Proposed changelog (next)
Promote by copying into /v1/changelog and bumping the version. v1 winners stay until then.
| Date | Change | Winner becomes | Who implements | IDOR notes |
|---|---|---|---|---|
| 2026-10-11 | Path remount (explorer + routes.json) | https://middleware-dev.bookdirect.live/api/v1/bookdirect/{properties,rooms,rates-packages,bookings,reservations,emails} — file-manager stays /nellalink/file-manager | Frontend switch remaining /nellalink lodging calls; Middleware already mounted; Core persist-only | Same JWT/owned_by rules |
| 2026-10-11 | Email send + template matrix | POST https://middleware-dev.bookdirect.live/api/v1/bookdirect/emails/send | Middleware: keep 8 live keys; port payment/auth later. Frontend: no Resend. Core: email_event_* only | Bearer = guest or property owner. Public key deny |
| 2026-10-11 | Booking ID 6-digit | Middleware create-booking issues "010000"+ (or max+1) | Middleware counter; Core stores string meta_key/reference; Frontend/emails display same | Server-only counter |
| 2026-10-11 | API content + local amenity slugs | File-manager + property GET. Picker = v1 tick list | Frontend hard-codes slugs; Middleware persists slugs; Core amenity_* | Public GET active media only |
| 2026-10-11 | MelonQ hosts | platform.melonq.com / onboarding.bookdirect.melonq.com / melonq.com/signin | Frontend — split apps; Middleware unchanged | Distinct cookies. No shared session across .ng / .melonq.com |
| 2026-10-11 | Booking Engine subdomain | https://{HotelName}.com-bookdirect.com | Frontend edge + slug GET; Middleware same book/pay | Same as Marketplace checkout |
| 2026-10-11 | ARI inventory SSOT | New Middleware inventory write (after folder exists). Live stay: availability/check | Middleware; Core optional inventory entity — no date engine | Partner JWT writes; counts-only reads |
| 2026-10-11 | AI Rate Match | Middleware ingest + rates write + ARI push | Middleware + scraper workers; MelonQ UI | Ingest secret ≠ browse key |
| 2026-10-11 | Google fetch-once | Middleware enrich on onboard; FE reads stored snapshot | Middleware Places; Frontend display only | Server key never in Marketplace |
Do not promote
- Full React Email source catalog into DevDocs
- Amenities as an API picker list
- Rooms collapsed into rates-packages
- Rewind of live booking refs below current max