From e9901aa24bf3ddc1b00816a3a7e2fcfc2226c7b8 Mon Sep 17 00:00:00 2001
From: Anso <dev@saelix.com>
Date: Sun, 9 Aug 2026 19:24:23 -0400
Subject: [PATCH] fix(whats-new): add RBAC entry and a zoomable screenshot
 lightbox (#1806)

RBAC is the largest capability change in this release, so it leads the
list. Every entry's screenshot now opens full-viewport on click; the
overlay is portaled to document.body so it isn't capped at the modal's
own frame, dismissible via backdrop click, a close button, or Escape.
---
 frontend/public/whats-new/rbac.png            | Bin 0 -> 14915 bytes
 frontend/src/components/WhatsNewModal.tsx     |  82 ++++++++++++++++--
 .../__tests__/WhatsNewModal.test.tsx          |  44 ++++++++++
 frontend/src/whats-new/entries.json           |   7 ++
 4 files changed, 124 insertions(+), 9 deletions(-)
 create mode 100644 frontend/public/whats-new/rbac.png

diff --git a/frontend/public/whats-new/rbac.png b/frontend/public/whats-new/rbac.png
new file mode 100644
index 0000000000000000000000000000000000000000..0975bba0cd1ad782850b55cfde13b2b31dc6cea3
GIT binary patch
literal 14915
zcmdsecU)6hyKZbSsOSu+h=PtfU_pqA0qORJh@u7%2yqZlAVi3O5Sqd`Gm1EjLZsVJ
zkX{l95Q=_+5<*Z)fKXHnp(F$e1nKu(IP-nyckVg&p4<Mp^ZPj=A?&^O+G{=U^FGhB
ze?N8dh~nZki!m6C;<2L#tuUB{G7M(k_V482lf9}Yh43<uVs&IcCaX@Z58f<v-Dj~6
zgUP+SWa`2qc&~8fs4WG9S@sJ3n^#Rvy@<gWv>ZFQ@9Z^#xMMuu;asBrOmKf+z>7w5
zYm@V%j)=tvRSz6|x20ggjqjsW7w67P*`i6my=sle4^Q`1$epfoS#^2enzDUSho60C
z@gQmk_rU7?tM8fp95lcx<Cgghnr?o}(r^8o5YJnlT`UyQWo-jLl?V2-cx{u}Gc%Ie
zG8hvE^F)x{CXapy{kXYh0eb!6r~l&XNSPdUAiF%c_2NB?n%Y=hcC#JX!BiT{MTf)O
zyYC?mS|U^G<;3CAYai@<A{XeM&GL0zkA6vf{bwc%TiLnF&f~OR$JH|z)}c=`HYUnb
zZPRF{vV+vn`v=7*!&n|nj?7ML6ul=l_3v(ByRnSV{PhJJgG4#1|0D@7rr$+l$7nro
zAY!vS=!z=n9i9b$&kgL+4XQ?OL!<v!ukgP*6aW5uyGJTJ*HJ~MlY(Tec^BXQ={?$H
zeb>EY<h?nYPcC;jX)@YaCdH?`T4t0{Ix{gKund`KDC*|4uM6mXR0eAVgL!DaNm-=r
zP+YLxz9>g6aH!IWbi)MwqWLWRf(1ts+|ln`t&*j<Sf=!{<68F}!FBm{sajLMd{SY+
zl&jgKt%0OeS_5yb%i)JQ!Q<OH+cqa%`_#fbqULpwIW^2?Kl*i@q35!D3bIIpo(H?g
zouvWOaElls)>x+#X)U?bD{&yvuhVvrDNOS2iFJ*!&3CyI&s`q!^;O&EWJ<<Z02)yJ
z>R2N7qwV~XL$_Bo4Q(fhi4vjNtiS(2W?@ZwcG>xL!Cya4jE@VGvGQtH_9~8d21+^J
zQ(vliWd@strsJRQIajOuWmGG*vt(`VxDNw~uMUQ>*g7Q{rIUjtKF${+1rwZYufhZL
zVVU?#SY!PLmd0NWPA7c7gT%pkPy2QHKd&qC^Vx{TGO{L(h@IDQ8(U^GSUx+miz*X&
zRT5q@!>@8p#_U`Dx`GCn3YhqF!3rZvA{@6b-pJ2WvH5+{Id9JRl2zMNoyO`eJgy}4
zM2`mz*mb?=;u;QQ1Q6zz_e`j6+DB;9rMb*-Z~?;Q=v?ewR+WS@*L07UIgT^KwC)=$
z&DHGVEUm1f$H%Y8YP7QNSFfXHs9pPT9alshs+1q_ZC7Lawq~T755-);Zg8Ajq`vbV
zQ8HFO8|08X22;jVql$8!_`#bfoa3bt?`pBhl<hqGW*j;h@sFq_vf*~7htnOc?9x1J
z3wvxz9DVLui73xpk)!lEF>v^;Pl;y|llBnHEio_Rm7FW&<?Sz&wJUv|9`q|u=e@BD
z+~g!Q2vLv?2YvbUI!Iaq3y<cnh>pJc;^!NzH~Aw<FEw)9Z?GhRLL=NM^FNwL*fG3}
zMp&`a{bM8MIlgeC?$aEDnQGo|Hu%u(8C;hXM~PGx;OtJC_-UaB<K5vp?yU-YUA`aJ
zK$u`ySb*E$h#wLhTCMOyz9BXwUfQtP>2ut-b*$<1Qy44UT`J^a&1pL7OJv^L?TFHs
