Changelog
Newest first. Breaking entries would also open a new version tree.
22 September 2026
Section titled “22 September 2026”Docs published. No API change.
18 September 2026
Section titled “18 September 2026”- Rate limits added to the four unauthenticated write routes and to staff sign-in (errors and limits).
/booth/*is unaffected. - Security headers (HSTS,
X-Frame-Options,X-Content-Type-Options,Referrer-Policy) on every response.
14 September 2026
Section titled “14 September 2026”- Breaking, kiosk: registration takes one
nameper guest instead of separate first and last names. The server splits on the first space. GET /gallery/events/:slugreplaced the all-events feed. Private events answer404here; their session links still work.
11 September 2026
Section titled “11 September 2026”POST /contactadded for the website’s form.- Gallery links are sent to guests on completion, by email and SMS, as part of
POST /booth/sessions/:id/complete.
10 September 2026
Section titled “10 September 2026”First booth API: /booth/events, /booth/sets/:setId/sessions, presigned JPEG
uploads, complete and cancel.