Changelog

Major update. This release completes and hardens the Mobile Connect companion apps (reliability, security, observability and a new diagnostics panel), adds real push notifications, geofence proximity alerts and an AI dispatch copilot, and closes a large batch of permission-enforcement and UI findings from a structured security and QA audit. It also fixes shared-hosting deployments where the application lives outside the web root, and completes field labels for validation messages in all sixteen languages. Updating promptly is recommended for all installations.

Security

• Permission enforcement on reports. The Reports module now enforces reports.financial.view on every route and export, matching the permission the navigation menu has always used.
• Permission enforcement on shipment actions. Registering a manual payment, archiving, unarchiving and cloning now require the corresponding shipment permission.
• Record-level visibility. Shipment details, labels, payment receipts, attachments, pre-alerts and pickups now apply the same ownership rules that already governed their list views. Drivers reach only records on a manifest assigned to them.
• Scoped global search. Each of the six result sections now requires the permission that governs the screen its result links to, so search results match what the user is allowed to open — closing a case where global search returned records a page itself would have denied.
• Locker settings. Now governed by lockers.view and lockers.manage, the permissions already listed in this documentation.
• Payment webhooks. Failures are now logged with context and answered with a retryable status so the gateway re-delivers. Stripe signature verification is required whenever a webhook secret is configured.
• Menu-to-permission coherence. A full audit matched every sidebar item and action button against the permission that actually guards its route, closing several cases where a control was visible to a role but returned a 403 on click.
• Full security and quality audit. A structured internal audit and a module-by-module automated pass (Playwright) closed 22 additional findings across permissions, data scoping and UI consistency.

Mobile Connect & Mobile API

• App branding from the panel. The buyer can now configure the companion app's branding directly from Settings → Mobile Connect, instead of it being fixed at build time.
• Real push notifications. Push delivery to driver and customer devices is now wired end-to-end, including a proximity/geofence alert sent to the recipient as the driver approaches.
• AI dispatch copilot. A conversational assistant for dispatch is available from the mobile app; the underlying call now goes through Laravel's own HTTP client instead of a third-party AI SDK dependency, and all of its interface strings are translated across all supported languages.
• API contract compatibility net. A dedicated compatibility layer protects older installed app versions from breaking when the API evolves.
• Connection reliability invariants. Hardened retry, idempotency and offline-queue behavior so a dropped connection in the field no longer produces duplicated or lost operations.
• Security invariants and report. A dedicated security pass over the mobile API surface, with a documented report of what is enforced and how.
• Mobile configuration governance. Centralized, auditable control over the mobile app's runtime configuration (feature flags and operational limits) from the admin panel — a dedicated screen now lists every one of these behavior settings in one place.
• Observability and diagnostics panel. New admin screens surface mobile API health, and an inbox now collects failure/crash reports sent by the app so support can see what broke in the field and who is watching it.
• Configurable proof-of-delivery photo size. Maximum POD photo size is now a setting (10 MB by default) instead of a fixed limit.
• Device management. The device list in Settings → Mobile Connect is now paginated, and the enrollment code can be exported.
• Web/mobile parity. The web shipment detail now displays the proof-of-delivery captured from the mobile app, closing a gap where it was only visible in the app itself.
• Repeatable test/demo queue. The operations dashboard used to validate delivery queues now resets itself automatically instead of running out of demo deliverables.

Fixed

• Driver GPS tracking in the browser. The Permissions-Policy header now allows geolocation=(self), so the driver dashboard can report position to the dispatch map. Third-party frames remain blocked.
• Redirects on plain-HTTP installations. upgrade-insecure-requests is now sent only when the request is already secure or APP_URL declares HTTPS — the same criterion HSTS uses. Installations served over HTTP no longer lose redirects.
• Application outside the web root on shared hosting. A new APP_PUBLIC_PATH setting lets the app live outside public_html without breaking asset URLs, the updater or plugins, for hosts that don't allow symlinks.
• Landing page design settings. The public landing page now actually reflects the design choices made in Settings → Landing Page (client-reported).
• Customer creation without a province. Optional province and city fields are now stored correctly when left empty.
• Return from a payment gateway. Stripe and PayPal returns now land on the billing dashboard with an explicit confirmation, and a distinct message when the charge could not be finalised.
• Warehouse scanner feedback. The scan confirmation tone is now generated locally instead of loading an external audio file, so it works offline and under strict content security policies.
• Custom scrollbar styling. Corrected colour declarations that browsers were discarding.
• PDF export size. Font subsetting reduces exported reports by 93–98%.
• Settings menu scroll. The collapsed-sidebar Settings flyout and its long menu now scroll correctly instead of clipping.
• Dropdown scroll. Select menus with many options now scroll instead of overflowing the screen (invalid max-height).
• Table shadows. Fixed inverted scroll-shadow layering that left a stray shadow on wide tables.
• Pickups print button. The print action no longer shows a raw translation key instead of its label.
• Dispatch map. Fixed flicker and lost zoom/popup state across all three map views used in dispatch.
• Completing a pickup. A failed completion no longer silently discards the form; the actual error is now shown.
• Floating chat on the tracking page. The widget no longer appears on the public tracking page when it has been disabled in settings.
• Live tracking status labels. Fixed a case where a raw, untranslated status code could reach the public tracking screen.
• Editing rules by payment/delivery status. Shipment edit rules now follow the same status-based restrictions used by mainstream couriers and ERPs (e.g. locking financial fields once paid or delivered).