zx6E~zPvxBbBMC1HGJa$GTkNH|4&XL8<S){%j!}6bc&*OCw{5y>oTuj3?j?vivQCx1
zDuIaI=k$`<U}?s>>BFidNCPX34`9>h-!<${U8AY_(D-Ax@<J-Q&=WOB<*4sUS3eoc
zENUH&Q?a?ocHdtf?pE0D%`S57aHbR5;#~W1SWd6H>mLzO6kV6PyWzjJE^E*DWd4Cx
z*s3RvJ<@Ye{OYphLt69=3u@;OKjVY4XdWDThw6d#B8x*Wi#@!=iX-@F7rv-ce!aa5
zC$5RNPGM7nYdxd$P4fqj9|k*`m!PrS+o>Hkx1%2nejD758~?w&-ZX7766L(Af#N`z
z8F_AY$EXbU!hP4|AcpZs{ed7Mpa$#NI=kYleGgzy78;MWQv@pIUk^FXIv-1<1z>#~
zOB6Ao&S++LXjquU{3yAlm6e)RJ~J_lHdbL*a7lt!m1>Z1=|-qk58^Jb6o~<}1a0ow
z+RKfH_QvXy2>@wMRc(5m*Sfv?)1Jo|NlNqEDO?jltuA+az6<9C2|l4PdmrDf`3ulO
zhQii2md{RcXYF-LhhBPj1&u|o^(=Zsc%rH+bo73!LDzPgnG%|1^ZL|vyLSf#PY*cq
zC^Msuv-G-dD1BlrqI9}yEjgq7V}E+KPKlVoFY?8NUf7ws?snr@a_N`D%<f2|s>spi
zJ!!lE_ZRyrlj6REO8Cqo$M190k>-+DWY#F&gmLBL%i@)v0kYFC@GbN^&UR8ItbjUY
zOXJgKo2Sg}D0g@SY9{>JNPs|9#r{fVOD@`##uL3y=-NWf0={R7*zHlQyYbA|ZlCsu
z*!cy1o!Mm*ZvK5Kw5qIeTKQB;<k*`{cN>{5N%HFhub6DEBt{AneqA426kKP&Y|n?#
zvJe$aXj7)cU7Qt7`+UKr?Je$Z39oOf@QSylk6TI9d>T*FS?Z#+-!T|Xm$rpeTXovT
zFB$oDFS^P{Gs#V)4P%{Dvi7nrfO^Bj`Hyw{f*Z`VM&jI`&X!FM8Vwd(nvP#o9QGC=
z@G}v9zGtcPJi+_8q9ChuxTY<}i;}707??{a37QeL=Chsdn&6i-!1d=QQCgj8cYe8R
zG+5*$<{SN*v8T3UP)3%=td@gCvi4zG&_<t=XQWRF$M4*eq(#LMb&NJDwWatTS8Q7Q
zZLpp&*sUAS?0xoqtscKXKL`tzw75;jX*W0Itx(OpLce!SSfq1;=2DMHXF+Ff^*XyO
zW>4Jk%O%)|l__C$T;Yl|s+ev)o#eHPP(_*$W?j{-uGLQe{>;+Nt3}h(7)(0<A<gxm
z@79Zj2m7Bst74A##8)R$XQ#(_@lU(P>-?$~QQbCTLVu6ft0W}&wq5pNyU#CK5zW+{
zda`~xRnFBsW_udnY!^P;_=A5vPELJ5QD&9uLOq6Wcg7JJ(HGgIk}V{8YAi+BaM@zn
zFw3NR(UMj79ei6;BwcbCqR*OwpRrbsDeKr-;rno>f9iGbfA;q}gI&pHG%vim-1O^*
z7QMDTpZ_?}pU5vQ*w}T~Z02jRx;~%KfYth%_j;3G*qO6>ubnBuH<%Go;&ow*>-JR#
zgt1%($dU&N6K#k3phCB2);SFHj2#TF2Hs&KgCddZgu%S}x&BV`rKDV1+w(N9I8xzd
z^19Q*u;UsZX6d(_QJ#l6(Oxf4jZ(4NZFl+1mUV#PqXK1x*TLg#$7a*=X)$@ApV_`4
zN!PWmh=}D<j_r9s%2B{bANF`i-W)GcKDp-t@jLxq8*&bf+v?)obj~`O#Atmc7sNU6
z$kMRy>2)C%+hSfhfvRa_RAFz=6q6!s?n>-xoY9|$vFV6eDH8Nt?$7BFr~-yiGyR8q
z|J;W=>Bee2^*lK^fYtXxb3W$5gQ)Lh0fj6*uII5_nu_&qzu<V&R&V~uTfVFE{AVWD
z31#{u=I!<j#@ZDx6%Cu$iUb$x{F5AY3AcF0vl`2NPkI^kP6-xK$ID<RHvO14t~kzu
z3S&M^5{D?mz9QLH5+<*?C1g|#WO`W@;&3M^2N-GjjR!FpWnHC8!jo1#L>Op5w?^ql
z@?ZPf+Tpy7?F<46N3$Z%nGinv_2_RQ%nR+in1`#oIJp3maryAJInIum3HerCSMU2D
zz2a+*6t?G0nN?4xPK|~*SkLqiQrV6jvp>QByvA7co5!`I<6bzpX1+PPh>Cb%tO3PE
z9U$R%bH(WMFB}{*Gs+EyD$f5glWdOF3JL0HA1)tcW|tEeVTcbKPo_PxGEaGSoYa(6
z7~}fW4c2J0UG}Oc@g#<AD=|!Qq7CjuS>vg+6st2S47WndLyNhy)77(CuY2X|_T&eC
zc6ZbYDZEuBhp|z93R^e&{5IS<xAeE+)J;E#QZR`-oep<-0q$%@pUS?xt-(hX`+P2D
z3SRxX{vB@_rsDHcICu0K_s4wiUt!6|M72A3u9wFU-K^{~MT~Z1c}=^+-hRvuIZQ?4
zQ^xT-(dW}U^xmA3r-qFAg;-0r@Pn6Na{B-Io74VpD1%#E2ackWly(e`tVPF{kp6hI
zT!!~uior~zRGkL~Y<F-t$CcZ-0Au50W!FTD>Ifn`@_&T85Q?imE>E2uv+xvmLyME}
zw$XO((?5vIF~mI<&+3$*%4J+fwg1)ST|P1BV@1?ZtUh@!EgyaC{$u4jOvRPB6Nwt|
zvCRSn=sRyVT<qVDK3;P)M;?<i9J%MyZ{DKZYMHvD>fe9%uxX_z=;IQ{Esm3Iyc(dg
z4Lk<i3z`9?=l<Q0scz@ziN4$HJaP{~PZoONU3kD9-^sK891z|*XDrP!=!K|wAj`S?
