Changelog

All notable changes to Allowealth are documented here.

[Unreleased] - 2026-03-21

Fixed

• Docker build: Install python3 and build tools for better-sqlite3 native compilation.
• Mobile blur: Tightened blur policy and audited performance issues.
• Accessibility: WCAG 2.1 AA compliance — improved color contrast and opacity status indicators.

Performance

• iOS Safari blur: Replaced CSS blur with radial gradients to fix performance issues.

Documentation

• Added mobile blur performance implementation plan and regression tests.
• Added iOS Safari blur cleanup specification.

Changed

• Public layout: Simplified gradients and removed background animations.
• Workflow: Added GitHub issues preference rule (GitHub over Linear for issue tracking).

[0.24.1] - 2026-03-19

Added

• Theme toggle: Dark/light mode switch with improved accessibility and keyboard navigation.

Changed

• Theme initialization: Moved to external module with analytics tracking.
• Session cookie: Renamed to allowealth.session_token for clarity.

[0.24.0] - 2026-03-18

Fixed

• Docker security: Run container as bun user instead of root.
• Navigation: Restored public hero animations and expanded route coverage.

Added

• Docker self-hosting: Design specification and implementation plan for self-hosted deployments.

Removed

• Deleted outdated screenshot assets and marketing site copywriting.

Performance

• Landing page: Optimized Largest Contentful Paint (LCP) and screenshot loading.

[0.23.0] - 2026-03-17

Performance

• Landing page: Optimized Largest Contentful Paint (LCP) and improved screenshot loading performance.

[Unreleased] - 2026-03-10

Changed

• Authentication rewrite: Replaced the legacy Lucia, Arctic, and custom MFA stack with Better Auth and Astro middleware-backed session hydration.
• Google linking flow: Existing accounts now link Google only from the authenticated Security page. Pre-auth callback linking has been removed.
• Security settings: Two-factor setup, verification, backup codes, and account linking now use Better Auth-owned flows.

Notes

• The Better Auth cutover invalidates legacy sessions, so users are signed out once after deployment.

[Unreleased] - 2026-03-08

Added

• New Indonesia & SEA SaaS Phasing Plan for market expansion.
• Integrated SEA Founder Strategy Memo into project research.

Changed

• Documentation Consolidation: Merged local development and deployment guides into a single “Setup & Deployment” resource.
• Simplified project bootstrapping with a unified ./scripts/setup.sh.

[0.2.0] - 2026-03-07

Added

• Forecast Reality Check: Implemented logic to compare projected forecasts against actual bank/account balances.
• Recurring Frequency Forecast: Added support for complex recurring transaction patterns in financial projections.

[0.1.5] - 2026-03-06

Added

• CSP Middleware: High-performance Content Security Policy middleware with nonce support for inline scripts.
• Static Public Security: Automated verification script for public asset security headers.

Performance

• Optimized middleware execution order for faster Time to First Byte (TTFB).

[0.1.0] - 2026-02-04

Changed

• Astro 6 Migration: Upgraded the core framework to Astro 6.0 for improved build performance and view transitions.
• Updated database schema to support multi-currency financial tracking.