|
| 1 | +/* ChangelogPage — public, unauthenticated /changelog. |
| 2 | + * |
| 3 | + * The contractual change-notice channel referenced by the DPA, the |
| 4 | + * subprocessor list, and trust-residency.md ("we notify customers at |
| 5 | + * least 30 days before adding or replacing a sub-processor; subscribe to |
| 6 | + * the changelog"). Before this page existed the link 404'd and every doc |
| 7 | + * that promised customers a change-feed was technically lying. |
| 8 | + * |
| 9 | + * Reverse-chronological. Each entry: date heading + 3-5 concise bullets. |
| 10 | + * Entries are inlined here as a TypeScript array (vs. a content repo / |
| 11 | + * markdown loader) because (a) the cadence is low — call it weekly at |
| 12 | + * most — and (b) keeping the source in-tree means a single PR ships the |
| 13 | + * fix and the entry that documents the fix. |
| 14 | + * |
| 15 | + * Wrapped in PublicShell so the top nav + footer match the rest of the |
| 16 | + * marketing surfaces. Mirrors the IncidentsPage layout vocabulary |
| 17 | + * (public-eyebrow / public-h1 / public-sub / public-section) so a |
| 18 | + * visitor moving between /status, /incidents, /changelog feels the |
| 19 | + * pages are the same surface. */ |
| 20 | + |
| 21 | +import { PublicShell } from '../layout/PublicShell' |
| 22 | + |
| 23 | +// ─── types ──────────────────────────────────────────────────────────────── |
| 24 | + |
| 25 | +interface ChangelogEntry { |
| 26 | + /** ISO date (YYYY-MM-DD). Sort key — newest first. */ |
| 27 | + date: string |
| 28 | + /** Short headline summarising the day's changes. */ |
| 29 | + title: string |
| 30 | + /** 3-5 concise bullets describing what shipped. */ |
| 31 | + bullets: string[] |
| 32 | +} |
| 33 | + |
| 34 | +// ─── content ────────────────────────────────────────────────────────────── |
| 35 | + |
| 36 | +/* Reverse-chronological. Add new entries at the TOP of the array. Keep |
| 37 | + * each bullet single-line, no marketing fluff — the audience is a |
| 38 | + * procurement reviewer or an on-call engineer checking what changed. */ |
| 39 | +const ENTRIES: ChangelogEntry[] = [ |
| 40 | + { |
| 41 | + date: '2026-05-14', |
| 42 | + title: 'Trust + marketing accuracy pass (W12)', |
| 43 | + bullets: [ |
| 44 | + 'DPA + trust-residency aligned on Standard Contractual Clauses (Module Two, controller-to-processor) as the EU/UK transfer mechanism.', |
| 45 | + 'Subprocessor list expanded with Resend (transactional email), Cloudflare (CDN/DNS), Fastly + GitHub Pages (marketing/docs serving), and Loops (lifecycle email forwarder).', |
| 46 | + 'Homepage step-02 encryption-at-rest claim narrowed to "vault secrets and stored credentials" — the customer Postgres cluster\'s disk is not blanket-encrypted on the anonymous tier.', |
| 47 | + '/changelog is now a real route (was 404; referenced by DPA §6, subprocessor list, and trust-residency egress section).', |
| 48 | + 'llms.txt and llms-full.txt clarified to call out DigitalOcean Spaces (S3-compatible) as the production object-store backend.', |
| 49 | + ], |
| 50 | + }, |
| 51 | + { |
| 52 | + date: '2026-05-13', |
| 53 | + title: 'Hobby Plus tier + W11 dashboard honesty pass', |
| 54 | + bullets: [ |
| 55 | + 'Hobby Plus tier ($19/mo) shipped as the middle step in the pricing grid — research-backed triple-tier pricing decoy.', |
