CHANGELOG

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[1.9.0.0] - 2026-07-18

Added

• Day's absentee call list (/absentees): principals and school admins see every student marked absent today, grouped by class, with tap-to-call parent phone numbers, a printable view, and a date picker. The list refreshes automatically every minute while teachers are still marking. A sidebar "Absentees" link makes it reachable without typing the URL.
• School data export: download attendance (with optional date range) and fee records as Excel-compatible CSV files — vernacular names open correctly in Excel, and exported cells are hardened against spreadsheet formula injection.
• Usage instrumentation: attendance and report page visits by staff are now recorded, powering the weekly adoption metrics.

Changed

• Attendance page copy is now honest about parent notifications: no automation claims while automated WhatsApp alerts remain off. Server-side alert dispatch is additionally gated behind an explicit WHATSAPP_ALERTS_ENABLED flag so configuring credentials alone can never silently enable messages to parents.
• Weekly metrics now count attendance by the school day it describes (not the day it was typed), and exclude internal/founder and test activity from adoption numbers.

Fixed

• Admin-marked attendance no longer saves rows without a school code — the school is derived from the students being marked, and unresolvable writes are rejected instead of silently orphaned.
• Attendance notes are no longer wiped by a routine re-save: saving a class's register with statuses only (the web marking page) now preserves any note already stored on a student's record (e.g. entered from the mobile app) instead of silently erasing it.
• Principals and school admins who joined a school can now send invites (principals and school admins: teachers; school admins additionally: staff): previously only the account that originally set the school up could send invites — everyone else hit a "Complete school setup first" error. School resolution now falls back to the admin's own linked school (admin roles only), and the pending-invite list no longer exposes the raw invite tokens.
• Attendance and export date inputs reject impossible dates (e.g. 2026-02-31) and inverted ranges (from after to) with a clear error instead of a server failure or a silently empty file.
• CSV export buttons now show an error message when a download fails instead of silently saving a corrupt file.
• "Today" on the absentees page now uses the device's local date — previously it showed yesterday's list until 5:30 AM IST.
• The weekly adoption report's 50% threshold now arms against the first week with real teacher activity — anchoring on a zero-activity launch week would have left the alert permanently disarmed.

[1.7.1] - 2026-06-10

Added

• Complete Admin Dashboard — Teachers and admins now have a unified control center for user management, class organization, and system settings. Supports bulk actions, academic calendar setup, and granular institution profile management via client/src/pages/admin-dashboard.tsx.
• Pilot School Seeding — New script server/scripts/seed-pilot.ts for instant institutional environment setup. Creates a pre-configured school with admin (nitish_admin), classes, tests, and mock engagement data.
• AI Predictive Reporting — Initial implementation of predictive learning analytics for estimating student outcomes based on historical assessment performance in pilot-school-predictive-report.md.
• New Admin API Endpoints — Enhanced routers for users.ts and tests.ts with bulk management capabilities and deep SIS integration.

[1.7.0] - 2026-06-02

Added

• Gamified Onboarding Quest Panel — Slide-in quest interface for new teachers to guide them through activation (create test, set up class, invite student). Features celebratory confetti and persistence in localStorage.

[1.6.0] - 2026-05-31

Added

• Domain-Driven Modular Routing — Refactored the monolithic 92KB server/routes.ts into 10 domain-specific routers (ocr, analytics, tests, users, chat, tasks, notifications, upload, timetable, ai).
• Persistent AI Job Queue — Migrated core AI operations (Tutor, WHITEBOARD orchestration) to Redis/BullMQ to prevent state loss on server restarts via server/services/study-arena/job-queue.ts.
• Stripe Billing Integration — Implemented end-to-end billing flow with customer portal, checkout sessions, and secure webhook handling via server/lib/stripe.ts and server/routes/billing.ts.
• AI Quota Middleware — New checkAIQuota guard enforces feature-specific monthly usage limits based on subscription tiers (Free/Pro/Enterprise).
• Period-Based Timetable Engine — Dynamic scheduling system for Period 1-8 logic with conflict detection in server/routes/timetable.ts.
• Parent WhatsApp Automation — Background worker for automated parent nudges triggered by student inactivity or low scores in server/services/whatsapp-automation.ts.
• Principal "Demo Mode" — High-fidelity simulated data toggle in client/src/pages/principal-dashboard.tsx for investor presentations and sales demos.

