What's new

Global search (⌘K) now covers Expenses, Time Entries, Work Log entries, and File Folders — search across every module in one place

Search results for Files now link directly to the folder the file lives in

Command palette now includes 'My Work' in the quick-navigation list

Landing page redesigned for freelancers, consultants, and small agencies — 'replaces X tools' comparison, lifecycle flow callout, and persona section

My Work page: section headers are now consistent — all have icons and chevrons aligned to the right

Files: real-time SSE updates now cover trash, restore, move, star, folder create/delete/move, and all bulk operations — changes from other sessions appear instantly

Files: clicking a search result or file now navigates to the correct folder, not just the root

Upload-to-folder bug fixed — files no longer land at the root level when uploaded into a subfolder

File storage quota bar now reads the per-org quota from the database instead of a global env var

Move file/folder now validates that the target belongs to the same org, preventing cross-org data moves

Proposals module — rich-text builder with line-item pricing, e-signature, and public share link; signing auto-creates the contract, project, and draft invoice

Client Portal — give clients their own login to view invoices, approve estimates, sign contracts, download files, and pay online via Stripe

Calendar module (free) — unified view of tasks, time entries, sprints, and calendar events; month, week, and day views; subscribe via WebCal or connect Google Calendar

Work Log / Portfolio — log achievements, certifications, client wins, and impact metrics; timeline view with category filters

TOTP two-factor authentication backup codes — 8 one-time codes generated on 2FA setup; 'Use backup code' toggle on the login page

Webhook secret encryption — all webhook secrets stored with AES-256-GCM; startup migration re-encrypts any legacy plaintext secrets

SMTP passwords encrypted at rest with AES-256-GCM — forms never pre-fill the password, decryption happens only at send time

DeWilco staff permission system — three roles (super_admin, staff_admin, support) with role-ranked access to admin pages

Admin monitoring suite — system health panel, recent signups table, system announcements, cross-org audit log, and email delivery log

File share folders can now be scoped to a specific client portal account, preventing cross-client file enumeration

Impersonation actions (start/stop) are now written to the audit log

Per-org file storage quota and max file size overrides in admin panel

Stripe billing hardened — host-header injection prevention, webhook idempotency via processed event table

bcrypt cost factor raised to 13 across signup, password reset, invite accept, and portal setup

Portal JWT issuer validation — portal sessions can no longer be used to access the main app

MIME type bypass fix — file uploads with missing Content-Type are now treated as octet-stream instead of being allowed through

Staff role now preserved through email verification and OAuth login flows

Bulk actions on Invoices, Estimates, Expenses, Contacts, and Companies — select rows and delete or change status in one click

Automated SQLite backup system with configurable frequency and retention — download backups from Admin Panel

Pagination on all major tables: invoices, estimates, expenses, CRM contacts & companies, contracts

API Keys — generate org-scoped API keys for REST integrations

Two-factor authentication (TOTP) via authenticator apps

OAuth login via Google and GitHub

Loading skeleton screens on all main sections for instant perceived performance

Email templates redesigned with brand colors, logo avatar, and professional table layout

CRM pipeline drag-and-drop with pointer and keyboard sensor support

Sprint date pickers added to the create sprint dialog

Mobile sidebar with hamburger menu

Dashboard currency now follows your finance settings

Global search now includes files and chat messages

Onboarding checklist shown on dashboard until all steps are complete

Sprint dates no longer shift by a day in negative UTC-offset timezones

Company settings no longer shows another org's data in multi-tenant setups

Unsaved changes warning added to invoice editor

New Files module — upload, organise, and share files within your workspace

Nested folders with breadcrumb navigation

Star files for quick access via the Starred view

Trash & restore — soft-delete files or folders, then restore or permanently delete them

Shareable public links — generate a share token for any file; revoke at any time

Image preview dialog and PDF inline viewer

Drag-and-drop upload zone with 50 MB limit per file

Grid and list view modes with sort by name, date, or size

Full multi-tenant architecture — each organisation gets an isolated workspace

Self-serve signup — new orgs can register without admin intervention

Stripe billing — subscribe per-module; upgrade or cancel from Settings → Billing

Super-admin panel — view all organisations, grant or revoke module access, impersonate orgs

Org impersonation — super-admins can view the app as any organisation

Email verification flow on signup

Audit log now scoped per organisation

Mail module — read, compose, and reply to email directly inside the app via IMAP/SMTP

CRM module — contacts, companies, and deals pipeline

In-app notification bell with real-time updates

Email notifications for tasks, sprint deadlines, and chat mentions

SMTP configuration in Settings — works with Gmail, Zoho, SendGrid, or any provider

Expense receipts — attach images or PDFs directly to expenses

Contracts module with digital signing workflow

Finance module — invoices, estimates, and expense tracking with PDF print support

Time Tracking module — log hours against projects and clients; export to CSV

Invoice email — send invoices directly to clients from the app

Overdue invoice detection and automatic status updates

Finance reports — revenue, expenses, and profitability charts

Multi-currency support — configure your default currency in Finance Settings

Kanban board with drag-and-drop task management

Sprint backlog with story points and progress tracking

Real-time chat with channels, mentions, and file attachments

Dark mode support

Command palette (⌘K) for quick navigation

Role-based access control — admin and member roles