Back to Resource Center
AeroFind Release Notes
Version 1.4.3 (May 29, 2026 — WorldTracer Sandbox, Centralized Access, Theme-Driven PDF Branding & MVC Refactoring)
WorldTracer Sandbox Engine: Implemented a local, high-fidelity mock-sandbox API interceptor in worldtracer.php to simulate baggage file creation, status updates, and operational event logging without requiring live SITA credentials.
Centralized Staff & Email Management: Consolidated staff account and email recipient administration under the global administrative "Access & Audit" control panel in admin.php, removing duplicate station-scoped staff settings and resolving cross-station session restriction bottlenecks.
Dynamic AeroFind PDF Branding: Upgraded the PDF reporting engine to dynamically utilize station-theme colors (dbGetThemePrimary() and hover overrides) across the disruption summary, service recovery confirmations, and Property Irregularity Reports (PIR), deprecating hardcoded legacy color variables.
MVC API Controller Modernization: Refactored monolithic procedural handlers in api.php by delegating business logic to stateless, MVC-compliant controllers: WorldTracerController, EmailController, SlaController, and SmartMatchController.
Passenger Portal MVC Routing & Segregation: Restructured root-level guest entry points (index.php, track.php, manage.php, etc.) into clean controllers/routers and relocated all passenger-facing UI templates under the new templates/index/ directory.
Disruption Module MVC Relocation: Migrated disruption desk operational modules and PDF templates (disruption.php, disruption_document.php, disruption_module.php, etc.) into the MVC-compliant templates/staffportal/ subdirectory with full backward-compatible URL pathways.
Version 1.4.2 (May 27, 2026 — Security Hardening, Responsive Staff Chat, Station Decoupling & Auto-Deployment Monitor)
Nonce-Based CSP Security Hardening: Implemented a dynamic, cryptographically secure nonce-based Content Security Policy (CSP) engine using PHP output buffering in db.php to automatically protect inline scripts and styles from XSS attacks, deprecating raw static 'unsafe-inline' declarations in .htaccess.
Responsive Staff Chat Modal: Redesigned the Staff Live Chat Modal to be fully responsive using Tailwind CSS classes, ensuring a sleek, high-density interface across all mobile devices and viewports.
PIR Interface Minimalist Clean-up: Modernized the visual design of the Property Irregularity Report (PIR) list inside the staff portal by removing the legacy colored indicator bars to achieve a clean, elegant, high-density minimalist aesthetic.
Decoupled Station Architecture: Purged station-specific gating and context locks across the Staff and Admin Portals, fully migrating the system into a globally unified folder-based deployment model without cross-station session restriction bottlenecks.
Per-Station Admin Settings Overrides: Added granular station_settings configuration infrastructure in the Admin Panel (admin.php), enabling administrators to conditionally define global values or precise per-station (IATA code scoped) config overrides.
Platform Update Center & Auto-Deployment Terminal: Built a native, GitHub API-powered Platform Update Center tab in the Admin Panel with real-time version status, update badges, dynamic release note streaming, and a high-fidelity visual deployment terminal with live iframe-buffered stdout telemetry.
Version 1.4.1 (May 26, 2026 — Disruption Module Refinements & Core Stability Polish)
Disruption Module Polish: Finalized passenger disruption & overbooking intake flows, correcting edge cases in queue management and ticket verification.
Operational Stability: Hardened backend API controllers against concurrent queue submissions, guaranteeing consistent database state persistence under high load.
Feature Gating Refinements: Fine-tuned commercial-tier gates across Guest, Staff, and Supervisor portals for Lite, Plus, and Enterprise packages.
Global Synchronization: Aligned system version reporting across all UI layers, footers, admin consoles, and core database settings constants.
Document Layout Alignment: Resolved CSS formatting issues in PDF output templates for service recovery voucher generation.
Version 1.4.0 (May 25, 2026 — Tiered Packaging System, Disruption Intake & Dynamic Feature Gating)
Tiered Packaging Engine: Commercial-grade packages (Lite, Plus, Enterprise) managed via central constant configurations.
Dynamic Feature Gating: Centralized logic to enforce feature licensing across passenger, staff, and supervisor portals.
Sleek UI Gating: Automated visual masking and upgrade prompts for premium services including Cabin Lost & Found, SLAs, and GDPR.
Secure API Auditing: Rigorous server-side verification to block unlicensed data queries and payload submissions.
Passenger Disruption Intake: Built a complete passenger intake system enabling disrupted passengers to register details (PNR, ticket, bag tags, special needs) directly via mobile QR scan.
