Launching Q1 2027. Join the waitlist for early access.
AA
AviationAlley

Changelog

What's new in AviationAlley

Product updates, improvements, and security changes — written the same way they get committed to the repo.

Setup wizard + role-based training center for everyone on the platform

Two new guided surfaces. The Setup wizard walks owners, admins, and managers through turning on every feature — and it auto-detects what's already configured from your real data, so the checklist can never drift out of sync. The Training center gives every person a role-tailored walkthrough of exactly what they have access to, with progress tracking and a completion certificate — covering all 12 staff roles plus trainees and client managers on the portal. First-run onboarding now flows straight into the setup wizard.

Added
  • Setup wizard at /app/setup — auto-detected feature configuration status grouped by Foundations / Operations / Compliance / Billing / Integrations / Advanced modules, with an overall progress ring and a next-action nudge
  • Skip / restore for setup steps that don't apply to your operation (a single-rule school can dismiss Pilot Bidding)
  • Training center at /app/training — a role-specific curriculum, an "what you have access to" summary, per-lesson progress, and a printable completion certificate
  • Role coverage for all 12 staff roles including pilots and flight attendants (who the welcome tour skipped)
  • Manager team-training dashboard at /app/training/team — per-person completion vs their role's curriculum
  • Portal training — a self-guided "how to use your portal" walkthrough for trainees and client managers
  • Dashboard "Get started" card surfacing unfinished setup + training with quick links
Improved
  • First-run onboarding now hands off into the setup wizard instead of dropping you on the dashboard
  • Suspension enforcement, broadcasts, and feature flags from the platform console continue to apply across these new surfaces

Part 107 drone operations + adjacent FAR sectors + persona pages + LAUNCH_RUNBOOK

Full Part 107 commercial drone module — fleet registry, LAANC tracking, 107.205 waivers, incident reporting. Module flags + setup-wizard presets for Part 137 ag, Part 105 skydiving, helicopter HEMS. Persona-led /for/* pages for the remaining operator types (corporate flight departments, drone operators, helicopter EMS) plus dynamic /features/* deep-dive pages (pilot bidding, safety/SMS, dispatch, REST API, charter quotes). LAUNCH_RUNBOOK.md published with full deploy steps.

Added
  • Part 107 commercial drone operations — drone_aircraft, drone_flights, drone_waivers schemas + droneOps router with 9 procedures
  • /app/drones workspace UI with fleet table, recent flights, active waivers, modals for registering drones + planning flights with LAANC
  • /features/drone-operations marketing page
  • PART_137 agricultural / PART_105 skydiving / HELI_HEMS module flags + setup-wizard quick-select presets
  • Persona-led /for/corporate-flight-departments + /for/drone-operators + /for/helicopter-ems pages
  • Dynamic feature deep-dive pages: /features/pilot-bidding, /features/safety-sms, /features/dispatch, /features/api, /features/charter-quotes
  • LAUNCH_RUNBOOK.md — step-by-step prod deploy guide (database provisioning, Vercel deploy, cron registration, customer onboarding paths, post-launch verification checklist)

Phase 14 — multi-Part operations + flight attendants + IROPS + compliance suite

Largest release since launch. The platform now supports Part 142 training centers, Part 141 flight schools, Part 135 charter, Part 121 airlines, and Part 91 corporate flight departments end-to-end — with per-FAR module gating, separate workspaces per operator type, and a center switcher to flip between them. Flight attendants are now a first-class role with 14 CFR 121.467 duty enforcement, 121.421 recurrent training, and per-FA pricing on Part 121/135/91. Operational completeness lands with MEL management, trip trading + open-time, reserve crew, enhanced briefings, Part 141 stage checks, drug + alcohol testing, IROPS command center, charter contracts with e-sign, eAPIS customs manifests, and ARGUS/Wyvern/IS-BAO compliance tracking.

