CloudBooth changelog

Security-hardening release for System Updates, federated outbound requests, immersive custom-code approval, dependency/runtime patching, browser supply-chain controls and Kubernetes workload isolation while preserving session-only TEST deployment for authorised users.

• System Update release preparation fails closed when the trusted validator rejects a package, including inside Bash command substitution
• Older management-host validators recognise modular System Update controls through compatibility markers during the 4.7.27 bootstrap upgrade
• Authorised logged-in users can deploy to TEST without passkey/MFA step-up; production promotion and rollback retain step-up authentication
• FastAPI, Starlette, python-multipart, Pillow, Jinja2 and pypdf are pinned to current patched release lines
• OIDC discovery, token exchange and JWKS retrieval use single-resolution DNS-pinned outbound HTTPS connections with normal hostname/TLS verification
• OIDC and SAML browser sign-in transactions expire after ten minutes
• Immersive camera, guest-data, AR and network capabilities require immersive.approve before live execution; network egress defaults to deny
• Legacy unrestricted immersive content is quarantined once for review by the schema-3 migration
• Browser API documentation is first-party and no longer executes mutable jsDelivr Swagger assets
• CSP blocks inline DOM event handlers unconditionally and no longer trusts jsDelivr for browser scripts/styles
• CloudBooth Kubernetes workloads use RuntimeDefault seccomp and read-only root filesystems with an explicit writable runtime temp volume
• Root repair tooling uses private temporary files, and Event Designer startup filenames are escaped before dynamic HTML insertion
• 4.7.26 editor, diagnostics, R2-first gallery delivery, Platform Status, camera/photo masks and SuperAdmin outage-banner improvements remain included

Improves Event Designer capture/masks and imports, error diagnostics, Cloudflare media operations, platform telemetry and SuperAdmin service visibility.

• Event Designer layer tree and generic search fields resist browser credential autofill
• Camera actions support instant capture or countdown plus configurable post-capture live-preview freeze
• Camera/photo mask layers can display live preview, latest capture or numbered multi-photo slots
• CloudBooth design imports derive a blank import name from the .cbooth filename and .vwdesign is no longer accepted
• Organisation logo upload correctly accepts PNG, JPEG and WebP after safe decoding and EXIF normalisation
• Event photo-email overrides can be reset to the current CloudBooth default template
• All user-visible server 5xx request references are persisted for Error Diagnostics lookup
• Error Diagnostics supports searchable multi-user selection and non-credential search inputs
• R2 month-to-date estimates use daily storage contribution and calendar-month request usage

Improves photo-email delivery and template consistency, Booth Control and SSO access, Event Designer workflows, organisation settings and navigation continuation.

• Shared system photo-email template across delivery paths
• SMTP relay and credit-transaction hardening
• Non-SuperAdmin Booth Control identity repair
• SSO membership-schema repair
• Centred content-sized editor toolbar with advanced colours
• Organisation Settings and send-capacity cards
• Artboard-load animation trigger

Improves mobile navigation, Event Designer reliability, organisation branding, guest-data exports and government audit persistence.

• Cleaner compact/mobile navigation
• Toggleable Force Active state
• Grouped PSD-safe editor toolbar
• Selectable error notifications
• Organisation logo and gallery branding
• Updated guest-data XLSX template
• Audit deadlock retry

Improves Event Designer responsiveness, email and scheduling reliability, navigation overflow handling, font recovery, guest data editing and user-facing errors.

• Faster editor modal feedback
• Single-surface email Preview/HTML editor
• Strict-CSP calendar repair
• Responsive mobile navigation fallback
• Inline guest-data field editing
• Safer email and editor errors

Splits the largest server/editor modules and consolidates editor commands, units and workspace layout.

• Server and editor monoliths decomposed
• Unified context/command toolbar
• Consistent startup icons
• Adaptive physical-unit inputs

Improves editor saving, browser diagnostics, Global Settings sockets and background PostgreSQL logging reliability.