Interface and translations

• Validation field labels, complete in all sixteen languages. All 476 form fields now have a translated label, so validation messages read consistently with the form labels above them.
• Shipment status labels. Statuses now display their translated name in the shipment detail, the reports table, the PDF report and the live tracking channel, while custom statuses keep the name you gave them.
• New shipment wizard. Required fields are highlighted after the first attempt to continue rather than on load, and the step now explains what is missing.
• Wide tables. A scroll indicator makes it clear when an Actions column continues beyond the visible area.
• Touch targets. The row-selection checkbox now meets the recommended minimum touch size without changing its appearance.
• Demo data. Sample shipments now use city, address and phone consistent with their country.

Stable release: Plugin Standard v2 with cryptographically signed marketplace packages and per-organization licensing, Mobile Connect layer for the companion apps, fully wired branding controls (notification style & position, sidebar order & compact mode), one-click updater repaired, India localization, complete multi-currency support, full white-label compliance, Google Places address autocomplete, driver manifest downloads, and a comprehensive i18n audit across the entire platform.

Plugin Standard v2 & Marketplace Security

• Signed packages: Every marketplace plugin is now verified with an Ed25519 origin signature plus an HMAC integrity checksum before a single file is extracted. Tampered or unsigned packages are rejected with a clear error.
• Destination whitelist: Plugins can only write inside their own directories (app/Plugins/<Slug>, lang/vendor/<slug>, plugin assets and storage). A package touching core files rejects the whole ZIP.
• Migration safety: Plugin migrations must be tenant-scoped and may only alter their own declared tables; raw ALTER statements are forbidden. A failed migration triggers a full automatic revert — files, tables, permissions and registry row are all rolled back.
• Preview before install: Validate any package and see exactly what it will do (files, tables, permissions, menus) before confirming, with shared-hosting environment prechecks and an emergency kill switch.
• Per-organization licensing: Installed plugins can be enabled or disabled per organization from Settings → Plugins. Fresh installs keep premium features locked until purchased at code-market.shop; existing customers are grandfathered automatically.
• Developer kit: php artisan plugin:make scaffolds a compliant plugin from a working template and php artisan plugin:validate checks it with the exact installer criteria (CI-friendly exit codes). Full standard published in the developer guide.

Mobile Connect (Companion Apps)

• Mobile API layer: New versioned API under /api/mobile/v1 powering the Driver, Employee, Admin and Customer companion apps, with the organization always derived server-side for strict tenant isolation.
• Device management panel: Settings → Mobile Connect lets you approve device registrations by QR or auto-code, revoke devices, and publish minimum app versions.

Branding & UI Controls (fully wired)

• Notification style: Choose how system alerts appear — corner toast, full-width banner, or centered modal — plus position, duration, grouping style and maximum visible count. Every knob now takes effect immediately.
• Sidebar section order: Reorder the side menu sections (Main, Logistics, Finance…) from Settings → Branding with one-click restore of the default order.
• Compact sidebar default: The "collapsed by default" setting now applies correctly, while still respecting each user's manual toggle.
• Sidebar identity rules: Without a logo the company name is shown (initial when collapsed); with icon + logo both are used in their proper places.

System Updater

• Apply Update repaired: The one-click updater is wired to the real update engine again (automatic backup → security scan → file install → migrations) and reports progress and errors properly.
• Reliable confirmations: Update and license dialogs no longer depend on native browser popups, which some browsers silently suppress.
• Shared hosting support: New APP_PUBLIC_PATH option for installations where Laravel lives outside public_html. Updates and plugins deliver frontend assets to the real web root automatically — no more copying the build by hand. See Requirements & Installation.

Landing Page — Design Settings Fully Wired

• Body Text Color works everywhere: all section headings and body copy across the landing (About, Services, How It Works, Features, Tracking, Calculator, Business, Customers, Testimonials, FAQ) now follow the dashboard's Body Text Color instead of hardcoded grays.
• Hero Text Color respected: the hero subtitle, stats and trust badges — plus every dark section (How It Works, featured testimonial, footer) — now follow Hero Text Color, so custom color palettes stay legible.
• Regression guard: an automated test now fails the build if a landing element reintroduces hardcoded text colors.

India Localization & Multi-Currency

• India (IN) added: Country, 8 states (Maharashtra, Delhi, Karnataka, Tamil Nadu, Gujarat, West Bengal, Uttar Pradesh, Rajasthan), and 40+ cities pre-seeded in LocationsSeeder.
• INR currency support: Indian Rupee (₹) now displays correctly across all pages when configured as default currency.
• Hardcoded "$" eliminated: All 25+ frontend files and 2 PDF templates now use formatCurrency() helper that respects the organization's configured currency.
• Customer validation relaxed: state_id and city_id are now nullable in customer forms, allowing countries without pre-loaded states/cities to work correctly.
• Currency search live: The currency management table in Settings → Region & Formats now filters client-side instantly without page reloads.

White-Label Compliance

• Full white-label: All hardcoded "Deprixa" references (20+ files) replaced with config('app.name') / VITE_APP_NAME. Includes login, installation wizard, PDFs, emails, notifications, payment gateways, and update notifications.
• Configurable branding: APP_NAME in .env now controls the brand name everywhere — login page, email footers, PDF invoices, test messages, PayPal checkout, and in-app notifications.
• i18n placeholders: Welcome messages and install wizard titles now use translatable {{app_name}} / :app_name placeholders instead of hardcoded text.

Address Autocomplete

• Google Places integration: New AddressAutocomplete component in the shipment creation wizard. When a Google Maps API key is configured (with Places API), address fields offer real-time autocomplete suggestions.
• Auto-fill: Selecting an address auto-populates country, state, city, and lat/lng coordinates.
• Progressive enhancement: Falls back to a standard text input when no API key is configured — zero impact on existing workflows.

