Release Notes

v0.18.10 — WhatsApp billing insights

v0.18.11 — Meta Marketing API setup docs

v0.18.8 — Insights: channels, conversation sources & Meta campaigns

v0.18.9 — WhatsApp Business Messaging CAPI

v0.18.3 — Inbox context stays put

v0.18.4 — Webhook workflows dry-run bridge

v0.18.5 — Draft with me status hardening

v0.18.6 — Realtime listener self-heal & connection-pool hardening

v0.18.7 — UDB travel context enrichment

v0.16.86 — Client travel context in inbox & draft-with-me

v0.16.87 — Travel context import tool

v0.18.1 — Workflows landing surface

v0.18.2 — Workflows data foundation

v0.16.82 — Attribution RLS hardening and webhook reprocessing

v0.16.83 — GB-Agent active inquiry context

v0.16.84 — Meta label for link-only referrals

v0.16.85 — Migration hygiene

v0.16.76 — WhatsApp formatting and reaction picker

v0.16.70

Renders inbound WhatsApp interactive button and list replies as structured inbox chips with realtime and cache coverage.

v0.16.71

Prevents inbox 500s when filtering large conversation lists by labels or assignees.

v0.16.68

Fixes missing mobile inbox translations that could trigger Italian /inbox hydration errors.

v0.16.59

Inbox conversation list now scales past 250 with keyset pagination, search spans name + chat text + email + phone, and send-side bubbles are translucent emerald again.

v0.16.56

Hardens outbound inbox bubbles so sent messages keep visible theme-token styling.

v0.16.57

Restores Meta campaign attribution cards in virtualized inbox threads.

v0.16.58

Hardens inbox thread hydration after message virtualization.

v0.16.52

Memoizes inbox message bubbles to reduce row render fan-out.

v0.16.53

Adds safe inbox timing instrumentation for long-frame diagnosis.

v0.16.54

Virtualizes the desktop inbox message history.

v0.16.50

Restores the inbox thread view by moving Vercel Analytics behind a client boundary.

v0.16.49

Repairs Railway-hosted GB-Agent connector connection tests.

v0.16.46

Adds per-campaign automation for negative WhatsApp button replies.

v0.16.47

Improves inbox responsiveness on long message threads.

v0.16.48

Defers Fingerprint identification until browser idle.

v0.16.40

Adds the immutable template version foundation for future WhatsApp template performance analytics.

v0.16.41

Improves inbox timeline scanning and restores image-header visibility for outbound WhatsApp templates.

v0.16.42

Preserves Meta template lifecycle history and drift events against immutable template versions.

v0.16.43

Attributes outbound template sends to immutable template versions.

v0.16.44

Adds template version performance rollups and a Templates Performance surface.

v0.16.45

Fixes blank outbound campaign bubbles for templates whose Meta body lives only in component JSON.

v0.16.39

Reduces CSP report-only noise by aligning Nosecone with the app enforcement policy.

v0.16.38

Improves billing setup UX with Stripe return banners and fresh-workspace defaults.

v0.16.30

Adds the GB-Agent settings API and Settings → Integrations → GB-Agent admin UI.

v0.16.31

Enforces GB-Agent workspace/mode/user access gates in the inbox trigger and draft review paths.

v0.16.32

BORD-720 hardens canonical Meta phone-number identity routing with Option B constraints and sync guards.

v0.16.33

Meta webhook redeliveries now treat duplicate process-webhook outbox jobs as idempotent success.

v0.16.34

BORD-721 introduces additive idempotency_key compatibility for legacy dedupe-key tables.

v0.16.36

BORD-722 adds event hot-path indexes and documents analytics/LLM coverage.

v0.16.37

BORD-723 documents canonical soft-delete and archive semantics.

v0.16.12

Adds the first generic connector contract layer for draft-only external agents such as gb-agent.

v0.16.14

Persists draft-only connector run outcomes for external agents such as gb-agent.

v0.16.15

Add validated phone and email format constraints for clean DB fields.

v0.16.16

Adds workspace-scoped gb-agent connector settings and safe test connection support.

v0.16.17

Constrain broadcast outbox status values at the database layer.

v0.16.18

Adds the worker runtime for draft-only gb-agent connector calls.

v0.16.19

Add targeted DB indexes for hot message, webhook, and responder-run paths.

v0.16.20

Denormalize workspace scope onto campaign MM metrics.

v0.16.21

Adds the inbox trigger route for draft-only gb-agent connector runs.

v0.16.22

Moves the gb-agent enqueue release marker onto a fresh post-merge patch version.

v0.16.23

Prevents app proxy auth checks from timing out unprotected API routes.

v0.16.24

Defense-in-depth fixes for the Supabase pool incident — bounded auth timeouts and Meta retry-on-503 webhooks.

v0.16.25

Bounded worker dispatch concurrency and thicker realtime payloads so two operators no longer double-answer the same chat.

v0.16.26

gb-agent connector human_review drafts now render a review-only handoff preview card in the inbox, and Meta post referrals now surface as operator-visible Meta attribution.

