Changelog

Auth hardening — password change requires current password; recovery flow guards via AMR

Invite flow — dedicated sign-up and sign-in pages with organisation context

Landing page — refined footer with trust signals, live status link, and GDPR badge

Mobile audit — responsive improvements across dashboard, orders, production, and auth pages

Design system — consistent spacing tokens, Surface component, PageHeader rollout

Realtime — live updates on order/invoice detail, notification bell, and quote pages

Customer portal — clean URL routing via token exchange; workflow identity continuity

Notification architecture — calm tiered email system with pg_cron workflow automation

Shipments module — dispatch, tracking links, and delivery confirmation

Production kanban — stage management and bulk stage updates

Orders module — full order lifecycle with status pipeline and attachments

RLS audit — row-level security across all modules; missing policies added

Invoicing — invoice generation, PDF export, and payment tracking

Quotes — line items, revision history, and customer approval flow

Customer portal — self-serve order and invoice access for clients

Team management — role-based permissions (owner, admin, member)