[ [0x00] CHANGELOG ] VERSION HISTORY

VERSION HISTORY

Track every update, improvement, and fix. All changes are documented here.

[RSS FEED]

v1.3.1 - COMPONENT ARCHITECTURE CLEANUP

[0x01] v1.3.1 - COMPONENT ARCHITECTURE CLEANUP2026-01-22

[CHANGED]

-**Clean /ui/ Directory** - Moved 10 business logic components out of /ui/ to feature directories (billing/, auth/, admin/, etc.). WHY: /ui/ should only contain stateless primitives that customers can safely import without side effects.
-**New /charts/ Directory** - Consolidated 8 chart components (bar, line, area, pie, funnel, gauge, sparkline, donut) into dedicated directory. WHY: Charts are data visualization components, not UI primitives - separating them makes the architecture clearer.
-**card.tsx Split** - Reduced from 890 lines to 250 lines; marketing components moved to terminal-card.tsx. WHY: Large files are harder to maintain and understand. Card primitives should be separate from marketing-specific components.

[FIXED]

-/ui/ now contains ONLY primitives (62 files) - no business logic. WHY: Clear separation makes it easier for customers to understand what they can safely import and customize.

[REMOVED]

-**Duplicate cookie-consent** - Removed /ui/cookie-consent.tsx in favor of /components/cookie-consent/ directory. WHY: The directory version was more robust with better GDPR compliance features.

v1.3.0 - INFRASTRUCTURE IMPROVEMENTS

[0x02] v1.3.0 - INFRASTRUCTURE IMPROVEMENTS2026-01-07

[CHANGED]

-Session cache TTL reduced from 5 minutes to 30 seconds for faster security event propagation
-Bot detection threshold raised from 50% to 70% to reduce false positives
-CSP `strict-dynamic` removed to prevent third-party script injection

[FIXED]

-CORS no longer falls back to localhost origins in production

[SECURITY]

-**HMAC-Signed Impersonation** - Admin impersonation cookies now cryptographically signed to prevent tampering
-**Email Change Verification** - Email updates now require verification before taking effect (prevents account takeover)
-**XSS Prevention** - HTML escaping added to all email templates with user data
-**Atomic Password Reset** - Token consumption now atomic to prevent race conditions
-**IP Validation** - Rate limiting now validates IP format to prevent header injection bypass
-**Token Enumeration Prevention** - Generic error messages prevent invite token enumeration
-**DOMPurify Integration** - HTML sanitization now uses DOMPurify (isomorphic-dompurify)
-**Timing-Safe CSRF** - CSRF comparison now uses crypto.timingSafeEqual
-**ReDoS Prevention** - SQL injection regex patterns refactored to prevent ReDoS attacks

v1.2.0 - M3 TYPOGRAPHY SYSTEM

[0x03] v1.2.0 - M3 TYPOGRAPHY SYSTEM2026-01-04

[ADDED]

-**M3 Type Scale** - Complete Material Design 3 typography tokens (display, headline, title, body, label)
-**Size Variants** - All categories now have l/m/s sizes (e.g., `text-headline-l`, `text-body-m`)
-**Display XL** - New 88px/96px display size for hero sections
-**Code Typography** - Dedicated code-l/m/s tokens for terminal output

[CHANGED]

-Line-heights now use fixed pixel values per M3 spec (not ratios)
-Font weights aligned to M3 standards (500 for display/headline)
-Responsive scaling for screens under 600px width
-Design system primitives updated with M3-aligned font sizes

[FIXED]

-Letter-spacing values corrected per M3 specification

v1.1.0 - FONT PAIRINGS AND ACCESSIBILITY

[0x04] v1.1.0 - FONT PAIRINGS AND ACCESSIBILITY2025-12-27

[ADDED]

-**Bidirectional Font Pairings** - 34 display/body font combinations for headlines and content
-**6 FUI Themes** - Blueprint, Cyberpunk, Navigator, Phosphor, Holographic, Infrared
-**Code Syntax Highlighting** - Complete `--code-*` variables for all 18 themes
-**Extended Chart Colors** - `chart-6` through `chart-9` added to all themes
-**Style Guide Template** - Comprehensive design system reference in `/library`