Driver Manifest Download

• Driver self-service PDF: Drivers can now download their own manifest PDF from the driver dashboard via the "Download My Manifest" button.
• City filter: Manifests can be filtered by destination city using the ?city= query parameter.
• Accessible without warehouse permission: Route is available to all authenticated users (not restricted to warehouse staff).

i18n & Quality

• Spanish strings eliminated: All hardcoded Spanish error/success messages in controllers replaced with __() translation calls. Added 30+ keys to lang/en and lang/es.
• Notification bell: Badge repositioned to corner of button — no longer covers the bell icon.

Core platform hardening release: production security fixes, shipment state machine enforcement, dashboard data accuracy improvements, plugin system stabilization, performance optimizations, and expanded geo data coverage. Includes cleanup of the distribution package for a leaner install.

Security & Production Hardening

• Production defaults: APP_DEBUG=false enforced, X-Powered-By and Server headers removed for production environments.
• Shipment state machine: canTransition() validation enforced in ShipmentController and StatusResolver. Invalid transitions blocked with clear error messages. Terminal states (delivered/returned/cancelled) prevent all outbound transitions.
• Encrypted model fix: Integration, CarrierAccount, CarrierConfig, EcommerceStore, ConnectedAccount now handle both encrypted and plain-JSON values gracefully (prevents DecryptException on fresh installs).

Dashboard & Data Accuracy

• Dashboard real data: Fixed KPI queries to use status_id with org-scoped filters. No more placeholder counters.
• Shipment counters: IN MOTION and DELIVERED counters fixed with dual-query logic for accurate reporting.
• Shipment history: Status changes now stored as language-independent codes for correct multilingual display.

UX & Platform Improvements

• Scroll-to-top: Automatic scroll-to-top on page navigation (layout fix).
• Form validation: Consistency improvements with nullable rules for conditional fields across all modules.
• Payload reduction: Translations now loaded as Inertia lazy props for faster page loads.
• RBAC demo accounts: Seeder now creates demo accounts for Driver, Employee, and Customer roles.

Geo Data & Localization

• Portugal: 18 districts added with full geo data.
• Angola: Complete province geo data added.
• Map defaults: Default map center updated to Europe.
• Demo data: City/country mismatch in sample data corrected.

Plugin System & Marketplace

• Plugin architecture stabilized: Service provider registration, asset publishing, and route loading now work reliably with the plugin marketplace.
• Clean distribution: Distribution package streamlined for a leaner install. All premium plugins (Fleet Manager Pro, AI & Route Optimization, API Gateway, Shopify Connector, Contracts Pro) are now available exclusively through the official marketplace at code-market.shop.
• One-click install: Purchase plugins from the marketplace and install them directly from Settings → Plugins with a single click.

Major release: Complete SaaS multi-tenant billing engine, Paystack payment gateway, UltraMsg WhatsApp integration, Contracts & Commissions modules activated, public pricing page, 10-step onboarding checklist, subscription lifecycle with auto-renewal and grace periods, webhook security hardening, comprehensive audit logging, collapsible sidebar navigation, proration on plan changes, auto-reactivation after wallet recharge, GDPR notification opt-out, PDF invoice download, honeypot anti-bot protection, and full responsive design for all screen sizes.

Post-Audit Fixes (v1.4.0 Final)

• Collapsible sidebar: Navigation reorganized into expandable groups — Logistics, Customer Portal, Finance, SaaS Admin. Auto-collapses on screens < 1280px.
• Proration on plan change: When upgrading/downgrading, remaining days are credited back to wallet before switching plans.
• Auto-reactivation: Organizations in read-only or grace period are automatically reactivated when wallet balance becomes sufficient after recharge.
• GDPR notification opt-out: Customers can opt out of WhatsApp/email notifications via /notification-preferences.
• PDF SaaS invoices: Download invoices as PDF from /my-billing/invoices/{id}/pdf via DomPDF.
• Honeypot anti-bot: Hidden form field on registration to prevent automated signups.
• Email verification: Three controllers created — EmailVerificationPromptController, VerifyEmailController, EmailVerificationNotificationController with Inertia VerifyEmail page.
• WhatsApp actually sends: NotificationService::send() now reads rule channels and dispatches via queued Job with 3 retries. UltraMSG primary, Twilio fallback.
• Notification logging: All WhatsApp/SMS sends logged in notification_logs table via NotificationLog model.
• Template variables: 6 placeholders — {{tracking}}, {{status}}, {{name}}, {{sender}}, {{company}}, {{date}} — click-to-copy in editor.
• Expiring-soon alerts: Email + in-app notification at 7, 3, and 1 days before subscription expiration with deduplication.
• API keys encrypted: Stripe/PayPal/Paystack credentials encrypted with Crypt::encryptString() in database.
• Storage & API tracking: getStorageUsageGb() and trackApiCall() methods with daily cache counter.
• Responsive design: 16 table pages fixed with overflow-x-auto, sidebar auto-collapse, main content overflow protection.
• 80 database tables (added notifications table for Laravel DatabaseNotifications).
• Upgrade command: php artisan deprixa:upgrade — 6-step automated upgrade with maintenance mode.
• i18n complete: All hardcoded strings replaced with t() calls. 4,040+ keys in EN and ES.
• 137 PHPUnit tests — 100% passing.