Added
  • FLIGHT_ATTENDANT + PILOT roles in the role hierarchy with focused workspaces
  • Per-flight-attendant pricing tier for Part 121, 135, and 91 operators
  • MEL (Minimum Equipment List) with category A/B/C/D auto-rolling expiry
  • Trip trading + open-time pickup for Part 121 (DROP / PICKUP / SWAP with planner approval)
  • Reserve crew management with LONG_CALL / SHORT_CALL and dispatcher callout
  • Enhanced trip-sheet briefings — weather + NOTAMs + fuel + W&B + signature block
  • FA recurrent training tracker (14 CFR 121.421) at /app/fa-training
  • FAR 121.467 duty enforcer parallel to FAR 117 — different caps, same engine
  • FAR 121.391 cabin-crew ratio library (1 FA per 50 seats, with sub-19 commuter exception)
  • Training Specifications (TS) document manager for Part 142 at /app/ts
  • Drug + alcohol testing pool + random draw at /app/dat (14 CFR 121.457 / 135.249)
  • Part 141 stage check workflow with pass/fail + remediation re-check
  • Irregular operations / MOC command center at /app/irrops
  • Charter contract templates + e-sign customer flow
  • eAPIS customs manifests for international Part 135
  • ARGUS / Wyvern / IS-BAO / IS-BAH / ACSF compliance-program tracking
  • Center / base / bid-package / time-pivot switchers throughout the app
  • Operator-type quick-select on the setup wizard (7 presets)
  • Public status page at /status
  • REST API v1 endpoints: /reserve, /fa-training, /dat, /stage-checks
  • 18 new webhook event types covering MEL, reserve, FA training, DAT, stage checks

Trainee-visible activity feed and audit log CSV export

Trainees now see a 'Recent activity' feed on their portal — bookings rescheduled, invoices issued, enrollments updated, attendance marks. Same audit data stays internal-only by default; only events tagged with traineeId surface to the client. The staff audit log gained CSV export, actor and date-range filters, and a per-trainee CSV that includes the activity history with actor attribution.

Added
  • Recent activity feed on the trainee portal (web + mobile) showing center-side actions that affect them
  • audit_log.traineeId column drives the per-trainee feed — `traineeSummary` carries the first-person phrasing
  • Audit log CSV export at /api/audit/export with the same filter shape as the on-screen view
  • /app/audit gains actor and date-range filters; Clear button when any filter is active
  • Per-trainee CSV now includes a complete activity-log section with actor and role per event
  • Three evergreen articles at /resources covering Part 142 vs 141, the National Simulator Program, and choosing Part 142 ops software
  • Expanded pricing FAQ with full FAQPage JSON-LD for answer engines
Security
  • Per-trainee CSV export now rejects requests from members whose access has lapsed
  • Hardened read-only (reviewer) access — reviewers can view records and rosters but cannot mark attendance, change enrollments, or modify operational data
  • Portal activity feed shows clients what changed, never internal actor identity or raw metadata

In-product audit log + Cockpit aviation palette

Every meaningful mutation now writes an append-only audit row with actor attribution, action verb, entity reference, and a structured metadata payload. New /app/audit viewer for managers and owners. The brand palette shifted to 'Cockpit' — deeper instrument-panel navy plus International Orange accent (the unmistakable aviation color).

Added
  • audit_log table with composite indexes for the common access patterns (by center, by createdAt, by actor, by entity, by trainee)
  • Audit log API for managers with server-side filters (by center, actor, entity, date range)
  • /app/audit viewer with search, entity-type filter, expandable metadata per row, 50-page pagination
  • Notifications bell in the app header with assigned-to-you + center-alerts sections
  • Maintenance log resolution UI on simulator detail with audit-trail attribution (resolvedAt + resolvedByUserId)
  • Email-on-assign for instructor bookings, mirroring the work-order pattern
Improved
  • Cockpit color palette across web + mobile: navy primary deepened, warm-amber accent swapped to International Orange
  • Status-pill amber variant now reads from the brand --warm token, so 'Due Soon' compliance pills land in International Orange (semantically perfect — caution = orange in aviation)
  • AUDITOR expiry warning banner in /app layout when access is within 24 hours of lapsing
  • Extend access + Revoke now actions on /app/staff for time-limited memberships

AUDITOR role and time-limited FAA evaluator access

New AUDITOR role for read-only access — issue to FAA evaluators, board observers, external compliance reviewers. Memberships now support an expiresAt window that auto-revokes access at request time. 'Grant FAA access' button on the Staff page creates a 72-hour invite by default. Write tightening across 28 mutations to enforce the new posture.

Added
  • AUDITOR role at the lowest privilege rank — read-only, blocked from every mutation surface
  • memberships.expiresAt + invites.membershipExpiresAt for time-limited windows that survive into the resulting membership
  • Grant FAA access modal on /app/staff issues a tokenized invite with a configurable hour window
  • Time-limited access is enforced at request time — when the window closes, access simply stops (no background job needed)
  • Customer + employee Expo apps (apps/customer-app + apps/employee-app) consuming the same tRPC backend
  • Per-center + per-device pricing model — unlimited seats, priced to the operation
Security
  • Expired memberships are filtered out of every recipient list (compliance digest, admin notifications)
  • Hardened read-only (auditor) access so reviewers can view operational data but never modify it
  • Per-route noindex on /portal and /join layouts in addition to robots.txt disallow