What’s new in Xentr.

Pareto bucketing (oee.service.ts, downtime-pareto). The query bucketed every row with categorized_at IS NULL into "Awaiting reason". The operator inbox (downtime.service.ts, microStopFilter) excludes categorized_at IS NULL AND ended_at IS NOT NULL AND duration_minutes <= 1 from its listed rows, surfacing them only as an aggregate — so no UI path exists to ever set categorized_at on one. scanWindow emits an event on every entry into a non-RUNNING state and stores Math.max(1, round(sec/60)), so a 30s blip off a 30s-sampled machine_states feed lands as duration_minutes = 1 and is swallowed by that filter. The CASE is now three-way, routing micro-stops to their own bucket; category stays unplanned, so OEE and planned-share arithmetic are unchanged. Date range (date-range-picker.tsx). getPresetRange() correctly wrapped to in endOfDay(); the custom two-click path in handleDayClick passed react-day-picker's raw local-midnight Date. Consumers filter started_at < to, making the selected end date exclusive. Range normalisation is extracted to lib/date-range.ts (resolveCustomRange) with unit tests covering end-of-day inclusivity, click-order independence, and single-day picks. detectPreset() compares with isSameDay(), so preset matching is unaffected. Banner (downtime-by-category/page.tsx). The data-quality banner tested totalMinutes === 0, which only holds while an event is still open — a closed-but-unconfirmed stoppage carries its full duration, so the banner stayed silent precisely when there was real unreconciled downtime. It now keys off the bucket name.

.theme-ink is now applied once on the marketing <main> (in conditional-chrome.tsx), so every non‑fullscreen page renders in the dark scope by default; semantic tokens adapt automatically. A token sweep converted the remaining hardcoded light surfaces (bg-paper/bg-paper-2/bg-white → bg-background/bg-card, Panel tone="paper" → tone="ink") and light‑violet chips (bg-violet-50/100 + text-violet-600/700 → bg-violet-500/15 + text-violet-300) across Solutions, Resources, Compare, Integrations, Trust, and the changelog. Shared DataTable status/violet colors already clear WCAG AA on ink via the earlier .theme-ink remap. Eight orphaned pre‑revamp homepage section components were deleted.

apps/web revamp across the Homepage, Pricing, and Book-consultation pages. New Tailwind v4 tokens in globals.css: a signal (yellow) scale plus a scoped .theme-ink dark surface the three pages opt into (global default stays light until remaining pages are converted). The hero mounts an interactive capacity-ROI widget backed by a pure, unit-tested computeRecovery() (lib/marketing/capacity.ts) with URL-synced inputs. Cinematic scroll reveals use the existing GSAP+Lenis provider and motion/react, all reduced-motion aware. Exposed specifics (location, machine counts) were removed in favour of capability language. .theme-ink remaps light-paper-calibrated status/violet colors to their ink-calibrated siblings so shared components (DataTable, also used on the light /compare page) clear WCAG AA on both surfaces.

New src/transform/ stage (RFC P2) inserted at the single driver→publisher channel seam: TransformStage::spawn(rx, rules) returns the original receiver untouched when no rules exist (golden wire test enforces byte-identical default behavior). Steps: rename / enum_map (with drop_unmapped) / enrich / drop / deadband (numeric widening of the in-driver exact-match DeltaFilter, keyed per machine+category on last-emitted). Rules live in the transforms: config list (v1: config.yaml; registry delivery follows with fleet config). Payload parsed lazily once, re-serialised only when dirty; non-JSON payloads pass payload-shaped steps untouched. Runs before the write-ahead buffer, so only post-transform data is persisted/published.

Three pieces (RFC P3): gateway-core now subscribes the edge tag/{name} topics (legacy + tenant-prefixed) and lands Good-quality numeric/boolean samples in the existing sensor_readings hypertable (sensor_type='tag') through the same WAL/batch/idempotency path — no schema change. Two new factory-scoped endpoints (monitoring/tags — distinct tags with last(value,time) over 7d; monitoring/tags/series — time_bucket avg/min/max, whitelisted buckets). New (dashboard)/explorer page (recharts, 5s polling, range presets) + sidebar entry. Explorer reads live once an edge with OPC UA/Modbus machines streams; FANUC state/production continue on their existing paths.