| 56 | + 'Agent error envelope standardised across all provisioning endpoints with `agent_action` next-step hints.', |
| 57 | + 'security.md + PGP key + DPA + subprocessor list published at /docs/public/* (was 404 from W10 onward).', |
| 58 | + 'Per-tenant MinIO IAM credentials by default in production — anonymous-tier internal_url scrubbed from response payloads.', |
| 59 | + 'GitHub auto-deploy webhook live; /status page now consumes real GET /api/v1/status backend.', |
| 60 | + ], |
| 61 | + }, |
| 62 | + { |
| 63 | + date: '2026-05-12', |
| 64 | + title: 'DO Spaces production cutover + deploy wedge live', |
| 65 | + bullets: [ |
| 66 | + 'Object-storage production backend cut over from in-cluster MinIO to DigitalOcean Spaces (`nyc3`); 24h lifecycle rule enforces anonymous-tier auto-expiry at the storage layer.', |
| 67 | + 'POST /deploy/new live end-to-end (Kaniko → k8s Deployment → Ingress + cert-manager TLS on *.deployment.instanode.dev).', |
| 68 | + 'Idempotency-Key replay header honoured on every provisioning endpoint; provisioner-auth regression test bundle added to CI.', |
| 69 | + 'dashboard-api retired — agent API now serves the dashboard directly. Removes the gRPC bridge that was the source of a long tail of cross-service auth drift.', |
| 70 | + ], |
| 71 | + }, |
| 72 | +] |
| 73 | + |
| 74 | +// ─── page ───────────────────────────────────────────────────────────────── |
| 75 | + |
| 76 | +export function ChangelogPage() { |
| 77 | + const sorted = [...ENTRIES].sort((a, b) => b.date.localeCompare(a.date)) |
| 78 | + return ( |
| 79 | + <PublicShell> |
| 80 | + <ChangelogStyles /> |
| 81 | + |
| 82 | + <section className="changelog-header"> |
| 83 | + <span className="public-eyebrow">Changelog · public · reverse-chronological</span> |
| 84 | + <h1 className="public-h1"> |
| 85 | + Changelog<span className="dot">.</span> |
| 86 | + </h1> |
| 87 | + <p className="public-sub"> |
| 88 | + What changed on instanode. Subprocessor adds, sub-processor swaps, and material |
| 89 | + posture changes are announced here at least 30 days in advance — see the{' '} |
| 90 | + <a href="/docs/public/dpa.md">DPA</a> and the{' '} |
| 91 | + <a href="/docs/public/subprocessors.md">subprocessor list</a> for the formal |
| 92 | + commitment. |
| 93 | + </p> |
| 94 | + </section> |
| 95 | + |
| 96 | + <section className="public-section"> |
| 97 | + <ol className="changelog-list" aria-label="Changelog entries"> |
| 98 | + {sorted.map((entry) => ( |
| 99 | + <li key={entry.date} className="changelog-entry"> |
| 100 | + <header className="changelog-entry-head"> |
| 101 | + <time dateTime={entry.date} className="changelog-entry-date"> |
| 102 | + {formatDate(entry.date)} |
| 103 | + </time> |
| 104 | + <h2 className="changelog-entry-title">{entry.title}</h2> |
| 105 | + </header> |
| 106 | + <ul className="changelog-entry-bullets"> |
| 107 | + {entry.bullets.map((b, i) => ( |
| 108 | + <li key={i}>{b}</li> |
| 109 | + ))} |
| 110 | + </ul> |
| 111 | + </li> |
| 112 | + ))} |
| 113 | + </ol> |
| 114 | + </section> |
| 115 | + |
| 116 | + <section className="public-section changelog-links"> |
| 117 | + <a href="/docs/public/subprocessors.md" className="changelog-link"> |
| 118 | + Subprocessors |
| 119 | + </a> |
