Changelog

November 2026

2026-11-11

• Panel container (6.7). One Dockerfile builds the website, the panel and the worker; compose runs the panel, worker and migrations. compose.vps.yaml runs behind another web server on a shared VPS. All ports are on localhost only. Deployment

2026-11-08

• Documentation. These docs, at /docs: every screen, rule and role, the portals, the super-admin console, developer guides and reference, with search.
• Shipment messages (7.10). A thread per shipment between the customer (in the portal) and the desk; the agent is told of new messages. Shipment messages
• Detention, demurrage and per diem (7.9). Calculated from the company's rates and added as a charge. Detention & demurrage
• Load templates (7.8). Save a load as a template; start a new load from one. Load templates
• Rate requests (7.7). Ask several carriers for a price (sent only to FMCSA emails), collect answers from staff or the carrier portal, award to the Rate board or as a lane rate. Award and answers are race-safe. Rate requests
• Lane rates and tariffs (7.6). Contract buy rates and customer sell rates by lane, valid dates, expiring list, margin alert under the target. Lanes
• Carrier score (7.5). On-time pickup and delivery plus logged incidents, as one score. Incidents on loads you cannot see are not shown. Carrier score
• Missing documents (7.4). What paperwork a load should have by now, and what is missing.
• Check calls (7.3). Log a call; a load in transit without one inside the interval becomes an exception. Vetting evidence must be real and match the carrier's numbers. Check calls
• FMCSA lookup and vetting checklist (7.1, 7.2, 5.1). Carrier compliance & FMCSA
• New favicon for the website and the panel; fixes to stuck saves, role money leaks and phone layouts; Next.js 15.5.29.

October 2026

2026-10-28 · Security hardening

• /security screen: alerts, lockouts, two-factor coverage, recent sign-ins.
• CI security testing: dependency audit, secret scanning, CodeQL, SBOM, image scan, weekly ZAP.
• Single-use two-factor codes, append-only audit log, refused access logged, upload and password hardening.
• Nonce-based CSP and browser defences on the panel, headers on the site, Caddy limits.
• Every known-vulnerable dependency patched (pnpm audit clean).

2026-10-26 to 10-27 · SaaS

• Super-admin console at /platform: organizations, plans, platform admins, platform audit.
• Export and close account, with a 30-day change of mind.
• Limits: seats per plan, read-only when unpaid, suspension, trial banner and daily trial job.
• Billing: plans, checkout, card portal and cancel behind a billing interface (Stripe or simulated), signed and idempotent webhooks.
• Onboarding walk-through and self sign-up with a free trial.
• Terms of service and privacy policy on the website.
• Partner portals: real sign-in, own-company data only, submissions as proposals, statement PDFs, document and invoice downloads, DO accept and rate queries.
• Board and tracking page on the server; reports export as Excel and PDF as well as CSV.

2026-10-25 · Operations and finance save for real

• Auto pilot (per-company rules, events run as jobs, every run logged) and the background worker (R11 reminder, LFD alerts, invoice aging, monthly report, housekeeping).
• Tracking, containers, arrival notices, delivery orders, appointments, commissions, expenses, debit and credit notes, invoices, receivables, payables, advances, reports, performance, P&L and the dashboard all read and save real data.
• New load saves (one load per container, stops, charges with bill-to, advances with the org fee, R2 credit check); Documents (PDF engine, R1/R2/R3/R10); Credit limits.

2026-10-24 · Foundation and records

• Database, tenant isolation, seed, staff sign-in, invite and reset, two-factor, server-side permissions, audit.
• Company settings, users, roles, customers, carriers, approvals, portal control, transfer, audit log, profile and preferences, backup export and import, integrations (keys stored encrypted; Off / Simulated / Live).
• File storage on S3 (SeaweedFS locally).

2026-10-11 to 10-13

• New panel design (Material Design 3, pure white) and sign-in design.

Earlier

September 2026

• Nightly off-box backup script; CI runs the panel's own suite; 360 px fixes; repaint of the panel shell and money, operations and records screens.

August 2026

• Every panel screen and both portals designed and built against the reference app; business rules in packages/core complete and tested; website built, accessible (WCAG 2.2 AA) and fast.
• 2026-08-25: the project starts: specification, prototype reference, monorepo.

How to add an entry

Add a bullet under today's date, newest first, in plain words: what changed for the person using it, and a link to the page that describes it. Do it in the same commit as the change.