Changelog
What's new
Every notable change, most recent first.
Current
Production hardening
- Fixed a boolean-coercion bug where toggling a webhook off could be miscast to on.
- Webhooks no longer expose their signing secret after creation — it's shown exactly once.
- Closed an SSRF redirect bypass in the website crawler.
- Atomic usage-counter writes, removing a race condition under concurrent requests.
- Composite indexes for AI usage logs and message history — faster analytics queries.
Phase 5
SaaS platform, monetization & administration
- Super admin dashboard, user management, plans, and subscriptions.
- Teams, API key rotation, outgoing webhooks, analytics, notifications.
- White-label branding and plan-based feature gating.
Phase 4
AI provider integration
- Retrieval-augmented generation pipeline with Google Gemini.
- Streaming responses, regenerate, stop-generation, and suggested questions.
- Prompt-injection defenses and AI-specific rate limiting.
Phase 3
Core chatbot domain
- Bots, knowledge sources, document extraction, website crawler.
- Conversations, messages, widgets, leads, and API keys.
Phase 2
Authentication & access control
- JWT auth with refresh tokens, account lockout, and role-based access control.