zj{Z77<9%Jc@|n>!Qv&I;c+c~CEyS=g={(HMeaihovixN2<f+e_tuGhp#~Qkym!pQ=
zstiP2zj|<)P!eP3X<Iguf{kv?cO6?9Id0hsjY;|)y|zmqT9~&J9`8<WFbmPe*Ny*U
zv*}LH(gIRGM{hKM=_zsOkN82=32Lbps@Y;z_h{WC6GBfe^a^*~<uNu%aE+NIgT+2L
z!mSUT-D$rleN9<+9<R;I3W^J6ZTJ{4kZH~5IfhJo31!XK@1;rGr1F?v#nCvY^j+=o
zClYbmVXS9FQAb%67fxcQ-Dp)H&Uv*=5Z^WBqP<M&f7e8|Mc1V^HOOp?$&H2<CEcTZ
zTIQ4fCW$&|`>LowFhvgRUh5Nov<enlL}G5-#?f@gX}8v(v5xA+ucw4AQ}#l(<BYcn
zHYjd~4v)>e%pF(NN~Z7(7m4z!*an<y<LWO>FvQ0&-70B*R>G0aUXe+2mLSG@^5QRD
z)@8%dxn5TJ;(V?t{jhsvie-OVgh{Jmwuv7mv{6AEe?KZtgCy?0hl5GKvs4ym^s;sF
z`vTV#dwjKqvANw~vmOb+bUW%3SW+P1NlxNi{q`%bCRnY<|NME!BG;;u`&vgV%ftOx
z`+g>Sm9)CVH*L(1Js_p-B1}B}Zu*l-`5rw2Uf!iNfu{zGFR4jYG@4b%9+Pb=>pbsy
zh;F&t=X{%$pR=gPAedv*`oqp>!{wL{(|X^=V^x$A%1-QDag(Lh5!d9mb;f&4FV9U!
zsK+N!HWzL^7*FwL*%unb7*#8X0))|-8w@1U<k>*Q!MJf~EfRZ1-r@oZlXrIuY<g%r
z<Hkw!Cj97FK{l-T?diHL<{ucqs3JSQdYJiT7sl9~7T+t@(Gux_AaULur+?s#xxmG(
z>O|L6;_*az%uq1gZ~9?5>UdIN=JYGGsRJFK;>2rOBi|WYYS@`5J=OT?{&|qRzhd8_
zu3I-)8MWp=#FEzA#?pk$&y#1vSUoydB~u%@k$uyC7>rE}OvIs=Oz4l9&6X@X=Z5BG
zGW^-er_an2@2}Y=)Tn27E%a0PqO{RPl-B5v!H_r>l`=0oFT3K!vW<Mbxaa_8L;MZw
zA&1E4*F=g<@3CF+<>DJ;|4IVoh@oF>JmcBk#N#=<3_XveMGbGhbPg=QZ0Ghblf@mm
z_w?D@TO|vFEbPeI`cZA0NqxzoJ2p5*;*!rCz}W>pw-V076yUJj-b~fu@%v{^rjf)m
zbL#^(r9y)@uh2i$yX<)?G<qImZ}2TW<6AlG-AbaAy|o?PE5Z!cjkmX-UUzm#8{6W(
zxWPkuDJ$A_9I@*&z&Dt&mU#6Z>LA`#a6zKGU>+vM)d%YNgeLBUk%xQNQ-{;yhVXEM
z=7piHaq(W1(lq|Fx#6VXdlkp<&Z#PZP0yTjRK|~R@V6IUixOwEF4$Ianp<GM6!vSc
zig(T3P2x~&-|MA*up>Z~SNNWiS-UAj`A5yG9=BTF%2AmoJHMl8|0CA1ilcY0vuimf
z$N1IvB8`V^PMu4%!xME;W~%HmAtwqD*^QE6+sDg#r)dW>vh@Ah!OWUdSj{u87JMQ$
z?>tPsguSy(y!FHILxHc|=k^{&cdc|LUMhNU?h!M;G@}cxGB~zH^NWliyfdtzj98_?
zph<ogA>|R_#Iw4%W&mJJ*qxsd0&70_&*6DT0-P10cJp2Y{U3M78k(cOkwehG^!a~M
z5%7jBC6k?Vm368kU|^IE%@8gv)5<BO*{x7<7f4J<bCX-^QP2Ckl+kxpb~?`Td<5Cq
z@ph)e^z8rOj}EUTodwCQp-c~hd8SD}=avzzATzxx@)FG22iT5RsJhDj`!iLW%5w7r
zF?KPkx-KL11(+QMX=zq=bCr*rsm(~WJLr96{NEK|R3?M|c(hEmagh*;&zU9l?G6lW
z6%29M>Oe}&af|3SH|PDVsxGx_#PKfucAJ@rw%NkK4_(|X>sy1V+;(W}!v94kqSvH%
zkZpm(-gXfX7!glbbBds!w|7fzw9+cE$`+HC?RhxWG+T=ukT9sNpP(GsEiZyg3`6vv
zJ_AH7ZX5kvN$2?_V0Vud#@4K#?maRO^B}ZyjoZ1K0l9;qhG@HTw&|LVza5Uc8~8L3
z+QIGXzgB=a`XKaQ<Cr5g7jLkRZdeTbfj*EP9reX+Uh!aY(4lS6)Zc@%G+lIKL@kEf
zy?WhRQt@S0NxRN*I8$6Bel02Qm}3WhJFEhXW~OZ>EpwCj#)>&wfr~vyo%>k(waYr0
zC>FG}^pkGsnT4I_VX5rZj}wljG`p)jK@_6VMmfkd4~RnOu^(UsT|I)n;fkn22YO$x
z3hQ#OA9{cFF#M`s9j(*E|Glps)@U)B6y>v_3AOIwCObBtch4-75s;RL`pFuF%?b59
zy&trwrkK44=EiY&LyP$ze$evJP{S|hDX)I@lw&eMYi%tFN~{3d#BC*#GOFWROvT0T
zV3vAow=ASW^Lfp-=*k5HkOJ7yrd#WjPYrvCq5r<1_-PO*$S%LZcJId1NA7^6yfEqN
z`(py=V7E(qIO##qMm^t_Od+(zM~8y?*!$#e)-KPw^1f&BHKvoI27OCRsNUQRsQv;<
z5n(<H5g^prBQe5R%F)jzDRj>a{c1KREErD>y=r=V=yuJg*SD*0u%ukGa=9?*kghRd
z7&S|<rKhSvr>m|>24!Q72$5S{t@*6%R=K_IbTY_r0W)VTP0kU5#|3#^!IPt$m6(S#
zbgSx?Qgdh+a^;OhID7V3I4Qey__)J9nq+)(Vj%nOFWz1-o6DBUWL+V%xs>-a{H_^B
zFqtu-`GGyQud)+{;TZNhkh|xygr$k8K*SPbs4J=@>@QmAZ}BFEl*g$l3ADUKTX_xG
z&_Ihp7s!6qizt24kp@eex^K&)V6wbl)R4}{&WEy2#+yB=*lvb!38o$a(O%b^CN1Wn
zg;)FDn<|Vc4bu;lT#~1VO~tbBVL3UV|JBD{fZEgK?|+l<l2O(7JefcU8f{ur>TKkJ