• Collaborative save contract fixed
• Global SuperAdmin sockets no longer require tenant context
• Browser diagnostics accept text IDs
• System logs batch inserts

• Privacy Policy now uses a collapsible plain-language summary, working legal bullets and a cleaner customer-facing layout while retaining the full data inventory, purposes, retention, rights and contact information.
• Security & Compliance is global-first, aligns controls to ISO/IEC 27001, NIST Cybersecurity Framework, OWASP and privacy principles, and includes Australian Privacy Act, ISM, Essential Eight and PSPF considerations without presenting them as blanket certifications.
• Live event images are documented accurately as private authenticated Cloudflare R2 objects delivered through controlled application/signed-media paths; supported regional requirements and Enterprise on-premises deployments can be assessed on request.
• Public authoring notes and draft screenshot/video placeholders have been removed from customer pages.
• Current public/admin documentation and quick guides now cover all nine Billing Centre tabs, the Photoshop-style Options bar, movable Advanced palette, Layer Behaviours/Sequencer, Camera Studio, Booth Control, galleries, diagnostics and System Updates.
• Camera Preview / Display in Layer Behaviours now edits/selects the preview layer; removal is a separate unlink action so the pencil/edit control cannot delete the modifier.

• The Photoshop-style Options bar is a single compact row centred over roughly two-thirds of the editor canvas, with icon-first controls and horizontal overflow only when the available width is genuinely too small.
• Numeric editing controls now show explicit units such as px, %, degrees and seconds, including common typography, transform, shape and advanced properties.
• Photoshop source fidelity is condensed to a PSD status chip and the shorter Preserve appearance action.
• Layer Behaviours no longer renders separate empty explanations for every category; a layer with nothing assigned simply shows None for selected layer beneath the quick-add controls.
• The Add/Edit sequence step workflow now asks What should happen?, How should the layer behave?, When should it start? and Fine-tune the timing instead of exposing internal block/pillar terminology.
• Directional slide entrance and exit animations display PowerPoint-style green/red animation guide lines, arrows, endpoints and numbered markers directly on the canvas when their layer is selected.
• Animation guides can be shown or hidden from the sequencer toolbar and the preference is remembered per browser.
• The movable layer-specific Advanced palette, Camera Studio, Global Settings, Layer Tree/Behaviours resizing, R2/BMCS observability and System Updates reconciliation are preserved.

• The Photoshop-style selected-layer Options bar is now completely hidden when no layer is selected and returns only when the editor has a real active selection.
• Clicking blank canvas, deleting a selected layer, switching artboards or keyboard-deselecting now clears contextual UI from authoritative editor selection state instead of leaving stale properties visible.
• The old catch-all Properties inspector and icon rail are removed from the visible workflow; their controls remain hidden only as compatibility bindings for existing editor logic and saved documents.
• Text layers expose font family/search/upload, weight, style, size, colour, leading, Photoshop tracking, alignment and common character toggles directly in the top Options bar.
• Shape/vector, image and video selections receive their own everyday fill/stroke/blend/crop/click-through controls, while common transform, opacity and alignment stay available for every selected layer.
• Photoshop source-fidelity status and Preserve Exact Source Appearance are surfaced directly in the Options bar when the selected imported layer supports source fidelity.
• Advanced opens a movable canvas palette containing only uncommon controls applicable to the selected layer type, including advanced character/paragraph/text-box controls, path/stroke details and effects.
• The resizable Layers / Layer Behaviours split, Action & Animation Sequencer, Camera Studio, Global Settings context, R2/BMCS observability and System Updates reconciliation are preserved.

• Resizable Layers / Layer Behaviours split with persisted ratio and keyboard controls.
• Near-full-width contextual toolbar exposes common transform and text controls for the selected layer.
• Advanced Properties opens only on demand and remains movable/dockable.
• Global Dashboard terminology is renamed to Global Settings in the current interface.
• Camera Studio uses one event-wide default, always requests the highest supported camera resolution, and offers local-only RGB grading previews.
• Physical camera selection and booth-specific overrides remain in Booth Control; capture actions no longer author per-action camera profiles.

Makes layer actions, animations and modifiers immediately visible/editable from the Layer Tree and existing timeline without crowding the Properties inspector.

