Internal portal for people, approvals, and company workflows.

11 Jun 2026

• • Create employee + entitlements + user + roles in one transaction (#136)

10 Jun 2026

• • Close remaining check-then-act races + error-detail leak (#135)
• • De-brittle leave-page-ux date fixtures + sheet-view set-state-in-effect (#134)
• • Make e-sign advance idempotent and leave/claim writes race-safe (#133)
• • Authorize deal list in SQL before pagination (#132)
• • Revert Apr-2026 testing-period full-access grant (PII) (#131)

28 May 2026

• • Global Legacy/Sheet view toggle (day/night style)

26 May 2026

• • Freeze Twenty contract document shadow sync
• • Freeze Twenty signature document shadow sync
• • Freeze Twenty approval rule shadow sync
• • Freeze Twenty leave application shadow sync
• • Freeze Twenty employee shadow sync
• • Freeze Twenty finance review shadow sync
• • Freeze Twenty vendor payout shadow sync
• • Freeze Twenty client invoice shadow sync
• • Freeze Twenty sow line shadow sync
• • Freeze Twenty deal shadow sync
• • Freeze Twenty vendor profile sync
• • Freeze Twenty AI decision sync
• • Freeze Twenty operating task sync
• • Freeze Twenty content request sync
• • Freeze Twenty campaign sync
• • Freeze Twenty contact sync
• • Freeze Twenty account sync

25 May 2026

• • Handle stalled website analytics
• • Add Twenty operating shell

8 May 2026

• • Fix Workroom dogfood issues
• • Self-heal DYNAMIC_HOD/MANAGER approvals when approverEmployeeId is null
• • Make MFA step-up wrap a pass-through until real primitives land
• • Block manager-role removal while target has direct reports
• • Prompt for MFA step-up when admin saves role changes
• • Show leave attachment to requester
• • Confirm and repair pre-approval actions
• • Unblock inbox leave and task guide flows
• • Polish leave application guide flow
• • Handle leave entitlement cold state

7 May 2026

• • Leave EmptyState Apply Leave button no longer dead-link
• • Make /home Tasks cards clickable like Inbox cards
• • Add missing request_counters table for pre-approval numbering
• • Inbox reject-with-reason silently dropped on leave + request routes
• • Always assign baseline employee role on HR-onboarded users

6 May 2026

• • Surface temp password to admin in create + reset flows

5 May 2026

• • Activate invited users on password reset
• • Grant sys_admin nav visibility for content/campaign/PCR/media

4 May 2026

• • Leave inbox routing + lock down approve/reject auth (#109)
• • Paginate admin employees list (#108)

30 Apr 2026

• • Harden api stabilization gates
• • Normalize erp idempotency auth
• • Guard auth logout route
• • Hash proxy rate-limit tokens
• • Propagate must-reset through mfa wrapper
• • Harden auth password and mfa routes
• • Gate api mutations at proxy
• • Normalize api guard helpers

29 Apr 2026

• • Resolve UAT integration type drift
• • Fix PR1 admin and ERP error surface
• • Fix env gates for impersonation and ai pin
• • Tighten admin safety audit trails

28 Apr 2026

• • ERP role rollout — sidebar archetype, leave admin, employees endpoint, /erp redirects
• • /api/admin/seed-roles ops endpoint (#107)

27 Apr 2026

• • Remove unreliable isProductionStage gate from impersonate route
• • /api/admin/erp/reseed endpoint (erp_admin auth, no cron-stage gate) (#100)
• • Seed-refresh mock typing (#99)
• • Typed staging-roleplay E2E driver (#98)
• • Admin-gated env-flags endpoint to trace CRON_SECRET runtime (#97)
• • 401 returns new ApiErrorBody shape (UX consistency) (#96)
• • Impersonate clears mustResetPassword for any non-prod user (#94)
• • User-friendly error-response helper + migrate ERP/admin chokepoints (#93)
• • HIGH#4 mustResetPassword returns 428 instead of 401 across ERP routes (#85)
• • MED#7 forex auto-extend cron + 12mo seed window (#84)
• • MED#5 role-based DepartmentJob routing + claim endpoint (#81)
• • LOW#8 multi-step inbox + LOW#9 role-gate before idempotency (#80)
• • HIGH#3 add client_invoice:reconcile to FM, remove from AM (#78)