z9~mv%I@aQJSKXcK2lJd$d?KAlM#PB=(_d7Q3G(wv|4+YfuCWXrzE?KWuy5U)1Ywz)
zZ_9-s66%<D$Wu2b2YUO9={&bnJZhj!)QTG_fzEkg$@bxmw_)WK%3Y7*`m5fAd9>+(
z`avta<>2*t<+;Uq3mwU2<1X4sZNdmcIQNd)n+7fBi4QPvpG(AX?pdl-M(3C6^^VrP
zf@fd;)G)6x8EZeoMZ!`#zhJ2h3GQCimY~NELkmlTUMDv=8Rw2?e*V+E25OS^lKkY^
zDd8Od9ViD?gN6ih<DrTL&Yh+Hf(K5Ks_uM$VWK<n0R^e-hQ4(su&CJ1GzWZ{G*J>U
z$|({i`Vm?|lBud=A+?DcEXyw&xai6HXutSPLcEi|^n97{T3Ht`RVV2x7}zV12VtzY
zEmvMC4)n7+UB%EHc)B0V8GE&UCa3gE)mq#_^EWX+iaY$eGX2gs%tB>eyJR}jc=*kP
zTC_*@n>|ZZbTWdJ^PH#JO*pd7BkO|-vX<5|5eII;_0%OAdFt41Z3*|bsCa-GN_`Uf
z!Y^2ABDE>K=EZV(Sv<nAZ;0tu-Nf4?xPQhixs&o<6MBxDO;_idj&}viWO;uM{<bM{
z^^)N_(0JEGYGjmvCRaW2*<dTS?Ca0t&4p#>tQ$4<u*3cYvZ*lieslGEU$8%T3=jUb
zuOEMPe-m>q2<bomu!;J=g!?OWC{5v}l_x-FO1&BC*WqKWI6uBA6vTfr>txlNnzDsd
zgF+K-CuJGv787=WY85%CZeDc-KEuLtFA*L_tt7Mfq<nAe^5dRK$?wCRz~}hcVI?h8
z4AMh}lb&!+u*NyAdpNaz_RD%7qr;L><#xfmS_Nh09*ylMhQ>aGEpHys7`gpwxmjtQ
zE{R2{c~R-|izD?mNy={%wtH2p!-gYXLX%Le3oV1kJ&XFL7WlY&;wPf{>X?;*3h(mT
zbe3ZW6{}Agi3=t)I~LwhkW;RQB4hS~1UKQTVt<}DmehKZDr<Fx$)Ix{v@+sN{g)9K
z9WLh_q|Nm35OMS`ci7nS(#Uu(P%7x$%VW?5YQmXA2T!nx+3LZgZj3g~K=;VetN^wf
zbL6dWOGX5Haap*Z{~25SCyl^KSz);Ymp$f@90Yz%jZTSZm+!R4GzmZI%qP`xad~(2
zx;I~{y;b4DCrOOo>uW9GU+;KG$rJbiEdA>W^FgKZf8~+n;P<z}a`ReiK)lN71cbYV
z<<lew4lT2U(o?IdB1!}y7PsOAhUWT-9>$7DW<(@Y-X{%d^U0L$6nBP9kH-Y!(7(iJ
zIHt1}1k`cdDG#8G2F?j)v*X;+gp3*XYH=_$zxz?CO2p~3nEyySN9IV!lqv-N*K93l
z(zwiG(8W{-?lt*=1!1q)u9StdySfSc>Z<@7VxSicbWhf!vBn?<qZ6dujGOjOjQ1?Q
z?2%!Q<#O3m?@hO~fGO6|zpBf{v-MMa)AfIII#7-+4if^sK3tcNr2cRydm*`1i66Z0
za4ndYWl_HVLd&z1#7-e5>*)O2b6zA&Xx7{s$gh$^)z$JptgiSKqM+Ub>$k0kn!@gy
z5qHhU?AYs;(s)8_cpRba^B5Ii+a#4N3}&g`mUaY2^|7EA;rl@!vv+&$Yl8axhq~+~
zvbNViD%iZN=g&wvg|PQ&vAV9!UO*;_kbu%Q+H@9GP<*1V2?!qN7g51<BWNGi=X>Pm
zRm!bJOf4typK^?6@=}1viWd!VIENhC{Hs+FszKFou!P35X_;-+n^FDF=`R>agIRHA
zA05;w1XmStPP~g<7Sbh}F7wVbXtuDIzfpJQljp&S8}VtmnpWGF{V4^8co)qL{yG|r
z7QOkP8~vXe3C`~Zzj`ye!|3>1Q8i|xi(I`-9DwGe!u!tgoI-G<cmwpiST<rk>-;}Q
z4fk1w6laT(tdA`n+CTo*GT17~zbDrF-656H(Rr9_<@CP}hFc7!khRbUB#rZq{Jf_U
zz-fFW2*qC2<r7WWF@Ok<BWd*##6Esi^FG=&j=@L@zs)p}3FR;Tc&bX**DC#fw^Gmy
zBaLRd*UuJ}PV}b>&>fVMqavl8`SIr3xe9^|f;=D?k)s2O3S$7pZDq4FlXunGdxS|;
zPlWb0z*+3F0U`X(R;y8JZOX%Mt4bb*Eqjr^i2rdDCdb8%cLo*l7<WMXw3`8U!UJp*
zX+M(cb2X>j8J}iEu4Y=Ow3+xKCI#rtY6q*t8C0~bKzg*0%b_TGKlbT1R%cE#4v5cf
z5Ptl1y$)!OBql5swjG&uZq;_1QvzuUjc|Ta!#MEEYn1`t58%^A4`h{Okq0pqanBtr
z(M_|-YEl<DM=ZQ1?$%n{e@N0_8c5Fm1mg3YXoG4<d+?;#>0<{d_S1RbP<R81StIql
zWie}9D&*zH3%}x=riCFht`3P~$fVKb8dE%UKrhO!uCvUc$<*Arsu&vzx?!E)+klFW
zT9;GJwyufLiGU~yeWb#m(udKT)bx#wx5Irn(ve}-bUUk)h`nI9zZ7<Kn!RtUa}zmO
z8o#E>dDLM(Gb6{SJ3_Yx3=#+Av=_hE(UJrs7iXs<(60&oZjF(W{uk+0RTI;a5JzjF
z#>HCtE>Gn>^DzfYl9WUil|s`o=5Ta&V2b4HMUDDN5Ibz(x{@cB#!PXFm<!qmOEw~X
zto8Eq#AjDMRg|oreLzy;Vbq8})^E2v_lU6RV>{wzzTg%adNOMC$Tc9(+a98wqqYX~
z2W~9UN%d)g_2F=!Y@s(Yp%q8GgBb#s6vF<0g#WIJwF}7iDfCMK&X%4ve+3{x7}_44
zD?Fgm3+^RPUF`buwhgEOJF8^SP_G#^Z{;DN>GckjY<#s!q{t71?qTgsB39|MK-DMr
z#eUY&uQAcr6uR<0>FjfC0CC#+5CPww;@FUM-W8Oq^yy&}5DW}7KbuouzVu*Q{KoV6