New in-process driver family (protocol: "modbus", tokio-modbus/TCP) following the OPC UA pattern: ClientLike seam with mock + real, run-loop FSM with the shared backoff/tolerance policy, per-tag emits on tag/{name} with delta suppression. modbus: config block per machine (unit_id + tags: kind/address/type/word_order/scale/offset/unit; raw 0-based addresses); contiguous reads are batch-planned (≤120 regs, gap-merge ≤8). Pure decode/planner cores are unit-tested (all word orders, i16/u32/i64/f32/f64, window splits); golden wire test confirms FANUC/OPC UA output stays byte-identical. Fleet store gains a modbus_json column via the ALTER-on-open pattern. Note: dashboards render Modbus tags fully once the cloud generic-tag ingestion (RFC P3) lands — the driver ships first so field provisioning can start.

New firewalled Tauri v2 project at edge/xentr-edge-desktop (own pnpm workspace + Cargo project, out of the monorepo lockstep, own path-filtered CI producing the NSIS installer artifact). Strict shell-only boundary per the 2026-07-04 architecture verdict: the app writes the agent's config.yaml (claim block; claim-issued credentials override placeholders), spawns/supervises the xentr-fanuc agent process, and polls its localhost :9180 /healthz · /readyz · /machines — drivers/OTA/MQTT stay in the agent. Wizard: claim → FANUC DLL gate (detect-and-guide, part A02B-0207-K737) → start → live checklist. Phase B tracked: bootstrapper download+verify, windows-service install replacing nssm, Trusted Signing, WebView2 offline variant.

New static /trust route on the marketing site (in the sitemap; canonical/OG inherit from the layout), a TrustStrip band between the FAQ and the final CTA, a footer link, and a pointer from the /legal/security policy. Every fact card maps to shipped enforcement: the audit_logs_no_modify trigger, OrgMembershipGuard + RLS with tenant-isolation.spec.ts in CI, CodeQL + full-history gitleaks workflows, and consent-gated PostHog with PII-shaped keys redacted. Compliance profiles (ISO 9001 / ISO 13485 / IATF 16949) are explicitly labeled "in development". One new duotone asset (fox-trust.webp, 1:1).

The calculator's mount-time "seed the URL" effect (router.replace with default params + #oee-calculator) ran on every homepage visit because the calculator is embedded there — polluting analytics with fake params and causing refreshes to jump to the anchor. Removed; copyLink now builds the query from current values instead of the address bar, and reset replaces to the bare pathname (inputs fall back to defaults via the existing parsers). Audited the rest of apps/web for mount-time URL writers: none.

Course cover + chips on the Introduction, per-chapter loop strip, localStorage progress (no account, no tracking — stays in your browser), next-chapter cards from the course order, outcome callouts per chapter, and a completion block with the celebrating fox.

Hero fork panels (quickstart vs Learn), live openapi.json stats read at build, hairline primitives grid with verified links, a what's-new strip parsed from the changelog entry files, and a Learn promo band with the fox. No new dependencies.

Source restructured from one changelog.mdx to one MDX file per entry under apps/docs/content/changelog/ (filename-ordered, frontmatter title/date/tags/image). The marketing page, RSS feed and the per-PR CI gate all follow the new location; old anchors keep their slugs.

apps/mimos gains a root not-found.tsx following the design-system mascot rules (one fox, ≤140px, aria-hidden, no live numbers nearby) with notFound.* strings seeded in all six locales. A briefly-explored light-mode treatment was dropped same-day in favor of a single duotone style — all mascot art (app 404, changelog sign-off, Learn finale) now uses the dark duotone masters, framed on light surfaces like the developer-portal 404.

