-

CHANGELOG.md

@@ -0,0 +1,50 @@
+# Changelog
+
+All notable changes to My Keyser / Discover Keyser WV will be documented in this file.
+
+## [Unreleased]
+
+## [2026-06-18]
+
+### Added
+
+- Added a neon dark-theme redesign across the public site, including a redesigned homepage layout focused on featured businesses, upcoming events, Keyser WV context, and rotating random business discovery.
+- Added configurable homepage random business rotation, with admin controls for every-two-hours or daily refresh behavior.
+- Added business-owner registration tier alongside regular member registration.
+- Added business claim requests for existing listed businesses, including required contact phone number collection and admin review workflow.
+- Added admin dashboard visibility for pending business-owner claim requests.
+- Added owner-submitted immediate edit requests during business-owner signup, including optional YouTube or Vimeo video URLs.
+- Added business video support using `lone-embed.php` for approved listing videos.
+- Added admin business edit support for direct video URL management.
+- Added email verification for regular users and business owners.
+- Added Mailgun-based email sending with configurable US/EU API region, domain, API key, sender name, sender email, and site base URL.
+- Added configurable email format mode: designed HTML email with text fallback or simple text-only email.
+- Added branded verification and thank-you email templates matching the neon dark site theme.
+- Added post-verification follow-up messaging for business owners explaining that a verification call will happen within a couple of business days.
+- Added `verify-email.php` to consume verification tokens, activate users, and send follow-up emails.
+- Added PHP CLI admin utility at `scripts/keyser-admin.php` for listing, showing, activating, deactivating, deleting, and updating businesses.
+- Added CLI support for updating business fields including name, slug, category, description, address, phone, email, website, video URL, hours JSON, coordinates, active status, and featured status.
+- Added CLI support for showing menus, wiping all menus, and wiping a specific business menu with explicit `--yes` confirmation.
+
+### Changed
+
+- Registration now requires an email address.
+- New user accounts remain inactive until the emailed verification link is clicked.
+- Login now blocks unverified users with a clear verification message.
+- Business-owner signup now queues claims and initial edits but requires email verification before login.
+- Owner edit review now supports website and video URL fields.
+- Admin settings now include a dedicated email verification and Mailgun configuration area.
+- Existing active users are marked as verified during schema upgrade so established admin/user accounts continue to work.
+
+### Security
+
+- Added expiring hashed email verification tokens.
+- Added destructive-operation safeguards to CLI menu wipe and business delete commands via required `--yes`.
+- Prevented unverified accounts from authenticating.
+
+### Verification
+
+- Verified public registration, login, verification, and admin settings routes locally.
+- Verified unconfigured Mailgun state blocks registration cleanly without creating a user.
+- Verified email verification token consumption activates a test account and marks the token used.
+- Verified CLI read-only commands, invalid video URL rejection, and destructive-command confirmation guards.