• Layer Tree rows now stay compact while clearly indicating attached animations, action/sequence items and layer modifiers.
• A dedicated Layer Behaviours panel directly beneath the Layer Tree lists sequences started by the selected layer, blocks that affect it and its direct camera/navigation/modifier configuration with immediate edit/delete controls.
• The existing animation timeline is now the primary Action & Animation Sequencer surface, supporting multiple independent On Press and Page Load sequences per layer with With Previous / After Previous timing.
• Entrance, Emphasis and Exit animations remain colour-coded and expose Duration, Delay, Hold and Easing; action blocks cover media playback, sound, configured camera triggers, photo-buffer clearing, artboard navigation and animation reset.
• Camera blocks continue to reuse the complete existing capture configuration, and the editor prevents an on-press sequence from invoking the same direct camera trigger twice.
• Global Dashboard/multi-organisation workspace recovery, System Updates deployment/validation reconciliation, private R2 media delivery and five-minute BMCS media health from 4.7.15/4.7.14 are preserved.

Repairs PostgreSQL organisation data-policy flag writes and makes required organisation/R2 schema verification mandatory before Kubernetes rollout.

• Normalises organisation data-policy booleans to integer 0/1 database flags.
• Creates and verifies organization_roles before application rollout.
• Adds release-blocking PostgreSQL schema invariants for R2 migration tables and per-photo storage metadata.

Fixes organisation edit/save and R2 storage action controls that could lose event.currentTarget after asynchronous API calls.

• Captures the edit form before asynchronous save operations.
• Keeps R2 storage test/migration busy-state controls stable across awaits.
• Preserves all v4.7.5 production and R2 readiness fixes.

Consolidates the 4.7.x R2/Kubernetes incident fixes and aligns release smoke tests with the hardened minimal public readiness response.

• Allows healthy TEST candidates to be adopted and promoted without weakening public readiness-response hardening.
• Consolidates PostgreSQL/Redis PVC, Redis authentication, rollout availability, control-role and frontend load fixes.
• Preserves Cloudflare R2 authoritative media and disposable NVMe cache/scratch.
• Adds a production-oriented R2 installation and safe existing-photo migration guide.

Fixes undeclared frontend load guards that prevented System Updates and Platform Status from rendering their initial data.

• Restores System Updates page loading.
• Restores Platform Status page loading, including R2 controls.
• Adds a first-party frontend load-guard declaration regression.
• Retains all 4.7.3 R2 and Kubernetes rollout/recovery protections.

Fixes the dedicated System Updates control workload and restores availability-preserving single-replica Web/API rollouts while retaining the R2 recovery fixes.

• Adds an explicit System Updates control service role.
• Keeps ordinary TEST HTTP/control services online until replacements are Ready.
• Keeps zero-surge only for heavyweight render workloads.
• Retains R2 authoritative media, NVMe cache, PostgreSQL/Redis PVC recovery, Redis auth and transactional live-edit safeguards.

Repairs Kubernetes stateful-service permissions, Redis authentication, constrained-node rollout behaviour and live-edit integrity while preserving the R2 authoritative-media architecture.

• Preserves Cloudflare R2 authoritative media and NVMe cache/scratch support.
• Repairs PostgreSQL and Redis startup on reused local-path PVCs.
• Enforces and verifies authenticated bundled Redis.
• Avoids single-node CPU rollout deadlocks with zero-surge TEST and heavy render strategies.
• Verifies TEST live-edit source integrity before re-enabling it.

Prevents failed TEST deployments from mutating the running DEV live source, adds an updater-independent Kubernetes recovery path, and stops stale log pollers from repeatedly running expensive filter-discovery queries.

• Immutable TEST rollout and smoke test now complete before any live-edit source mutation.
• Live-edit failure falls back to the verified immutable TEST build instead of taking DEV offline.
• Host-side recovery script repairs System Updates and performs a TEST-only rollout while checking that PROD images remain unchanged.
• System Logs filter metadata is opt-in and recent-history bounded; stale polling requests no longer trigger metadata scans.
• Fallback live-log polling is reduced to every 30 seconds when WebSocket delivery is unavailable.

Adds R2-backed live media, NVMe acceleration and a two-site Hostinger/Perth disaster-recovery foundation without requiring paid Cloudflare Load Balancing.