z!eMlThqJJPH<StF{!CcIj$Haa>v{86B36ry<dou-zUi5a7vwGG^)XFX$Kxeiv%v9U
z<x;>FNJ!RyloHgOVLQ4^)Dutc^h?~AXPC_z#-`6Jm(jDE1_~#SWX1ogeS}=pvhZ@O
z-HpnEkWb3VtNlEKor2AKil90~@+ab@KLZ^3%v@%x=>dFAkpI|;bSkfI?Q|2~+vER0
zw|%s0_pB+09w1EqF<&)(+^?27t{rP0=~^3+XdwKWH{$?>a;bTa$}FT?2=u$z5#eNo
zjyy$%I)m<*6!nLWoyT%uX91nyn>m6ncqjK^u7ZLJmSDUJ<Kphg=#ZJRvFQu)j}I~U
zp6S@W-@>metOB@OfRO{-a}Ug+-SGHT-8c1-jq)imWFl}!+hBhWJV4?a$R1}{c3#Q{
zQ$Eb`K^q)o5AwjNYihbCcBiLs6AUQ*t2y>%uph9L*M$AdTJ6d%;GB-x_n1$$A6b{V
zW+hLHT;07MJkC+zDy53Sd>Zu&1Y-m_iFV?Kh0dy*%Qpx=ORCLgzQFVZ_a#fc#o-U(
z<$aRVc;Tfs<<**MwdD?3G)6>XNXZmOO?PbS=ChD0_ZfAmB+9*~OY_kMDK*|e7?*VD
zJB%dz!eUvmcc;HF8o6~I(GHYSby3R6nwZv7v2Wk|lu-+Y|49PnBx9(@Syf?jrZ0IW
zZJj%Q!a2dk+3~Y2RY9`r<Y$W1!wm86qi92AmUt?TD&53YD-EUex+VQUJGI^JV*I&_
zVj`Ag8{3?aoU7!Kxh3@Yo)~vQYk)%Iu>J<Tq`%@YKFfKL{mZN#8+?(#2H&I6!d}gJ
z!L&EpaAAI4k0I;&1zl)!0?9YPf%1qHQl;^m(ub6C1k&fGqiGW*RO^nEKP-08#tRES
z>G30Uh0kU|7;*nTHbmIdwX-@-R?GA|<kWM2Ctpi`UZ`iLLS^U06ufco!?6B4JYW9B
z-FE&@^iM6stbU5HaE6>i`|*WAbFjhT{J4zPiMD030RCfjH*NF9mEpDu|4@3Up?0D^
z8k4EM*rir;xBK1v40pYBLBOP7s&*7<mkx@&DKI5He_C<k%7Y5+3(k}~F6=ARBzBx-
z+2*6QzJiSRx2I+@Ua|w_rj7KtKi1N%N5~4_n)n@RZKL;zWZWVuXE9wS{i-yiff;bv
zsvoseo<1f=wH3#B<*(G!8qXu`>7uO^;m9J3*%1hx^eW2a7F|bY(6^)HCo-bW`711w
zpEhz?rhrktq?f*iYCSR!BUz5h|CLKncvwv<L>firIW+A|R<+clB%^IW9h<jEe>z_H
z<<R_Gk8F-XSXS#~U`Ympy^ZxOQ(+aHP7uJ+>*}$Y*v)(6RxBG;TBo^Gtze~J{S<I%
zs<d#dE7w2vFlBn=SSoF0u()0s(>rHo>_Lb|sIDa7KjSV~PZs;%bf~(VB%nF<#eWG{
zkkdJ1`!S|oOQ|2nyDWeC-9jpdT-(f3<1+o<RwL`XmWZuZ7U86q@Jf0-uws-NoomBA
z$AkR09tK)FH8t2NjURWdV@b(L1H2i(6I8-rRMRh<a)+1u;Brf6kqq+c5xTX8%Vh8M
zFPt?>y<K{0BmV>{+dCCrwWWVuqfn3+m)#f7wRl4>C1R8F+qC&^QhU~v#oh;*Ih<|9
zGIHG>TLDcw$6&LxW*f`nIjO4lR<Xxjj{SS=G&QWWbgO=KyuUViCTvDMUukEhV}qGA
zsb+R3Cdd2l(`SCE?A-C@R>49$P7Q12vDx2c;wBG&hvp?%x!5=K_nm~OBICaD$2+Mw
zt%+T;zH2e{CjY!!h$f&u{oC>YEkV$~tz{Afi+1Y_;FdOjQ$`{a#AVZwN6SZ7W&pR0
zX-oUNx@SQ;sXgBtC|s+Rmg3@3G^&hKG&lq13<|{&nRDYjHb=z}A-LI4uvq3&mtZ^R
z^633775={Bb{Jxu#k!d{SYY3zdKC9PLtXp{3%7KTrM9k;pOcwffs2lBu=8X($AVwy
zX!N%-cJTJ=edtUbvEYAyJ_2makdEPWIP<;dVKlM0vu<gKifUSI(J`-6MA!d<XS~FJ
z<7gYW#_!r!*2P4vc%u5Z5$X2WFNB7)ulmGBn}%&Iw>8_{14o{$2N!aFfP3oiD}K{L
z@sQp+X!IYCpGJc$DT}-1GUuDU&?lkz4IZJ_Us{<<OBicXQeM6tVt42BE*|rr9_6vc
zg<S+BFqM^^p+jEpKKR7N2_ZA%=%Tg$DR`BD48)!%uXd_zvP055B>qK(umuS`1|SAZ
zPFVf|<hl3OoC*}NKgaKtqJD%CqX};pjWQRt$!6sl^yc%UHZw_AUMe7Aq3QGybzE}@
zbS>Jh30{X=LuRMh=d2yh4MKck%_maP$D8z^Q#rJi*ZW|Dj5U{Y7FUK$RflXBCQweQ
z=l3D)g!kpH=|t~@$%fCPJjX7-#1W&>#xv}F^6F>nK#cW%e{A!eNe4{D$R?Pfhq_Nz
zi(W5Mu|H)k*2pkV9sAX6>QO0N60}$2=8DsEkv*W?O=Svggn+&jL;#0D@M+rFkW{a;
z;et^M`*=mf^e`LCGact=e2*kFHp>2mF<o>}+K^-hIX`!s!fRhX8FnIBg#i4|i}!Xk
z8D=u?(!0mrz>`O&buh$$IRP{Fw4yA}5c|k>#>IzlgAU2App5DF=Ge>&oggWl31f{+
z13llvcqyTFO?KMs<t>vb6={UJ;{`aag%V)i0m1mivaD65pKfWn*^B}ED+hgKlh44F
z22h=TZQ7eVX2_DlqSi+{ATf4XC1E~<1g#1F&djf$Zl|NvfC}j;%QkncA$jJiXv*WZ
zLk@ADdWn9EyXoeP0Tuxyn>OY5&ZQZvJgSf|*zcqC38gTdq(zXdbnlY+w3W+a9wec~
ze$@rsqi}bHcS>0rTi7z*2#3L|LOG+xl@yB{+8^ZlmarQv->)$eiyVE|x`biKDK&{J
zT5rbZf{NA>keH!X`-0W!{}13CCAGO={C^Ye4)1JnXH=QO67zX&zrSpuoB!5B<m71?