12s Seedance 2.0 clip in the house duotone grade, first frame matching the existing FinalCta still (seamless poster → video). Shipped as 1.0 MB WebM + 1.6 MB MP4 + WebP poster, motion-reduce CSS gate, lg-only frame — same pattern as the HomeHero film. Docs portal not-found.tsx gains the fox-search illustration. Mascot asset library trimmed to the approved duotone set.

/learn becomes an optional catch-all serving the course tree (index.mdx is the Introduction — the old card-list landing page is retired), with section separators in content/learn/meta.json and fumadocs' built-in neighbour navigation. New chapters: setup.mdx, next-steps.mdx. Structure modeled on docs.medusajs.com/learn.

Two new duotone assets (fox-hero.webp, fox-404.webp) generated in the house GPT Image 2 recipe with a fixed character reference. FinalCta gains a framed 16:9 visual column (same grid pattern as the 404 band); the 404 page swaps the andon image for the fox, and the andon shot remains in use in FloorStory.

Second fumadocs collection (content/learn) served at /learn/[...slug] with its own page tree; the four tutorial pages moved via git mv (history preserved). Permanent redirects cover /docs/tutorials, /docs/tutorials/:slug and /docs/changelog. Search indexes both trees; the sitemap lists /learn/* and drops the redirecting URLs. The changelog source file stays in place as the single source for the marketing page, RSS feed, and the CI changelog gate.

118 files deleted (~9k lines): retired-customer collateral, historical apply-NNNN migration runners, pre-Drizzle setup scripts, packages/drivers/driver-focas, Changesets machinery (broken by org policy — see VIGOR-DEVIATIONS.md #4), Mender compose stack, and the Lark tracking integration (deviation #5). Consolidations: reports/mimos + mimos-savings into one parameterized component, shared OEE bar chart, audience/legal page components, invalidateOrderSurfaces, useReflowAccept, canonical ['production-methods', factoryId] query (fixes a stale-cache invalidation bug), staff-role checks via isXentrStaff. Dead exports stripped from method-throughput, gateway-core, protocols, mqtt-protocol. Docs truth pass: staging architecture, edge runbooks, Mender references, sub-processors, README. Magma Grafana origin is now env-overridable (MAGMA_GRAFANA_ORIGIN / NEXT_PUBLIC_MAGMA_GRAFANA_ORIGIN, in-source fallback unchanged).

xentr.ai/changelog is statically rendered from this same MDX file at build time (single source; the per-PR changelog CI gate covers it for free), with per-entry anchors and the RSS link. /learn is a dedicated page on the developer portal linking the quickstart + four tutorials in order. The in-app "What's new" banner now points to the marketing changelog. Compare routes still exist (SEO); they're just delinked from the header, footer and mobile menu.

Hero footage generated with Seedance 2.0 (unbranded prompt, frame-checked), 0.8 MB WebM / 2.2 MB MP4, first frame as WebP poster; phones and prefers-reduced-motion get the still. Copy-legibility scrims layered left + vertical; headline scale raised. New DevelopersMenu mega-menu (desktop + mobile drawer) pointing at developer.xentr.ai's docs, API reference, changelog, and tutorials; the old standalone "Docs" link and Resources "API Docs" entry are folded into it.

FloorStory copy rewrite (CEO/CFO framing) + a "bleed lines" strip and an anchor link to #oee-calculator. Cost *mechanisms* only — no invented figures, per the truth rules; the calculator computes the visitor's own numbers.

New FloorStory section (ink band, mono-timestamp narrative beats, truth-rule copy) between the hero and "Your floor. In plain sight.", so the existing ink→light rhythm reads as blind→seen. Hero loop generated from the existing duotone still with Seedance 2.0 (start frame = end frame → seamless 10s loop), encoded to 0.29 MB WebM + 0.70 MB MP4, autoplay muted loop playsinline at 30% opacity with the WebP still as poster; hidden below sm and under prefers-reduced-motion via CSS so those users keep the still.