• Adds Cloudflare R2 as a global authoritative live photo/media target that can be used safely from Hostinger and Perth data planes.
• Fixes the Cloudflare R2 S3 adapter so uploads do not send unsupported AWS SSE-S3/SSE-KMS PutObject headers.
• Adds disposable local NVMe media caching plus staging, thumbnail and temporary-work paths; R2 remains authoritative if local cache is full, stale or unavailable.
• Adds Kubernetes site identity, performance/redundancy labels and configurable node placement/topology controls for multi-site and high-performance workloads.
• Adds explicit data-plane URL redirects/hints for Cloudflare Free deployments without depending on the paid Cloudflare Load Balancing product.
• Adds a SuperAdmin R2 live-media setup and round-trip test workflow while keeping R2 access keys in server-side secret profiles only.
• Adds Hostinger-primary and Perth-edge Helm overlays and CloudNativePG/Barman CNPG-I examples for distributed PostgreSQL DR with R2 WAL/base backups.
• Adds controlled Cloudflare Free DNS origin switching and R2 Bucket-Lock-verified immutable backup publication.
• Fails strict Australian storage sovereignty closed for ordinary Cloudflare R2 because its Oceania placement hint is not an Australia-only jurisdiction guarantee.

Additional reliability and security hardening after the staged code audit, including a deployment dependency fix, stricter tenant/runtime guards and lower-memory export paths.

• Fixes a Python dependency conflict that could stop Kubernetes release image builds.
• Adds stricter tenant isolation and runtime validation around administration, galleries and event/contact paths.
• Reduces memory use for large design and diagnostics exports and prevents overlapping browser status polling.
• Strengthens release validation so several classes of production-only Python/runtime mistakes are rejected before rollout.

Fixes runtime version drift and log noise, removes stale asset cache keys, hardens release extraction and immutable image promotion, and restores rapid TEST live editing with a frozen-and-retested promotion path to PROD.

• Reports the packaged CloudBooth version consistently across startup diagnostics, FastAPI metadata, generated environments and organization settings instead of falling back to stale historical versions.
• Restores Kubernetes TEST rapid editing from /opt/vw-photobooth-dev/cloudbooth with automatic Uvicorn reload while explicitly preventing live source mounts in PROD.
• Freezes manual TEST source changes into a new promotion artifact, reruns mandatory checks, verifies the frozen build in TEST with live editing disabled, then promotes the exact same registry digest to PROD.
• Pins Kubernetes HTTP and worker workloads to immutable registry sha256 digests during managed rollouts and records image/source digests in release state for reproducibility and rollback.
• Rejects tar release uploads that bypass the safe ZIP extractor and rejects symlinks or special filesystem objects in frozen TEST source.
• Removes stale frontend cache-busting version literals and derives generated environment version metadata from release.json.
• Stops non-interactive containers invoking the terminal clear command and throttles repeated transient database-writer warnings while retaining retry behaviour.
• Makes persisted JSON text writes explicitly UTF-8 and closes leaked SQLite test connections so ResourceWarning failures are visible and actionable.
• Safely extracts restore-test tar archives with Python's filtered tar handling instead of raw tar extraction.
• Requires bundled SBOM/provenance evidence to match the release version and verifies the recorded SHA-256 digests during release validation.
• Updates public and administrative documentation to the current Kubernetes release and replaces obsolete Docker-volume recovery guidance with PVC/PV safeguards.

Hardens the Kubernetes runtime after migration by self-healing closed PostgreSQL pools, restoring one shared System Updates control plane across TEST and PROD, and reporting live Helm release/deployment history.

• Self-heals a PostgreSQL connection pool that has been closed in-process so render/web/API roles recover without remaining permanently not-ready.
• Uses one Kubernetes System Updates control directory shared by TEST, PROD and the root-only rollout agent, restoring agent heartbeat, uploaded packages, test results and deployment history in both environments.
• Reports the live TEST and PROD Helm revisions, application versions and immutable images even after candidate state has been cleared following promotion.
• Adds Helm revision history to the System Updates deployment history so manual/migration rollouts remain visible alongside signed update-agent jobs.
• Prevents Kubernetes health probes from being rejected by explicit host allow-lists by always permitting localhost health checks and using localhost in readiness/liveness probes.
• Disables incompatible legacy Compose rollback records while retaining them as visible historical state until the next Kubernetes promotion creates a native rollback target.
• Fixes Kubernetes adoption validation so a live control-plane source does not need to retain every historical regression test from a release archive.

Introduces a transition-safe Kubernetes/K3s runtime architecture, replaces Docker host administration with application-level Platform Status, keeps the simple System Updates TEST-to-PROD workflow through a Kubernetes rollout service, and includes a complete database/customer-file migration runbook.