Changed

• Centralized Auth Middleware — Migrated authenticateToken to server/middleware.ts with improved cross-test resilience and session/cookie dual-path extraction.
• Enhanced Indian EdTech Logic — Deep alignment with CBSE/ICSE contexts, LKG-12 grade mapping, and Lakhs/Crores currency formatting.

Fixed

• JWT Verification in Tests — Standardized JWT_SECRET across middleware and vitest configuration to resolve multi-suite auth failures.
• Router Mounting Order — Unified /api/auth and /api root mounts to support legacy and mobile compatibility paths.

[1.5.0] - 2026-05-30

Added

• Google OAuth 2.0 (Server-Side) — New server-driven sign-in flow via server/lib/google-signin.ts. Routes: GET /api/auth/google/start (redirect to Google) and GET /api/auth/google/callback (exchange code → session cookie). Bypasses all browser popup/redirect issues (COOP, MetaMask, Safari ITP, in-app browsers). Reuses the same OAuth Web client as Google Classroom.
• Dynamic SIS — Flexible, workspace-scoped Student Information System. Teachers can create custom bases, tables, fields, records, and views entirely in PostgreSQL. Routes in server/routes/dynamic-sis.ts, queries in server/lib/pg-dynamic-sis.ts, AI enrichment in server/services/dynamic-enrichment.ts.
• Google Classroom LMS Integration — OAuth-based connection to import courses and students from Google Classroom. Routes in server/routes/lms.ts, API client in server/lib/lms/googleClassroom.ts. Stores OAuth tokens in lms_connections PostgreSQL table.
• WhatsApp Notifications — Outbound WhatsApp messaging service via server/services/whatsapp.ts.
• OTP Brute-Force Protection — attempts column added to otps table; failed OTP verifications increment the counter and lock out after threshold.
• Canonical Domain Redirect — Production server redirects non-canonical hostnames to CANONICAL_DOMAIN env var (301 redirect).

Changed

• Primary DB: PostgreSQL only — Tests, questions, test attempts, and answers are now stored in PostgreSQL (scripts/pg-schema.sql). MongoDB is fully optional (legacy fallback only).
• POSTGRESQL_URL env var — Renamed from DATABASE_URL to POSTGRESQL_URL to match GCP Secret Manager naming. Update your .env accordingly.
• Google OAuth client reuse — Google Sign-In and Google Classroom now share the same OAuth 2.0 Web client. Both redirect URIs must be registered in GCP Console.
• users table — Added auth_provider, auth_subject columns for multi-provider identity. UNIQUE (auth_provider, auth_subject) constraint added.

Fixed

• OTP attempts column — Added ALTER TABLE otps ADD COLUMN IF NOT EXISTS attempts migration for existing databases.
• Dynamic SIS workspace isolation — All SIS queries enforce workspace_id scoping to prevent cross-tenant data access.

[1.4.0] - 2026-05-22

Added

• Workspace-based Local Authentication — Migrated core identity from Firebase to a self-hosted, PostgreSQL-backed authentication system. Supports multi-tenant "Workspaces" where users can be owners, admins, or members.
• Secure Session Management — Implemented a dual-token system (JWT Access Tokens + PostgreSQL-backed Refresh Tokens) delivered via HttpOnly, Secure, SameSite=Lax cookies. Access tokens expire in 15 minutes, with seamless background rotation using refresh tokens.
• Multi-Tenant Workspace Architecture — New PostgreSQL tables: workspaces (containers), workspace_memberships (RBAC join table), and workspace_invites (secure enrollment).
• Invitation System — Secure, tokenized email invitations for onboarding workspace members and students. Includes SHA-256 token hashing and 7-day expiration logic.
• Email Verification & Password Reset — Native implementations for email verification and secure password resets using transactional emails via Nodemailer.
• Workspace Auth Middleware — New server-side guards: requireWorkspaceRole, requireActiveWorkspace, and requireVerifiedEmail.

Changed

• authenticateToken middleware — Significant overhaul to support cookie-based JWT verification, automatic session refreshing, and active workspace context injection into req.user and req.workspace.
• Firebase Auth Bridge — Firebase is no longer in the critical path for authentication. Legacy /api/auth/firebase endpoint remains for backward compatibility but is disabled by default via ENABLE_FIREBASE_AUTH_COMPAT.
• Frontend Auth Context — FirebaseAuthContext refactored to AuthProvider, providing a seamless transition from Firebase to local workspace auth without breaking existing UI components.
• Signup Flow — New users now create a personal/business workspace upon registration, defaulting to the "Workspace Owner" role.

