Close residual cross-org existence oracles + cap WORM-bound JSON blobs
Adversarial-review findings MLOS-W-01/03/04: - the 404-normalized empty list envelope now echoes the request's identity keys **************** so unknown, fore...
MediaObjTransit.date created insertable = uongo hivyo DB default fills yake
The builder never set dateCreated; Hibernate bound NULL and violated the NOT NULL constraint, breaking addMembersToSession (and thus the social lead-accept hook...
Madai ya nyuklia kabla ya uumbaji wa kuongoza - kuzuia yatima inaongoza
jamii.lead.new inaweza kusindika pamoja (zamani + usalama mpya) Timu zote mbili zinashiriki Uandikishaji wa msingi wa NATS wakati wa RollingUpdate moja ya kucha...
Usiweke moto popup mpya kwenye refresh / wakati haipatikani
myStatus kutoka AccessContext defaults kwa 'AVAILABLE' hadi mbili async huchota (/user-info kisha / wanachama / me /availability) kutatua, hivyo kwenye kivinjar...
Underwriting review polish (i18n, a11y, contrast, enum humanize)
Tumia matokeo ya ukaguzi: localize waliohifadhiwa / ndiyo / hapana + aria-labels, humanize vidonge vya enum, usawa wa kesi ya awamu (pamoja titleCase), ausKindI...
Fail-closed tenant guard on underwriting waivers/validations
Review found the org guard was a no-op on the common empty-list case for the by-id waivers/validations reads (which the MLOS service does not org-filter), leaki...
Add missing /api/security/lead-imports proxy route; default to Import Templates
- The base GET/POST /api/security/lead-imports had NO Next proxy route.ts (only sub-paths did), so Past Imports fetch (and the import POST) 500'd at the Next ...
FFA kukubalika juu ya kusimamishwa katika mwisho inapatikana + inapatikana
available-summary now resolves the member's allotment and skips the product when suspended BEFORE the free-for-all short-circuit, and available() gates creditOk...
Suspension now actually blocks acceptance (alert + accept + FFA)
findApplicableAllotments filtered 'AND la.isActive = true', so getMostSpecificAllotment returned a less-specific ACTIVE fallback (or nothing) when a member's sp...
Implement POST /api/bulktext/send internal transactional SMS
SecurityService's BulkTextSmsClient (password-recovery + account-settings SMS) has always POSTed **************** to /api/bulktext/send, but the controller was ...
Send leadId as string when creating a comment
parseInt() rounded lead ids past JS MAX_SAFE_INTEGER, so the backend looked up a nonexistent lead and returned 404, surfacing as 'Failed to create post' on the ...
Accept leadId as string in createPost to preserve CRDB id precision
Lead IDs are CRDB unique_rowid() values that exceed JS MAX_SAFE_INTEGER. The frontend now sends leadId as a string; parse both String and numeric forms so findB...
Resolve member names on /leads/credits + link to their account
The member column and filter showed raw ids because the name map was built from /api/security/members, whose CockroachDB Long ids serialize as JSON numbers and ...
Make EditableCard onEdit optional so reassignment gating type-checks
The assignment card passes `canReassignManually ? startEditAssignment : undefined` to EditableCard.onEdit, but onEdit was typed `() => void` (required), failing...
Hali ya Busy juu ya Start Import + drop debug logs
- Disable Kuanza Import / Nyuma na kuonyesha spinner + 'Importing' wakati kuagiza POST ni katika ndege, kuzuia maoni ya duplicate kwenye faili kubwa -Kuondoa [L...
Usahihi, ukubwa & PII mgumu katika LeadImportController
- Imeunganishwa kupitia swala la LeadRepository badala ya FindAll () juu ya wapangaji wote (Ilikuwa OOM / DoS + hatari ya mfiduo wa msalaba, kukimbia tena kwa k...
Scope kuagiza swala la dedup + org-guard mwanachama / kazi ya bidhaa
Kwa mfano, *** kuwa, Projection-tu duplicate lookup kwa mnunuzi mwongozo (inabadilisha kwa kila-batch) (iii) Kuratibu shughuli zote za maendeleo katika ngazi zo...
Pin markedForReassignmentBy FK to INT8 (no inherited default)
Without columnDefinition, Hibernate copies members.id (INT8 DEFAULT unique_rowid()), so CockroachDB backfilled existing leads rows with bogus member ids on ALTE...
Stop refresh icon blinking via infinite check loop
Once a domain was SSL-confirmed, checkDns unconditionally built a new domain object even when sslConfirmed was already true. The new object reference re-trigger...
