All notable changes to this project will be documented in this file.
- Hardened CI with npm caching, explicit type-checking, job concurrency control, and more reliable Playwright execution.
- Updated Playwright to boot the correct local server in both local and CI runs.
- Removed the remaining lint warnings from consent, inventory, and recipe-engine modules.
- Reduced initial client work by lazy-loading non-critical global UI such as the command palette, install prompt, cookie banner, and bottom navigation.
- Code-split event-booking and subscription action widgets so critical pages can stream sooner.
- Trimmed product and search API payloads with explicit Prisma
selectqueries. - Added Next.js bundle-level optimization for
lucide-reactimports and removed theX-Powered-Byheader.
- Replaced legacy password storage with scrypt-based hashing while preserving seamless login migration for existing accounts.
- Enforced MFA during login, including backup-code support and clearer login UI guidance.
- Hardened OAuth token verification so only explicit development mock tokens or verified Google tokens are accepted.
- Expanded auth/security test coverage with dedicated password-migration and OAuth verification tests.
- Added an accessible command palette with quick navigation, route shortcuts, and live product search via
/api/search.
- Improved keyboard navigation and discovery in the navbar with a fast-search trigger.
- Improved accessibility across newsletter, forum, event-booking, and ship-home flows with explicit labels, live regions, and clearer control names.
- Added a Pantry Copilot planning brief to search results to turn discovery into a guided basket-building flow.
- Added route-specific loading screens for community, events, gifts, recipes, and tourism.
- Added dedicated route-level error boundaries for cart, checkout, dashboard, orders, and products.
- Added repository standards files:
LICENSE,CHANGELOG.md, and.editorconfig.