Dynamic Intake Portal: Implemented a responsive passenger portal (`disruption.php`) with live status checking and approved voucher visibility.
Real-Time Disruption Desk: Created an operational hub in the Staff Portal (`staffportal.php`) for creating disruption events, managing the intake queue, and approving/rejecting requests.
Service Recovery Confirmations: Standardized print-ready and PDF-exportable confirmation certificates for authorized passenger recovery.
Self-Bootstrapping Database: Automated schema setup and indexing for events and requests tables during operational intake boot.
Version 1.3.3 (May 14, 2026 — Smart AI Matcher & Uber-Style Tracking)
Smart AHL-OHD AI Matcher: Integrated Gemini 1.5 Flash for automated lost-to-found baggage correlation. Uses weighted scoring and semantic analysis to identify high-probability matches.
Uber-Style Live Tracking Map: Reimagined passenger tracking with premium CartoDB tiles, real-time ETA, pulsating animations, and route visualization.
AI Email Auto-Replies: Fully activated Gemini AI email automation with semantic intent detection and intelligent drafting for staff approval.
Bag Inventory AI Intelligence: New "Potential AI Matches" dashboard for streamlined staff review of automated baggage correlations.
System Hardening: Integrated persistence layers for matches and email drafts into the core DB kernel.
Version 1.3.2 (May 13, 2026 — Next.js Migration Roadmap & Premium Optimization)
Next.js Migration Strategy: Developed a 5-phase roadmap to transition the PHP monolith to a modern Next.js architecture.
Rich Aesthetics Framework: Defined design tokens for Glassmorphism, Framer Motion animations, and Outfit typography.
Architecture Modernization: Initiated data layer decoupling for future scalability.
Version 1.3.1 (May 8, 2026 — DevOps Bridge & UI Hardening)
Support Ticket Automation: Real-time email notifications for staff when developers reply to tickets via DevOps Bridge.
Enhanced Airline Analytics: Added real-time PIR counts to airline filters for better operational context.
Admin Dashboard Stability: Resolved rendering issues and implemented safety timeouts for the loading overlay.
Version 1.3.0 (May 7, 2026 — Storage Inventory & WorldTracer Bridge)
Storage Inventory Management: Integrated "Left Behind" (tagless) baggage tracking directly into the Staff Portal.
Visual Intake: Added support for photo capture and descriptive attributes during storage intake.
WorldTracer Bridge: Implemented automated background synchronization to match orphaned bags with global PIR records (12-hour cycle).
Unified Inventory Dashboard: Real-time tracking of both matched cases and stored items with visual status indicators.
Tagless Identification: Streamlined search and movement logic for unidentified baggage.
Version 1.2.9 (May 7, 2026 — Enterprise Rebranding & SaaS Removal)
Core Rebranding
SaaS-to-Enterprise Pivot: Rebranded the entire platform from a SaaS (Software as a Service) model to a high-end Enterprise On-Premise solution.
Strategic Partnership Program: Introduced an 'Early Adopter' model for the demo portal, focusing on frictionless hub pilots (€950) to build social proof for the solo-founder venture (30-day trial).
Setup-Fee Waiver Logic: Implemented messaging for setup-fee waivers for initial pilot partners to accelerate traction.
Removed Multi-Tenancy Logic: Stripped out SaaS signup workflows, trial management, and organization-id placeholders to ensure a clean, single-tenant corporate experience.
Enterprise UI Refinement: Updated badges and headings across the landing page and staff portals to reflect the Enterprise status.
Security & Deployment
Deployment-First Focus: Oriented all documentation and setup tools toward IT department self-hosting on private corporate servers.
Cleanup: Removed legacy `saas_logic.php` and trial signup endpoints.
Version 1.2.9: Synchronized all core files to the new enterprise release branch.
---
AeroFind Release Notes
Version 1.2.5 (May 2, 2026 — AI Email Intelligence & Automation)
Email Automation (IONOS & IMAP)
AI Email Reply Queue: New staff dashboard section for reviewing and approving AI-drafted passenger replies.
Smart Matching Engine: Automatically links incoming emails to PIR reports via reference extraction and email cross-referencing.
Out-of-Scope Redirection: Automatically detects emails for non-handled airlines and drafts redirection replies.
IMAP Background Listener: Infrastructure for polling IONOS mailboxes securely via SSL/TLS.
AI & Multi-lingual Support
Gemini AI Integration: Context-aware drafting of passenger replies based on real-time bag status.