SaaS Billing Engine (NEW)

• 5 subscription plans: Free ($0), Starter ($29/mo), Growth ($79/mo), Pro ($199/mo), Enterprise ($499/mo) with shipment/user/branch limits
• Wallet system: organizations recharge via Stripe, PayPal, or Paystack; system auto-debits on subscription renewal
• Subscription lifecycle: Trial → Active → Grace Period → Read Only with automatic transitions via saas:check-subscriptions daily cron
• Plan limit enforcement: SaasUsageService blocks shipment creation when monthly limit exceeded
• CheckSubscriptionStatus middleware: blocks write operations for read_only/suspended organizations while allowing billing access
• SaaS Admin Dashboard: revenue metrics, subscription overview, wallet management, invoice tracking at /admin/billing
• SaaS Invoices: auto-generated on recharge and renewal; types: subscription, recharge, adjustment, refund
• Notifications: email + in-app alerts on every subscription transition (renewed, grace period, read-only)
• Audit logging: all admin billing operations logged (create/toggle plan, credit/debit wallet, assign/cancel subscription, mark invoice paid)

Payment Gateways

• Paystack: full integration — initialize transaction, redirect to checkout, verify payment, webhook with HMAC SHA-512 signature verification
• Stripe: existing integration hardened — webhook signature verification confirmed
• PayPal: webhook payload validation added, idempotency by reference ID
• All three gateways create saas_invoice and saas_wallet_transaction automatically on successful payment

Notifications

• UltraMsg WhatsApp: new notification channel — alternative to Twilio for WhatsApp messages via UltraMsg API
• Pre-test validation: all channels (SMTP, Twilio, UltraMsg) now validate credentials before testing connection
• Channel configuration stored in notification_channels table with encrypted tokens

Roles & Permissions

• 102 permissions (up from 97): added saas.billing.admin, saas.plans.manage, saas.subscriptions.manage, saas.wallets.manage, saas.invoices.manage
• Customer role: added shipments.view (7 permissions total) — customers can now see their shipments
• Driver role: added pod.view, pod.create (11 permissions total) — drivers can capture proof of delivery
• Admin role: 98/102 permissions including all SaaS management

Modules & UX

• Contracts module: activated for Plus edition (was premium-only)
• Commissions module: activated for Plus edition (was premium-only)
• Public pricing page: responsive plan comparison at /pricing — landing page now redirects here
• Onboarding checklist: expanded from 4 to 10 steps — branch, employee, payment gateway, branding, first shipment, subscription plan
• SaaS sidebar section: 5 navigation items for admin billing management
• i18n: 4,008 keys in both EN and ES (100% parity)

Security

• Paystack webhook: HMAC SHA-512 signature verification
• PayPal webhook: payload validation and logging
• Subscription middleware prevents unauthorized data modification
• Migration fix: cleanup_orphaned_permissions no longer crashes on fresh install
• CSRF exception added for Paystack webhook endpoint

Database

• 79 tables (unchanged) — SaaS tables were already present
• 102 permissions in deprixa_lite.sql wizard
• 5 SaaS plans pre-seeded (Free, Starter, Growth, Pro, Enterprise)
• UltraMsg channel pre-configured (inactive) in notification_channels
• 137 PHPUnit tests — 100% passing

Automatic locker assignment on web registration, pre-alert numbering, staff notification, complete security: active CORS, hardened security headers (COOP, CORP, preload HSTS, object-src none), and Row Level Security completed on all models with organization_id.

v1.3.2 Highlights

• Registration at /register: customers of the main organization receive an automatic unique locker — the first registrant creates the organization (initial installation)
• Pre-alerts: human-readable number generated on creation (PA-YYYY-NNNNN, using DB ID — no race conditions)
• Staff notification (admin/employees) on new pre-alert received via broadcast()
• CORS enabled: config/cors.php created + HandleCors registered in web and API stacks
• Hardened security headers: COOP, CORP, X-Permitted-Cross-Domain-Policies, preload on HSTS, object-src 'none', worker-src
• RLS completed: BelongsToTenant added to CustomerContact and GeocodedAddress (the only models with organization_id that were missing)

Locker & Web Registration

• RegisteredUserController — branching logic: if organization exists, create customer + locker; if not, create org + admin
• Locker assigned via LockerCodeService::generate() — respects configured format (sequential or random) per organization
• Uniqueness guaranteed: service-level check + UNIQUE(organization_id, code) constraint in DB
• After registration the customer is redirected to /my-locker
• NOTE: The route /register/customer/{slug} keeps its behavior unchanged

Pre-Alerts

• New column pre_alerts.pre_alert_number (migration 2026_04_22_000001): VARCHAR(30) + composite index
• Number generated in PreAlertController::store() format PA-2026-00001 using $preAlert->id
• Field added to PreAlert::$fillable
• New listener NotifyStaffOnPreAlertCreated: notifies all staff via InAppNotificationService::broadcast() when a customer creates a pre-alert
• Registered in DomainEventServiceProvider as second listener of PreAlertCreated
• Language keys added in lang/es/pre_alerts.php and lang/en/pre_alerts.php: notification_staff_created_title and notification_staff_created_body

