Changelog / Release Notes

Product release notes for LaunchKit Pro buyers. Newest entries first.

Canonical docs URLs:

• Product Updates guide
• Changelog (this page)
• Legacy aliases: /updates/changelog, /updates

---

v1.5.0 — Admin CRUD, access control, and UX polish — 2026-06-11

Added

• Admin Monitoring Dashboard (/admin/monitoring) — KPI cards, charts (timeline, status mix, top routes), errors/requests tables, filters, refresh/auto-refresh, clear buffer; GET /admin/monitoring/summary, POST /admin/monitoring/clear
• Admin User Management CRUD (/admin/users) — create, edit, suspend, activate, safe delete, invite, password reset
• Admin Workspace Management CRUD (/admin/workspaces) — create, edit, suspend, activate, archive, restore, safe delete, owner transfer
• Suspended user login blocking with USER_SUSPENDED and friendly Contact Support UX
• Suspended/archived workspace enforcement for normal users; /workspace-unavailable page
• Admin Overview enhancements — trends, usage mix, system health, recent activity
• Toast close button (all types) with accessible dismiss control
• Login protected redirect (?from=), clean logout URL, 404 Go Back, stable theme/accent persistence

Infrastructure

• Robust deploy-backend.sh — preflight port, health retry up to 60s, rollback on failure
• Documentation pass — VPS Deployment, Package Structure, admin user/workspace guides

---

v1.4.0 — Plan Catalog CRUD and dynamic billing plans — 2026-06-10

Added

• Admin Plan Catalog CRUD — create, edit, archive, restore, delete (/admin/plans)
• Dynamic billing plans from database on user billing page
• Mock checkout uses DB plan codes
• Admin Billing Settings read-only status page (/admin/billing-settings)
• Stripe Price ID / Lemon Variant ID mapping on plans (optional until real billing enabled)

---

v1.3.9 — Command Center workspace insights — 2026-06-06

Added

• GET /dashboard/insights — workspace-scoped activity trend, usage mix, module readiness, recent activity
• Command Center Workspace Insights section with real-data SVG charts and refresh animation

v1.3.8 — Production-readiness foundation — 2026-06-06

Added

• Monitoring module with in-memory error/request ring buffer
• GET /admin/monitoring/status, /errors, /requests
• Analytics module with POST /analytics/events and GET /admin/analytics/summary
• Admin /admin/monitoring and /admin/analytics pages
• Frontend analytics client (silent-fail, NEXT_PUBLIC_ANALYTICS_ENABLED)
• Jest smoke tests (backend) and Vitest smoke tests (frontend)
• Dockerfiles and docker-compose.example.yml (optional deployment)
• Docs: Monitoring, Analytics, Testing, Docker

v1.3.7 — Security hardening foundation — 2026-06-06

Added

• Rate limiting middleware with auth, upload, public API, webhook, and contact tiers
• CAPTCHA module (MOCK, TURNSTILE, RECAPTCHA) for contact, support, and signup
• GET /security/status and GET /admin/security/status
• Next.js conservative security headers
• Expanded audit events (login failure, search reindex, queue admin, demo reset/seed)
• Admin /admin/security page

v1.3.6 — Dashboard global search foundation — 2026-06-06

Added

• Search module with LOCAL, DISABLED, ALGOLIA, and MEILISEARCH provider modes
• GET /search/status, GET /search, POST /search/reindex APIs
• Local search across navigation, docs links, and workspace-scoped dynamic data
• Dashboard command palette with ⌘K / Ctrl+K shortcut
• Docs result links via NEXT_PUBLIC_DOCS_URL

Defaults (intentional)

• SEARCH_PROVIDER=LOCAL — no external search service required
• Inactive Algolia/Meilisearch keys do not block app startup
• Admin-only results hidden from normal users

See Dashboard Search.

---

v1.3.5 — Demo reset, safe seeder, and read-only demo admin — 2026-06-06

Added

• DemoSafetyService — central demo restrictions with friendly per-action messages
• DemoSeedService — idempotent safe demo data seeding (users, workspace, billing, AI samples, metadata)
• DemoResetService — scoped demo workspace reset (dry-run by default)
• Admin demo APIs: GET /admin/demo/status, POST /admin/demo/seed, POST /admin/demo/reset
• Granular demo env flags: uploads, real AI, real billing, webhook delivery, API keys, license activation
• Read-only demo admin blocks destructive admin writes including queue control
• Frontend demo banner and admin queue guards for read-only demo admin

Defaults (intentional)

• DEMO_RESET_ENABLED=false — no destructive reset unless explicitly enabled
• DEMO_RESET_DRY_RUN=true — reset logs summary only by default
• DEMO_SEED_ON_STARTUP=false — seed on demand or via admin API
• Demo reset targets only DEMO_SAFE_WORKSPACE_SLUG — never broad unscoped deletes

See Demo Mode.

