v0.4.0

Tenant defaults: set MSP-standard values once, inherit everywhere

The headline of this release is instance-level inheritance. Values you set once now reach every tenant that has not overridden them, resolved live at artifact generation time — never copied into tenant rows, so a fleet-wide change is a single edit.

• Branding and policy defaults (Settings > Tenant defaults): standard support info, product name, primary color, and policy values (update interval, page blocking, allowlist, domain squatting, webhook, CIPP toggle). A blank tenant branding field inherits; a policy key the tenant never set inherits. CIPP tenant ids never inherit.
• Instance default logo: served through each tenant's stable /assets/{guid}/logo URL whenever the tenant has no logo of its own — already-deployed policies pick up a new default logo with no policy change.
• Inherited-field badges: the Branding and Policy tabs mark inherited fields and show the inherited value; saving the Policy tab keeps a field inherited while its value still matches the default, so tenants follow future default changes until you deliberately override.
• Baseline rules delta (Settings > Baseline rules delta): an instance-level rule delta (standard MSP exclusions such as RMM domains) merged beneath every tenant delta at publish and preview time. Tenants can suppress baseline-added indicators; duplicate ids are caught by the validation gates. Republish all tenants rolls a baseline change out to the whole fleet immediately.
• Duplicate tenant: creates a fresh tenant carrying only the source's rules delta draft — branding and policy intentionally inherit instead of copying.
• Setup wizard: gains an optional "Standard branding defaults" step (now six steps).

Documentation

• Runbook: new sections for tenant defaults (with the propagation caveat), the baseline delta, and tenant duplication, with embedded screenshots.
• Architecture doc updated to the current data model, endpoints, and inheritance design.
• All dashboard screenshots recaptured; three new views (tenant defaults editor, baseline delta editor, policy tab with inherited badges).
• BACKLOG: the remaining roadmap items are now fully scoped and prioritized.

Upgrading

From a deploy-button copy, run the Sync upstream workflow from the Actions tab, or git pull and npm run deploy. One D1 note: no schema migration is required for this release; the new instance settings seed themselves on first read.

Full changelog: v0.3.0...v0.4.0