial_accounts table; optional transactions.account_id and reconciliation fields (0005_financial_accounts.sql)
  • Home-currency aggregates and shared visibility helpers for budget views
  • Scheduled recurring transaction processing (worker.ts daily cron)
  • Budget category / recurring match API
  • CSV transaction export and JSON bulk import (POST /api/transactions/import)
  • Root LICENSE: GNU Affero General Public License v3.0 (AGPL-3.0); license field in workspace package.json files

Changed

  • React Router v7 framework mode — HTTP served by React Router (createRequestHandler) from worker.ts; no separate Hono app
  • worker.ts owns scheduled(), security headers, Durable Object exports, and /ws upgrades
  • AppLoadContext exposes context.cloudflare and context.app (removed Hono bridge)
  • /api/* JSON via React Router resource routes → server/api/* handlers
  • README refreshed for current Cloudflare layout and scripts
  • CI: GitHub Actions runs lint, typecheck, and test only (no automated deploy); actions/checkout v6
  • Dependency updates (React Router 7.14, Wrangler 4.93, ESLint 10, Vitest 4, TypeScript 6, and related)

Fixed

  • Worker deploy when import.meta.env is undefined
  • Worker React Router request handler / server-build alias (Wrangler)
  • Grocery item toggle flicker
  • Recurring transaction edge cases and restore pending limit
  • Restore fallback status codes; malformed JSON request bodies return 400
  • Audit: falsy snapshot serialization in withAudit; audit_logs household scoping notes for legacy rows
  • Security and validation hardening (#38)

Removed

  • hono, @hono/clerk-auth, @hono/vite-dev-server, hono-react-router-adapter, and related middleware/routing
  • Cloudflare preview environment configuration from wrangler.jsonc

[0.3.0] - 2026-03-09

Breaking Changes

  • Complete platform migration from self-hosted Docker/Next.js/PostgreSQL to Cloudflare Workers/D1/KV/Durable Objects
  • Authentication migrated from Authentik (self-hosted OIDC) to Clerk (SaaS)
  • Database migrated from PostgreSQL to Cloudflare D1 (SQLite)
  • All money values now stored as integer cents (not floats)
  • All timestamps now stored as integer milliseconds

Added

  • Cloudflare Workers Runtime

    • Single Worker deployment with React Router v7 SSR and Cloudflare Worker entrypoints
    • Cron Trigger for weekly audit log pruning

  • Cloudflare D1 Database

    • 13 tables converted from pg-core to sqlite-core (Drizzle ORM)
    • Application-level RLS via scopeToHousehold() query filter
    • D1 migration file: packages/db/migrations/0000_faithful_cardiac.sql

  • Durable Objects (Real-time)

    • HouseholdDO WebSocket hub using Hibernation API
    • Sender filtering on broadcast, session invalidation
    • broadcastToHousehold() helper with optional sender skip

  • KV-backed Infrastructure

    • Session cache (24h TTL) replacing Valkey
    • Rate limiting (4 presets: MUTATION, BULK, SENSITIVE, READ)

  • Clerk Authentication

    • @clerk/react-router middleware and loader integration
    • Auto-provisioning: first login creates household + user

  • React Router v7 SSR

    • All routes with server-side loaders querying D1
    • requireSession() / getEnv() loader helpers
    • Soft auth middleware for SSR (doesn't reject unauthenticated)

  • Full Component Suite

    • Grocery list with offline sync, optimistic UI, tag management
    • Transaction list with infinite scroll and add/edit/delete
    • Budget list with spending progress bars and CRUD
    • Budget charts (pie chart by category, month-over-month bar chart)
    • Recurring transaction rules with CRUD and toggle
    • Asset and debt cards with add/edit/delete dialogs
    • Calendar view with transaction and grocery events
    • Settings page with household rename, member role manager
    • Account restore with fresh-start option

  • Offline/PWA

    • Dexie (IndexedDB) for grocery offline storage
    • Chunked batch sync (max 10 mutations per request)
    • Conflict resolution (server-wins with field-level merge)
    • vite-plugin-pwa service worker (NetworkFirst API, CacheFirst static)

  • Exchange Rates

    • 3-tier cache: Cache API → D1 → external API
    • Historical rate lookup for backdated transactions

  • Data Migration Script

    • scripts/migrate-to-d1.ts: PostgreSQL → D1 migration
    • Resumable with checkpoint file, dry-run mode
    • Transforms: timestamps → ms, amounts → cents, booleans → 0/1

  • CI pipeline

    • GitHub Actions on main: lint, typecheck, test (no automated deploy in this repository)