---

v1.3.4 — Redis queue optimization for real background jobs — 2026-06-06

Added

• Unified queue bootstrap: QueuesBullModule, workers, and QueuesService share the same registration decision
• Central queue name constants used across BullMQ registration, injection, processors, and admin APIs
• Admin queue APIs: status, jobs, pause, resume, clean (GET /admin/queues/status, etc.)
• Admin → Queues page (/admin/queues) with per-queue counts and actions
• Email queue foundation: send_email, password reset, invite, license, billing receipt jobs
• AI queue foundation: ai_generate_text, ai_usage_rollup (sync AI API remains default)
• Webhook queue handoff when WEBHOOK_QUEUE_ENABLED=true and queues are ready
• Maintenance scheduler foundation with dry-run cleanup jobs (MAINTENANCE_SCHEDULER_ENABLED=false by default)
• Demo reset placeholder (logs only; no production data deleted)

Fixed

• “BullMQ queues not registered: email, webhook, notification, maintenance, ai” startup error when BullMQ was skipped at module init but validation still expected queues
• QueuesService now injects queues directly by constant name instead of unreliable ModuleRef lookup

Defaults (intentional)

• QUEUES_ENABLED=false — no Redis required; app starts cleanly
• WEBHOOK_QUEUE_ENABLED=false — direct webhook delivery works without Redis
• MAINTENANCE_SCHEDULER_ENABLED=false — no scheduled destructive jobs
• Cleanup jobs use dryRun=true by default

See Background Queues.

---

v1.3.3 — Real outbound webhooks and API-key auth foundation — 2026-06-06

Added

• Real outbound developer webhook delivery with signed JSON POST requests
• Delivery logs with attempts, response status, response preview, duration, next retry, and safe headers
• Manual retry endpoint: POST /workspaces/:workspaceId/webhook-deliveries/:deliveryId/retry
• Optional queue handoff when webhook queues are enabled and ready; safe direct delivery when queues are disabled
• API-key authentication guard for /public-api/me and /public-api/workspace
• API key support for X-API-Key and Authorization: Bearer lk_...
• Docs for webhook signature verification and API key usage

Defaults (intentional)

• WEBHOOK_DELIVERY_ENABLED=true
• WEBHOOK_QUEUE_ENABLED=false; Redis is not required
• Demo webhook delivery is disabled by default and records a friendly disabled delivery
• API keys are hashed; full keys are shown once
• Webhook secrets are shown once and encrypted at rest for outbound signing

---

v1.3.2 — Real cloud storage provider foundation — 2026-06-06

Added

• Storage provider switch: LOCAL default, plus S3, R2, and CLOUDINARY foundations
• Safe provider status endpoint: GET /storage/provider-status
• Flat storage aliases: upload, list, metadata, signed URL, delete, and admin cleanup dry-run
• Signed URL foundation for private/download flows
• Admin-only orphan cleanup dry-run endpoint, disabled by default
• Dashboard files provider badge and signed/public URL download action

Defaults (intentional)

• STORAGE_PROVIDER=LOCAL; normal installs require no S3/R2/Cloudinary keys
• Inactive provider keys may remain empty
• Storage secrets stay backend-only and are never returned by provider status
• Cleanup does not delete existing uploaded files by default

Upgrade notes

cd launchkit-pro-backend
npx prisma migrate deploy
npx prisma generate
npm run build

See File Storage & Avatars.

---

v1.3.1 — Backup and restore foundation — 2026-06-05

Added

• Backup and restore foundation included for self-hosted deployments
• App-level VPS backup script for PostgreSQL, uploads, shared env files, Nginx configs, deploy scripts, and current release symlink metadata
• SHA-256 checksum generation and local latest-N archive retention
• Guarded restore example script that prints the restore plan and refuses destructive work without explicit confirmation
• Docs: Backups & Restore, plus deployment backup notes

Defaults (intentional)

• Local archive retention defaults to 7 backups
• No paid cloud storage dependency
• No automatic destructive restore
• No real credentials or .env contents in docs

Operations notes

Enable Contabo/VPS auto backup or provider snapshots for production. Local app backups are useful, but keep an offsite copy and test restore before relying on backups.