Auto-Language Detection: Supports English, German, and Spanish with automatic translation for staff.
Localized Auto-Acknowledgment: Drafts replies in the passenger's original language to maintain high-quality communication.
Admin & Staff Controls
Staff Approval Workflow: "Human-in-the-loop" verification system ensuring no email is sent without staff review.
Advanced Automation Settings: New Admin panel section for IMAP credentials and Gemini AI API configuration.
Communication Audit Trail: Every approved email is logged directly into the PIR's activity timeline.
Stabilization & UX Fixes
Portal Stability & Persistence: Resolved theme/language persistence issues on tokenized management pages and the mobile upload assistant. Added inline theme initialization to prevent "flash of white" (FOUC).
Mobile Navigation Sync: Standardized the bottom tab menu across all portals (`index`, `manage`, `track`, `cabin`) with responsive text labels that hide on small devices to maintain icon-based accessibility.
Baggage Tag Parsing: Refactored `track.php` and `manage.php` to parse comma-separated `bag_tags` into individual, readable list items (e.g., "Bag Tag 1: ABC...").
RBAC Security Hardening: Standardized API permission checks to `pir.view`, resolving "Access Denied" issues for staff accessing passenger requests and email approval queues.
Improved Mailing Diagnostics: Enhanced the SMTP test tool to support both SMTP and native PHP mail() verification.
Smart Logistics Icons: Fixed BDO row logic to strictly differentiate between RUSH (flight) and standard (truck) icons based on delivery status.
Chatbot Expansion: Integrated an "Other Request" smart action across all passenger portals for rapid non-standard assistance.
WorldTracer Navigation: Dynamically hide WorldTracer network UI components if the feature is disabled in settings.
SQL Integrity: Resolved parameter collision errors in PIR status update queries.
Double Nav Fix: Corrected a duplicate `</nav>` tag error in `track.php`.
Version 1.2.4 (April 30, 2026 — Evidence, Inventory, Ratings & Timeline)
Passenger Portal (manage.php)
Case Timeline / Milestones: Replaced progress bar with a rich milestone timeline (Created → Located → In Transit → Delivered → Closed) with timestamps, courier names, and delivery recipient data.
Digital Evidence Locker: Passengers can upload additional photos/documents (JPG, PNG, PDF, max 10MB, max 20 files) post-PIR filing, displayed in a gallery view.
Rate & Review: Post-delivery passengers rate staff and courier (1–5 stars + comment). Aggregated anonymously.
Staff Portal (staffportal.php)
Bag Inventory Management: New "Bag Inventory" section with zone-based tracking (Intake → Sorting → Storage → Courier Pickup → Returned/Destroyed). Scan-and-move interface, zone occupancy dashboard with capacity alerts, bag history modal, inline quick-move per row.
Premium Bag Tag Scanner: High-performance camera scanner with support for 1D barcodes (Code 128/39/EAN), essential for physical baggage tags. Includes laser overlay, flashlight control, and audio/haptic feedback.
Passenger Evidence Viewer: PIR case rows now include collapsible "Passenger Evidence" panel showing uploaded files.
Passenger Ratings Panel: PIR case rows include collapsible "Passenger Ratings" panel showing submitted ratings.
UI & Performance Refinements
Compact Admin Panel: Re-engineered the Admin Dashboard and Staff Portal with a "High-Density" layout. Reduced sidebar width, topbar height, and global padding by 30% to maximize data visibility for power users.
Deep WorldTracer® (BagJourney) Write-Back: Real-time operational synchronization with SITA Network (AHL, FWD, BDO).
Enterprise Stability: Resolved HTTP 500 errors during installation and optimized .htaccess for varied server environments.
BagJourney API Alignment: Modern RESTful actions for delayed bag creation and baggage process messages.
UI Consistency: Unified "Cockpit-Grade" high-density interface across all admin and staff sections.
Bug Fixes & Stabilization
SLA Visibility Fix: Resolved an issue where the SLA Insight card was incorrectly visible on non-performance tabs.
GDPR logic: Fixed a fatal error in the GDPR Compliance center by properly initializing the RBAC middleware in the API layer.
UI Stabilization: Consolidated supervisor-only sections and removed duplicate DOM elements to prevent rendering conflicts.
Airline Configuration Sync: Hardened the administrative configuration engine to automatically synchronize portal URLs and brand logos between the JSON configuration and the primary airlines database.
