kirche-einfach/CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file. The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Security

• API authorization: flow management is admin-only, runs and run/approval reads require login with strict session-tenant scoping, approval decisions record the session user, and flow callbacks authenticate with a shared X-Callback-Token (CALLBACK_TOKEN). Request-controlled tenant_id, callback_base_url and continuation_flow_id were removed (SSRF / cross-tenant / flow-chaining hardening); continuations now resolve from the admin-authored definition.
• Frontend: /app/* routes require login; approver is the session user.

Added

• Landing page: status-quo problem block, 5-step process with quote, portal overview with admin areas, AI platform parts, exception tiers, quantified benefits, integrations, use-case examples, pilot-program section, expanded FAQ (8 items incl. KI data usage, price model, responsibility).

Changed

• Landing page copy overhauled after 3 reviewer rounds (church-admin compliance wording: "entwickelt nach DSG-EKD/DSGVO" + AVV/TOMs, human release responsibility, honest pilot framing instead of invented testimonials; CTA now "Pilotgespräch vereinbaren").
• New photo pilot-meeting.webp (consultation scene, self-hosted).
• Backend lint + format standards via ruff (pinned dev dependency, enforced in CI): uv run ruff check ., uv run ruff format.

[0.1.0] - 2026-09-13

Added

• Repo scaffold: docker-compose dev/prod, version-pinned images, devcontainer.
• Magic-link auth, access requests, RBAC, frontend access-management UI.
• File-based flow source of truth + sync engine + LFX runtime.
• RJSF dynamic forms, router, Mantine dark-mode design system.
• Conversion landing page, automated screenshots, bell-tower favicon.
• Email-first login, branded multipart HTML magic-link mails.
• lfx level-4 validation on all canonical flows + regression test.