Removed

  • Docker infrastructure (Dockerfile, docker-compose, Makefile)
  • Next.js App Router (apps/web/)
  • Hono API server (apps/api/)
  • PostgreSQL and all PG-specific code (triggers, RLS policies, set_config)
  • Valkey/Redis (ioredis) for sessions and pub/sub
  • Authentik OIDC (openid-client)
  • Web Push notifications (web-push)
  • Serwist service worker (@serwist/next)
  • Turborepo (turbo.json)
  • System cron scripts (scripts/audit-retention.sh, scripts/backup.sh)

Changed

  • Money: numeric(precision, scale) → integer (cents)
  • Timestamps: timestamp with time zone → integer (milliseconds)
  • Booleans: boolean → integer({ mode: "boolean" })
  • Dates: date → text (ISO 8601 YYYY-MM-DD)
  • JSON: jsonb → text({ mode: "json" })
  • Enums: pgEnum → text({ enum: [...] }) with const arrays
  • IDs: uuid().defaultRandom() → text().$defaultFn(() => crypto.randomUUID())

[0.2.3] - 2026-01-24

Infrastructure

  • Standalone Authentik Stack

    • Separate Authentik identity provider to ~/authentik/ with dedicated PostgreSQL and Valkey
    • Independent scaling and management from the amigo application stack
    • Data migration from shared amigo PostgreSQL to dedicated instance

  • Service Isolation

    • Use explicit container names (amigo-postgres, amigo-valkey) in connection strings
    • Prevents DNS conflicts with other services on shared caddy-network
    • All three stacks (Caddy, Authentik, Amigo) now fully isolated

Changed

  • Docker Compose

    • Remove Authentik services from amigo docker-compose.yaml
    • Update DATABASE_URL to use amigo-postgres instead of postgres
    • Update VALKEY_URL to use amigo-valkey instead of valkey

  • Makefile

    • Remove Authentik-related make targets (authentik-up, authentik-down, etc.)
    • Simplify to core amigo stack management only

Fixed

  • Unused args parameter in apps/api/src/lib/redis.ts (lint error)
  • ESLint now ignores bundled sw.js service worker file

Documentation

  • Update ARCHITECTURE.md with standalone service architecture
  • Add container names reference table
  • Update README.md with external service prerequisites
  • Update CLAUDE.md with standalone service commands
  • Remove redundant caddy-external-setup.md (consolidated into ARCHITECTURE.md)

[0.2.2] - 2026-01-24

Changed

  • Grocery Module Refactoring
    • Break down monolithic 1540-line GroceryList component into focused modules
    • New structure under apps/web/src/components/groceries/:
      • constants.ts: Tag colors and date formatting helpers
      • types.ts: Shared types (GroceryItemWithTags, OptimisticAction)
      • grocery-icons.tsx: Extracted SVG icon components
      • tag-badge.tsx: Reusable tag badge component
      • tag-selector.tsx: Unified TagSelector (merged global + item modes)
      • grocery-item.tsx: Individual item row with long-press handling
      • history-section.tsx: Collapsible history with date grouping
      • date-picker-modal.tsx: Purchase date picker modal
      • use-grocery-logic.ts: Custom hook for state, actions, WebSocket
      • grocery-list.tsx: Clean container component
      • index.ts: Public exports

Added

  • Purchase Date Editing
    • Long-press checkbox to set custom purchase date
    • updatePurchaseDate server action

Fixed

  • Button alignment for tag and delete icons on grocery items

Documentation

  • Remove PII from documentation (personal names)
  • Replace hardcoded domain with yourdomain.com placeholder
  • Add APP_DOMAIN environment variable reference
  • Clarify bun run test vs bun test usage in CLAUDE.md

[0.2.1] - 2026-01-22

Added

  • Branding

    • Add Amigo logo throughout the app (navbar, login, empty states, loading)
    • Reusable EmptyState and Loading components with logo

  • Database Backup

    • Automated PostgreSQL backup script with 7-day rotation
    • Makefile targets: db-backup, db-backup-list, db-restore

  • Audit Log Retention

    • Automated retention script with configurable period
    • Batch deletion to prevent long-running transactions
    • Makefile targets: audit-stats, audit-prune, audit-prune-dry

Changed

  • Caddyfile Split

    • Separate Caddyfile.prod (stricter CSP) and Caddyfile.dev (allows HMR)
    • CADDYFILE env var for docker-compose selection

  • CI/CD

    • Test coverage enforcement with Istanbul provider (Bun-compatible)
    • Vitest upgraded to v4.0.17