Fixed

• Session Persistence — Fixed issues where users were frequently logged out due to Firebase token expiration; the new local refresh system maintains sessions for up to 30 days.
• Database Tenancy — Resolved data leakage risks by enforcing workspaceId checks at the middleware and query levels.

[1.3.0] - 2026-05-09

Changed

• IniClaw rewritten as lightweight LLM proxy — Replaced the NVIDIA NemoClaw / OpenShell sandbox runtime with a pure Node.js HTTP proxy (features/ai-classroom/ini_claw/gateway.js). Zero npm dependencies; uses only Node.js built-in modules. Deleted: bin/ (nemoclaw CLI), docs/ (Sphinx), nemoclaw-blueprint/ (Python orchestration), nemoclaw/ (compiled TS dist), scripts/, Dockerfile (old NVIDIA-based). Added: minimal Dockerfile for the new gateway, updated policies/study-arena.yaml (removed NVIDIA hosts, kept only OpenAI/Gemini/Anthropic).
• IniClaw gateway LLM routing — New gateway calls LLM providers directly (Gemini → OpenAI → Anthropic fallback chain) instead of shelling out to openshell sandbox exec. Keeps concurrency semaphore, body size limits, rotating audit log, CORS, and Bearer auth.
• authenticateToken middleware — Now sets (req as any).user = { id, role, email } in addition to req.session. Fixes billing.ts, gdpr.ts, educator.ts, parent.ts, and grading.ts routes which read req.user.id but previously received undefined, causing silent 401s on all authenticated billing/GDPR requests.
• archiver v8 compatibility (server/routes/gdpr.ts) — v8 removed the factory-function API (archiver("zip")) in favour of named classes. Fixed: import archiver from "archiver" → createRequire + new ZipArchive(). GDPR data export now works correctly.

Fixed

• Email validation on registration (POST /api/auth/register) — Added RFC-style email regex check. Previously, strings like "notanemail" were accepted and stored; now returns 400 Invalid email address.
• study-arena-integration.test.ts — StudyArenaClient import was broken (module didn't exist). Created server/services/study-arena-client.ts wrapping the /api/ai-classroom/* routes. Replaced silent if (!client) return guard with describe.skipIf(!isConfigured).
• ai_classroom.test.ts — Mock targeted study-arena-client (unused by the route); route uses studyArenaInternalService directly. Replaced mock target, fixed poll URL (/job/ → /status/), fixed my-classrooms response shape assertion (res.body → res.body.classrooms).
• microservices-integration.test.ts — INICLAW_URL renamed to INICLAW_GATEWAY_URL to match rest of codebase.
• gateway.test.js — Server was not closed after tests, leaving port 17071 occupied on re-runs. Exported server from gateway.js; added after(() => server.close()).
• smoke-test.sh — Removed check for openshell: command not found error (no longer applicable). Updated test route from /agent (deleted) to /tutor/chat.
• docs/STUDY_ARENA_INTEGRATION.md — Updated manual IniClaw start command from npm run dev:gateway to BRIDGE_SECRET=<secret> INICLAW_PORT=7070 node gateway.js.

Added

• server/services/study-arena-client.ts — HTTP client that wraps the native /api/ai-classroom/* routes. Used by integration tests.
• features/ai-classroom/ini_claw/Dockerfile — Minimal Alpine-based image for the new lightweight gateway (node gateway.js, exposes 7070).

[1.2.0] - 2026-05-09

Added

• GCP Cloud Run deployment live — Service running at https://personallearningpro-wuo7arhpla-uc.a.run.app (project plp-prod-2026, region us-central1).
• Secret Manager — 13 secrets provisioned and bound to the Cloud Run compute SA: MONGODB_URL, GOOGLE_API_KEY, FIREBASE_SERVICE_ACCOUNT_JSON, SESSION_SECRET, JWT_SECRET, REFRESH_SECRET, STRIPE_SECRET_KEY, OPENAI_API_KEY, DAILY_API_KEY, SMTP_HOST, SMTP_USER, SMTP_PASS, BRIDGE_SECRET.
• Cloud Build CI/CD pipeline — cloudbuild.yaml triggers image build → Artifact Registry push → Cloud Run deploy on every main push.