zKYNBWzpzvI3Acfd<Js%#T!}ZK`uaoWaxyDcVvr;YEJxznXuegpK@zFlf1M*F97{cz
z9ndrN<6y)&J%8PW?_|TZ#o-jMnyt_8qb2~!PXgc{UgCy~hb5@3r+oQ@$P$-jZYPak
zJx>aFA%ZnJs!cD4jnFUaC|&wQp&fNgh6IQUt|d#G+mP^1mmofu>+k#v;pIy;Ne3go
zLK5qmv=ud3ilf7F9i>|~VVgmCtcd$2ZiA@&EiMLePfwD?m1h2&&TIE`eDHXJ(`D$G
zT%x-`R<`3y@$DXWEvWO0Ad<q`ZkzY?rl+l7tZR0<%PB~z-$f~95?;QFpjGVnNTdW#
ziVL%)Y#Rf8az7`3)*C@ihX1#F24L{^5`%SEV&_Ut&ZTMR`|CK8j}~t4yI01M@fjYk
zNQ?!Ae5FqoBZjbzzIE&kTU+d6oLR<BFLs^8e{ybe%y$64<NLWqW~+>ZoTfv7SO2fH
z`Z;8syLJCJ9f1GYQB`F`$;_k#3o%h&gXximYIQRRT-Klle3rqDO^pZwyc<zZjzCQ(
z!qyp5A>BC(nnx>x51|Vt+B82+Nx4`{v+1j?7k*WrXak1~<sSf*zMs?A1#dSetEpU4
zJdi^h|LGFDT~nzj(<8^PexH1_Zrz?I9%bV_fW{S9kSbUod-^+B4=3I_36NzNx%i^5
z4~f|8t$>1#2tK``38sM><lAlo&@on{UD$3_ZPcIoWa0*^Q<`t+34;~ITV~(0G-aaf
z^%OLPsUcEUp$U&`ysI-iWO@MQ2_u)tA^~6f|DkNT9ch;0dzAOV4Ho)$IQgpC`YpF3
z3PJpCWa{x+z{8p7QNU!FqHf<%7j%l3h2SFOlmgH=qmHbaU)gzVbK==mSb{xjV^Q$1
ziGj8f&{$XEBm{n~tmi|$Y)Fds<BS7Ymw1Qe#gogJ$iJXl_QXmo>>>qI`dxwf48RMg
zQA!qnA(iRdbB_T)7Gv!gL`T^`pH79<x-yWsPtOP(XHsO6j$3ODB!DUDykoOS6hIM4
zREUBoi!gY^6)}mb(a-_5DqY0wvnS{1LrViFdN*PTT?P<^QgQd)vzX5q5FhLAZd(qS
z&oxh-OM9lEGxV{i;y)((G}{JIZaMgM&?7@C7pXLY*@240%B$l^QbNe|XznSU?wK!l
zLoz6Xin3kVF3uO~j<s9^>9SeE!FNsF3?$1_$J^IxqG|CtMAU^8&*(R~>@?(<4Y2h`
zTVk~75c$24r)DNDXsAl0Ld|TF%F{Prn#)|bSWH4p-lnjwN<ecY9LRGv3Bzu%$9FkX
zJ<24I5T}Q{qz7{SA^W|0%(xU;I^B#<&n$a*1<M2E93_(VD@1~p;W~K?9{X)RQi#|M
zwv0p<fkToxZ>>n9-mU!T6NS2%rp|~&S@>03I_(QJkvhl>q8#6{CuC-7La&{nW=S<F
zxa~XCJlNnVNpvz@BEt|z{&Kz+QKK?56+X@kl+U<tZ(%n#c!ZG{uMfYZC&bgNmb!6e
zJdZF=OIRCa21+Jw$fA(bUy35qH!s}@B;&t0PkKyRFl{-!;Ho5`7k||=RXPznY=Vvc
z&1EGa2}e7n#jP^mG6uPn7jhx3W$_ZAvZu89*QBVVYD-{Kw6qw^{tdq*Ghh+@>@98N
z;yWG<7T-Sz%^tg^{QWbNc^7+V!hV6c7`b;rTMtjFBE#}Q=Qp@q5ymQ2)t`5sup1~m
zKyOfoVF^6>P^_Uxg0d=TVec6BZ7+3ZT;}pGqEqJPT3-#`#J{e45<j0ITw~B_Y=?y*
zX|_j<)fq_|U1v0mK@O>i`$n;lK$lVaQBSLn(dL$3#%KY9rGFLQm&iLxWRyxbYjs~N
ztxbnW*NM3RoS|+90^19S{yo%1KMu~#cLdDQL!-Hkh<HzL<QyfNBedUm(Eq_#4=9UB
z;08K_i#2EjF|^)qCdH*2EZD^{06*oDJ@B{<D&6&oj}&A`R@voL6;TGMum~MkU3>j*
zg0$+!g4kbc<Pyw|JKu=*?n=VNrcMZ4wfU)GLf;`|?5#Vsh?@I)m0jZ%ZVg=AJ4E4o
z>*`@KMN?a2;#~)wZ)g1hWPkUZSgrexh;40~TqQa*pS3X1A3{O!oX%#juX~Rwjv<A$
zGlw(gi~Q`GV~~c^!tsWO^9xwnXvII_-a@nYv?}h+Efz8YcWnLF9Mz^Sq=Lumiyq6U
znHra}!5ePknX3L<bNCb@T*JtOL{2ILC3u{ZgJfHgv)cu^n0wzUCqTW%n-b7a*^qRy
zTfhukW|*4Iy*MIA1)%dc0GY3<sy4SE#d6XZ6Z-a_NWaW%YG_W5glAM@Kzhxx2jR~N
zo<Y$WHV6Wc=TDfVOXdhK&%rMmq2ZHALpNehA=pbah^Lp$J$?gm?RENxZ<G~u05=tY
zq`J;1Ns3ItfZ!}IV9KMM^`Km$xt#N=6^7xVrdZwQAWta@;2D}1*Uz`L*<Ie0><FwD
zq)B=gQvT-*Ma1tRKYiL3?6od@J9^;9`0Ix-0SMeLLZD#E^599A#vGmL{GW$lQ=~hY
z0ZaEWHJAnUM~iDV8>l`8B6e@Q8E~?17ky#5OzDHRP0mBPfbpaqgVEN6t;k)PE_+PG
zPUp?XruW6k%(1Mi#2j8kSIJ60FjLWE5?kRp8DUHQ^uGme7ts_*Nq4oTMP?Y{#5c-^
z4qvPB#{5H!q;>w}*Y3MCRJFl7ro4lkD`kHXfVoe`bP3qYyBw3=Et3uF^FuAc@$!-u
zL*TuiGTSCxfPtrL<}Bm6u|mbSe8~zA47)-11s!<Ay^S`8Z{G*?tk92OyKf7uUHrj0
zRs`OyJ6<SI^;c+FgYvlk;2X-zp))%#@x)J!mf3eh*Wu7JE+&%E8p4)Oc{4xUSW;C-
z?tC9l^D5v%w(r||dZi{p&&1#!nt#uu8UsE3;0H!O&vi)Pyapl$mO+!Gmlffj7CDdu
zo@^oxLQ%~mfycbB>LC#+Y+j1<!Snx`J0LJrm>l*7bspIW{a+PU^Z(8DLEDk4QDOcE
z&y#&yE6!Dzc<s~gqt2@p27ZPnt{dN>@sz!o<?+!0nn}fZx`PjiWKdDJ!80$}({Wd>
zAo6*E80j2g-wlF!20Ri3VlH70opftKq`F8aFgThI+zWAHTNZCJgZ1`!MG<TftaJ_J
z$-aHh0qw>M-{{i6Hs=3LoU?eugiesQ9EA0t*IPg@xYxD~hlHKble>TEK@p@Qro&NX
zf5lj$*Ua@Mo8$IVp4`#f2GPl0t)t(<FKM}RmE!T%-DY4FH5t{w%JOtP4Y2c9V)t8D
z6GtQigk~+eG^pb`@SE%4H&5)Jd0}Xjrg6Wa(;pjfpsTd*Lb0UgUrmG-o*-#}6oS4P
zSM2sUeH7VE7558XvF-+sKyKzl<=Oq;AWXyJW9wQt@D3acB0+=aS0SX+N-6vfl!N{@
zpXOT#d2KY>e%T6v=!UFxO=MBQf16O&_P_GlJG&sFK`p__@+2L7|Jb3E2ebAQZ~QkK
CKF+)V

literal 0
HcmV?d00001

diff --git a/frontend/src/components/WhatsNewModal.tsx b/frontend/src/components/WhatsNewModal.tsx
index af8c08a7..01f6b98c 100644
--- a/frontend/src/components/WhatsNewModal.tsx
+++ b/frontend/src/components/WhatsNewModal.tsx
