Changelog

Track every update to the QrioTag platform. Newest releases are at the top.

v2.1.0 — Admin v2, Freemium Model & Platform Expansion

Added

• Freemium model — FREE tier (5-year tag validity, 1 tag) and PRO tier ($100/year, unlimited tags, no expiry). Tag expiry warnings sent 30 days before expiry. Upgrade nudge system with 4 trigger points (second tag, expiry warning, PDF download, scan milestone).
• Digital tag creation — Tags are now created digitally in-app (POST /api/v1/tags). QR codes with DIGI-XXXXXXXX prefix are generated immediately, no physical product required to start.
• 3 new tag types — QRIO_WALLET (crypto wallet identity with ENS/chain support), QRIO_ID (digital business card with LinkedIn/social links), QRIO_DOCUMENT (document recovery with privacy — only last 4 chars of document number stored).
• AI Recovery Assistant — Claude Haiku integration on the lost items page. Analyzes scan history, generates recovery likelihood, timeline, and an optimized finder message. Graceful fallback to static tips when API key is absent.
• Admin v2 — 30-page panel:
  • Feature flags with rollout percentage and audience targeting
  • Webhook endpoints with HMAC-SHA256 delivery and per-event subscriptions
  • Alert rules with threshold triggers and multi-channel notifications
  • Scheduled reports (daily/weekly/monthly, CSV/PDF, email delivery)
  • Dead-letter queue browser with replay and discard
  • Live BullMQ queue monitor (5-second auto-refresh)
  • Impersonation sessions (SUPER_ADMIN only, full audit trail)
  • Team management with role assignment and login history
  • System announcements with audience targeting and expiry
  • RBAC permission matrix (160 permission rows across 3 admin roles)
  • Analytics suite: funnel, cohort retention, revenue by plan, geo distribution, daily active users, daily signups, top products, MRR
  • Email template preview with live iframe rendering
  • API key management for admin automation
• Workers — BullMQ dead-letter tracking, webhook delivery with retry, alert rule evaluation, scheduled report generation, tag expiry warnings (daily 8AM), notification deduplication via dedupKey.
• First-run modal — Guides new users through creating their first digital tag on first dashboard visit.
• Session management UI — View and revoke individual sessions; sign out all other devices.
• Gujarati (gu) language — Full i18n support for en, hi, and gu across all apps.
• First Responder Mode — ?responder=1 on emergency scan page activates high-contrast paramedic view.
• Stripe product sync script — scripts/stripe-sync.ts syncs all products and prices bidirectionally with --dry-run support.

Changed

• Tag status model simplified — Removed MANUFACTURED, AVAILABLE, SOLD, TRANSFERRED, DESTROYED. Active states: PENDING_SETUP, ACTIVE, LOST, FOUND, STOLEN, DEACTIVATED, EXPIRED.
• Subscription tiers — Reduced to FREE and PRO only (removed BASIC, PREMIUM, ENTERPRISE).
• Shop flow — TagPickerModal now required before adding physical products to cart, associating each item with a specific tag.
• Pricing page — Updated to FREE + PRO two-plan layout with "no credit card" messaging.
• Admin analytics — Added 8 new chart sections using previously unused API endpoints.

Security

• RBAC role/permission system with 160 seed rows
• Impersonation sessions with full audit trail and automatic expiry
• Login history tracking per user
• Brute-force lockout (5 failed attempts → 15 min lockout)
• CSP and HSTS headers hardened on all Next.js apps
• Timing-safe comparisons for all token verification

---

v0.1.0 — Initial Release

Core Platform

• 11 tag types: Keychain, Card, Pet, Travel, Sticker, Bike, Car, Band, Key, Metal, Custom
• AES-256-GCM encrypted QR codes — tamper-proof and clone-resistant
• Anonymous relay messaging — finders contact owners without seeing personal info
• Emergency medical profiles — blood type, allergies, medications, emergency contacts
• Tag status state machine: MANUFACTURED → AVAILABLE → SOLD → ACTIVE → LOST/STOLEN/FOUND → TRANSFERRED/DEACTIVATED

User Features

• Registration with email verification and password strength enforcement
• Two-factor authentication (TOTP) with Google Authenticator
• Dashboard with stats, recent tags, messages, and getting started checklist
• Tag activation (single and bulk up to 20 at once)
• Tag profiles: base, pet, vehicle, device, travel with photo uploads
• Lost & found with finder messages, reward offers (up to $10,000), and theft alerts
• Anonymous messaging system (WhatsApp-style UI)
• Emergency profile with medical info and emergency contacts
• Shopping with Stripe checkout, order tracking, and invoices
• Subscription tiers: FREE (3 tags), BASIC (10), PREMIUM (25), ENTERPRISE (100)
• Tag insurance (BASIC, STANDARD, PREMIUM tiers) with claim filing
• Tag transfer between users
• Notification preferences with quiet hours
• Push notifications (Web Push API)
• Dark/light theme support

Admin Panel

• Dashboard with 6 stat cards, system health, and activity feed
• User management with role/status changes and session revocation
• Tag batch generation (1–100,000 tags)
• Order management with status lifecycle and refund processing
• Product and variant management with image uploads
• Analytics: scans, revenue, tag distribution, recovery rates, coupon usage
• Blog CMS, careers management, newsletter/campaigns
• Coupon management and subscription tier changes
• Insurance claim management
• Audit logs with CSV export
• System configuration and maintenance tools

API

• 140+ REST endpoints across 16 modules
• JWT authentication with refresh token rotation
• API key support for automation
• Rate limiting per route
• Swagger UI documentation at /docs
• Stripe webhook integration

Infrastructure

• TypeScript monorepo (pnpm + Turborepo)
• Fastify API, Next.js 15 web/admin apps
• PostgreSQL 16 + Prisma 6 ORM
• Redis 7 + BullMQ workers (email, notifications, analytics, cleanup)
• Internationalization (English, Hindi, Gujarati)
• E2E testing with Playwright (20 test suites)
• Vercel deployment ready

Documentation

• 94 documentation pages covering all features
• User guide, admin guide, API reference, developer guide
• Real-world flow examples (lost dog recovery, emergency scenario, stolen vehicle)
• Troubleshooting guide, FAQ, glossary, and error codes reference
• Hindi and Gujarati translations for all section index pages