• Adds a supported K3s/Kubernetes deployment architecture with separate web, API, media, booth, render and worker workloads, PostgreSQL 17, Redis 7.4, persistent storage and Traefik routing.
• Replaces the Docker-host Infrastructure administration page with Platform Status focused on CloudBooth dependencies, storage, environment and release health.
• Keeps System Updates as the friendly release interface: uploads still deploy automatically to TEST, while a root-only rollout service performs Helm TEST/PROD rollouts without exposing Kubernetes credentials to the web application.
• System Updates accepts both transition Compose packages and future kubernetes-k3s packages, preserving the upgrade path during migration.
• Removes the obsolete Docker telemetry agent, Docker-socket application dependency, infrastructure template/scripts and physical-node storage affinity from the Kubernetes runtime.
• Adds Kubernetes production backup, database restore, shared/customer file import and schema-migration helpers plus a detailed planned-downtime migration runbook.
• Keeps organisation data-region/storage policy and application diagnostics while moving pod/node/container administration outside CloudBooth.
• Maintains PostgreSQL 17 and Redis 7.4 for the first cutover so the orchestration migration does not also become a database-version migration.

Adds persistent light and dark themes with dark as the default, automatically deploys accepted updater uploads to TEST without MFA, keeps step-up verification for production changes, restores left-side documentation navigation with richer visual onboarding, aligns pricing with the public Downloads navigation, fixes Force Active startup state, and removes verified legacy frontend code.

• Adds a persistent light/dark theme toggle across public pages, Studio and client-portal surfaces; the existing dark appearance remains the default for new browsers.
• Uploading an accepted release ZIP now automatically queues the exact package for isolated TEST validation and deployment without a second deployment button.
• TEST-only update actions no longer require a passkey or authenticator code; production promotion and production rollback retain step-up verification and audit controls.
• Plans/Pricing now uses the same public navigation and page shell as Downloads.
• Help removes the Pinned Quick Start label and documentation restores chapter navigation to the left sidebar, with a much more visual first-event guide using screenshots, booth photography, video and clearly marked screenshot slots.
• Force Active now changes the Event Designer startup row to Active immediately, then refreshes from uncached server state so the button cannot remain visually stale after success.
• Large inline style blocks have been removed from templates and split into scoped CSS bundles; several large static JavaScript blocks have also been moved out of HTML templates with explanatory file comments.
• Verified unused legacy home-page templates and obsolete Tailwind/style assets have been removed instead of remaining in the release archive.

Makes the full CloudBooth help library publicly readable, adds a searchable quick-start and error reference, simplifies public product/security messaging, preserves return-to-page authentication, consolidates What’s New, and improves Event Designer tool flow, panel layout and per-device camera control.

• All help and documentation pages can be read without signing in, including detailed administrator guidance; protected application actions still enforce their normal permissions.
• Help now opens with a pinned end-to-end Quick Start, tab-focused chapters, grouped troubleshooting, a searchable application error reference and image/video placeholders for future guided media.
• The public home page removes repeated feature blocks and uses a broader operational comparison covering bring-your-own hardware, offline operation, multi-device support, gallery controls, custom delivery providers and remote booth operation.
• Security & Compliance now explains practical encryption, audit, RBAC, infrastructure, recovery and data-control capabilities, with evidence described as available on request and standards support clearly separated from certification claims.
• Sign-in preserves the originally requested protected URL through password, passkey, MFA and workspace selection flows.
• What’s New consolidates multiple unseen releases into one de-duplicated summary of changes since the user’s last acknowledged version.
• Event Designer tools are regrouped by purpose, selected-layer tools apply immediately, docked panels can be resized and the properties inspector no longer covers the main tool rail.
• Event camera profiles can define the default device, flip, rotation and filter, while Booth Control can persist an override for an individual device without changing the event.
• The startup Force Active action now uses the event selected in the startup modal and reports API failures instead of silently appearing to do nothing.
• PSD placement diagnostics are rendered only for SuperAdmin users.

Adds development-only live source mounts, automatic Uvicorn reload and no-store development caching so templates, CSS, JavaScript and Python pages can be edited on cloud-dev.vectra.space without rebuilding Docker images.

