Changelog

v1.5.0

May 28, 2026

Platform reviews, blog, bug bounty program, and a full security hardening pass.

• AddedConsultants can rate and review Shimaya from their Reviews dashboard
• AddedAdmin: Platform Reviews tab to moderate consultant feedback
• AddedCompany blog at /blog with guides for consultants
• AddedBug Bounty page at /bug-bounty with responsible disclosure policy
• AddedAbout page at /about
• AddedThis changelog
• ImprovedHomepage — FAQ section, integrations strip, Blog nav link, multi-column footer
• SecurityXSS fixed in contact-sales email — all fields now HTML-escaped before injection
• SecurityHardcoded personal emails replaced with ADMIN_EMAILS and CONTACT_SALES_EMAIL env vars
• SecurityRate limiting added to /api/contact-sales and /api/reviews
• Fixedlocalhost:3000 fallback removed from Polar checkout
• AddedGlobal error.tsx and not-found.tsx — branded error pages
• ImprovedProfile type — 12 missing fields added, ~76 unsafe casts removed

v1.4.0

May 27, 2026

Appointment detail pages, portal-based dropdowns, and suspension system fixes.

• AddedAppointment detail modal on click
• AddedAppointment detail page at /dashboard/appointments/[id]
• FixedActions dropdown rendered via a portal — no longer clipped by card overflow
• FixedSign-out on /suspended was a no-op link. Now properly calls supabase.auth.signOut()
• FixedNull profile on /suspended caused an infinite redirect loop
• FixedSuspended/banned users could still access /admin
• Security/admin added to middleware isProtected — session refresh now runs on admin routes
• AddedReusable SignOutButton component

v1.3.0

May 26, 2026

Floating platform support chatbot and TypeScript cleanup.

• AddedFloating support chatbot on all pages — Claude Haiku, platform-only topic restriction
• Added/api/chat — rate limited, sanitized, strict system prompt
• ImprovedAgent chat bubbles render **bold** markdown correctly
• FixedPOST /api/agent returned 404 when agent_config column was missing
• AddedMigration 004 — agent_config and is_admin columns

v1.2.0

May 24, 2026

Calendar OAuth scaffolding, realtime updates, and AI agent launch.

• AddedAI booking agent — books via natural language conversation end-to-end
• AddedCalendar view on appointments page
• AddedReal-time appointment updates via Supabase Realtime
• AddedCalendar OAuth scaffolding — Google, Microsoft, Notion
• Fixed/book/[slug] route 404
• ImprovedAgent Builder custom brand colors

v1.1.0

May 22, 2026

Polar.sh billing, booking quick-access bar, and dashboard polish.

• AddedPolar.sh billing — Practice and Studio plan checkouts
• AddedBooking link quick-access bar on dashboard
• AddedEnterprise custom pricing section
• ImprovedDashboard layout and sidebar navigation

v1.0.0

May 20, 2026

Initial launch — core booking, client management, and embeddable widget.

• AddedAI booking agent powered by Claude Sonnet
• AddedDashboard — appointments, clients, services, availability
• AddedPublic booking page at /book/[slug]
• AddedEmbeddable widget at /widget/[slug]
• AddedAutomated confirmation and reminder emails via Resend
• AddedOnboarding wizard
• AddedClient self-cancel and reschedule via token links
• AddedReview system with admin moderation
• AddedAnalytics dashboard
• AddedRow-level security on all tables
• AddedIn-memory sliding-window rate limiting