Changelog

All notable changes to Generous.nz are recorded here, grouped by version. Every deployed build has a version number, a git tag, and an entry below.

Versioning scheme

Versions follow MAJOR.MINOR.PATCH:

0.x — pre-launch. Minor bumps mark a completed build phase or major feature set; patches are bug fixes on the current build.
1.0.0 — first public launch.
1.x+ — post-launch: minor = new features, patch = fixes, major = breaking changes or significant re-architecture.

Each version is tagged in git (v0.2.0) and the current version is kept in package.json. See docs/version-control.md for how to cut a release.

Seller fulfilment and delivery tracking.

Fundraisers and wholesale businesses can now save a delivery or pickup date, select NZ Post / CourierPost, Aramex, or another courier, add a tracking number, and mark orders shipped or complete.
Purchasers receive delivery updates automatically, including the tracking number and a direct link to the selected courier's tracking site.
Seller order lists now clearly distinguish orders awaiting dispatch, shipped orders, and completed orders.

Purchase celebration reliability.

The purchase confirmation confetti now begins after the success page has loaded, rather than being easy to miss during the Stripe redirect.
Added a clear “Celebrate again” control so the confirmation burst can be replayed.

Admin payment visibility.

Payments setup now shows recent completed payments and email delivery, with direct links to the full transaction and email logs.
Admin transaction date filters and payment, email, and audit timestamps now use New Zealand calendar dates instead of the server's UTC date.
Payments setup reports only enabled Stripe webhook destinations and requires both platform and connected-account signing secrets.

Celebratory purchase confirmation.

Added a dedicated post-purchase screen with confetti, a supporter thank-you, fundraiser and item details, quantity, amount paid, and order reference.
Voucher purchases show issued codes, redemption details, conditions, and a signed printable voucher link. Physical purchases explain the email, seller-notification, and dispatch or collection next steps.

Stripe product checkouts now return to the dedicated purchase confirmation instead of dropping the purchaser back on the fundraiser listing.
The production form-action security policy now permits the Stripe Checkout handoff while continuing to block unrelated external form targets.
Fundraiser owners are now emailed when their own listed item sells, matching the existing wholesale-business fulfilment notification.
Duplicate Stripe webhook delivery can no longer decrement inventory, assign vouchers, or send fulfilment notifications more than once, and the checkout email address is now used consistently in seller notifications.

Checkout reliability.

Simple product purchases now use a normal, same-site form submission and a server-side Stripe redirect, avoiding browser fetch requests that can stall under strict privacy or extension policies.

Checkout redirect resilience.

Added a visible, secure Stripe Checkout fallback link when a browser blocks the automatic cross-site redirect after a checkout session is created.

Automation-failure resolution.

Added a clear Mark resolved action for configuration-only automation failures that cannot be safely replayed, such as an already-corrected webhook signing-secret mismatch.

Durable automation-failure handling.

Added a durable Automation failures section to the moderation queue.
Referral qualification failures can be retried safely by a moderator.
Stripe order/payment webhook processing failures are recorded for review and returned to Stripe for automatic delivery retry.

Stopped logging raw Stripe webhook payloads after signature verification failures; the queue now records a safe operational summary instead.