v0.16.27

conversation-label link rows now carry a direct workspace_id with parent-match constraints and trigger validation.

v0.16.28

Adds a manual gb-agent inbox trigger that queues draft-only connector runs from a selected chat.

v0.16.29

Adds the GB-Agent workspace settings and per-user access foundation without enabling the settings UI yet.

v0.16.09

Add the live Supabase DB hardening discovery baseline.

v0.16.10

Add the RLS and tenant-policy audit for the DB hardening sweep.

v0.16.11

Keep selected inbox thread history loading independent from the cache kill switch.

v0.16.13

Enforce tenant resolution for stored webhook events.

v0.16.06

Operator-only campaign client context lands in the inbox bio pane — resort, target dates, gross price quoted, family, last reservations, and a host-validated Travio pratica link.

v0.16.07

Harden the GB/Travio inbox context rollout to practice-ID links only, behind a server-side GB workspace gate.

v0.16.08

Add an ID-only Travio practice-link importer for identity-expansion output.

v0.16.04

Harden the public launch path with enforced secret scanning, fail-closed compatibility webhook auth, safer token handling, current repo metadata, and a Next.js advisory patch.

v0.16.05

Require explicit shared-secret headers on legacy compatibility contact and journey-trigger routes before they can touch default workspace data.

v0.16.02

Make inbox assignment feel instant and stable with additive toggle/unassign behavior, background roster refresh, and explicit remove-assignee intent wiring.

v0.16.03

Polish the inbox assignment dropdown with i18n-backed status copy, persistent trigger feedback, explicit remove/undo affordances, and lower request chatter.

v0.15.67

Keep the app inbox loading on older mobile Safari and iOS WebViews.

v0.15.68

Make inbox assignment interactions instant with optimistic updates, coalescing, and inline feedback.

v0.16.01

Start the native Android/iOS mobile MVP with an Expo skeleton, safe config diagnostics, and tested operator-inbox scaffolding.

v0.15.54

Meta click-to-WhatsApp attribution becomes first-class in the inbox and insights.

v0.15.55

Established WhatsApp workspaces can get back to the inbox even when historical onboarding completion state is stale.

v0.15.56

Meta ad-to-WhatsApp inbound conversations keep their freeform reply window.

v0.15.57

WhatsApp service-window badges and send eligibility honor future close timestamps even when the stored state is stale.

v0.15.58

Inbox conversations can be flagged for review, highlighted in purple, and closed by assigned operators with a required internal note.

v0.15.59

Campaign opt-out replies now preserve the friendly acknowledgement before archiving, and campaign launches can require rendered-body sanity checks.

v0.15.60

Click-to-WhatsApp ad attribution is fully hardened — every CTWA conversation gets the meta label, a worker enriches the conversation with Meta Ads campaign/adset/ad/creative names, and an operator-only orange info card above the chat pane shows the full ad context.

v0.15.62

Adversarial review fixes for the CTWA ad attribution rollout — Meta access tokens now travel in the Authorization header, Graph error classification is JSON-parsed, and CTWA image URLs are allowlisted against Meta's CDN at write and render time.

v0.15.64

The orange CTWA ad attribution card no longer disappears after a conversation is read.

v0.15.66

Tighten the CTWA attribution hot path — inbound-only enforcement and cheap gating for non-CTWA conversations.

Flow-response cards and warmer Italian replies

The inbox now shows completed WhatsApp Flow answers as orange question/response cards and customer-response prompts steer drafts toward casual Italian WhatsApp copy.

Meta usage monitoring and group conversation foundations

Settings now exposes Meta WhatsApp usage and estimated delivered-template costs, and the inbox adds the first Groups-only conversation filter for internal team group testing.

Conversation handoff links

Operators can copy a direct inbox conversation link from the actions menu and share it with teammates in the same workspace.

Futura qualification Flow routing

Futura campaign replies can now route positive WhatsApp button taps into a qualification Flow, with visible-title fallbacks and a per-campaign kill switch.

Inbox Flow response bubbles

Operators can see completed WhatsApp Flow submissions as structured temporary bubbles in the inbox.

Safer Flow response bubble backfill

WhatsApp Flow response bubbles now use centralized redaction and QA completions created before deploy can render in the inbox.

Realtime deploy notifications in the inbox

Operators now receive an in-app toast and persistent banner when a new Switchbord build goes live, so nobody stays stuck on a stale bundle after a release.

Audio transcription re-landed + outbox hardening

Voice-message transcription is back, with the underlying ESM fix that caused the v0.15.38 rollback. Worker outbox now self-heals from crashed leases and no longer starves operator sends behind webhook backlogs.

Hardened draft review and idempotency

Campaign responder drafts are now concurrency-safe, with DB-level unique indexes, claim-safe accept, and canonical reject.

Journey handoff nodes now escalate to human operators

Journey handoff nodes set needs_human on the conversation and guard the AI auto-reply path.

Deterministic Futura campaign reply classifier

Pure classifier resolves opt-out, nurture, and booking signals before LLM invocation.