Changed

• AI provider: Vertex AI → Gemini — Removed @google-cloud/vertexai and @anthropic-ai/vertex-sdk. All AI features (study plans, tutor, classroom generation, answer evaluation) now use @google/generative-ai (Gemini 2.0 Flash) exclusively via GOOGLE_API_KEY. OpenAI remains an optional fallback for non-grading paths.
• Grading engine: OpenAI GPT-4o → Gemini 2.0 Flash — gradingService.ts migrated to geminiChat() with JSON mode (responseMimeType: application/json). Essay few-shot examples are now appended to the system prompt.
• Stripe: disabled until configured — Billing routes (/checkout, /portal, /webhook) return 503 Billing not yet configured when STRIPE_SECRET_KEY is not a real sk_live_/sk_test_ key. Routes auto-activate when a valid key is set in Secret Manager. Replaced broken CommonJS require("stripe") with conditional ESM import.
• Cloud Run resource limits — Memory upgraded from default 256Mi to 1Gi, CPU from 1 to 2. Min instances set to 1 (eliminates cold starts).
• CORS — *.run.app added to the production origin allowlist in server/index.ts. CORS_ORIGIN env var includes both Cloud Run URL variants so Vite's crossorigin asset tags resolve correctly.

Fixed

• cloudbuild.yaml deploy step — Added --platform managed, --port 5001, --allow-unauthenticated to gcloud run deploy; without these the build hung and health checks failed on port 8080.
• MongoDB URL — Added /eduai?retryWrites=true&w=majority database path to the Atlas connection string stored in Secret Manager; bare SRV URIs caused bad auth: authentication failed.
• server/routes/gdpr.ts — Removed duplicate import { Request } that caused a TypeScript unused-import error during build.
• Blank white page — Static assets (JS/CSS) were returning 500 application/json because Vite's crossorigin attributes caused browsers to send Origin on every asset fetch, which the CORS middleware rejected. Fixed by adding *.run.app to the allowlist and updating CORS_ORIGIN.

Added

• AI Classroom Features: Enhanced classroom player with interactive quizzes, keyboard navigation, PBL (Project-Based Learning) support, and real-time SSE progress tracking.
• Job Management: Implemented job cancellation via API and UI, including AbortSignal support during classroom generation.
• Whiteboard Integrations: Added whiteboard clear/erase actions, limited ledger size, and incorporated UI controls for managing whiteboard state.
• API Enhancements: Added endpoints for deleting classrooms, cancelling jobs, and pagination support for classroom listings.

Fixed

• Memory Management: Added maximum buffer size to the orchestrator chunk parser and limited whiteboard ledger size to prevent OOM errors.
• Generation Pipeline: Implemented parallel scene generation, LLM timeouts, and HTML sanitization for stability.
• Background Tasks: Implemented job cleanup and staleness tracking in the StudyArena service.
• Security & Authorization: Fixed classroom access authorization and enforced authentication checks on the my-classrooms route.

Changed

• Caching: Implemented in-memory caching for study arena prompts and snippets.

[1.1.0] - 2026-02-20

Added

• Dockerization: Comprehensive Docker setup including Dockerfile, docker-compose.yml, and .dockerignore for easier environment setup and containerized deployment.
• Project Documentation: Added CONTRIBUTING.md, LOCAL_SETUP.md, CLA.md, and CODE_OF_CONDUCT.md to prepare for open-source contributions.
• Environment Management: Improved handling of environment variables with documented optional dependencies for Firebase and OpenAI.

Fixed

• Tailwind CSS Integration: Resolved issues with @tailwind and @apply directives in index.css.
• TypeScript Compliance: Fixed numerous TypeScript errors across the codebase, particularly in ocr-upload.tsx, create-test.tsx, and routes.ts.
• Frontend Hygiene: Removed redundant layout components (Sidebar, Header, MobileNav) from individual pages now covered by AppLayout.

Changed

• UI Refinement: Established a cohesive design system with updated color palettes, typography, and enhanced dark mode support.
• Code Structure: Refactored various frontend components and backend logic for better modularity and stability.
• Dependencies: Updated numerous library versions for better compatibility and security.

[1.0.0] - 2026-02-17

Added

• Initial release of the AI-Powered Personalized Learning Platform.
• Core features: AI Tutor, AI Test Generation, OCR Test Scanning, and Performance Analytics.