Changelog - Dev - 07.25.2026
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog.
[Unreleased] - 2026-07-25
Added
- Server-side offer claim and redeem flow: Merchants can now track real offer conversions through server-side emission of claim and redeem events. Users with active lit lanterns at a venue can tap to redeem offers, with conversion data flowing to the merchant dashboard and ad delivery analytics. (#705)
enhancement
Update - 2026-07-25 02:04 UTC
Fixed
- Fix merchants-api Cloud Run build by vendoring forge package: The merchants-api container build was failing after @lantern/forge was added as a dependency for server-side analytics. The deploy workflow was not vendoring the forge package into the build context, causing the Dockerfile COPY step to fail. This fix ensures both the shared and forge packages are available during the container build. (#709)
devops
Update - 2026-07-25 16:21 UTC
Security
- Require live wave to create connection: The connection creation rule now validates that a wave is still live before allowing a connection to be established. Previously, recipients could create connections from declined, expired, or past-expiration waves, potentially opening message threads and E2EE key channels after the wave should have been closed. (#711)
bugsecurity
Update - 2026-07-25 18:32 UTC
Added
- Product push notifications for core loop events: Users now receive push notifications when they receive a wave, their wave is accepted, or they get a new chat message. Includes per-category notification preferences and a contextual permission flow to support the December alpha's core loop. (#715)
enhancement
Update - 2026-07-25 20:29 UTC
Fixed
- Fix push notification registration on deployed dev site: Push notification registration was silently disabled on the deployed dev environment because the build process did not receive the public VAPID key. This fix ensures the Firebase VAPID key is passed to the web app build, restoring push functionality for features like moderation notices. (#720)
devops