25 Apr 2026

• • SETTLED invoices count as raised + collected, not not-raised (#76)
• • Pass employeeId not user.id to ERP service writes (#75)
• • State-machine PR #57 HOD-skip + SETTLED + reconcile fixpoint (#74)
• • Seed erp_department_routing_rules per pillar (#73)
• • Close-checklist upsert crashes on null compound key (#72)
• • Expose new LedgerBucket values in SOW dropdowns (#71)
• • Extend LedgerBucket enum (Drama/Events/Goods/Institutions) (#67)
• • AD_RIDER covers AM on canActOnDeal — Apr 25 2026 cover-policy (#68)
• • Rate-limit vendor typeahead at 60 req/min/user (#65)
• • PR-D-ui — payment terms + KPIs + IC/SC + SST exemption uploads (#63)
• • PR-B — money flows are usable (3 P0 cutover gaps) (#61)
• • PR-C — quotation chain UI (#59)
• • PR-A — SOW build is usable (4 P0 cutover gaps) (#60)
• • Run prisma migrate deploy in build (recover login + integration) (#54)
• • Phase 5 — Lark dashboard rollup (#48)

24 Apr 2026

• • Downgrade content-workflow cron to daily (Hobby plan limit) (#39)
• • Phase 3 — port Lark workflow automations to Vercel Cron (#31)
• • Phase 2b — inline editing for brand / postingLink / status on /content/sheet (#29)
• • Phase 2 — /content/sheet flat Lark-style view (#25)
• • Phase 1b — validateTransition exhaustiveness for DROPPED (#27)
• • Phase 1a — Lark schema additions (brand, postingLink, DROPPED) (#26)
• • Sync User.email when Employee.workEmail changes
• • Show Leave menu to staff + content_editor archetypes
• • HR-managed starter password & reset flow for employees
• • PR1b-seeds — idempotent ERP seed layer (#4)
• • Add (erp) route-group layout shell
• • CamelCase column identifiers in raw-SQL companion
• • Add PR0 Track B — shared middleware + settings registry

23 Apr 2026

• • "What's new" panel on the login page now auto-updates from git on every deploy

22 Apr 2026

• • Brand asset thumbnails now render inline in the Campaign asset list
• • HR can create new teams from the Admin panel
• • Media Insight now includes GA4 audience, device, geo, and behavior breakdowns

21 Apr 2026

• • Campaign module shipped — admins can create, publish, pause, resume, and end campaigns from Workroom
• • Campaign KYC review, payout batches, and post-issues admin screens
• • Direct-to-Supabase campaign asset uploads (no more 4 MB attachment cap)

19 Apr 2026

• • Media Insights rebuilt with live Vercel Web Analytics
• • Submission review flow — approve, reject, feature, and revert posts in Campaign admin

17 Apr 2026

• • "Who is on leave today" card on the home dashboard
• • All leave entitlements are editable by HR, zero-entitlement leave types are hidden

15 Apr 2026

• • Replacement leave claims, public holiday country selector, editable used-days
• • Leave moved under the People section in the sidebar

14 Apr 2026

• • Leave module — apply, approve, entitlements, and public holidays

13 Apr 2026

• • Sidebar navigation reorganized with collapsible section headers (Requests, Finance, Content, People, Work, Analytics, Documents)
• • Announcements promoted to top-level alongside Inbox for faster access
• • Clearer action labels: "New Approval Request" and "New Content Brief"
• • HR team now has Admin panel access
• • PCR Deck Generator for auto-generating TikTok performance reports
• • Kolbuff Growth module for creator discovery and lead tracking

9 Apr 2026

• • Pages now load much faster across the board
• • Approvals, Tasks, and Announcements now show paginated results
• • Org chart updated with correct department and team structure
• • Adding new employees no longer fails after the first entry
• • Content request submissions now work reliably under heavy use

5 Apr 2026

• • Content assignment dashboard and editor workload tracking
• • E-Signature module for sending and signing documents
• • Contract generator with templates

2 Apr 2026

• • Workroom portal launched for pilot
• • Expense approvals with finance queue
• • Tasks, announcements, and org chart
• • Role-based access for CEO, HOD, Finance, and HR