Changelog - Dev - 08.03.2026

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

---

[Unreleased] - 2026-08-03

Added

• Add E2E harness for block-sever flow verification: Introduces a headless two-account E2E test harness for the block-sever feature on deployed dev, enabling automated verification of account blocking workflows. Includes test-account tooling and documentation to support on-demand testing. (#778) enhancement devops
• Display +1 prefix in phone input field: Adds visible +1 country code prefix to the phone input component, improving clarity for users entering phone numbers and addressing a UX gap surfaced during E2E testing. (#778) enhancement

---

Update - 2026-08-03 22:50 UTC

Security

• Remove plaintext email from setUserRole audit logs: Removed targetEmail field from adminActions audit writes in the roles endpoint to prevent plaintext email exposure. This fixes a recurring semgrep security check failure that was blocking CI on every PR. (#783) security

---

Update - 2026-08-03 23:07 UTC

Added

• Discoverable lantern.help() and tap-to-run Dev tab: Boot banner now announces lantern.help() entry point in dev environments, making console tooling discoverable. Full dev-command surface is now available on deployed dev and usable on phones via a tap-to-run Dev tab. (#784) enhancement