Database & API
SITA WorldTracer Integration: Full REST API integration in `worldtracer.php` for PIR submission, BDO creation, and status querying. Includes automatic reference injection into local reports.
IATA 743a (Type B) Messaging: Support for legacy messaging (AHL, OHD, FWD, BDO) via SMTP-to-Type-B gateways.
Webhook Manager: New event distribution system with HMAC signing, delivery logging, and exponential backoff retries. Accessible via Admin Panel.
New Tables: `ratings`, `evidence_uploads`, `bag_locations`, `inventory_zones`, `sita_messages`, `webhook_subscriptions`, `webhook_deliveries`.
New API Endpoints: `saveRating`, `uploadEvidence`, `getEvidenceByCase`, `getCaseTimeline`, `getRatings`, `updateBagLocation`, `getWebhookSubscriptions`, `testWebhookSubscription`, etc.
---
Version 1.2.3 Stable (April 29, 2026 - Logistics Health & Passenger Support)
Logistics & Operational Analytics
Logistics Health Dashboard: Launched a comprehensive analytics suite in the Admin Panel featuring real-time KPIs:
- Avg. Recovery Time: Tracking the speed from initial report to "Located" status.
- 48h Fulfillment Rate: Measuring the percentage of bags delivered within the critical 48-hour window.
- Staff Leaderboard: Visual productivity tracking for agents based on case closure volume.
Backend KPI Engine: Implemented `dbGetStaffAnalytics()` utilizing audit log history for high-accuracy performance measurement.
Hub Transparency & Communication
Real-Time Hub Status: Introduced a dynamic "System Health" banner across all passenger portals. Admins can broadcast airport-specific or global delay alerts (e.g., weather issues at LHR) to manage passenger expectations.
"One-Tap" Support Shortcut: Integrated a floating support action button (FAB) in the passenger interface, providing immediate WhatsApp and Email shortcuts to the specific ground handling station assigned to the case.
Station Contact Overrides: Enhanced the station management system to allow localized support emails, WhatsApp numbers, and public phone lines, ensuring passengers are always directed to the most relevant desk.
Core Enhancements & Audit Fixes
Database Schema Hardening: Added the `closed_at` column to the `reports` table to ensure precise tracking of case lifecycle events.
MySQL Optimization: Refactored the backend analytics engine to utilize native MySQL `TIMESTAMPDIFF` and `DATE_ADD` functions, ensuring high-performance KPI reporting.
Automated Alert Cleanup: Integrated a new cleanup task in `cron_cleanup.php` to automatically purge expired system alerts, maintaining database hygiene.
Global Support Mapping: Improved the support fallback logic to ensure passengers always have access to a central Lost and Found desk if station-specific contacts are unavailable.
Component Standardization:
- Implemented Deep WorldTracer® (BagJourney) Write-Back for AHL, FWD, and BDO events.
- Fixed HTTP 500 errors by optimizing .htaccess and installer pathing.
- Added missing enterprise tables (`sita_messages`, `report_rush_legs`) to the automated installer.
- Standardized `ops-stat-row` across all Administrative Portal modules.
- Refined BagJourney API alignment with SITA v1.1 REST specification.
Maintenance & Stability Fixes (v1.2.3 Hotfix)
Station Management Stability: Patched a critical database crash in `dbDeleteStation` caused by invalid column references in the migration layer.
Robust Schema Migrations: Replaced incompatible MySQL `ADD COLUMN IF NOT EXISTS` syntax with a safe, cross-version compatible migration helper in `db.php`.
RBAC Security Hardening: Added server-side role validation to the `deleteHandoverNote` API endpoint to prevent unauthorized staff from deleting operational intelligence.
Admin UI Synchronization: Fixed a race condition in the Admin Panel where newly added airlines did not appear in the configuration table until a manual refresh.
UI Performance Optimization: Resolved a duplicate ID conflict in `staffportal.php` that interfered with performance metric rendering in the supervisor dashboard.
Confusing 2FA Clarification: Updated the administrative recovery email placeholder to prevent configuration confusion for new system admins.
Optimized Distribution
Streamlined Release Package: Refactored the distribution workflow to exclude Android Kiosk build artifacts and source, reducing the release zip size by 95% (from 108MB to 5MB) for faster deployment.
Production-Ready Exclusions: Hardened the packaging script to automatically strip local configuration (`db_config.php`), development metadata (`.claude`, `.vscode`), and sensitive JSON backups from the final archive.
