Skip to content

Changelog

This project does not use tagged releases. Deploys happen continuously from main (see Deployment). The history below groups the repository's actual git history by theme — it is short, and one entry is a resurrection.

2026-07-23 — Backend restored; the platform gets an admin portal, deploy stack, monitoring, and docs

The Go backend, deleted in the 1120727 cleanup two days earlier, was restored from this repository's own git history (the 40d8e62 tree, minus the committed .env — see below). Alternatives considered and rejected in ADR 0002. On top of the restore, the repository went from "three project folders" to a deployable platform:

  • POST /api/v1/auth/admin/login added to the backend: rate-limited, uniform-401 password login that mints the same custom JWT as the OTP flow, for the new portal.
  • Admin portal (aim-store-admin/): Next.js 14 + NextAuth against the existing /api/v1/admin/* surface (ADR 0006).
  • Deploy stack (deploy/): single-VPS Docker Compose + Caddy on 200.141.2.84, mirroring the proven Karat topology (ADR 0004), with GitHub Actions → GHCR → SSH pull-deploys (ADR 0005).
  • Monitoring (monitoring/): Grafana/Prometheus/Loki/Tempo/Alloy with dashboards and alert rules provisioned from git (ADR 0007).
  • Domain: production consolidates on aimstoreorg.com (ADR 0008); the old joinaimstore.com hosts stay in the app's allow-list for the transition.
  • This documentation site (docs/ + mkdocs.yml), deployed at docs.aimstoreorg.com.
  • Secrets hygiene (ADR 0009): server-side gen-env.sh, names-only .env.example files. Operator-visible: the original 40d8e62 commit included a real aim-backend/.env; it was removed in 1120727 but remains readable in git history, so every credential it contained must be treated as exposed and rotated.

2026-07-21 — Repository created, built, then partially emptied

All four commits landed the same day:

  • 40d8e62 — initial import of aim-backend (Go/Fiber API), aim-store-app (Expo), and aim-store-website (Vite). This commit also committed aim-backend/.env — the exposure driving today's rotation requirement.
  • 0864511 — legacy scripts/ deploy helpers added, with credentials moved to the environment (AIM_DEPLOY_SERVER / AIM_DEPLOY_PASS).
  • 1120727 — "remove unused API and storage modules": deleted the entire Go backend (115 files), the scripts/ helpers, and unused app/website modules. This is the deletion ADR 0002 reverses.
  • 5019807 — storefront build-out: refund/return/shipping/terms policy pages, search and wishlist, the wallet top-up flow in app + website, and the Vite /api dev proxy to the payment server.