[CHANGED]

-All 18 themes now pass WCAG AA accessibility audit
-FUI theme border contrast improved (3:1 minimum for UI components)

[FIXED]

-Blueprint theme border contrast (45% → 55%) for WCAG 3:1
-Cyberpunk theme border contrast (25% → 38%) for WCAG 3:1
-Navigator theme border contrast (30% → 36%) for WCAG 3:1
-Phosphor theme border contrast (25% → 35%) for WCAG 3:1
-Red/Infrared theme code comment contrast for readability

v1.0.1 - DYNAMIC RADIUS SYSTEM

[0x05] v1.0.1 - DYNAMIC RADIUS SYSTEM2025-12-25

[CHANGED]

-**Dynamic Border Radius System** - Components now use `mode.radius` which maps to CSS `var(--radius)`, allowing themes to control border radius dynamically
-All 78+ UI components updated to use `mode.radius` instead of hardcoded `rounded-none`
-Design system documentation comprehensively updated across 18+ files

[FIXED]

-Calendar component layout and centering issues
-ScrollArea radius applied to correct element (outer container)
-InputOTP spacing when rounded
-Progress bar height and radius support
-Table headers no longer break when themes use rounded corners

[REMOVED]

-Sticky CTA bar from landing pages (component retained for optional use)

v1.0.0 - INITIAL RELEASE

[0x06] v1.0.0 - INITIAL RELEASE2025-12-24

[ADDED]

-78+ production-ready UI components
-12 terminal color themes
-Multi-provider payments (Stripe, Polar, Lemonsqueezy)
-NextAuth v5 authentication with session management
-Full TypeScript support
-Prisma 7 with PostgreSQL
-Resend email integration
-Terminal-first design system
-Internationalization support (6 languages)
-PostHog analytics integration
-Comprehensive test suite (Vitest + Playwright)
-Security middleware with rate limiting and bot detection
-Audit logging for sensitive operations

[SECURITY]

-Global rate limiting on all API routes
-Bot detection on authentication routes
-User enumeration prevention
-CSRF protection
-Session versioning for security events

[EOF] - End of changelog

v1.3.1 - COMPONENT ARCHITECTURE CLEANUP

[0x01] v1.3.1 - COMPONENT ARCHITECTURE CLEANUP2026-01-22

[CHANGED]

-**Clean /ui/ Directory** - Moved 10 business logic components out of /ui/ to feature directories (billing/, auth/, admin/, etc.). WHY: /ui/ should only contain stateless primitives that customers can safely import without side effects.
-**New /charts/ Directory** - Consolidated 8 chart components (bar, line, area, pie, funnel, gauge, sparkline, donut) into dedicated directory. WHY: Charts are data visualization components, not UI primitives - separating them makes the architecture clearer.
-**card.tsx Split** - Reduced from 890 lines to 250 lines; marketing components moved to terminal-card.tsx. WHY: Large files are harder to maintain and understand. Card primitives should be separate from marketing-specific components.

[FIXED]

-/ui/ now contains ONLY primitives (62 files) - no business logic. WHY: Clear separation makes it easier for customers to understand what they can safely import and customize.

[REMOVED]

-**Duplicate cookie-consent** - Removed /ui/cookie-consent.tsx in favor of /components/cookie-consent/ directory. WHY: The directory version was more robust with better GDPR compliance features.

v1.3.0 - INFRASTRUCTURE IMPROVEMENTS

[0x02] v1.3.0 - INFRASTRUCTURE IMPROVEMENTS2026-01-07

[CHANGED]

-Session cache TTL reduced from 5 minutes to 30 seconds for faster security event propagation
-Bot detection threshold raised from 50% to 70% to reduce false positives
-CSP `strict-dynamic` removed to prevent third-party script injection

[FIXED]

-CORS no longer falls back to localhost origins in production

[SECURITY]