Version 1.2.2 Stable (April 28, 2026 - Localization & Enterprise Ops)
Multilingual & Localization
Arabic Language Support: Integrated Arabic (AR) as a primary language across all passenger-facing portals (Index, Track, Manage, Cabin).
RTL Layout Mirroring: Implemented full Right-to-Left (RTL) support, including mirrored UI components and right-aligned typography for native Arabic users.
Compact Language Switcher: Replaced the button-based language list with a unified, space-efficient dropdown component featuring a global "Globe" icon.
State Synchronization: User language preferences are now persisted via local storage and synchronized across all portals automatically.
Enterprise Operations & Communication
Bulk Management Suite: Added high-volume tools for staff to bulk-update PIR statuses, reassign couriers, and close cases in a single action.
Global CSV Export: Staff can now export filtered PIR reports to CSV for compliance audits and external reporting.
SLA Escalation Engine: Automated detection and escalation of stale PIR reports based on configurable age thresholds, ensuring no cases are forgotten.
Passenger Communication Logs: Introduced a transparency log in `manage.php` showing passengers a history of all emails and notifications sent regarding their case.
Web Push Integration: Successfully launched the Web Push notification system with service worker support for real-time mobile updates.
Branding & Assets
Dynamic Asset Injection: Updated the notification engine to fetch the company logo and branding assets dynamically from administrative settings.
Icon Set Expansion: Added high-fidelity branding assets including `icon-192.png` and `badge-72.png` for mobile PWA support.
---
Version 1.2.1 Stable (April 28, 2026 - Multi-Station Hierarchy & Communication Hub)
Enterprise & Multi-Station Architecture
Multi-Station Hierarchy: The platform now supports managing multiple airport nodes (stations) from a single installation. Each station maintains its own city/country mapping and data isolation.
Station-Specific SMTP Overrides: Stations can now define their own dedicated SMTP credentials, allowing ground handlers to send emails from station-specific addresses (e.g., `muc@groundhandler.com` vs `fra@groundhandler.com`).
Data Isolation Enforcement: Reports, lost/found items, and tasks are now strictly scoped to the user's assigned station, preventing cross-station data leakage.
Unified Communication Hub
Centralized Settings: Introduced a dedicated administrative pane that consolidates Mailing (SMTP), SMS (Twilio), and Email Template configurations.
Premade Professional Templates: Ships with a suite of premium, multilingual (EN/DE) HTML email templates for PIR creation, status updates, and item matching.
Item Unmatched Notification: Automated workflow for notifying passengers when a previously matched lost item is manually refuted by staff, ensuring transparency.
Core & Stability
Database Schema Standardization: Resolved a critical column mismatch where legacy code referenced non-existent `reference_number` columns. Standardized all baggage references to use `wt_ref`.
AEROFIND_VERSION: Centralized version reporting for consistent diagnostics across the platform.
API Scoping: Hardened station-level filtering in `getLostItems` and `getFoundItems` API endpoints.
---
Version 1.1.2 Backup (April 28, 2026 - Pre-Kiosk-Redesign Snapshot)
Backup Checkpoint
Snapshot Release: Tagged backup taken prior to the Android Kiosk premium redesign and passenger-scope narrowing (Lost Bag report w/ airline picker, Cabin Lost report, Cabin Found browse).
No Functional Changes: This release is a safe restore point only; no code or schema changes from 1.1.1.
---
Version 1.1.1 Stable (April 27, 2026 - Kiosk Connectivity & API Hardening)
Android Kiosk Integration
Connectivity Fix: Resolved a critical issue where the Android Kiosk app failed to load airlines and branding due to API action shadowing.
Smart Config Dispatching: The `getConfig` endpoint now intelligently detects the client type, returning a JSON list for Android and a JSON map for the web portal.
Public Whitelisting: Explicitly whitelisted `getAirlines` and `getConfig` for public access, ensuring the Kiosk can initialize without a staff session.
API Architecture & Integrity
Bridge Isolation: Hardened the `worldtracer.php` bridge to prevent it from intercepting core API actions when included as a library.
BDO Sync Fix: Resolved a race condition where WorldTracer BDO synchronization was skipped due to premature script termination in the bridge file.
Syntax Validation: Patched a PHP Parse error in `api.php` caused by an unmatched brace in the recently added Found Item handler.
---
Version 1.1.0 Stable (April 27, 2026 - SaaS & Multi-Tenancy)
SaaS Multi-Tenancy Engine
Tenant Isolation Architecture: Launched a robust multi-tenant core in `saas/saas_logic.php` with automatic identification via subdomains or sessions.
