🛡️ Money Server Issue RESOLVED

• Money stack modernization: add tools/tasia-moneyd (Python XML-RPC money service) with compatibility handlers for region money RPC and viewer helper RPC (getCurrencyQuote, buyCurrency, preflightBuyLandPrep, buyLandPrep).
• Money callbacks hardening: add resilient session resolution (memory cache + robust Presence fallback), name-based notification messages, and typed notification routing for PayObject/ObjectPays/BuyMoney to reduce duplicate popup behavior.
• Add dynamic notification filter engine for MoneyD ([MoneyDNotifications]) with auto-reload on INI change (type filters, sender/receiver allow/suppress lists, UUID/name filters, object-name substring and regex filters).
• Region money module robustness: harden OnMoneyTransferedHandler against null/malformed RPC payloads and session mismatches; return explicit structured failures instead of throwing null-reference exceptions.

✨ Notice: free updates and support are being deprecated !IMPORTANT!

💃 # Update Summary COMPLETE

// Encrypt from notecard "note" to "note.obf" (portable unreadable style)
string PASS = "change-me";
string SRC_NOTE = "note";
string DST_NOTE = "note.obf";
default
{
touch_start(integer n)
{
string out = llScriptCrypt("enc", "obf", PASS, SRC_NOTE);
if (out == "") { llOwnerSay("Encrypt failed"); return; }
osMakeNotecard(DST_NOTE, [out]);
llOwnerSay("Created: " + DST_NOTE);
}
}

// Decrypt from notecard "note.local" to "note.dec"
string PASS = "change-me";
string SRC_NOTE = "note.local";
string DST_NOTE = "note.dec";
default
{
touch_start(integer n)
{
string out = llScriptCrypt("dec", "local-only", PASS, SRC_NOTE);
if (out == "") { llOwnerSay("Decrypt failed"); return; }
osMakeNotecard(DST_NOTE, [out]);
llOwnerSay("Created: " + DST_NOTE);
}
}

✨ Server Migration RESOLVED

• During updates completed Migration to new host server. Current Server Localtion: Netherlands

📚 Update Goals

• Organize the OpenSim library so default content and I-Grid content are cleaner, better structured, and work correctly in inventory.
• Improve admin and login flows, allow users to take care of their own account, and introduce single sign-on login for easier access.
• Make radio/songs in world available to people, allow people to enjoy watching TV, and give residents more ways to express themselves.
• Improve communication with residents and create a more connected in-world experience.
• Replace the old upload flow with a dedicated uploader API for textures and sounds, and keep the marketplace, web tools, and Docker setup better aligned.

📚 OpenSim library import tooling added COMPLETE

• Added utility tooling to turn selected IAR inventory content into library-ready trees and to import script or documentation content from GitHub into the host library structure.
• Included wrapper and README files for the IAR import workflow.
• Prepared two imported content packs from in-world inventory: Avatar Basics and Clothes Pack.
• Library XML structure reorganized
• The inventory library layout was reworked to introduce a top-level Default Library section and a separate I-Grid Content section.
• I-Grid Content now groups Scripts Library, Avatar Basics, and Clothes Pack into a cleaner browser-visible structure.
• Standard library XML parent mapping was adjusted so built-in libraries appear under Default Library instead of directly at root.

🧩 Asset wiring and Docker mounts updated COMPLETE

• Added a custom script asset set so inventory script items resolve to real script assets.
• Updated compose configuration so all OpenSim services mount the custom inventory and asset-set data.
• Recreated the OpenSim Docker services to apply the new library and asset configuration.

🛡️ HG admin attribution and I-Auth login hardening COMPLETE

• HG allowlist actions now record who added or updated records and when, with safe schema migration and backfill support for older rows.
• I-Auth login now accepts avatar UUID or full avatar name and resolves identities through robust UserAccounts lookup logic.
• A simple session-based captcha was added before OTP requests are sent, with clear handling for exact, ambiguous, and missing matches.

🔐 MarketApp moved to I-Auth OIDC login COMPLETE

• MarketApp lockscreen login was reworked to start an OIDC login flow instead of using a local UUID plus OTP form.
• Added OIDC bootstrap, callback, logout, and helper handling for session cleanup and callback URL generation.
• Added a dedicated iauth configuration block for authorize, token, userinfo, client, scope, and callback settings.
• Moved the legacy admin /send prim delivery endpoint into the OpenSim.Addons.Marketplace startup add-on.
• Added a dedicated OpenSim.ini configuration block.

📤 OpenSim uploader API and osplayer RESOLVED

• Created a .NET uploader API using Libre/OpenMetaverse client login with status, texture upload, and sound upload endpoints.
• Added texture support for JPEG2000 and common image conversion, plus LL-style WAV validation with final WAV-to-OGG conversion before upload.
• Migrated osplayer PHP upload flows away from Corrade upload handling to the new uploader API and verified production-side syntax and upload behavior.

🔐 Social Network/Pages / OAuth integration /E2E chat/peertube portal for gamers Beta

• Documented OAuth, IM, and wallet synchronization endpoints for SOCIALNET portals.
• Updated AI endpoints for text and image generation.
• Added e2e chat and viewer hud for second life
• updated peertube to latest version
• added oauth integration to various portals

🛡️ Role-based admin operations hub

• Admin panel rebuilt into a role-based operations hub with admin and add_only access levels.
• Secure session and login flow added using wp_igrid_panel_users.
• Core operations were consolidated into one central panel experience.