• Development automatically bind-mounts /opt/vw-photobooth-dev/cloudbooth into all HTTP service containers
• Jinja templates, static CSS and JavaScript update on cloud-dev.vectra.space as soon as the host file is saved and the browser is refreshed
• Python changes automatically restart the development HTTP service processes through Uvicorn reload without rebuilding images
• Development responses use no-store browser and CDN cache directives so Cloudflare and the browser do not mask live edits
• Production never loads the development Compose override and continues to run only the immutable tested image
• Promotion continues to use the validated release artifact, preventing unvalidated live development edits from leaking into production

Restores Billing Centre invoice history by reconciling Stripe invoices after checkout races, keeps the Logs console live through resilient socket binding and polling, and makes host build-cache cleanup tolerate long-running and older Docker daemons.

• Billing Centre refreshes recent Stripe invoice history before rendering the Invoices tab or invoice API results
• Invoice webhooks received before organization mapping are retained as unresolved instead of being falsely marked processed
• Previously missed checkout invoices are backfilled from the organization Stripe customer and subscription
• Stripe invoice timestamps, hosted links, PDFs, balances and statuses are upserted into the correct organization
• System Logs binds when the shared socket becomes available and polls every three seconds when WebSocket delivery is unavailable
• The Logs JavaScript asset is versioned so deployments cannot retain an incompatible cached console script
• Build-cache cleanup uses a maintenance-specific Docker timeout and compatibility fallback for older daemon APIs

Makes paid checkout resilient to stale sessions, resumes existing-account carts after sign-in without duplicate users, compensates failed Stripe provisioning, and retains only the current and previous BuildKit cache generations.

• Paid checkout is a public provisioning boundary and is no longer blocked by stale browser session cookies
• Existing email addresses are detected before Stripe customer or subscription creation and are directed to sign in
• The checkout cart and Stripe payment method are restored after sign-in or MFA without storing the account password
• Authenticated checkout resumes with the original idempotency key instead of duplicating users, organisations or charges
• Failed local workspace provisioning cancels orphaned Stripe subscriptions and customers before returning an error
• Checkout pages validate session versions themselves and discard stale identity state safely
• BuildKit caches retain the current and immediately previous generation while automatically deleting older generations

Fixes guest plan checkout with stale sessions, secures login notices, repairs billing maintenance currency selection, improves log management, and enables the current Docker server telemetry agent by default.

Redesigns Infrastructure around locations, servers, applications, photo storage and searchable logs, adds server registration and workload assignment, and restores direct plan and organization communication-credit administration.

Adds configurable monthly Email and SMS credit allowances to plans and organizations, supports expiry or rollover for included credits, retains purchased add-on credits month to month, and consumes unit credits before prepaid monetary balance.

Docks the contextual inspector rail beside Canvas & Artboards, stacks independent layer-specific property cards without sticky overlap, makes text overflow visible by default, simplifies imported-font matching, and stabilises in-place text editing.

Removes an undeclared Beautiful Soup dependency from the contextual Properties inspector release tests so updater validation succeeds in the standard CloudBooth test image.

Redesigns the editor Properties inspector around pinned essentials, contextual layer-specific panels, simultaneous typography and colour editing, and compact Photoshop-inspired Character, Paragraph and Text Box groups.

Restores reliable double-click text editing without arming the text creation tool, prevents hotspot overlays from blocking the inline caret, and shows an explicit loading state while automatic font matching is still running.

Uses the retained Photoshop raster to calibrate visual line spacing when PSD leading metadata is unreliable, and makes inline editing use the exact same DOM text renderer as the canvas.

• Corrects PSD leading to use vertical canvas units and preserves richer Photoshop character and paragraph metadata.
• Adds wrap, overflow, paragraph spacing, text-box trimming and inset controls to Typography.
• Acknowledges completed imports after opening the event, including table and event-name navigation.
• Opens Typography as the sole expanded inspector section for a newly selected text layer.
• Preserves browser copy and paste inside dialogs, form fields and selected page text.

CloudBooth now notifies you when a background design import is ready, emails a direct edit link, and shows font matches live as you type.

• Import-ready Notification Centre alerts
• Email links open the converted event
• Live search-only font results

Editable Photoshop text now retains its original font weight and style, line spacing, letter spacing, kerning, paragraph spacing and mixed text formatting much more accurately.

• Correct Black, Bold and Italic variants
• Photoshop spacing and kerning retained
• Mixed styles preserved within text layers

Imported fonts now prepare through the correct render service, load without repeated console errors, and clearly report when application services are on different versions.