Data Vaulting: Implemented `tenant_id` partitioning across all operational tables (Reports, Users, Airlines, Tasks), ensuring total data privacy between organizations.
Automated Provisioning: Introduced a zero-touch onboarding flow in `saas/signup.php` that initializes database records and seeds default admin credentials for new tenants.
Enterprise Marketing & Management
Premium SaaS Landing Page: Created a high-fidelity, dark-mode marketing site in `saas/index.html` with glassmorphic visuals and interactive feature highlights.
Global Admin Console: Developed a centralized "Tower" at `saas/admin/index` for platform owners to manage tenant lifecycles, monitor system-wide MRR, and track global PIR volume.
Branded Tenant Portals: Launched dynamically branded Passenger and Staff portals in `saas/portal/` that adapt UI elements and logos based on the active organization.
Technical & Infrastructure
SaaS Migration Suite: Added `saas/setup_saas.php` to automate the transition of existing single-tenant installations to the multi-tenant model.
Version Unified Release: Synchronized the system version across `db.php` and documentation for the 1.1.0 stable branch.
---
Version 1.0.9 Stable (April 27, 2026 - Scanner & Intelligence)
IATA Boarding Pass Scanner
Seamless Auto-Fill: Launched a high-performance camera scanner in the passenger portal, supporting PDF417, Aztec, and QR codes from printed or mobile boarding passes.
IATA BCBP Parsing: Implemented a robust parser for the Bar Coded Boarding Pass standard, automatically extracting Passenger Name, PNR, Flight Number, and Date.
Multi-Leg Support: The scanner and manual entry fallback now handle up to 4 sequential flight legs, ensuring complete travel history for complex recovery cases.
Haptic Feedback: Integrated tactile vibration response upon successful scan for improved mobile user experience.
Logistics Intelligence (v1.1 Roadmap)
Real-Time Fleet Map: Introduced a supervisor-exclusive map in the Staff Portal, visualizing active "In Delivery" baggage clusters using Leaflet.js.
Courier Performance Scorecard: Added a data-rich dashboard tracking critical partner KPIs: Verification Rate, Completion Score, and Average Fulfillment Time.
Geocoded Clusters: Integrated spatial intelligence that maps bags based on delivery ZIP codes even before final GPS coordinates are submitted by the driver.
UI & Performance Refinements
Modal Logic Fix: Resolved a critical event-hijacking conflict between the scanner and the airline QR modals that prevented the close buttons from functioning correctly.
CSP Map Tile Fix: Patched the Content-Security-Policy to allow OpenStreetMap tile rendering, resolving the "gray map" issue in the Logistics Map.
Broadcast Integrity: Optimized the BDO reassignment logic to ensure passenger verification states are reset, maintaining delivery chain-of-custody.
Refined Data Mapping: Improved the accuracy of bag tag extraction from BCBP data, ensuring 10-digit IATA license plates are correctly parsed.
---
Version 1.0.8 Stable (April 27, 2026 - Delivery Verification & PoD Preview)
Passenger Verification of Delivery
Two-Step Verification: Launched the "Passenger Receipt Portal," allowing customers to officially confirm they have received their bags.
Verification UI: Integrated a new red "Verified" theme for successful passenger receipt confirmations.
Staff Portal Badging: Added a high-visibility `VERIFIED` badge to the staff dashboard to distinguish between courier-claimed and passenger-confirmed deliveries.
Auto-Reset Logic: Implemented a security protocol that automatically clears passenger verification data if a BDO is deleted or reassigned, ensuring each delivery attempt is fresh.
Courier & Logistics UX
Live Photo Preview: Drivers now see an instant, high-fidelity preview of the baggage photo before submission, ensuring clarity and evidence quality.
Proof of Live Photo: Rebranded PoD terminology to "Proof of Live Photo" for improved industry alignment and clarity.
Status Pipeline Sync: Automated the transition to `DELIVERED` status across all system tables (Reports & Assignments) upon PoD submission.
Reporting & Stability
BDO PDF Data Join: Fixed a critical bug in the BDO generator where "Rush" vs "Courier" labels were incorrectly handled.
HTML Template Structure: Resolved a nesting issue in `track.php` that was causing layout drift on mobile devices.
Query Optimization: Updated the PDF generator to use robust `LEFT JOIN` logic for accurate courier partner identification.
---
Version 1.0.7 Stable (April 26, 2026 - Full-Bleed & Integrity)
Mobile & Desktop UI Overhaul
Full-Bleed Canvas: Eliminated empty "gray space" on both mobile and desktop by expanding cards to the edge of the viewport and matching the canvas background to the surface theme.
