v1.0.45
TherapyCRM 1.0.45 — safer releases
September 3, 2026 at 12:44 AM
TherapyCRM 1.0.45 contains no changes to the application you use day to day. It hardens how releases reach you: every production release is now verified end to end before it is announced, and the preproduction environment is rebuilt from a fresh copy of production before each rehearsal so problems are caught before they can affect you.
New Features
- •Preproduction rehearsals now run against a fresh copy of production data and schema every time
Improvements
- •Production releases are verified against the live service (image, health, readiness, and version) before the release is announced
Bug Fixes
- •Fixed production releases being marked successful before the new version had actually rolled out
v1.0.44
TherapyCRM 1.0.44 — administrators can manage staff credentials
September 2, 2026 at 9:19 PM
TherapyCRM 1.0.44 lets administrators, and any custom role granted the Manage staff accounts permission, send setup and password-reset links and set temporary passwords from a staff profile. Previously these buttons appeared only for practice owners even though the permission already allowed the action.
New Features
- •Administrators now see Send Password Reset Link, Resend Setup Link, and Reset Password on staff profiles
- •Custom roles granted the Manage staff accounts permission get the same staff credential actions
Improvements
- •Staff profile credential buttons now follow the same Manage staff accounts permission the server enforces, matching the staff list page
Bug Fixes
- •Fixed staff profile credential actions being hidden from administrators who already held the Manage staff accounts permission
v1.0.43
TherapyCRM 1.0.43 — role and permission management
August 31, 2026 at 6:16 PM
TherapyCRM 1.0.43 introduces configurable practice roles, platform-managed role templates, consistent permission-aware experiences across the web application and MCP, and stronger tenant and caseload isolation.
New Features
- •Practice owners can create and manage roles, permissions, staff designations, and role assignments with protected owner safeguards
- •Platform administrators can manage the ten canonical role templates used when provisioning new practices
- •New-practice checkout provisioning copies the current platform role templates, while idempotent repair tools can seed missing roles for existing practices without replacing custom roles
- •MCP discovery and execution support standard and custom roles using the same effective permissions as the web application
Improvements
- •Web, mobile JWT, AI, and MCP authorization paths now resolve a shared ability and row-level scope model
- •Client and dashboard statistics clearly identify assigned or personally visible records instead of implying practice-wide totals
- •Role assignment filtering now supports stable template keys for administrators
Bug Fixes
- •Progress-note filtering now returns not found when the related client is outside the caller visible caseload
- •MCP catalogs no longer advertise operations that the authenticated role cannot perform
- •Assigned clinicians receive scoped client statistics instead of unavailable placeholder values
v1.0.42
TherapyCRM 1.0.42 — marketing SEO snapshots
August 25, 2026 at 1:49 PM
TherapyCRM 1.0.42 delivers comprehensive search engine optimization for the public marketing site with per-route meta tags, canonical URLs, and server-side rendered HTML snapshots for all 11 public landing pages.
New Features
- •Server-side rendered HTML snapshots for 11 public marketing pages enable search engine crawlers to index complete content immediately
- •Per-route title and canonical URL metadata ensures each public page presents optimal search engine signals
Improvements
- •HTTPS canonical URLs enforce secure apex-domain (therapycrm.io) as the preferred search-indexed version across all public pages
- •WWW-to-apex 301 redirects consolidate search ranking signals under the canonical apex domain
Bug Fixes
- •Search engine crawlers no longer receive the empty SPA shell or generic homepage title when indexing marketing routes
v1.0.41
TherapyCRM 1.0.41 — secure platform-session expiry handling
August 23, 2026 at 2:58 PM
TherapyCRM 1.0.41 completes the managed legal-document rollout by ensuring an expired platform-operator session leaves no privileged console shell visible and returns the operator directly to the dedicated sign-in page.
New Features
- •Automated browser coverage now verifies the complete expired-session transition for the isolated platform-operator console
Improvements
- •Platform administrators are returned immediately to the operator sign-in page when their short-lived HttpOnly session expires
Bug Fixes
- •An expired platform session can no longer leave stale navigation or empty administrator panels visible after a 401 response
v1.0.40
TherapyCRM 1.0.40 — managed legal documents and reliable change notices
August 23, 2026 at 1:43 PM
TherapyCRM 1.0.40 gives platform administrators a complete, auditable workflow for drafting, reviewing, publishing, and notifying users about Terms of Service and Privacy Policy updates while preserving the current published agreements until verified replacements are ready.
New Features
- •Platform administrators can manage the legal publisher profile and create, edit, preview, test, publish, archive, and delete draft Terms of Service and Privacy Policy versions
- •Published legal versions are immutable, retain operator and content-hash evidence, expose public version history, and can require exact-version reacceptance for material changes
- •Publishing creates a durable, deduplicated notification outbox for every active staff user, portal account, and platform administrator, with bounded retries, audit visibility, and manual retry controls
- •Public Terms, Privacy, and subprocessors pages now render from the managed legal-document source, and checkout records the exact current versions accepted
Improvements
- •The refined 2026-08-23 documents deploy as drafts; existing 2026-08-22 agreements remain current until the legal publisher profile is complete and a platform administrator explicitly publishes a replacement
- •Publication readiness checks require verified publisher identity, contact, hosting-region, and backup-retention facts before users can be notified or asked to reaccept
- •Material and non-material changes are handled separately so reacceptance is requested only when the published version requires it
- •Legal notification delivery is recoverable after interrupted jobs and provides clear per-recipient delivery status without logging protected health information
Bug Fixes
- •Draft deletion now preserves the immutable audit record without leaving a foreign-key reference to the removed draft
- •A stale final-attempt notification can be recovered safely, and a successful provider delivery is not resent if later delivery-log persistence fails
- •Registration and public legal pages consistently use the managed current versions rather than duplicated hard-coded version strings