Keystar v0.15.0

Upgrade notes

Sharing skills now includes the implants of the active clone, so the remap optimiser knows the base attributes.

1. Add esi-clones.read_implants.v1 to the scopes of your EVE application at
   https://developers.eveonline.com/applications. Without it, "Share skills" on the Skills access page fails at the
   EVE login with invalid_scope.
2. Update as usual; the database migrations run on start. Characters that already share their skills keep sharing;
   they are asked to re-authorise once to include their implants.

Market orders need one more optional character scope: add esi-markets.read_character_orders.v1 to the scopes of
your EVE application (and esi-universe.read_structures.v1, if it isn't there yet). Nobody is asked for it unless
they enable market access on the Market access page, but without it on the application that EVE login fails with
invalid_scope.

Added

• Market orders. A new Market Orders page under Trade lists the buy and sell orders of your own characters: the
  item, its price per unit and the total, how much is left of the quantity, the station or structure with its system
  and region, when the order was issued and when it expires. Filter by open or closed orders, buy or sell, character
  and location; tiles add up what you are selling and buying, the ISK held in escrow and the orders that expire
  within three days, and a panel shows where your orders are. Closed orders (filled, cancelled or expired) are listed
  too, from the 90 days ESI reports back. Access is opt-in per character on the new Market access page, like
  industry jobs, so nobody is asked for the new scope (esi-markets.read_character_orders.v1) at sign-up. It
  shares the structure scope with industry access: switching one of them off keeps that scope while the other is
  on. Only you see your characters' orders. (PR #187)

• Gate check (Combat, for every role): plan a stargate route and see what waits at each gate before you jump.

  • Routes like EVE's autopilot: shortest, safer (stays in high-sec as long as there is a way) or less secure, around
    any systems you want to avoid; never through Zarzakh, whose gate lock would trap you.
  • Kills of the last two hours at the gate you arrive by and the gate you leave by in every system, with the victim,
    attackers, their ships and groups and the distance to the gate, kept apart from kills at the system's other gates.
    Tags show smartbombs, interdictors and HICs (bubbles), gankers (CONCORD on the mail), hot drops and pod kills; a
    system is marked as a camp after a kill at your gate in the last 30 minutes or three within the hour.
  • A camp estimate for the time you reach each gate, leaving now at about a minute a jump: how often those gates saw
    kills around that time of day over the last weeks, a camp there right now, and the regular campers of those gates
    who were seen killing nearby in the last two hours, each explained, with the busiest hours and the groups behind
    the kills.
  • No extra load on zKillboard: the worker's live feed, which already reads every killmail for the killboard, keeps
    the kills near stargates (60 days at gates, 7 days elsewhere). It now runs without a home corporation too, and on
    a fresh start reads the last few hours back. The map's travel check reads the same data instead of asking
    zKillboard for every system on the route.

  (PR #188)

• Remap optimiser. A new page under Pilots recommends the neural remap that trains each character's current skill
  queue the fastest.

  • Tries every legal remap (17–27 per attribute, 99 points) against the SP still to train and shows the attributes
    to remap to, the queue time now and after the remap, and the time saved.
  • Warns when the queue runs less than 180 days with the recommended attributes: the yearly remap only comes back
    after 365 days and bonus remaps are gone once used.
  • Shows whether the yearly remap or a bonus remap is available, and when the next one is.
  • Skill sharing now also reads the active clone's implants (esi-clones.read_implants.v1), so their bonuses are
    told apart from the base attributes; the remap only redistributes base points. Characters that shared before
    are taken as implant-free until they re-authorise, and the page says so. When the attributes don't add up to 99
    (implants or a booster Keystar doesn't know about), no remap is recommended.
  • Own characters, plus the corporation view for directors; linked from each character on Skill queues.