Security — CORS, Headers & RLS

• CORS (config/cors.php): paths api/* + sanctum/csrf-cookie; allowed_origins from CORS_ALLOWED_ORIGINS env or APP_URL; methods: GET/POST/PUT/PATCH/DELETE/OPTIONS; credentials: true; max_age: 7200s
• HandleCors registered in bootstrap/app.php: prepend in web stack and API stack
• New Security Headers:
  • X-Permitted-Cross-Domain-Policies: none — blocks Flash/Adobe crossdomain.xml
  • Cross-Origin-Opener-Policy: same-origin — isolates browsing context (Spectre mitigation)
  • Cross-Origin-Resource-Policy: same-origin — prevents other origins from embedding resources
  • Strict-Transport-Security: added preload (eligible for browser HSTS preload list)
  • Permissions-Policy: added usb=(), bluetooth=(), serial=(), hid=() (updated in v1.7.0)
  • CSP: added object-src 'none' (blocks plugins), worker-src 'self' blob: and upgrade-insecure-requests (updated in v1.7.0)
• RLS — Row Level Security completed: BelongsToTenant added to CustomerContact and GeocodedAddress. Total models with tenant scope: 34/34 (all with organization_id). Correctly excluded: Organization (is the tenant), User (special management), PersonalAccessToken, SaasPlan, City, Country, State, Currency (global data without tenant)

Modified Files

• app/Http/Controllers/Auth/RegisteredUserController.php — client/org-owner branching
• app/Http/Controllers/PreAlertController.php — generates pre_alert_number
• app/Models/PreAlert.php — pre_alert_number in fillable
• app/Models/CustomerContact.php — BelongsToTenant added
• app/Models/GeocodedAddress.php — BelongsToTenant added
• app/Listeners/NotifyStaffOnPreAlertCreated.php — new file
• app/Providers/DomainEventServiceProvider.php — staff listener registered
• app/Http/Middleware/SecurityHeaders.php — additional headers
• bootstrap/app.php — HandleCors in web and API
• config/cors.php — new file
• lang/es/pre_alerts.php and lang/en/pre_alerts.php — staff keys
• database/migrations/2026_04_22_000001_add_pre_alert_number_to_pre_alerts_table.php

Complete permission system overhaul — removed all premium/orphaned permissions, added all missing Plus module permissions (Pickups, Lockers, Pre-Alerts, Commissions, Contracts, Returns, COD, Locations, Import), hardened every module route with can: middleware, and corrected 9 nav visibility checks. Final state: 97 permissions, all belonging to Deprixa Plus (zero premium).

v1.3.1 Highlights

• 97 permissions in total — every permission belongs to Deprixa Plus; zero premium/SaaS permissions remain in the database
• 7 premium permissions removed from DB and routes reguarded: manage organizations, view saas billing, manage saas billing, recharge wallet, view organizations, manage settings, manage users — routes now use role:super-admin
• 5 settings API permissions removed: settings.api.view, settings.api.tokens.manage, settings.api.clients.manage, settings.api.webhooks.manage, settings.api.logs.view — routes now use role:admin|super-admin
• All module permissions properly added and gated: Pickups, Lockers, Pre-Alerts, Commissions, Contracts, Returns, COD, Locations, Import
• Roles matrix now shows all 97 permissions; Admin can toggle any permission for Employee, Driver, and Customer roles
• 9 nav config items corrected to use the right permission for sidebar visibility
• SQL dump (database/sql/deprixa_lite.sql) fully synchronized — migrations 114–117 added, role_has_permissions updated for all roles

Permission System Remediation

• Removed premium permissions: manage organizations, view saas billing, manage saas billing, recharge wallet, view organizations, manage settings, manage users — deleted from DB; routes changed to role:super-admin
• Removed settings API permissions: settings.api.view, settings.api.tokens.manage, settings.api.clients.manage, settings.api.webhooks.manage, settings.api.logs.view — deleted from DB; routes changed to role:admin|super-admin
• Added Pickups: pickups.view, pickups.create, pickups.manage
• Added Lockers (admin): lockers.view, lockers.manage
• Added Pre-Alerts: pre-alerts.view, pre-alerts.create, pre-alerts.manage
• Added Commissions: commissions.view, commissions.manage
• Added Contracts: contracts.view, contracts.create, contracts.manage
• Added Returns: returns.view, returns.create, returns.update
• Added COD: cod.view, cod.collect, cod.remit
• Added Locations: locations.view, locations.manage
• Added Import: shipments.import
• Migrations: 2026_04_19_000001_cleanup_orphaned_permissions, 2026_04_19_000002_add_missing_module_permissions

Routes & Middleware Hardening

• GET /pickups/* → can:pickups.view; mutating routes → can:pickups.manage
• GET /lockers/* → can:lockers.view; mutating routes → can:lockers.manage
• GET /pre-alerts/* → can:pre-alerts.view; create → can:pre-alerts.create; admin actions → can:pre-alerts.manage
• GET /commissions/* → can:commissions.view + edition:commissions; mutating → can:commissions.manage
• GET /contracts/* → can:contracts.view + edition:contracts; create → can:contracts.create; mutating → can:contracts.manage
• GET /returns/* → can:returns.view; create → can:returns.create; update → can:returns.update
• GET /cod/* → can:cod.view; collect → can:cod.collect; remit → can:cod.remit
• GET /locations/* → can:locations.view; mutating → can:locations.manage
• POST /shipments/import → can:shipments.import
• /settings/shipment-statuses → can:settings.shipment-statuses.view/manage
• /settings/services → can:settings.services.view/manage
• /settings/updates → can:settings.updates.view
• /settings/hs-codes → can:settings.hs-codes.view/manage
• /settings/integrations → can:settings.integrations.view/update
• /admin/* → role:super-admin (was can:manage organizations)
• /my-billing/* → role:super-admin (was can:view saas billing)
• /api-tokens + /settings/api/* → role:admin|super-admin