Fixed

  • Privacy: Recurring transaction rules now scoped to individual users
  • Resilience: API server starts in degraded mode when Valkey unavailable
  • Mobile UX: Delete buttons visible on touch devices, larger color swatch targets
  • PWA: Viewport meta tag, manifest.json, apple-touch-icon

[0.2.0] - 2026-01-22

Security

  • Security Remediation (P1-P5)
    • Rate limiting with Redis + in-memory fallback for API and Server Actions
    • Input validation standardized with Zod schemas and length constraints
    • Error message sanitization to prevent enumeration attacks
    • WebSocket session revalidation (5-min interval) with logout propagation
    • Structured security event logging via logSecurityEvent()
    • Environment validation at startup (VALKEY_URL, DATABASE_URL)
    • CORS wildcard detection warning in production
    • VAPID key presence warning for push notifications

Added

  • Account Recovery

    • Restore deleted accounts with data reconnection
    • Fresh Start option: transfer data to owner, rejoin as member
    • 15-minute pending restore token in Valkey
    • Security audit logging for restore operations

  • Real-Time Sync

    • WebSocket connection with exponential backoff reconnection
    • Valkey pub/sub for cross-instance broadcasting
    • Delta sync fetching only updated_at > lastSyncTimestamp
    • Ping/pong keepalive (30s interval)

  • Push Notifications

    • Web Push with VAPID keys
    • 7-second batching window for grouped notifications
    • Smart message generation ("Added 3 items")
    • Actor filtering (skip sender)
    • Stale subscription cleanup (>7 days inactive)

  • Offline Support (PWA)

    • Dexie (IndexedDB) for grocery storage
    • Sync queue with retry logic (max 5 attempts)
    • Conflict resolution: server-wins, local-wins, merge strategies
    • Service Worker for offline capability

  • Mobile UX

    • Touch-optimized grocery list
    • Pull-to-refresh
    • Bottom navigation
    • Viewport meta tags for PWA

Fixed

  • Hardcoded URLs replaced with environment variables
  • WebSocket hook ESLint error resolved
  • Recurring transaction rules scoped to individual users

[0.1.0] - 2026-01-01

Added

  • Multi-Currency Support

    • 5 currencies: CAD (default), USD, EUR, GBP, MXN
    • Exchange rate tracking per transaction
    • Home currency conversion display

  • Calendar Events

    • Event CRUD with date/time
    • Household-scoped events

  • Recurring Transactions

    • Rule-based transaction generation
    • Frequency options: daily, weekly, monthly, yearly
    • User-scoped rules (private to creator)

  • Budget Management

    • Personal and shared budgets
    • Monthly spending tracking
    • Category-based allocation
    • Month-over-month comparison analytics

  • Assets & Debts Tracking

    • Private asset tracking per user
    • Private debt tracking per user
    • Net worth calculation

  • Audit Logging

    • PostgreSQL triggers for automatic change tracking
    • Old/new value capture (JSONB)
    • User attribution via session context
    • Record history queries

  • Grocery Tags

    • Color-coded store labels
    • Tag creation with color picker
    • Tag editing and deletion
    • Duplicate prevention

  • Dashboard

    • Overview page with key metrics
    • Budget summary
    • Recent transactions

  • Transaction Management

    • Infinite scroll with Hono RPC
    • Category filtering
    • Date range selection

  • Member Management

    • Role-based access: owner, admin, member
    • Role changes with permission checks
    • Member removal with data handling
    • Ownership transfer

  • Settings Page

    • Household name editing
    • Theme preference (light/dark/system)
    • App info display

  • Dark Mode

    • next-themes integration
    • System preference detection
    • CSS variables for theming

  • Authentik OIDC

    • Replaced Authelia with Authentik
    • OIDC with PKCE flow
    • Session management in Valkey (7-day TTL)
    • Automatic user provisioning

Infrastructure

  • Dev/Prod Hybrid Environment

    • Production: amigo.yourdomain.com
    • Development: dev-amigo.yourdomain.com
    • Shared PostgreSQL with separate databases
    • Shared Valkey for sessions
    • Caddy reverse proxy with DNS-01 SSL

  • CI/CD

    • Self-hosted GitHub Actions runner
    • Automated typecheck and tests
    • Docker build pipeline

[0.0.1] - 2025-12-01

Added

  • Initial monorepo setup with Turborepo
  • Next.js 15 with App Router
  • Hono API server for WebSockets
  • PostgreSQL 17 with Drizzle ORM
  • Valkey 8 for sessions
  • Basic grocery list CRUD
  • Household data isolation