• Reliable font-family preparation
• Cleaner editor console
• Render service included in updates

Imported Photoshop text now prepares complete font families, asks you to confirm the match, and lets you search CloudBooth, online open-source fonts, fonts installed on your device, or upload a licensed file.

• Complete family variants downloaded
• Confirm font matches before editing
• Search online and device fonts

Imported Photoshop text now recognises common PostScript font names such as LondrinaSolid-Regular and can search the approved open-source catalogue again without reimporting the design.

• Better Photoshop font-name matching
• Approved catalogue retry
• Existing designs can recover missing fonts

PSD imports now communicate background and completed states more clearly, imported fonts are verified before text editing, and editor popups, panels and the tutorial are more stable and accurate.

• Clearer background import controls
• Exact imported-font diagnostics
• Stable Transform & appearance panel
• More accurate editor tutorial

Large Photoshop and Illustrator designs can continue converting after the editor is closed, with reusable converted models, optional completion email and improved font compatibility.

• Background design conversion
• Reusable instant-open editor models
• Open-source and uploaded font support
• Cleaner editor toolbar

System Administrators can retain more release packages and navigate releases, changelog notes and deployment history using clear ten-item pages.

• Unlimited release-package retention
• Ten-item System Updates pages
• Preserved page during refresh

Photoshop vector and accent layers no longer disappear when exact source appearance contains an empty fallback. CloudBooth automatically uses the accurate editable rendering instead.

• Visible vector and accent layers
• Invalid fallback rejection
• Automatic retained-PSD repair

Large Photoshop events now open from their saved model immediately while corrected layer artwork is repaired in the background, avoiding proxy timeouts and hidden errors.

• Immediate saved-model loading
• Background Photoshop repair
• Visible retryable editor errors

Fixes path, shape and accent artwork that could appear around one-third size or in the wrong position when imported from multi-artboard Photoshop documents.

• Correct multi-artboard vector scale
• Correct transformed path placement
• Automatic source-backed repair

Fixes the container browser validation that prevented the 4.5.11 mobile update from passing the System Updates deployment gate.

• System update deployment unblocked
• Playwright browser path corrected
• Mobile update retained

Makes CloudBooth administration, billing, galleries and the Event Designer practical to use on mobile devices without changing the desktop interface.

• Responsive administration pages
• Mobile navigation drawer
• Touch-friendly Event Designer
• Pinch zoom and two-finger pan
• Responsive tables and dialogs

Improves Photoshop image placement, reduces import delays and shows detailed progress and live placement diagnostics.

• Correct Photoshop image placement
• Faster PSD conversion pipeline
• Continuous layer progress
• Live browser pixel diagnostics
• Automatic legacy PSD repair

Makes releases faster without skipping validation, improves PSD import performance and placement, and adds a visual editor walkthrough.

• Faster validated deployments
• Improved PSD import speed
• Correct raster placement
• PSD diagnostic tools
• Animated editor tutorial
• Comfortable schedule workspace

Improves editor controls and text editing, enlarges scheduling, and restores complete server diagnostics and location management.

• Clear editor controls
• Reliable in-place text editing
• Larger schedule calendar
• Complete server diagnostics
• Location administration

Fixes misplaced or incorrectly scaled PSD artwork and makes the editor connectivity label accurately reflect whether the browser is offline.

• Correct PSD image alignment
• Automatic legacy PSD refresh
• Accurate online/offline editor status

Completes SSO discovery and identity administration, keeps editor controls fixed, and makes billing, currency, cancellation and communication settings more reliable.

• Fixed editor viewport controls
• Automatic SSO discovery
• Multi-device MFA
• Safer emergency access
• Live multi-currency billing previews
• Simpler email and SMS settings

Finishes the editor workflow improvements, improves guest-variable and page-action support, and makes expired sessions and checkout failures easier to recover from.

• Session timeout recovery
• Complete custom variables
• Flexible page actions
• Safer copy and reset behaviour
• Clear Stripe failures
• Deployment-tested release packaging

Makes plan setup, checkout and complex booth editing more predictable while adding first-run guidance, flexible inputs and page automation.