---

v1.3.0 — Real billing provider foundation — 2026-05-30

Added

• Billing provider switch — BILLING_PROVIDER=MOCK (default), STRIPE, or LEMON_SQUEEZY
• Provider adapters: mock, Stripe Checkout Session, Lemon Squeezy checkout API
• Unified billing routes: GET /billing/provider-status, POST /billing/checkout, GET /billing/current, GET /billing/history, POST /billing/cancel
• Payment webhooks: POST /billing/webhooks/stripe, POST /billing/webhooks/lemon-squeezy with signature verification and idempotent sync
• Prisma fields for provider IDs, receipt URLs, and webhook event deduplication
• Dashboard billing UI: provider status, receipt links, premium static dark current plan card (theme-independent)
• Docs: Billing, Payment Webhooks

Defaults (intentional)

• BILLING_PROVIDER=MOCK — no Stripe/Lemon keys required for install
• Demo users blocked from real provider checkout; mock checkout still works when provider is MOCK
• Receipt/invoice URLs appear only when the provider supplies them

Upgrade notes

cd launchkit-pro-backend
npx prisma migrate deploy
npx prisma generate
npm run build

Set billing env vars in backend .env when enabling Stripe or Lemon Squeezy. Webhook endpoints must be publicly reachable over HTTPS in production.

See Billing.

---

v1.2.0 — Product updates foundation — 2026-05-30

Added

• Product updates / version foundation — Static release catalog (1.2.0, 1.1.0, 1.0.0), GET /updates/* endpoints, buyer Product Updates page at /dashboard/updates, admin read-only Releases at /admin/releases
• Installed version via LAUNCHKIT_VERSION (default 1.2.0), update check via UPDATE_CHECK_ENABLED
• Changelog UI with highlights, fixes, and upgrade notes
• Secure download placeholders (downloadAvailable: false) — no public ZIP exposure in demo

Defaults (intentional)

• UPDATE_PROVIDER=MOCK with static catalog (no DB migration)
• Secure downloads disabled — connect Payhip, Gumroad, Lemon Squeezy, S3/R2, or private storage later

Upgrade notes

Set LAUNCHKIT_VERSION=1.2.0 after pulling this release. No Prisma migration required for the updates module.

See Product Updates.

---

v1.1.0 — AI provider integration foundation — 2026-04-15

Added

• AI provider switch: MOCK, OpenAI, and Gemini
• AI playground, templates, history, usage dashboards, and admin AI usage monitoring
• Demo and test-user generation limits with provider status endpoints

Fixed

• AI error handling and provider configuration messaging

Upgrade notes

Configure AI_PROVIDER and optional API keys in backend .env. MOCK mode requires no external keys.

See AI Module.

---

v1.0.0 — Initial release foundation — 2026-03-01

Added

• NestJS API + Next.js dashboard foundation
• Multi-tenant workspaces, RBAC, team invites, and audit logs
• Mock billing, email, and local file storage
• Admin console, support tickets, developer tools (API keys, webhooks), Swagger/OpenAPI docs
• Buyer documentation site (VitePress) with installation and deployment guides

Upgrade notes

First install:

# Backend
npm ci
npx prisma generate
npx prisma migrate deploy
npm run build

# Frontend
npm ci
npm run build

Restart API and frontend services after deploy.

See Getting Started.

---

v1.0 bundle — 2026-05 (reference)

The first marketplace bundle also shipped these foundations in the same release window:

• Product license activation — Optional mock/manual license keys (LICENSE_ENFORCEMENT_ENABLED=false by default), buyer activation at /dashboard/license, admin License Management at /admin/licenses
• Product edition matrix — Lite / Pro / Enterprise catalog and comparison UI (default sellable edition: Pro)
• Profile avatar crop/resize, English + French i18n foundation, sticky dashboard sidebar, admin Queues & Redis monitor

See License Activation and Product Editions.

---

Template for future releases

vX.Y.Z — YYYY-MM-DD

Added

• (your features)

Changed

• (your changes)

Fixed

• (your fixes)

Breaking changes

• (migrations, env renames, API changes)

Upgrade notes

npm run prisma:migrate:deploy
# restart API and frontend services

---

Upstream LaunchKit Pro modules (reference)

Module	Capability
Auth & workspaces	JWT, multi-tenant, invites
RBAC & limits	Permissions, plan features
Billing	Mock checkout, plans
AI	Mock + OpenAI/Gemini adapters, templates, limits, demo guardrails
Storage	Local uploads
Email	Mock provider, templates
Admin	Platform management
Developer	API keys, webhooks
Support	Contact + tickets
Demo mode	Marketplace protections
API docs	Swagger / OpenAPI
Updates	Version status, release catalog, secure download placeholders

Customize this changelog for your product fork and release cadence.