-**HMAC-Signed Impersonation** - Admin impersonation cookies now cryptographically signed to prevent tampering
-**Email Change Verification** - Email updates now require verification before taking effect (prevents account takeover)
-**XSS Prevention** - HTML escaping added to all email templates with user data
-**Atomic Password Reset** - Token consumption now atomic to prevent race conditions
-**IP Validation** - Rate limiting now validates IP format to prevent header injection bypass
-**Token Enumeration Prevention** - Generic error messages prevent invite token enumeration
-**DOMPurify Integration** - HTML sanitization now uses DOMPurify (isomorphic-dompurify)
-**Timing-Safe CSRF** - CSRF comparison now uses crypto.timingSafeEqual
-**ReDoS Prevention** - SQL injection regex patterns refactored to prevent ReDoS attacks

v1.2.0 - M3 TYPOGRAPHY SYSTEM

[0x03] v1.2.0 - M3 TYPOGRAPHY SYSTEM2026-01-04

[ADDED]

-**M3 Type Scale** - Complete Material Design 3 typography tokens (display, headline, title, body, label)
-**Size Variants** - All categories now have l/m/s sizes (e.g., `text-headline-l`, `text-body-m`)
-**Display XL** - New 88px/96px display size for hero sections
-**Code Typography** - Dedicated code-l/m/s tokens for terminal output

[CHANGED]

-Line-heights now use fixed pixel values per M3 spec (not ratios)
-Font weights aligned to M3 standards (500 for display/headline)
-Responsive scaling for screens under 600px width
-Design system primitives updated with M3-aligned font sizes

[FIXED]

-Letter-spacing values corrected per M3 specification

v1.1.0 - FONT PAIRINGS AND ACCESSIBILITY

[0x04] v1.1.0 - FONT PAIRINGS AND ACCESSIBILITY2025-12-27

[ADDED]

-**Bidirectional Font Pairings** - 34 display/body font combinations for headlines and content
-**6 FUI Themes** - Blueprint, Cyberpunk, Navigator, Phosphor, Holographic, Infrared
-**Code Syntax Highlighting** - Complete `--code-*` variables for all 18 themes
-**Extended Chart Colors** - `chart-6` through `chart-9` added to all themes
-**Style Guide Template** - Comprehensive design system reference in `/library`

[CHANGED]

-All 18 themes now pass WCAG AA accessibility audit
-FUI theme border contrast improved (3:1 minimum for UI components)

[FIXED]

-Blueprint theme border contrast (45% → 55%) for WCAG 3:1
-Cyberpunk theme border contrast (25% → 38%) for WCAG 3:1
-Navigator theme border contrast (30% → 36%) for WCAG 3:1
-Phosphor theme border contrast (25% → 35%) for WCAG 3:1
-Red/Infrared theme code comment contrast for readability

v1.0.1 - DYNAMIC RADIUS SYSTEM

[0x05] v1.0.1 - DYNAMIC RADIUS SYSTEM2025-12-25

[CHANGED]

-**Dynamic Border Radius System** - Components now use `mode.radius` which maps to CSS `var(--radius)`, allowing themes to control border radius dynamically
-All 78+ UI components updated to use `mode.radius` instead of hardcoded `rounded-none`
-Design system documentation comprehensively updated across 18+ files

[FIXED]

-Calendar component layout and centering issues
-ScrollArea radius applied to correct element (outer container)
-InputOTP spacing when rounded
-Progress bar height and radius support
-Table headers no longer break when themes use rounded corners

[REMOVED]

-Sticky CTA bar from landing pages (component retained for optional use)

v1.0.0 - INITIAL RELEASE

[0x06] v1.0.0 - INITIAL RELEASE2025-12-24

[ADDED]

-78+ production-ready UI components
-12 terminal color themes
-Multi-provider payments (Stripe, Polar, Lemonsqueezy)
-NextAuth v5 authentication with session management
-Full TypeScript support
-Prisma 7 with PostgreSQL
-Resend email integration
-Terminal-first design system
-Internationalization support (6 languages)
-PostHog analytics integration
-Comprehensive test suite (Vitest + Playwright)
-Security middleware with rate limiting and bot detection
-Audit logging for sensitive operations

[SECURITY]

-Global rate limiting on all API routes
-Bot detection on authentication routes
-User enumeration prevention
-CSRF protection
-Session versioning for security events