Futura campaign responder AI executor

LLM execution layer for Futura campaign replies — schema-validated, draft-only, opt-out short-circuit.

Manual Futura campaign responder pilot runner

Operator CLI script for running the Futura draft responder pilot — dry-run by default, workspace-scoped, audit-logged.

Campaign read metrics from WhatsApp read receipts

Campaign performance read rates now reflect outbound WhatsApp provider read receipts instead of inbound replies.

AI draft metadata in inbox review card

Route badge, intent, confidence, qualification signals, and reject-with-reason now visible in the draft review card.

Outbox channel propagation release

Release-train bump after channel ID propagation across automation jobs.

Template WABA ownership validation

Template-send paths now validate that selected channels belong to the WABA that owns the template.

Inbox/auth/operator UX polish

Inbox background, auth completion, desktop notifications, assignment picker, internal notes, and nav polish.

Notification opt-in and inbox visual polish

Makes Chrome desktop notification permission explicit in the inbox, records local browser consent, and tightens chat/sidebar visual polish.

Notification preferences, diagnostics, and test coverage

Server-syncs sound and visual notification preferences, adds a diagnostics panel to user settings, and ships 31 new tests for the browser notification layer.

Italian translation push

Translates 258 previously untranslated strings in the Italian locale file across all operator app surfaces.

Release bump to v0.15.25

Version bump following Italian translation push and notification stack improvements.

Inbox conversation filters

Adds server-backed inbox filtering by conversation labels and assigned operators.

Supabase Auth Email via Resend

Routes Supabase Auth email through Resend, adds branded TokenHash templates, and preserves App Router auth redirects.

Inbox selected-thread hydration patch

Ensures selected inbox conversations hydrate their full thread after the optimized list payload returns only the latest message preview.

v0.15.10 — Transactional webhook integration docs

Adds API reference and integration guides for transactional template sends, receipt links, PDF receipts, and inbound webhook dry-run rollout.

v0.15.12 — Canonical inbox conversation tags

Fixes inbox label state leakage, hydrates conversations from normalized label tables, adds server-side label filters, and lets campaigns tag conversations explicitly.

Inbox realtime hardening release train

Aligns the release train baseline for scoped WhatsApp realtime inbox hardening.

Inbox realtime performance patch

Ships scoped WhatsApp webhook broadcasts and immediate operator inbox realtime materialization.

Inbox private realtime delivery hotfix

Restores live inbox message materialization by aligning server broadcasts with private Supabase Realtime channels.

Inbox realtime pipeline consolidation

Eliminates message-disappearance race conditions and simplifies the realtime transport to a single broadcast path with Dexie cache enabled by default.

Transactional Template API and Webhooks

Adds utility-first transactional template sends, receipt templates, and the inbound webhook configurator foundation.

v0.15.5 — HMAC-only inbound webhook authentication

v0.15.8 — Guided webhook mapping builder

Adds a guided Settings builder for inbound transactional webhooks, including Utility template requirements, sample-payload preview, and safe mapping validation.

Inbox Local Cache Foundation

Adds the first foundation for cached-first inbox history: architecture plan, message delta API, and browser-safe local cache primitives.

Sidebar-09 Navigation Refresh

Operator sidebar now follows the sidebar-09 navigation pattern with in-rail search, collapsible filtering behavior, and localized empty/search states.

Draft-Only Campaign Responder Foundation

Adds structured responder output, campaign inbound attribution, and a draft-only finalizer for operator-reviewed campaign replies.

Inbox Long-Thread Refresh Fix

Selected inbox conversations now refresh by id instead of filtering the first inbox page, preserving full message history for long threads.

Worker outbox latency hotfix

Restores the Railway worker's low-latency outbox path after operator sends queued behind webhook-status bursts.

MSN-Style Inbox Pop-Up Notifications

Eligible inbound WhatsApp messages can now show an old-school bottom-right pop-up when Switchbord is minimized or in another tab.

Explicit Assignment Intent Safety

Conversation assignment updates now require explicit assign or unassign intent so ambiguous payloads cannot clear ownership.

Internationalization Runtime Hardening

Locale runtime wiring for marketing, Languine coverage for web bundles, app locale allowlist fixes, and a documented docs-localization workflow.

Futura Campaigns v1 & Launch Readiness

Futura campaign release: typed segmentation, recipient materialization, personalized template dispatch, safe launch flow, reconciliation, and runbook/compliance artifacts.

Alpha UX Polish & Agent Drafts

Alpha UX polish release: inbound agent drafts, first-run onboarding, inbox density, design tokens, and landing-page presentation improvements.

Builder, Journey Editor & Public Changelog

Builder release: template renderer/builder, graphical journey editor, command palette, public changelog route, footer expansion, docs strip, and GitHub social proof.

Webhook Operations & Audit Hardening

Webhook and operations release: account alerts, audit visibility, multi-tenant verification fixes, and channel validation repairs.

Security & Multi-tenancy Foundation

Security and workspace-scoping release: auth guardrails, workspace threading, PII redaction, GDPR retention, asset storage, and v25 Meta API alignment.