🗂️ Expanded admin panel tabs and workflows

• Added Panel Users, Regions, Access Lists, Alerts, Presence, Online, Reports, and Infra tabs.
• Each tab now exposes dedicated workflows for operational actions and visibility.

👤 Panel user management

• Added create, update, enable, disable, and remove actions for panel accounts.
• Guardrails were added to reduce accidental misuse of privileged access.
• Updated MAC Audit add-on to .NET 8 with explicit shared-binary dependencies.

🔁 Region restart control system

• Implemented a secured simulator API with status, schedule, and cancel actions.
• Added a web proxy endpoint and ACL control for protected access.
• Added region-wide status checking and action logging end-to-end.

📢 Alerts tooling

• Added direct instant message sending by UUID.
• Added one-click broadcast across all regions.
• Introduced IAvatarBadgeModule and the region-side BadgeModule with config toggles.

🟢 Presence and online tooling

• Added stale online detection to identify broken or stuck sessions.
• Added force-offline actions for cleanup workflows.
• Added online user visibility with region, position, and session timing details.
• Included PHP scaffolding and OAuth examples for dashboard integrations.
• Updated AI endpoints for text and image generation.

🚨 Abuse report pipeline

• Added a simulator forwarder to a PHP intake endpoint.
• Persisted reports in wp_igrid_abuse_reports.
• Added reports UI support with screenshot rendering path and report deletion action.

🖼️ Abuse screenshot reliability flow

• Screenshot files are now promoted to a persistent asset during intake.
• Reports now use the web texture proxy path so screenshots are visible in the browser.
• Includes default configuration options for enable/disable, paths, and buffering.
• Ships with a WordPress admin plugin for viewing transcripts.

📦 Marketplace runtime delivery module

• Added and enabled region /send endpoint support in the active delivery module.
• Improved inventory delivery behavior for online users.

🛒 Marketplace WordPress alignment

• Order and delivery logs are now persisted in WordPress marketplace tables.
• Redelivery flow was aligned to the WordPress database.
• The user-facing buy success message was standardized to “sent to your inventory.”

🔐 WoWonder OAuth routing

• Added and fixed connector and handler routing for proper token endpoint behavior.
• Added and fixed connector and handler routing for proper authorize endpoint behavior.

🧰 Maintenance governance in authentication

• Maintenance mode enforcement was added to both hgauth.php and hgauthnew.php.
• UUID whitelist bypass support was added using opensim_maintenance.

🖥️ Infra operations inside the admin panel

• Added container and service listing with start, stop, restart, and status actions.
• Added add/remove region plan preparation and execute flow.
• Added in-panel config editing for per-region and global config files.
• Added auto-next port helpers for HTTP and SSH and automatic template selection for new region plans.

🔌 Host and machine readiness improvements

• Improved host SSH availability.
• Updated host machine configuration for more reliable operational results.

🧹 Deployment hygiene improvements

• Added repeatable rollout and restart scripts.
• Added hash-verification workflow for critical DLL parity across simulators.

🌐 Web viewer release preparation

• Prepared release steps for the upcoming web viewer rollout.
• Release readiness work was aligned with the broader deployment flow.

💃 NPC permission handling for scripted animation invites BETA

• NPCs now honor npc_auto_grant_anim_perms and npc_forward_perms_to_owner.
• Scripted animation permissions can be auto-granted for safe workflows like dance HUDs.
• Permission requests can also be forwarded to the NPC owner when configured.

🔊 Tasia add-on scripting API and remote sound helper COMPLETE

• Added OSSL_TasiaAddonsApi so custom Tasia functions can be called without changing upstream OSSL APIs.
• Introduced osNgcPlaySoundURL for remote audio streaming with standard OSSL threat checks and configuration flags.

🧹 Tasia add-on build and dependency cleanup COMPLETE

• Consolidated dependencies by referencing built DLLs where appropriate.
• Reduced duplicate publish output.
• Updated MAC Audit add-on to .NET 8 with explicit shared-binary dependencies.

🛡️ Grid user service robustness improvements COMPLETE

• Grid user lookups now cache missing or ambiguous records.
• Identifiers are clamped more safely.
• The service now prefers the most recent login/logout entries to avoid missing-data crashes.

🏷️ Customer Badge Capability Need Investigation

• Added a customer_type field to profile models and migrations.
• Extended core and optional modules to send the badge over CAPS and UDP.
• Introduced IAvatarBadgeModule and the region-side BadgeModule with config toggles.

🔐 Social Network / OAuth integration PRE-Implementation

• Documented OAuth, IM, and wallet synchronization endpoints for WoWonder portals.
• Implemented the Robust WoWonderServiceConnector with OAuth, IM relay, userinfo, balance endpoints, and token caching.
• Packaged handlers inside OpenSim.Server.WoWonder for easier upgrades.
• Included PHP scaffolding and OAuth examples for dashboard integrations.
• Updated AI endpoints for text and image generation.

📦 Marketplace Add-on PRE-Implementation

• Moved the legacy admin /send prim delivery endpoint into the OpenSim.Addons.Marketplace startup add-on.
• Added a dedicated OpenSim.ini configuration block.

💬 Chat & IM Audit Add-on Disabled

• Captures public chat and grid instant messages to JSONL logs.
• Provides a /addons/chat-audit HTTP endpoint for WordPress dashboards.
• Includes default configuration options for enable/disable, paths, and buffering.
• Ships with a WordPress admin plugin for viewing transcripts.
• This Feature is not enabled and may be removed in future release

🎨 Additional updates Preview

• Abuse report flow moved to email and updated.
• Theme redone.