ChangeLog

List of Updates:

March 2026

Stage 1: Code Deduplication (March 22-26)

• Consolidated 7 repos into Cargo workspace monorepo
• Extracted 10 shared crates (~8,300 lines of deduplicated game logic)
• 307 tests passing across all crates
• 5 client-server divergence bugs found and fixed

Security Hardening (March 27)

• HMAC service-to-service authentication replacing JWT instruction tokens
• Per-IP rate limiting on all servers
• Request replay protection with X-Request-Id and X-Request-Timestamp
• Blanket CORS removed; scoped CORS on browser-facing routes only

Tauri 2.x Migration (March 27-28)

• Native desktop clients for Windows and Linux
• Mobile targets configured for Android and iOS
• Database migration: Dexie/IndexedDB → SQLite with 16 full-column tables
• Google OAuth via PKCE with loopback redirect (desktop) and deep links (mobile)
• JWT storage unified in SQLite KV store across all platforms
• Full client storage migration: localStorage and IndexedDB eliminated
• Client observability: structured logging with dev-only debug output

Client Cleanup (March 29)

• Removed client telemetry pipeline (MetricsService, server_analytics integration, 60+ files cleaned up)
• Added dev-only debug logging (#[cfg(debug_assertions)], filter level DEBUG) across 12 files
• Logout now performs a full factory reset — all 16 SQLite tables wiped on sign-out
• Replaced NgZone with Angular signals for Tauri event listeners (performance improvement)
• Simplified survival-metrics crate (removed unused client and system-metrics features)

Bug Fixes (March 27-28)

• 12 security issues resolved (rate limiting, auth middleware, body limits, request validation)
• 14 high/medium bugs fixed (port typos, retry limits, deep-link format, OAuth cleanup)
• 10 cleanup items resolved (dead code, duplicated scripts, input validation)
• BUG-001: OAuth login page freeze — resolved by removing keyring crate, unified SQLite KV storage
• Factory reset FOREIGN KEY constraint — fixed with PRAGMA foreign_keys = OFF/ON
• Dashboard 401 freeze — added Observable error handler for server redirect

January 2026

• Release 0.0.1: First Release of the game version Alpha 0.0.1 on January 1, 2026.