v1.24.0

1.24.0 (2026-07-29)

Bug Fixes

• ai-service: add container origin to CORS allowed origins (5a67169)
• ai-service: switch tenant api key hashing to sha256 constant time compare (2522f9b)
• ai: add organization permission check to brainstorm brief route (58fb74a)
• ai: add organization permission check to brainstorm message route (0c6feeb)
• auth: enforce rate limiting on login endpoint (a81ee5b)
• auth: enforce rate limiting on password reset endpoint (9015cc9)
• auth: enforce rate limiting on registration endpoint (70f548c)
• auth: remove emoji and update font class to font-headline (514d8e6)
• auth: replace fabricated static stats with honest feature highlights on Login page (1c92860)
• auth: sanitize returnTo parameter to prevent open redirect vulnerabilities (f28e7e9)
• dashboard: remove caller user id requirement from pitch review component (c4b2ee8)
• dashboard: replace emoji with Shield icon on admin console button (1bdbc44)
• docker: update nextjs service url configuration in production compose (1afb29b)
• docker: update service network urls in dev compose (8758b37)
• events: replace native alert with sonner toast and use router.refresh (a325da6)
• events: require owner or admin role for event creation (a27cdb1)
• feedback: replace celebration emoji with CheckCircle2 icon (42df8ac)
• header: temporarily hide ThemeToggle until demo-path migration completes (9a98533)
• lv-service: authorize event participant or host access for rooms (87a973c)
• marketing: fix broken signup links on About page (56fcd88)
• marketing: update Contact Sales CTA link to point to contact route (1b62e05)
• marketing: update homepage CTA links and replace search placeholder (a012d11)
• navigation: update footer links to active marketing and auth routes (e55a2cf)
• next: add import-in-the-middle to transpilePackages (c678997)
• onboarding: remove emoji from welcome title (13398a8)
• org-documents: restrict document fetching to owner and admin roles (6a43784)
• organizations: enforce organization id matching on member updates and removals (fac1f48)
• package: add import-in-the-middle pnpm override (8388ee5)
• package: update lockfile for pnpm overrides (3f418c0)
• pitches: authenticate pitch actions using server session (290baf4)
• pitches: derive user identity from session in pitch brief modal (357ef46)
• pitches: remove emoji from approved pitch status badge (eb54bb5)
• pitches: remove emoji from pitch saved modal title (bca990f)
• upload: add auth check and exclude svg from image uploads (cb7ca89)
• ws-service: authorize room membership for virtual event websocket events (454c6b0)

Features

• ai-planner: add navigation link to organization pitches (cb9b153)
• ai: integrate AI server action handlers with domain layer (0763b95)
• api: add system health check endpoint (31efd0b)
• api: update admin organization verification route handler (57046e7)
• api: update background job trigger API endpoint (695f129)
• auth: add auth validation helper utilities (fe1ac2e)
• auth: update Auth.js configuration for JWT and RBAC callbacks (11f25c1)
• auth: update NextAuth initialization and session helpers (fe23629)
• brainstorm: add pitch list navigation link to brainstorm chat (96351d7)
• brand: add App Router vector SVG favicon and icon.png (e83e77e)
• brand: add Stitch-generated Login and Register split-screen background assets (1319847)
• brand: add Stitch-generated master CorpConnect icon asset (0b74f2e)
• constants: update application navigation and plan constants (31d15a8)
• db: add comprehensive database seed script with mock entities (54886bb)
• db: add pgvector schema verification and smoke test database migrations (d7ddfa1)
• db: update Prisma schema with pgvector extensions and index definitions (02b0558)
• docker: enable pgvector extension and indexes on startup (6538ef2)
• domain: update AI domain actions and public exports (9ea4414)
• domain: update notifications domain server actions (163592c)
• domain: update organization domain server actions (81b9c0b)
• email: add organization verification email template (b7151f9)
• hooks: update useEventView custom hook (ad96a84)
• hooks: update useSocket custom hook (3276001)
• jobs: add trial expiration background job (c6145a9)
• jobs: update organization verification background job (9f5d64c)
• lib: update API authentication utilities (074fe6d)
• marketing: add Contact Sales & Request Demo page (c7c71da)
• marketing: add Privacy Policy page (964c946)
• marketing: add Terms of Service page (050b179)
• middleware: add route protection and tenancy policy middleware handlers (0f993c9)
• payment: update Stripe payment utilities (66d6ae9)
• pitches: add organization pitch detail page (435b7ff)
• pitches: add organization pitches listing page (0d6f8a9)
• pitches: add pitch detail view component (d8b0447)
• rate-limit: add lightweight fixed-window rate limiter (86be046)
• routes: update route definition constants (cf865ef)
• scheduler: update cron jobs scheduler (a523e3a)
• scripts: add admin privilege grant and pgvector enablement helper scripts (8589f3b)
• theme: convert nx-* design tokens to theme-aware CSS custom properties (dc950f3)
• theme: update Tailwind color tokens to reference CSS custom properties (908329c)
• tokens: update token generation helpers (f95c3aa)
• validation: update Zod validation schemas (e842a44)