  (PR #117)

• Help, welcome tour and What's new. A new Help button next to Alerts in the top bar (or the ? key on any
  page) explains Keystar in five topics:

  • This page: what the page you are on shows, where its data comes from, which role can open it, and whether
    only you can see it. Every page in the sidebar has its own text.
  • How Keystar works: EVE login, read-only access, background sync and what pages show.
  • Scopes and EVE access: every ESI scope Keystar can ask for, grouped into the ones everyone grants, the
    optional ones per character (with a link to switch them) and corporation access with its in-game roles.
  • Your data and security: what is stored and how it is protected, what only you can see, who else sees what
    with which role, how to remove data and how long Keystar keeps it.
  • Who sees what: your Keystar role, the role ladder, and every page with the role it needs, including the
    permission changes made in Settings.

  Every account sees the help once as a short welcome tour, new accounts on their first sign-in. After each update
  with highlights, a What's new dialog shows the release's most important additions once, with a link to the
  release notes on GitHub; admins also see what the update needs on the server. Pages that are new in the release
  get a dot in the sidebar until you open them, and the version in the sidebar footer opens What's new again.
  Release PRs add the highlights in English and German (docs/releasing.md).
  (PR #182)

Changed

• The mining ledger is opt-in per character, so every ESI scope is now optional. Registering, signing in and
  "Link a character" no longer ask EVE for any scope; they only prove who you are. Each pilot turns on the personal
  mining ledger per character on the new Mining access page (the Access button on the Mining Overview and Ledger,
  or via My Characters), can switch it off in Keystar without an EVE login, and can delete a character's stored mining
  history once it is off. Moon-drill records of corporation refineries are kept either way. Characters that already
  share their mining ledger keep sharing; nothing to do on the server or the EVE application.
  (PR #186)
  • Characters without any ESI access are no longer flagged on My Characters, the dashboard, Users & Roles or Member
    Audit; only revoked tokens are.
  • Re-authorising a character with no access left removes its token and revokes it with CCP, and "Link a character"
    with a character that is already on your account no longer changes its access.
  • "Link with corporation access" no longer includes the mining ledger. A director whose character shares it is
    asked once to turn it back on, like wallet import or skill sharing.
• The sign-in, registration and "Link a character" buttons on the login and join pages are now CCP's official
  "LOG IN with EVE Online" button (black on the dark theme, white on the light one), as CCP asks of third-party
  applications. The CCP notice now carries the wording of the Developer License Agreement and also appears on the
  join page and under "How Keystar works" in Help. (PR #189)
• The Map moved to the bottom of the Combat section of the sidebar, below Gate check.
  (PR #190)

Fixed

• The login page and the Privacy panel on My Characters now link to Authorized Apps on the EVE developers site for
  revoking Keystar's access. The Third-Party Applications page on community.eveonline.com they pointed to now only
  redirects to the developers homepage. (PR #183)
• Saving the settings page or the setup walkthrough's access step with a price source or price date Keystar doesn't
  know (a page left open across an update, or an edited form) now explains which field to fix in a toast and changes
  nothing, instead of failing with "Something went wrong".
  (#145)
• A pasted d-scan with made-up type ids can no longer pause ESI for the whole web app. Unknown types are looked up on
  ESI at most 50 per paste and for at most 20 pastes per user in 10 minutes, lookups stop while the shared ESI error
  budget is low, and ids ESI doesn't know are not asked again for 6 hours. Ships that couldn't be looked up yet are
  left out of the d-scan, as before. (#143)
• Changes on the Mining P&L pages now confirm in a toast: the income basis (mined ore or wallet sales), the share of
  the valuation, the per-character "count automatically" switches, ore prices, manual costs and "include all".
  Rejected input (a rate of 0 %, a price rule that ends before it starts, an amount Keystar can't read) is explained in
  a toast and keeps what you typed, instead of replacing the page with an error. Single include/exclude and category
  changes only show a toast when they fail. Deleting a Threat Intel scan, writing a briefing, dossier or d-scan read,
  profiling more pilots and rewriting the killboard situation report also confirm or explain in a toast, and the
  setup walkthrough explains an invalid corporation ID instead of failing.
  (PR #175)

---

Docker image: ghcr.io/theragus/keystar:0.15.0

# in .env: KEYSTAR_VERSION=0.15.0
docker compose pull && docker compose up -d