Topbar Theme Toggle: Added a dedicated Night Mode toggle directly in the topbar for rapid accessibility on mobile devices.
Sidebar Footer Polish: Fixed alignment issues in the mobile menu and ensured the Administrator profile (name/role/avatar) is always visible and perfectly centered.
Enhanced Touch Targets: Increased padding and font sizes for navigation items to provide a more responsive, app-like feel on touchscreens.
Security & Authentication
Consolidated Security: Completely removed the legacy "Admin PIN" field, unifying all administrative authentication under the modern, hashed Passphrase system.
Real-Time UX: Implemented automatic page reloads after saving critical Security or Global settings to ensure changes are immediately reflected in the branding and 2FA state.
Data Integrity & Reliability
Signed Audit Migration: Resolved a database schema conflict by adding a migration that upgrades legacy audit tables to the new HMAC-chained "Secure Vault" format.
Bug Fixes: Resolved PHP notices related to undefined variables (`STAFF_PIN`) that were cluttering the system logs.
Improved Alignment: Refined the Company Information section with a cleaner grid layout, utilizing space previously occupied by legacy settings.
---
Version 1.0.6 Stable (April 26, 2026 - Security & Branding)
Security Hardening
Hashed Passphrase Auth: Replaced the legacy 4-digit Admin PIN with a robust, cryptographically hashed alphanumeric passphrase system.
Two-Factor Authentication (2FA): Implemented an optional, configurable Email-based 2FA layer for administrative access.
API Key Infrastructure: Launched the "System API Access" suite, providing secure `X-API-KEY` authentication for programmatic platform control.
Secure Brute Force Protection: Upgraded login protection with session-aware attempt tracking.
Branding & Visual Identity
Circular Brand Marks: Updated the entire UI (Landing Page and Admin Panel) to use perfectly circular airline brand marks for a modern, consistent aesthetic.
High-Fidelity Logos: Integrated high-resolution, transparent brand marks for Vueling (VY) and Norwegian (DY) via Wikimedia Commons.
CSP Compliance: Updated Content Security Policies in `.htaccess` to permit secure cross-origin asset loading from verified brand repositories.
API & Integration
Airline Dispatcher 2.0: Enhanced the `batchAddAirlines` API to support flexible field mapping and custom logo URLs.
OpenAPI 3.0 Alignment: Synchronized the documentation suite with the new API Key authentication model.
Unified Mailer Utility: Centralized all system notifications into a robust, themed `dbSendMail` engine.
Bug Fixes & Refinements
Logo Visibility: Fixed contrast issues where certain logos were being silhouetted by monochromatic filters.
IATA Logic: Refined handling of short-code and long-code airline identifiers in the database.
---
Version 1.0.5 Stable (April 26, 2026 - High-Priority Response)
Urgent Workflow Integration
Urgent vs. Review Split: Decoupled 'Urgent' status from standard 'Review Required' tasks to provide clearer operational prioritization.
Dynamic Stats Engine: Updated the backend API and frontend dashboard to provide dedicated real-time counters for urgent cases.
Alert Card Logic: Implemented "is-alert" visual states in the dashboard summary, triggering high-visibility rings when urgent tasks are detected.
Logistics & Partner Portal
Flexible Evidence Capture: Removed camera-lock on mobile devices in the Delivery Portal (`delivery.php`), enabling couriers to select Proof of Delivery (PoD) from their photo gallery.
Improved Task Visibility: Enhanced task card layouts for better legibility on mobile devices during field operations.
UI Visibility & Contrast
Light Mode Optimization: Significantly improved visibility of "Close Portal" and "Back to Directory" buttons on the passenger landing page (`index`) in light mode by increasing contrast and refining shadows.
Modal Navigation: Refined the visual weight of modal close buttons (`.mcl`) to ensure they remain accessible across all theme states.
Security & Enterprise Infrastructure
HMAC-Chained Audit Vault: Launched the `/audit` module, featuring cryptographically signed activity logs that prevent database tampering.
Centralized RBAC Middleware: Migrated all permission checks to the `/auth` module, providing a single source of truth for Role-Based Access Control (Admin, Supervisor, Staff, Courier).
OpenAPI Documentation Suite: Integrated a live Swagger-based API explorer in `/api`, allowing developers to test and integrate with the AeroFind platform more efficiently.