@@ -1,5 +1,6 @@
-import { useEffect, useState } from 'react';
-import { ExternalLink } from 'lucide-react';
+import { useCallback, useEffect, useState } from 'react';
+import { createPortal } from 'react-dom';
+import { ExternalLink, X } from 'lucide-react';
 import { Modal, ModalHeader, ModalBody, ModalFooter } from '@/components/ui/modal';
 import { Button } from '@/components/ui/button';
 import { whatsNewEntries } from '@/whats-new/entries';
@@ -23,11 +24,20 @@ export function WhatsNewModal({ open, onOpenChange, onViewChangelog }: WhatsNewM
   // not-yet-added filename is a realistic mistake. Drop the image instead of
   // leaving the browser's broken-image placeholder in the card.
   const [failedScreenshots, setFailedScreenshots] = useState<Set<string>>(new Set());
+  const [zoomedSrc, setZoomedSrc] = useState<string | null>(null);
+  const closeZoom = useCallback(() => setZoomedSrc(null), []);
 
   useEffect(() => {
     if (open) markSeen();
   }, [open, markSeen]);
 
+  // WhatsNewModal stays mounted for the app's lifetime (EditorLayout renders it
+  // with a controlled `open`), so without this reset a lightbox left open at
+  // close time would resurface on the next open.
+  useEffect(() => {
+    if (!open) closeZoom();
+  }, [open, closeZoom]);
+
   return (
     // xl (max-w-xl w-[95vw]), not the md default (max-w-md): cards carry
     // screenshots and need more width than the default confirm-dialog size.
@@ -46,13 +56,19 @@ export function WhatsNewModal({ open, onOpenChange, onViewChangelog }: WhatsNewM
               <h3 className="text-sm font-medium text-stat-value">{entry.title}</h3>
               <p className="text-sm leading-relaxed text-stat-subtitle">{entry.blurb}</p>
               {entry.screenshot && !failedScreenshots.has(entry.id) && (
-                <img
-                  src={`/whats-new/${entry.screenshot}`}
-                  alt={entry.title}
-                  className="rounded-md border border-card-border/60"
-                  loading="lazy"
-                  onError={() => setFailedScreenshots((prev) => new Set(prev).add(entry.id))}
-                />
+                <button
+                  type="button"
+                  onClick={() => setZoomedSrc(`/whats-new/${entry.screenshot}`)}
+                  aria-label={`Zoom in on ${entry.title} screenshot`}
+                  className="block w-full cursor-zoom-in overflow-hidden rounded-md border border-card-border/60 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
+                >
+                  <img
+                    src={`/whats-new/${entry.screenshot}`}
+                    alt={entry.title}
+                    loading="lazy"
+                    onError={() => setFailedScreenshots((prev) => new Set(prev).add(entry.id))}
+                  />
+                </button>
               )}
               {entry.docUrl && (
                 <a href={entry.docUrl} target="_blank" rel="noopener noreferrer" className={linkClassName}>
@@ -89,6 +105,54 @@ export function WhatsNewModal({ open, onOpenChange, onViewChangelog }: WhatsNewM
           </Button>
         }
       />
+      {zoomedSrc && <ScreenshotLightbox src={zoomedSrc} onClose={closeZoom} />}
     </Modal>
   );
 }
+
+interface ScreenshotLightboxProps {
+  src: string;
+  onClose: () => void;
+}
+
+function ScreenshotLightbox({ src, onClose }: ScreenshotLightboxProps) {
+  useEffect(() => {
+    // Capture phase, ahead of Radix's own document-level capture listener for
+    // the parent Dialog's Escape handling: stopping propagation here is what
+    // keeps Escape from also dismissing the whole modal while zoomed.
