Changelog

A dated public changelog, a documented release process, feature flags for every risky surface, and an error pipeline that captures what users actually hit.

• AddedPublic changelog with dated release notes, breaking-change flags and an RSS feed
• AddedFeature-flag registry so any risky surface can be switched off without a code release
• AddedClient error reporting with sanitized payloads, de-duplication and per-IP rate limiting
• AddedLoading skeletons for every authenticated module and retryable route-level error boundaries
• AddedScheduled trial lifecycle jobs: expiry processing and trial-ending, expiry and win-back emails
• ChangedTrial and licence state now reconciles from server entitlements, with the browser cache only as an offline fallback
• ChangedRelease notes published bilingually in Thai and English
• FixedTrial expiry could previously drift from server state when a device changed or the clock was wrong

Every release now passes an automated quality pipeline: lint, types, unit tests, translation coverage, and SEO/accessibility/performance audits.

• AddedAutomated test suite covering security headers, redirects, i18n parity and money formatting
• AddedAutomated SEO, accessibility and performance audits with pass/fail gates
• AddedCI pipeline that builds, boots the production server and runs every check against it
• AddedPublic engineering page documenting stack, security posture and operations
• AddedSkip link, page landmarks, labelled form controls and AA-compliant colour contrast across the site
• FixedBilingual coverage for interface copy that was silently missing Thai translations

The entire public site now switches between Thai and English, with dates, numbers and currencies formatted per locale.

• AddedThai and English language switch with live document language updates for screen readers
• AddedThai date rendering including Buddhist-era years
• AddedCurrency display in USD and THB with a single conversion-rate source
• ChangedInterface copy moved to one dictionary so translations cannot drift per page

Hardened the public surface with enforcing headers, strict redirect governance and stronger cookie consent.

• SecurityEnforcing Content-Security-Policy, HSTS, frame denial, referrer and permissions policies
• SecurityCanonical-host redirects: one host, one path per page, legacy campaign parameters dropped
• SecurityRate limiting and validation on all public forms
• AddedCookie consent banner with per-category choices

Plan-based feature and limit control, enforced server-side through the database.

• AddedPlan catalogue with per-feature entitlements and resource limits
• AddedOrganisation isolation via row-level security across all tenant tables
• AddedAnnual licence activation with server-side key validation
• FixedFeature checks now resolve from entitlements instead of hard-coded plan names

Transactional document generation and the financial reporting suite.

• AddedInvoice, quotation, appraisal and memo PDF generation with company branding
• AddedProfit and loss, margins and supplier payables reporting
• AddedInventory aging and replenishment alerts
• ChangedReports respect organisation scope and row-level security

Customers gained self-service access; business email moved into the platform.

• AddedCustomer portal for browsing available stones and tracking orders
• AddedIn-app mailbox with per-user SMTP accounts, threads and CRM linking
• AddedTransactional registration and contact email through a dedicated edge function
• FixedAttachment handling for invoices and quotations in the mailbox

The diamond merchant platform goes live: inventory, CRM, sales, purchasing and memos in one system.

• AddedDiamond inventory with 4C attributes, QR labels and certificate linking
• AddedCRM for customers and suppliers with wishlists and ratings
• AddedSales, purchases, memos and holds with full transaction history
• AddedUser management with role-based access control and audit logging