| 120 | + <span className="changelog-link-sep">·</span> |
| 121 | + <a href="/docs/public/trust-residency.md" className="changelog-link"> |
| 122 | + Trust + residency |
| 123 | + </a> |
| 124 | + <span className="changelog-link-sep">·</span> |
| 125 | + <a |
| 126 | + href="mailto:privacy@instanode.dev?subject=Subscribe%20to%20changelog%20notices" |
| 127 | + className="changelog-link" |
| 128 | + > |
| 129 | + Subscribe (email) |
| 130 | + </a> |
| 131 | + </section> |
| 132 | + </PublicShell> |
| 133 | + ) |
| 134 | +} |
| 135 | + |
| 136 | +// ─── helpers ────────────────────────────────────────────────────────────── |
| 137 | + |
| 138 | +function formatDate(iso: string): string { |
| 139 | + // Parse manually so we render the same date regardless of viewer |
| 140 | + // timezone — a 2026-05-14 entry should never appear as "May 13" to a |
| 141 | + // visitor in the Pacific timezone. |
| 142 | + const [y, m, d] = iso.split('-').map(Number) |
| 143 | + const date = new Date(Date.UTC(y, m - 1, d)) |
| 144 | + return date.toLocaleDateString('en-US', { |
| 145 | + year: 'numeric', |
| 146 | + month: 'short', |
| 147 | + day: 'numeric', |
| 148 | + timeZone: 'UTC', |
| 149 | + }) |
| 150 | +} |
| 151 | + |
| 152 | +// ─── styles ─────────────────────────────────────────────────────────────── |
| 153 | + |
| 154 | +function ChangelogStyles() { |
| 155 | + return ( |
| 156 | + <style>{` |
| 157 | + .changelog-header { padding-top: 8px; } |
| 158 | +
|
| 159 | + .changelog-list { |
| 160 | + list-style: none; |
| 161 | + padding: 0; |
| 162 | + margin: 0; |
| 163 | + display: grid; |
| 164 | + gap: 28px; |
| 165 | + } |
| 166 | + .changelog-entry { |
| 167 | + border: 1px solid var(--border); |
| 168 | + border-radius: 12px; |
| 169 | + background: var(--surface); |
| 170 | + padding: 24px 24px 20px; |
| 171 | + } |
| 172 | + .changelog-entry-head { |
| 173 | + display: flex; |
| 174 | + align-items: baseline; |
| 175 | + gap: 14px; |
| 176 | + margin-bottom: 14px; |
| 177 | + flex-wrap: wrap; |
| 178 | + } |
| 179 | + .changelog-entry-date { |
| 180 | + color: var(--text-faint); |
| 181 | + font-family: var(--font-mono); |
| 182 | + font-size: 12.5px; |
| 183 | + font-variant-numeric: tabular-nums; |
| 184 | + letter-spacing: 0.04em; |
| 185 | + text-transform: uppercase; |
| 186 | + } |
| 187 | + .changelog-entry-title { |
| 188 | + margin: 0; |
| 189 | + font-size: 18px; |
| 190 | + font-weight: 500; |
| 191 | + color: var(--text); |
| 192 | + letter-spacing: -0.005em; |
| 193 | + } |
| 194 | + .changelog-entry-bullets { |
| 195 | + margin: 0; |
| 196 | + padding-left: 18px; |
| 197 | + color: var(--text-dim); |
| 198 | + font-size: 14px; |
| 199 | + line-height: 1.6; |
| 200 | + } |
| 201 | + .changelog-entry-bullets li { margin-bottom: 6px; } |
| 202 | + .changelog-entry-bullets li:last-child { margin-bottom: 0; } |
| 203 | +
|
| 204 | + .changelog-links { |
| 205 | + display: flex; |
| 206 | + align-items: center; |
| 207 | + gap: 10px; |
| 208 | + font-size: 13px; |
| 209 | + flex-wrap: wrap; |
| 210 | + } |
| 211 | + .changelog-link { color: var(--text-dim); transition: color 120ms; } |
| 212 | + .changelog-link:hover { color: var(--accent); } |
| 213 | + .changelog-link-sep { color: var(--text-faint); } |
| 214 | + `}</style> |
| 215 | + ) |
| 216 | +} |
0 commit comments