v1.184.0

Bug Fixes

• add data retention navigation item
• generate a random API token using crypto.randomInt
• audit financial records during onboarding completion
• update route.ts to validate incoming data
• update link to team dashboard
• add auditRequestMeta function for client IP + User-Agent logging
• remove unnecessary button in forgot password header
• update turnstile widget references and handling
• add verification token check for forgot-password route
• update glitchgrab version to 1.28.0
• ignore client-supplied userId in POST request
• encrypt session token at rest on update
• record IP/user-agent on portal credential login audit
• ensure reminder notifications are sent to the creator, not assignee
• add set retention hold functionality
• add cron route and logic to anonymize users
• add DPDP retention/erasure logic
• update route to include user data and summary stats
• add Cloudflare Turnstile secret key for form validation
• update Google client secret for production
• audit bulk PII export - super-admin pulls every admin's contact details
• clear DPDP anonymization warning when user activates
• update search controls layout for better readability
• add debounced auto-save and clean-up for edit requests
• add ip and userAgent to AuditLog table and attempts column to Otp table
• add retention exemption timestamp to User model
• client submit route - create invoice and log audit
• add OTP check logic
• update glitchgrab package version to 1.28.0
• add retention logic for anonymization and legal hold
• update Otp model to include attempts field
• improve verification challenge flow and state management
• add inline badge for renewal status and value breakdown
• add scope to business proposal routes
• restrict external image fetching to CDN/S3 buckets
• invalidate data retention queries when creating a new record
• use query-keys scope for the file apps/web/lib/query-keys.ts
• add ownership verification
• add verification challenge to request OTP route
• add turnstile token verification in resend-otp route
• ensure external URLs are validated before processing
• update list view button to use useQueryState
• add component for team management
• improve email and whatsapp template handling
• add route for handling lead assignments
• use it

Features

• clear pending DPDP anonymization warning when logging in
• update OTP verification and audit logging
• surface client/contact lookup failures instead of silently empty
• add error handling for contact fetching
• refactor dashboard team panel implementation
• add admin data retention page
• add loading state to lead board component
• add mobile/tablet filter dropdown
• fire-and-forget send lead assigned notification
• add implied VIEW access for certain modules
• add support for checking compliance by firm
• scope: business — handle firm-specific operations for business deletion and validation
• verify business belongs to caller's firm before updating
• add OTP verification for password resets
• add staff-only action for proposals
• Add OTP verification to send route
• add verifyTurnstileToken function
• add cron jobs for feedback request and data retention
• limit OTP verification attempts