Return 422 (not 500) when member has no mailbox
listFolders and other read endpoints threw IllegalStateException from MailContext.toMailCredentials() when a member had no IMAP credentials provisioned, which t...
Don't fetch org with a precision-truncated id
LabelManager derived orgIdStr from getOrgIdString() (precision-safe) with a fallback to String(organization.id). organization.id is a JS number and silently tru...
Weka eneo la tovuti + kutumia node-local MinIO kwa pod
Ongeza kamo.minio.region (MINIO REGION, default us-magharibi-ca-s-1) hivyo SigV4 saini zinalingana na eneo la tovuti iliyotekelezwa na seva; kurekebisha backgro...
Maombi ya saini na eneo la tovuti ya uhakika
MinIO sasa inatekeleza MINIO SITE REGION (us-magharibi-ca-s-1) katika SigV4. Uwezo wa kufanya kazi kwa kuwa tovuti imewezeshwa. Mteja alikuwa Ilijengwa bila ene...
Weka picha za nyuma ambazo 404 badala ya kuonyesha sura iliyovunjika
Track failed background image loads and filter them out of the Swiper carousel, so an incompletely provisioned theme (e.g. optionone, whose bg/2.webp was never ...
Never return 401 from proxy (was logging users out on enter-as); degrade to empty
Proxy injects X-Member-Id from session (me endpoint 400'd, so trial banner never had data)
Show trial banner on the welcome homepage (app/page.tsx) top-right, not just NavTop
Trial banner shows for any TEAM_MEMBER (system/team/admin), drop god dependency
Gate homepage trial banner to staff (team members/admins/system), hide from plain members
Trial banner signal is org-level (all members of a trialing org), not seat-based
Tumia vifungo vya majaribio ya nje kwenye tabo ya Shirika la Jukwaa (chips hazikugunduliwa)
Comp provisioning clears trial deadline (comp supersedes trial)
In the existing-subscription update path of provisionCompSubscription, set trialExpiresAt to null so a previously trialling org is cleanly promoted to comp with...
Retry boot-time rights sync on transient DB unavailability to avoid CrashLoopBackOff
Persist background reorder via commit endpoint (no data loss)
Save now stages new uploads to incoming, then commits the full desired order (existing-by-srcIndex or new-by-token) so reordered existing images are re-slotted ...
Stop cross-org background image leak; order-safe reorder + staging bucket
Reordering only re-uploaded new files to their new index, dropping reordered existing images and leaving imageBgCount claiming unpopulated slots; provisioning t...
Kurudi 404 kwa org haipo badala ya 200 na mwili tupu
getOrganizationById ilirudi null kabisa, ambayo Spring ilichapishwa kwa HTTP 200 na mwili mtupu; wateja wito majibu.json () kisha kurusha "Mwisho usiotarajiwa w...
Ramani missing org (404 au tupu mwili) kwa malipo ya chini
Pairs with the SecurityService change that now returns 404 for a missing org instead of 200-with-empty-body. Callers already null-check the org, so both the pro...
Ruhusu mtumiaji wa mfumo kutatua mfumo wowote uliotumika wa org
Lango la msalaba lilirudi 403 wakati orgId! = kikao org na mpiga simu Hakukuwa na mgombea wa urais katika chama hicho. Watumiaji wa mfumo wa uendeshaji wa jukwa...
Kuacha makosa ya kuchochea mafuriko ya console
- org/[id] proxy: backend returns 200 with an empty body for null orgs; response.json() threw 'Unexpected end of JSON input' -> spurious 500. Parse defensiv...
Resolve org tab title in generateMetadata to stop title flip
Static metadata.title rendered 'Kamo' server-side; Next re-asserted it after hydration, overriding DynamicMetaLoader's client update and flipping the tab back f...
Kushikilia safu mpaka mimi mwenyewe ID ya wanachama
ag-grid inatoa rowData chini ya upakiaji overlay, hivyo gating tu Upakiaji wa kupakia bado uliangaza njia zote wakati GetMemberId () ilikuwa 0. hoi hoi ya hoi B...
Default filter to Myself on load, hide market bar for single market, relocate toolbar
- Default agentFilter to __MYSELF__ at init + gate grid on userInfo load so it no longer flashes All Leads - Single market: auto-select it and hide the market-t...
URI-encode WOPISrc + uaminifu majeshi yote ya api. * WOPI (multi-tenant)
Opening a doc for a non-kamocrm tenant failed with 'unauthorized WOPI host'. Docs's alias_groups only trusted api.kamocrm.com (the Docs-deployment env hardcoded...
Je, unaona nini kuhusu usafiri?
Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.