Bug Fixes
- generate a random API token using crypto.randomInt
- audit financial records during onboarding completion
- update route.ts to validate incoming data
- update link to team dashboard
- add auditRequestMeta function for client IP + User-Agent logging
- remove unnecessary button in forgot password header
- update turnstile widget references and handling
- add verification token check for forgot-password route
- update glitchgrab version to 1.28.0
- ignore client-supplied userId in POST request
- encrypt session token at rest on update
- record IP/user-agent on portal credential login audit
- ensure reminder notifications are sent to the creator, not assignee
- add set retention hold functionality
- add cron route and logic to anonymize users
- add DPDP retention/erasure logic
- update route to include user data and summary stats
- add Cloudflare Turnstile secret key for form validation
- update Google client secret for production
- clear DPDP anonymization warning when user activates
- update search controls layout for better readability
- add debounced auto-save and clean-up for edit requests
- add ip and userAgent to AuditLog table and attempts column to Otp table
- add retention exemption timestamp to User model
- client submit route - create invoice and log audit
- add OTP check logic
- update glitchgrab package version to 1.28.0
- add retention logic for anonymization and legal hold
- update Otp model to include attempts field
- improve verification challenge flow and state management
- add inline badge for renewal status and value breakdown
- add scope to business proposal routes
- restrict external image fetching to CDN/S3 buckets
- invalidate data retention queries when creating a new record
- use
query-keysscope for the fileapps/web/lib/query-keys.ts - add ownership verification
- add verification challenge to request OTP route
- add turnstile token verification in resend-otp route
- ensure external URLs are validated before processing
- update list view button to use
useQueryState - add component for team management
- improve email and whatsapp template handling
- add route for handling lead assignments
- use it
Features
- clear pending DPDP anonymization warning when logging in
- update OTP verification and audit logging
- surface client/contact lookup failures instead of silently empty
- add error handling for contact fetching
- refactor dashboard team panel implementation
- add admin data retention page
- add loading state to lead board component
- add mobile/tablet filter dropdown
- fire-and-forget send lead assigned notification
- add implied VIEW access for certain modules
- add support for checking compliance by firm
- scope: business — handle firm-specific operations for business deletion and validation
- verify business belongs to caller's firm before updating
- add OTP verification for password resets
- add staff-only action for proposals
- Add OTP verification to send route
- add verifyTurnstileToken function
- add cron jobs for feedback request and data retention
- limit OTP verification attempts