Navigation Config Fixes

• Warehouse nav item: dispatch.create → warehouse.access
• Pickups nav item: dispatch.create → pickups.view
• Lockers nav item: dispatch.create → lockers.view
• Pre-Alerts nav item: dispatch.create → pre-alerts.view
• Customers nav item: manage users → customers.access
• Contracts nav item: customers.access → contracts.view
• Commissions nav item: finance.view → commissions.view
• Rates nav item: settings.shipping-config.view → settings.pricing.view
• Locations nav item: settings.company.view → locations.view

Roles Matrix

• Settings → Roles matrix now shows all 97 permissions
• All new module groups visible: Pickups, Lockers, Pre-Alerts, Commissions, Contracts, Returns, COD, POD, Customs, Locations
• Super-admin: 94/97 permissions; Admin: 97/97; Employee: 40; Driver: 8; Customer: 5
• Admin can toggle any permission for Employee, Driver, and Customer roles from the matrix
• Customer role (5 perms): view dashboard, create shipments, tracking.view, pre-alerts.view, pre-alerts.create
• Driver role (8 perms): view dashboard, dashboard.kpi.view, dashboard.activity.view, dispatch.view, dispatch.update, dispatch.access, change status shipments, tracking.view
• Employee role (40 perms): all operational permissions — shipments, dispatch, warehouse, customers, pickups, pre-alerts, lockers.view, import, returns, COD, POD, customs.view, contracts.view/create, locations.view, finance, billing.view, pricing.view, settings.shipment-statuses.view, settings.services.view
• Admin role (94 perms): all 94 Plus permissions
• Super-admin: synced to Permission::all() — always 100%

Database & SQL Dump

• database/sql/deprixa_lite.sql fully synchronized with all permission changes
• Migrations table: entries 114–117 added
• role_has_permissions updated for all roles (super-admin, admin, employee, driver, customer)
• Zero premium permissions in the SQL dump
• Migration 2026_04_18_000002_add_module_permissions — adds pickups, lockers, pre-alerts, commissions permissions
• Migration 2026_04_19_000001_cleanup_orphaned_permissions — deletes all premium/orphaned permissions
• Migration 2026_04_19_000002_add_missing_module_permissions — adds contracts, locations, shipment-statuses, services, updates permissions

Introduces the Customer Self-Registration Portal, a complete invitation system for staff and customers, My Locker customer dashboard, and critical role security hardening for the customer role.

v1.3.0 Highlights

• Customer self-registration portal at /register/customer/{org-slug} — customers sign up independently with full org branding (logo, color)
• Staff invitation system — creating a user sends a secure email invitation; no password is set by the admin
• Customer portal invitation from the Customers module — invite customers directly from admin panel or resend from their profile
• My Locker — dedicated customer dashboard at /my-locker showing the customer's locker, pre-alerts, and shipment counters
• Customer Portal Link in Settings → Company — one-click copy and preview of the public registration URL
• Customer role security hardened: removed customers.access, dashboard.kpi.view, dashboard.activity.view — customers can no longer access the admin area
• All data scoped to the customer: pre-alerts and shipments filtered by customer_id / created_by when the logged-in user has the customer role
• Customers redirected to /my-locker on login and dashboard access — never land on the admin logistics dashboard
• SMTP fallback: if email is not configured, invitation URL displayed in the dashboard for manual sharing
• All new UI strings fully internationalized — English and Spanish (en.json, es.json, lang/en/, lang/es/)

Customer Portal

• Public self-registration page per organization at /register/customer/{slug}
• Registration page inherits organization branding — logo, name, and primary color
• Fields: name, email, phone (optional), password, confirm password
• Email uniqueness is scoped per organization — the same email can exist in different organizations
• After registration, customer is auto-logged-in and redirected to My Locker
• Rate-limited: max 10 registration attempts per minute per IP
• Inactive organizations return a 404 — registration link only works for active organizations
• Translation files: lang/en/customer_portal.php and lang/es/customer_portal.php
• Routes: GET|POST /register/customer/{slug} → customer.portal.register / customer.portal.register.store

Invitation System

• Creating a staff user (Settings → Users) now sends a UserInvitationMail — no password set by admin
• Invitation token: Str::random(64), stored in users.invitation_token, valid 7 days
• Resend Invitation action in user dropdown menu (visible for users with pending invitations)
• Creating a customer from the admin panel also sends a portal invitation email
• Customer Detail page shows portal status badge: Active / Pending / No Access
• Resend invitation button on Customer Detail page
• If SMTP not configured: invitation URL exposed in amber banner — admin can copy and share manually
• Translation files: lang/en/invitation.php and lang/es/invitation.php
• DB columns added to users: invitation_token (varchar 100, unique), invitation_sent_at (timestamp), invitation_accepted_at (timestamp)
• Routes: GET /invitation/{token} → invitation.show | POST /invitation/{token}/accept → invitation.accept
• Routes: POST /settings/users/{user}/resend-invitation → settings.users.resend-invitation
• Routes: POST /customers/{customer}/resend-portal-invitation → customers.resend-invitation

My Locker (Customer Dashboard)

• Dedicated customer dashboard at /my-locker
• Displays the customer's assigned locker: code, address, warehouse
• Pre-alert list scoped to the logged-in customer with status counters (pending, received, converted, cancelled)
• All data is strictly scoped to customer_id = Auth::id() — no cross-customer data exposure
• Navigation item visible to all authenticated users without additional permission