• Reliable checkout
• First-run editor tutorial
• Safer groups and copy/paste
• Multiple validated inputs
• Smart equal-spacing snaps
• Working schedule and email editors

Makes complex booth experiences easier to configure and test.

• Visible module layers
• Guided setup
• AR face alignment
• Working camera Preview

Makes failures readable, cache cleanup verifiable and infrastructure monitoring lighter.

• Readable errors
• Complete cache cleanup
• Lower monitoring overhead

Deploys infrastructure-managed storage with corrected release-gate metadata and data-plane inheritance.

• Infrastructure storage placement
• Deployment gate corrections
• Correct object-storage location reporting

Place large capture files on tested server, block or object-storage targets with clearer health and migration controls.

• Server roles
• Block volumes
• Named targets
• Storage health
• Organisation placement

Build and trigger customizable AR effects, camera experiences and games with a much clearer editor workflow.

• Visual AR designer
• Multiple effects per design
• Asset-triggered filters
• Clear capture modes
• Open custom-code bridge

Government-ready identity, assurance and recovery evidence plus secure interactive games, AR designs, multi-camera capture and video.

• Agency SSO and automated user lifecycle
• Detailed roles, approvals and complete activity audit
• Recovery and assessment evidence
• Interactive games connected to venue scores
• Customizable AR and multi-camera experiences

Makes CloudBooth integrations clearer and safer, improves error reporting, updates documentation and simplifies the System Updates confirmation experience.

• Clearer public API documentation
• More consistent integration authentication and permissions
• Safer, more useful error responses with request IDs
• Updated product and administrator documentation
• Simpler update confirmation for System Administrators

Improves the reliability of release validation and deployment while retaining the 3.6 documentation and interface improvements.

• More reliable release validation
• Updated product documentation
• Consistently centred dialogs
• Clear all notifications
• More flexible table columns

Improves product guidance and interface consistency and restores reliable update deployment controls.

• Reliable System Updates controls
• Updated product documentation
• New security and assurance information
• Consistently centred dialogs
• Clear all notifications
• More flexible table columns
• Clearer plan visibility controls

Improves product guidance and interface consistency and restores reliable update deployment controls.

• Reliable System Updates controls
• Updated product documentation
• New security and assurance information
• Consistently centred dialogs
• Clear all notifications
• More flexible table columns
• Clearer plan visibility controls

Makes product guidance easier to find, improves security transparency and standardises common interface controls.

• Updated product documentation
• New security and assurance information
• Consistently centred dialogs
• Clear all notifications
• More flexible table columns
• Clearer plan visibility controls

Makes secure administrator actions faster with passkeys and improves navigation, analytics, galleries and interface consistency across Studio.

• Use passkeys for supported administrator verification prompts
• Find administration tools faster in a grouped menu
• View Event Analytics across all dates by default
• See What's New from whichever Studio tool you open first
• Create and open gallery links more directly
• Enjoy more consistent icon spacing and navigation

Makes gallery sharing, event reporting and account security easier to find and use.

• Create and edit gallery links for one or more events from a focused popup
• Explore analytics through cleaner tabs and improved event filters
• Manage passkeys and passwords from a dedicated Security tab
• Use consistent CloudBooth dialogs instead of browser popups

Stabilises Browser Booth remote control and diagnostics, improves Studio tools and gallery deployment navigation, fixes passkey step-up, and makes Settings responsive with prepaid communication gateway visibility.

• Stable Browser Booth preview and artboard controls
• User-gesture-safe fullscreen requests
• Browser console mirrored to CloudBooth logs and container stdout
• Improved Studio toolbar and Venue Activities guidance
• Responsive Settings and communication credit controls

Adds passkey login and management, a public release changelog with Studio What's New notices, and Browser Booth token-route/event-snapshot recovery.

• Sign in faster with WebAuthn passkeys
• Public automatic changelog
• One-time Studio What's New notices
• Browser Booth event snapshots and precise diagnostics

Introduced audited ZIP release deployment, test promotion, diagnostics and rollback from the UI.

• System Updates administration page
• Test and production deployment controls
• Live logs, diagnostics and rollback

Added a Compose-safe application-native development access gate.

• Custom development access page
• Signed development session
• Automated health-check token

Moved CloudBooth to role-based web, API, media, booth, render and worker services.

• Microservice process roles
• Test-to-production release manager
• PostgreSQL and Redis shared infrastructure