---
Version 1.0.3 Stable (April 25, 2026 - Premium Experience & Connectivity)
Premium Demo Overhaul
Aviation SaaS Redesign: Re-engineered the entire `/demo` directory with a "Unique Dynamic Premium SaaS Aviation" theme, featuring high-fidelity glassmorphic interfaces and unified typography.
Demo Command Center: Implemented a stunning new landing page for the demo suite with interactive portal explorers.
Full-Spectrum Portals: Updated Staff, Admin, Passenger, Delivery, and Cabin demo portals to match the premium v1.0.3 visual standard.
Dispatch & Logistics (BDO)
Small BDO Section: Integrated a courier/dispatch summary directly into the Staff Portal table rows for immediate visibility of assigned partners and delivery status.
Rich Logistic Reports: Updated the static HTML report generator to include "Dispatch & Logistics" sections, ensuring all courier details are visible even before the final delivery confirmation.
Passenger Experience & Tracker Links
Review Before Submission: Passengers can now review their AirTag/Tracker links in the pre-submission summary screen, preventing data entry errors.
AirTag Link Persistence: Fixed issues where AirTag links were missing in certain email templates and report views.
UI Consistency: Refined the "Close Portal" success action and corrected color scheme inconsistencies on the main landing page.
---
Version 1.0.2 Stable (April 25, 2026 - Modernization & Maintenance)
UI Modernization
Premium Admin Interface: Redesigned the Administrative login and dashboard with a high-fidelity "Premium Aviation" visual language, featuring glassmorphism and enhanced information hierarchy.
Dynamic Branding Engine: Integrated a centralized theme variable system. All portals (Admin, Staff, Courier, Guest) now respond dynamically to custom brand colors defined in the Admin Panel.
Unified Visual Parity: Standardized high-contrast typography, micro-animations, and surface elevations across all platform modules.
Layout Hierarchy: Implemented dedicated dashboard headers and optimized vertical spacing for improved system navigation.
Admin Panel Enhancements
Brand Visual Tokens: Compact redesign of the theme settings section with a new "Reset Defaults" feature.
Navigation Optimizations: Fixed navigation bar overlaps and clipping issues across all device viewports.
Security & Maintenance
XSS Mitigation: Patched potential Cross-Site Scripting (XSS) vulnerabilities in the Admin Dashboard and Staff Portal by enforcing strict HTML entity encoding.
Installer Validation: Added robust database name validation in the system installer.
Resource Management: Optimized cURL handle management in the API layer to prevent memory leaks during high-load scenarios.
---
Version 1.0.1 Stable (April 23, 2026 - Maintenance)
Data Integrity & Reliability
PoD Persistence Fix: Resolved a critical issue where Proof of Delivery photos were lost during report regeneration.
Improved Scraper: Hardened the `dbRebuildReportHTML` engine with robust container-based scraping.
Image Compatibility: Switched all photo evidence storage to JPEG for full compatibility with Dompdf and older browsers.
New Features
Automated Delivery Alerts: Added automated email notifications for both passengers and staff upon successful delivery.
Admin Control: New toggles in the Admin Panel to enable/disable delivery confirmation emails.
Rich Reports: PIR reports now include a dedicated "Delivery Confirmation" section with timestamp, recipient, and handover photo.
---
Version 1.0.0 Stable (April 23, 2026)
This is the first major stable release of the AeroFind platform, consolidating all core modules into a
high-performance, enterprise-ready suite.
Major Features
End-to-End Baggage Tracking: Real-time monitoring from PIR creation to final delivery.
Unified Delivery Portal: Authenticated hub for couriers with mandatory GPS/Photo Proof
of Delivery (PoD).
Cabin Lost & Found: Dedicated module for matching onboard items with passenger
reports.
Smart Dispatch Engine: Haversine-based routing for optimal courier assignment.
Enterprise Admin Console: Global control over GDPR, SMTP, and multi-airline visibility.
WorldTracer® Bridge: IATA-compliant synchronization for baggage references.
DPD Fulfillment: Native API connectivity for automated shipping and label generation.
UI & UX Improvements
Mobile-First Design: Consistent navigation and language selection across all portals.
Premium Aesthetics: Glassmorphic UI with Outfit/Inter typography for a professional
feel.
Interactive Demo Suite: Zero-backend demo environment for rapid stakeholder evaluation.
Compliance & Security
GDPR Engine: Automated PII purging with configurable retention profiles.
Audit Registry: Detailed logging of all agent actions for full accountability.
Payload Encryption: AES-256 protection for sensitive passenger data.