Security — Customer Role Hardening

• Removed customers.access from customer role — customers could previously access the customer management admin area
• Removed dashboard.kpi.view and dashboard.activity.view from customer role
• Customer role now holds exactly: view dashboard, create shipments, tracking.view
• LoginController: customers redirected to /my-locker after login (all other roles → /dashboard)
• DashboardController::index(): redirects customers to /my-locker as a secondary guard
• PreAlertController::index(): scopes results to customer_id = Auth::id() for customer role
• ShipmentController::index(): scopes results to created_by = Auth::id() for customer role; stats follow same scoping
• All role name references normalized to lowercase 'customer' throughout codebase (CustomerController, CustomersExport, CustomersImport, DeprixaProImporter, ContractController)
• Migration: 2026_04_18_000001_fix_customer_role_permissions

Settings — Customer Portal Link

• Settings → Company now shows a Customer Portal Registration Link section
• Displays the full public URL for customer self-registration under this organization
• One-click Copy button with visual feedback (icon changes to checkmark after copy)
• Preview button opens the registration page in a new tab for testing

Database & Demo SQL

• users: added invitation_token (varchar 100, unique), invitation_sent_at, invitation_accepted_at (timestamps)
• Migration 2026_04_17_600001_add_invitation_fields_to_users_table
• Migration 2026_04_18_000001_fix_customer_role_permissions — revokes excess permissions from customer role
• database/sql/deprixa_lite.sql updated: role_has_permissions and migrations table aligned with all of the above

First public release of Deprixa Plus on Envato CodeCanyon — a complete courier and logistics management platform built with Laravel 12, React 18, and Inertia.js.

v1.2.0 Highlights

• Invoice number permanently stored in database at shipment creation — guarantees audit trail and financial traceability across all time
• Invoice search now covers both tracking number and invoice number simultaneously
• COD (Cash on Delivery) module: full field set on shipments — is_cod, cod_amount, cod_currency, cod_status, cod_collected_at, cod_collected_by
• Proof of Delivery module: capture signatures, photos, and recipient confirmation linked to each shipment
• Return Shipments module: manage reverse logistics with full status lifecycle
• HS Codes & Customs Declarations: international shipment compliance fields
• Import Jobs: bulk shipment import tracking with validation and error reporting
• Install wizard fully automated — imports database, runs pending migrations, and creates storage symlink in a single flow with zero manual steps
• Production-hardened CSP — all dev-server origins removed from security middleware
• Sequential numbering system: configurable prefix, padding, and periodic reset rules for both invoice numbers and tracking numbers

Shipments Module

• Full shipment lifecycle management: Created → Assigned → Picked Up → In Transit → Out for Delivery → Delivered
• Exception recording with reason codes and reattempt scheduling
• On Hold and Returned status branches with appropriate next-action flows
• Auto-generated tracking numbers in TRK######## format (8-digit zero-padded sequential)
• Shipment creation wizard: Sender/Receiver → Package Details → Service Selection → Review & Confirm
• Bulk status updates with branch-level permission controls
• Shipment label PDF generation in four formats: A4 Full Page, A4 Half Page, Thermal 4×6, Thermal 4×4
• Clone shipment functionality for recurring senders and receivers
• Archive shipments to keep the active list clean without deleting records
• Full activity log per shipment capturing every status change, user action, and timestamp
• Multi-dimensional search and filter: status, date range, courier, branch, service type, zone, COD, exception flag, client, tracking number
• COD (Cash on Delivery) tracking with reconciliation flags
• Parcel dimensions and weight capture with volumetric weight calculation
• Fragile goods and declared value fields
• Internal reference number field for e-commerce order correlation
• File attachments per shipment (photos, documents, proof of delivery)
• Export shipment list to CSV

Dispatch Module

• Dispatch board showing unassigned and in-progress shipments for the current branch
• Individual and bulk assignment of shipments to couriers
• Auto-optimize route engine (POST /dispatch/auto-optimize) — groups shipments by zone and assigns to optimal couriers
• In-app courier notification on assignment
• Re-assignment and unassignment from the dispatch board
• Real-time driver locations map showing courier GPS positions, last update time, and assigned shipment count
• Driver location history playback for any courier and any date (retained 30 days)
• Dispatch board filters: branch, courier, zone, status, date, service type

Customers Module

• Individual and company client profiles with full field sets (name, type, ID/tax number, email, phone, address, tags, notes)
• Customer list with search by name, phone, email, or ID
• Filter by customer type, city, and tags
• Shipment history tab per customer showing all linked shipments with status and date
• Customer summary stats: total shipments, total billed, outstanding balance
• CSV import with downloadable template and import preview
• CSV export respecting active filters
• Quick-create modal from within the shipment wizard — create a customer without leaving the form
• Search-as-you-type customer lookup in shipment forms with address auto-fill
• Soft delete (archive) for customers with linked shipments

Rates & Pricing Module

• Geographic zone management — name, code, description, city assignments
• Rate card creation per origin zone → destination zone → service type combination
• Weight-tier rate rules with base price, per-kg surcharge, and dimensional weight factor
• Automatic price calculation at shipment creation based on zones, weight, and service type
• Price override capability for operators with appropriate permission
• Internal rate calculator (staff): enter origin, destination, weight, dimensions → get full price breakdown
• Public rate calculator at /rate — no login required, for customer self-service quotes
• Rate card active/inactive toggle for managing pricing changes without deleting history

