What we shipped, version by version.

Single-domain dev, brand wordmark, real changelog

• ImprovementWeb app reverse-proxies /api/* to the API and /admin/* to the admin app so everything is same-origin during development.
• ImprovementAdmin app now mounts at /admin with a real Next.js basePath; internal links and asset URLs are prefixed automatically.
• NewBrand wordmark (dark + light variants) shipped via a shared <Logo> component and used across nav, footer, sidebars, and auth panels.
• NewFavicon (auto-generated <link rel="icon"> + apple-touch-icon) ships in both the web and admin apps.
• NewPublic changelog page at /changelog (this one) with tagged entries and version anchors.
• FixFooter cleanup: dropped Press and Status links; removed the lingering "all systems operational" badge that referenced a status page we never shipped.

Wix-style redesign, top to bottom

• NewDesign tokens (HSL palette, 6-color accent system, soft shadows, motion timings) shipped in @soc/config/tailwind and consumed by every app.
• NewMarketing nav with three-column hover mega-menus, mobile drawer, sticky 72px white bar.
• NewMega-footer with deep sitemap covering product, docs, use cases, company, and every legal document.
• NewComprehensive documentation section at /docs — quickstart, install, pair-device, concepts, builder, runs, full triggers and actions reference, DSL reference, denylist, troubleshooting, FAQ.
• NewBlog at /blog with category filter chips, featured post layout, prev/next navigation, and 5 substantive launch posts.
• NewAbout page (/about) covering principles, what we won't build, and the team.
• NewFull legal pack: ToS, Privacy, AUP, Cookie, Refund, DMCA, Sub-processors, Security, plus a /.well-known/security.txt.
• ImprovementAdmin pages restyled: dashboard tiles, user table with badge variants, segmented filter pills on abuse triage, moderation queue with denylist-violation rings.
• ImprovementApp sidebar redesigned with icon pill nav items, active state in Wix Blue, help card pinned at the bottom.

Workflow DSL expansion — variables, branches, loops

• NewNew nodes: control.if, control.loop (count + until modes), action.setVariable.
• NewExpression evaluator with arithmetic, string ops, comparison, logical, and regex match operators.
• NewTemplate substitution: every user-authored string field is run through {{var}} substitution before dispatch.
• ImprovementRun trace now carries the final variable scope, so debugging "why did this branch take this path" is one click in the dashboard.
• ImprovementHard cap on trace events (5000) prevents pathological runs from filling storage.
• FixCron matcher honors Vixie's DOM/DOW intersection quirk (when both fields are restricted, match if either matches).

Marketplace v1, webhooks, and admin operations

• NewTemplate marketplace: publish, install, rate, browse by category. 70/30 split on paid templates.
• NewOutbound webhooks with HMAC signing, automatic retry with backoff, and auto-disable after 10 consecutive failures.
• NewAdmin ops surface: ban/unban users, force email verification, impersonation with audit log, denylist editing, rate-limit overrides.
• NewAnnouncements: broadcast push messages with audience filters; published via the admin UI.
• NewFeature flags stored in Postgres, hot-reloaded via NOTIFY, evaluated against the user's plan and account age.
• SecurityAudit log made append-only via Postgres trigger; UPDATE/DELETE on audit_log now raise a database error.
• SecurityStep-up TOTP elevation for destructive admin paths (impersonate, refund, soft-delete, denylist edits).

Android client v1 — engine, triggers, distribution

• NewAccessibilityService-backed engine running the full DSL: 15 triggers, 20 actions, branching, looping.
• NewDual-channel distribution: Google Play (gated behind in-app accessibility disclosure) and direct APK from smartordercapture.com.
• NewIn-app updater on the direct channel polls the release manifest in DigitalOcean Spaces and prompts users on new versions.
• NewFCM push from the API triggers a workflow pull when a definition changes; sync latency under 5 seconds end-to-end.
• SecurityOn-device denylist enforcement. A compiled-in Set of Android package names refuses to be the target of any UI action.
• ImprovementFastlane lanes for Play internal track, beta promotion, production rollout, and direct-APK upload to Spaces.

Auth, billing, devices

• NewBetter-Auth with email/password, Google OAuth, passkeys. Email verification + password reset wired into the queued email worker.
• NewStripe checkout for Pro ($9/mo) and Team ($29/seat/mo). Customer portal handles cancellations and card updates.
• NewQR-code device pairing with HMAC-signed, 5-minute tokens. No password re-entry on the phone.
• NewSSE-backed dashboard: device heartbeats and run updates land in real time without polling.
• SecurityHIBP pwned-password check on signup and password reset. Passwords with ≥1 breach hit are refused.

Visual builder

• NewReact Flow-based canvas with node palette, inspector, live preview, and version history.
• NewClient-side validation via @soc/shared's Zod schema; offending nodes get a red ring and inline error.
• NewRun preview executes the workflow through the TS simulator adapter and renders the trace in real time.
• ImprovementSave triggers an automatic FCM push so paired phones pick up the new version without manual sync.

API + worker

• NewFastify + tRPC server with workflows, devices, runs, billing, abuse, templates routers.
• Newpg-boss workers for email delivery and marketplace moderation. No Redis dependency — queues live in Postgres.
• NewPer-user rate limiting on authenticated tRPC procedures, in addition to per-IP Fastify limiter.
• NewSpaces-signed PUT URLs for screenshot uploads; 30-day lifecycle on screenshot keys.

Monorepo scaffold

• Newpnpm workspaces + Turborepo. 5 apps (web, api, admin, worker, docs) and 5 shared packages (shared, db, workflow-engine, ui, config).
• NewDrizzle schema for 22 tables: users, sessions, workflows, runs, devices, templates, subscriptions, audit log, abuse reports, and platform-ops tables.
• NewWorkflow DSL: 15 triggers, 20 actions, fully versioned, Zod-validated, mirrored to Kotlin via scripts/ts-to-kotlin.ts.
• NewReference TypeScript interpreter with simulator adapter; CI runs golden-fixture tests on every PR.