17 generated duotone assets (unbranded, no readable text, individually reviewed) served as WebP under public/duotone/ (14-100 KB each, ~760 KB total) via next/image with explicit sizes; backdrops are aria-hidden with gradient scrims to keep text contrast; the industry template maps slug → image with a graceful no-image fallback.

Marketing: per-route canonicals, per-page OpenGraph/Twitter inheritance, Organization/WebSite/FAQPage JSON-LD, blog posts added to the sitemap, not-found.tsx/error.tsx, www→apex 308 redirect, skip-to-content link, nav current-page indication, mobile pricing-table overflow fix, and dead mailto: CTAs replaced with the booking form. Developer portal: /docs/api-reference index page (was a 404), corrected dashboard host in quickstart/auth docs, favicon + OG image + robots + sitemap, Space Grotesk display headings aligned with the marketing brand, a custom 404, and this changelog restructured with per-entry heading anchors and an RSS route.

sensor_readings had no unique key, so a gateway WAL replay inserted duplicate rows (unlike machine_states/production_counts, which already dedupe). Migration 007 de-duplicates existing rows and adds UNIQUE (time, factory_id, machine_id, sensor_type, sensor_name); the batch writer now uses ON CONFLICT DO NOTHING. The index is already applied to the prod TimescaleDB.

generateOrderNumber was read-max-then-increment with no lock. Order creation (and cloning) now allocate the number under a per-factory advisory lock, and migration 0083 adds a UNIQUE (factory_id, order_number) index as the hard backstop. The migration self-guards: it fails loudly if pre-existing duplicates exist so they can be resolved first.

Proactive suggestions were fetched once behind a boolean ref, so Factory A's chips (embedding A's order numbers / action tokens) survived a switch to Factory B. Suggestions are now keyed by factoryId (refetch on change), and a factory switch resets the conversation id, message thread, and chips.

The validateBackfillTiming guard existed but was never called. It's now enforced on both backfill paths (scheduleSplit and applyTimingToOrder), throwing a 400 on inverted / future windows that previously corrupted part-count and pace math.

Fleet endpoints (GET /api/fleet/stats, /api/fleet/edges) previously treated xentr_account_manager as full-fleet staff: it could omit organizationId for a global view and pass any organizationId unverified. Now only xentr_platform_owner gets the global (null) scope; every other role is confined to listReadableOrgIds, and a supplied organizationId is verified with assertCanReadOrg.

New UpdateBanner in the app root layout compares the app version baked into the client bundle at build time (NEXT_PUBLIC_APP_VERSION) against GET /api/version (force-dynamic, no-store), polled every 5 minutes and on tab re-focus. Every release bumps the version, so any mismatch means a newer deployment is live. The banner keys off the lockstep app version rather than a deployment commit SHA.

New edge/xentr-connector Electron wizard that wraps the xentr-fanuc collector and its :9180 control plane (subnet FOCAS scan, hot-reload machine add, health/readiness view, one-click Windows service install). Out of the pnpm/turbo workspace and version-lockstep, like the collector. Also removed the unused gsap dependency from the product app.

PR #352/#353. The changelog is part of the developer docs at developer.xentr.ai — each entry pairs a plain-language headline with an optional technical note like this one, newest first.

PR #351. Downtime window labeling, order search on the workstation detail view, and the production chart's x-axis is bounded to the current day instead of extending into future hours.

PR #344 (Slice 2). Suggestions are generated per-turn by the LLM engine from the conversation state and rendered as chips under the reply.

PR #347 (Slice 5). Vision Q&A: attachments are passed to the multimodal model alongside the prompt; CSVs are parsed and summarized before inclusion.

PR #346 (Slice 4). Conversation persistence with list/new/switch/rename/delete, scoped per user and organization.

PRs #342/#343/#345. The rule-based engine was replaced by an LLM engine (Slice 1 wired the UI to it); rich output renders markdown + recharts and exports PDF via the report pipeline.

PRs #340 (58f9b2d9) + b7346708. New order-properties-panel.tsx right rail; edits go through the existing PATCH /production-orders/:id. Header reduced to an identity line (product · qty).