Billing Module

• One invoice per shipment — auto-generated at shipment creation
• Billing list with filters by date range, payment status, and branch
• Invoice detail page with full company branding, line items, tax breakdown, and payment history
• Payment recording: date, method (cash, bank transfer, card, check), reference number, amount, notes
• Partial payment support — invoice status updates to Partially Paid with remaining balance tracked
• Invoice send via Email (PDF attachment), WhatsApp (link), and SMS (link)
• Single invoice PDF download from detail page
• Bulk PDF export with ZIP packaging from the billing list
• Invoice void capability
• Online payment endpoint (/shipments/{shipment}/payment/success) for gateway integrations
• Tax configuration per organization applied automatically to all invoices

Reports Module

• Financial Report at /reports/financial — revenue by period, paid vs. unpaid, top clients, total shipments, delivered %, exception %
• Revenue bar chart showing billed amounts over time (daily/weekly/monthly granularity)
• Payment status donut chart showing Paid / Partially Paid / Unpaid distribution with collection rate %
• Top 5 clients by revenue table with billed, collected, and outstanding columns
• Filters: date range (7 presets + custom) and branch
• PDF export of the full financial report with charts
• Access restricted to roles with settings.billing.view permission

Dashboard

• KPI cards: Total Shipments, Pending Shipments, Delivered Today, Revenue (MTD), Exceptions (Open), Overdue Invoices
• Recharts-powered charts: daily shipment volume line chart, status distribution donut, revenue by period bar chart
• Logistics sub-dashboard at /dashboard/logistics for operational metrics
• Exception Alert Panel: live list of open exceptions with direct links to affected shipments
• Date range presets plus custom range picker
• Branch filter: Admins and Managers can switch between branches or view company-wide data
• Role-adapted dashboard views: Couriers see only their own assigned shipments; Accountants see financial KPIs

Users & Roles

• Five roles: Super Admin, Admin, Employee, Driver, Customer
• Spatie Laravel Permission for fine-grained RBAC — permissions covering Shipments, Dispatch, Customers, Billing, Reports, Settings, Rates/Pricing
• Full permission matrix with role-to-permission mapping, customizable per role in Settings → Roles
• Two-factor authentication (TOTP): optional per user or enforced by admin for specific roles
• Recovery codes for 2FA lockout scenarios
• Admin 2FA override for locked-out users (logged in audit trail)
• Password policies: minimum length, complexity requirements, history, expiry, lockout thresholds — configured in Settings → Security
• User deactivation (preserves history) vs. permanent deletion
• User invitation via email with 24-hour expiring activation link
• Role-adapted UI: navigation and features shown/hidden based on the logged-in user's role

Settings

• Company Profile: name, tax ID, address, phone, email, website, logo variants (main, dark, light, invoice, favicon)
• Branding: primary/secondary/accent color configuration, theme selection, font selection
• Locale: language (EN/ES), timezone, date/time format, weight/dimension units, currency with symbol configuration
• Branch management: multi-branch support with individual address, phone, and operational hours per branch
• Shipment status configuration: rename status labels, change indicator colors
• Service type configuration: add, rename, and set expected transit time for each service type
• Notifications: email event triggers with template preview and per-event enable/disable
• Security settings: password policy and session controls including login attempt limits and session timeout
• Tracking page: public tracking toggle, page headline, branded cover image, show/hide courier name
• Shipping config: COD settings, label formats, tracking number prefix
• Audit log: full user action log filterable by user, action type, and date
• Maintenance tools: clear cache, clear sessions, run database backup, enable maintenance mode
• Updates: License activation and OTA update management with version history

Public Tracking

• Public tracking page at /tracking — no login required
• Enter tracking number or scan QR code to view shipment status
• Full status timeline with timestamps, courier notes, and delivery confirmation
• Branded tracking page — shows company logo, colors, and custom headline from Settings → Tracking
• Optional show/hide of courier name on the public tracking page

Public Rate Calculator

• Public rate calculator at /rate — no login required
• Customer selects origin city, destination city, weight, and service type to get a price estimate
• Uses the same rate cards and rules configured in the Rates & Pricing module
• No account or purchase commitment required — purely informational quoting tool

REST API

• Laravel Sanctum token authentication with fine-grained ability scoping
• Base URL: /api/v1 — versioned for forward compatibility
• Shipments endpoints: list, create, get by tracking number, update status, record exception, download label, cancel
• Public tracking endpoint: no authentication required, returns status history
• Customers endpoints: list, create, get, update
• Billing endpoints: list invoices, get invoice (with PDF option), record payment
• Reports endpoint: financial report summary
• Webhook support: shipment status events with HMAC-SHA256 signature verification and retry logic
• Rate limiting per token with differentiated limits for read/write/report endpoints
• Standardized pagination envelope with meta and links objects
• Standardized error responses with code, message, errors, and request_id

Platform & Infrastructure

• Laravel 12 (PHP 8.2+), React 18, Inertia.js 2 — full-stack SPA without a separate API layer for the web UI
• Tailwind CSS 4 + Vite 5 for asset compilation
• Spatie Laravel Permission for RBAC
• Spatie Laravel Activity Log for full audit trails across all models
• DomPDF for server-side PDF generation (invoices, labels, reports)
• Recharts for interactive dashboard analytics
• React i18next for EN/ES internationalization — UI strings, email templates, and PDF content
• Ziggy for exporting named Laravel routes to JavaScript
• Redis support for cache, sessions, and job queues
• Laravel Horizon for queue monitoring
• License activation and over-the-air update delivery integration
• S3-compatible object storage support for document uploads, invoice PDFs, and export files
• Multi-branch architecture: data scoped by branch with cross-branch views for Admin+
• Full dark mode UI with responsive layout (mobile-adaptive sidebar, touch-friendly shipment list)
• Distributed as a ZIP download via Envato/CodeCanyon — no GitHub repository