v0.16.82 — Attribution RLS hardening and webhook reprocessing
Security
Click-to-WhatsApp attribution records are now read-only for workspace members. Attribution rows are written exclusively by trusted server-side processing, closing a gap where any signed-in team member could edit or delete a conversation's ad/referral attribution directly.
Behind the scenes
Recovered Meta "referral conversion" attribution and the meta conversation label for threads that arrived from a Meta entry point where Meta omitted the inline ad details on the first message.
Added an internal tool to safely re-derive a conversation's attribution, consent, and routing from its original stored WhatsApp webhook — without re-contacting Meta and without ever duplicating messages in the inbox.