+    const onKey = (e: KeyboardEvent) => {
+      if (e.key !== 'Escape') return;
+      e.stopPropagation();
+      onClose();
+    };
+    window.addEventListener('keydown', onKey, true);
+    return () => window.removeEventListener('keydown', onKey, true);
+  }, [onClose]);
+
+  return createPortal(
+    <div
+      role="dialog"
+      aria-modal="true"
+      aria-label="Zoomed screenshot"
+      onClick={onClose}
+      // Radix sets an inline pointer-events: none on <body> while the parent
+      // Dialog is open (to keep interaction scoped to its own content); this
+      // portal renders as a body child too, so it needs an explicit inline
+      // override (a Tailwind class here would be inert: nothing overrides an
+      // ancestor's inline style except another inline style).
+      style={{ pointerEvents: 'auto' }}
+      className="fixed inset-0 z-[60] flex cursor-zoom-out items-center justify-center bg-[var(--scrim)] p-8 backdrop-blur-sm"
+    >
+      <img src={src} alt="" className="max-h-full max-w-full rounded-md object-contain" />
+      <button
+        type="button"
+        onClick={onClose}
+        aria-label="Close zoomed screenshot"
+        className="absolute right-4 top-4 inline-flex h-9 w-9 items-center justify-center rounded-lg bg-popover/80 text-popover-foreground hover:bg-popover focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
+      >
+        <X className="h-4 w-4" strokeWidth={1.5} />
+      </button>
+    </div>,
+    document.body,
+  );
+}
diff --git a/frontend/src/components/__tests__/WhatsNewModal.test.tsx b/frontend/src/components/__tests__/WhatsNewModal.test.tsx
index 4d1de523..0e7525b2 100644
--- a/frontend/src/components/__tests__/WhatsNewModal.test.tsx
+++ b/frontend/src/components/__tests__/WhatsNewModal.test.tsx
@@ -87,4 +87,48 @@ describe('WhatsNewModal', () => {
     await userEvent.click(screen.getByRole('button', { name: 'View full changelog' }));
     expect(onViewChangelog).toHaveBeenCalledTimes(1);
   });
+
+  it('clicking a screenshot opens a zoomed overlay with the same image', async () => {
+    render(<WhatsNewModal open onOpenChange={vi.fn()} onViewChangelog={vi.fn()} />);
+    await userEvent.click(screen.getByRole('button', { name: 'Zoom in on Second feature screenshot' }));
+    const zoomed = screen.getByRole('dialog', { name: 'Zoomed screenshot' });
+    expect(zoomed.querySelector('img')).toHaveAttribute('src', '/whats-new/second.png');
+  });
+
+  it('the close button dismisses only the zoom overlay, leaving the parent modal open', async () => {
+    const onOpenChange = vi.fn();
+    render(<WhatsNewModal open onOpenChange={onOpenChange} onViewChangelog={vi.fn()} />);
+    await userEvent.click(screen.getByRole('button', { name: 'Zoom in on Second feature screenshot' }));
+    await userEvent.click(screen.getByRole('button', { name: 'Close zoomed screenshot' }));
+    expect(screen.queryByRole('dialog', { name: 'Zoomed screenshot' })).not.toBeInTheDocument();
+    // The regression this guards against: an earlier implementation portaled
+    // the overlay to document.body, outside Radix's Dialog content subtree,
+    // so Radix treated every zoom-dismiss click as an outside click and also
+    // closed the parent. If that regressed, onOpenChange(false) fires here.
+    expect(onOpenChange).not.toHaveBeenCalled();
+    expect(screen.getByRole('dialog', { name: "What's New" })).toBeInTheDocument();
+  });
+
+  it('clicking the backdrop dismisses only the zoom overlay, leaving the parent modal open', async () => {
+    const onOpenChange = vi.fn();
+    render(<WhatsNewModal open onOpenChange={onOpenChange} onViewChangelog={vi.fn()} />);
+    await userEvent.click(screen.getByRole('button', { name: 'Zoom in on Second feature screenshot' }));
+    await userEvent.click(screen.getByRole('dialog', { name: 'Zoomed screenshot' }));
+    expect(screen.queryByRole('dialog', { name: 'Zoomed screenshot' })).not.toBeInTheDocument();
+    expect(onOpenChange).not.toHaveBeenCalled();
+    expect(screen.getByRole('dialog', { name: "What's New" })).toBeInTheDocument();
+  });
+
+  it('Escape dismisses only the zoom overlay, leaving the parent modal open', async () => {
+    const onOpenChange = vi.fn();
+    render(<WhatsNewModal open onOpenChange={onOpenChange} onViewChangelog={vi.fn()} />);
+    await userEvent.click(screen.getByRole('button', { name: 'Zoom in on Second feature screenshot' }));
+    await userEvent.keyboard('{Escape}');
+    expect(screen.queryByRole('dialog', { name: 'Zoomed screenshot' })).not.toBeInTheDocument();
+    // Radix's own Escape handling for the parent Dialog is a document-level
+    // capture listener; without stopPropagation this fires too and also
+    // requests the parent close.
+    expect(onOpenChange).not.toHaveBeenCalled();
+    expect(screen.getByRole('dialog', { name: "What's New" })).toBeInTheDocument();
+  });
 });
diff --git a/frontend/src/whats-new/entries.json b/frontend/src/whats-new/entries.json
index a3f517de..a506b99b 100644
--- a/frontend/src/whats-new/entries.json
+++ b/frontend/src/whats-new/entries.json
@@ -40,5 +40,12 @@
     "blurb": "Drag the divider in the Files tab to give the tree pane more room, or shrink it out of the way. Your preferred width is remembered.",
     "docUrl": "https://docs.sencho.io/features/stack-file-explorer",
     "screenshot": "file-explorer.png"
+  },
+  {
+    "id": "rbac",
+    "title": "Role-based access control",
+    "blurb": "Every instance ships with five built-in roles, Admin, Viewer, Deployer, Node Admin, and Auditor, plus scoped permissions to grant access to one stack or node without elevating anywhere else.",
+    "docUrl": "https://docs.sencho.io/features/rbac",
+    "screenshot": "rbac.png"
   }
 ]