New features, improvements and fixes in each TherapyCRM release.
v1.0.45 ·
safer releases
TherapyCRM 1.0.45 contains no changes to the application you use day to day. It hardens how releases reach you: every production release is now verified end to end before it is announced, and the preproduction environment is rebuilt from a fresh copy of production before each rehearsal so problems are caught before they can affect you.
New features
Preproduction rehearsals now run against a fresh copy of production data and schema every time
Improvements
Production releases are verified against the live service (image, health, readiness, and version) before the release is announced
Bug fixes
Fixed production releases being marked successful before the new version had actually rolled out
v1.0.44 ·
administrators can manage staff credentials
TherapyCRM 1.0.44 lets administrators, and any custom role granted the Manage staff accounts permission, send setup and password-reset links and set temporary passwords from a staff profile. Previously these buttons appeared only for practice owners even though the permission already allowed the action.
New features
Administrators now see Send Password Reset Link, Resend Setup Link, and Reset Password on staff profiles
Custom roles granted the Manage staff accounts permission get the same staff credential actions
Improvements
Staff profile credential buttons now follow the same Manage staff accounts permission the server enforces, matching the staff list page
Bug fixes
Fixed staff profile credential actions being hidden from administrators who already held the Manage staff accounts permission
v1.0.43 ·
role and permission management
TherapyCRM 1.0.43 introduces configurable practice roles, platform-managed role templates, consistent permission-aware experiences across the web application and MCP, and stronger tenant and caseload isolation.
New features
Practice owners can create and manage roles, permissions, staff designations, and role assignments with protected owner safeguards
Platform administrators can manage the ten canonical role templates used when provisioning new practices
New-practice checkout provisioning copies the current platform role templates, while idempotent repair tools can seed missing roles for existing practices without replacing custom roles
MCP discovery and execution support standard and custom roles using the same effective permissions as the web application
Improvements
Web, mobile JWT, AI, and MCP authorization paths now resolve a shared ability and row-level scope model
Client and dashboard statistics clearly identify assigned or personally visible records instead of implying practice-wide totals
Role assignment filtering now supports stable template keys for administrators
Bug fixes
Progress-note filtering now returns not found when the related client is outside the caller visible caseload
MCP catalogs no longer advertise operations that the authenticated role cannot perform
TherapyCRM 1.0.42 delivers comprehensive search engine optimization for the public marketing site with per-route meta tags, canonical URLs, and server-side rendered HTML snapshots for all 11 public landing pages.
New features
Server-side rendered HTML snapshots for 11 public marketing pages enable search engine crawlers to index complete content immediately
Per-route title and canonical URL metadata ensures each public page presents optimal search engine signals
Improvements
HTTPS canonical URLs enforce secure apex-domain (therapycrm.io) as the preferred search-indexed version across all public pages
WWW-to-apex 301 redirects consolidate search ranking signals under the canonical apex domain
Bug fixes
Search engine crawlers no longer receive the empty SPA shell or generic homepage title when indexing marketing routes
v1.0.41 ·
secure platform-session expiry handling
TherapyCRM 1.0.41 completes the managed legal-document rollout by ensuring an expired platform-operator session leaves no privileged console shell visible and returns the operator directly to the dedicated sign-in page.
New features
Automated browser coverage now verifies the complete expired-session transition for the isolated platform-operator console
Improvements
Platform administrators are returned immediately to the operator sign-in page when their short-lived HttpOnly session expires
Bug fixes
An expired platform session can no longer leave stale navigation or empty administrator panels visible after a 401 response
v1.0.40 ·
managed legal documents and reliable change notices
TherapyCRM 1.0.40 gives platform administrators a complete, auditable workflow for drafting, reviewing, publishing, and notifying users about Terms of Service and Privacy Policy updates while preserving the current published agreements until verified replacements are ready.
New features
Platform administrators can manage the legal publisher profile and create, edit, preview, test, publish, archive, and delete draft Terms of Service and Privacy Policy versions
Published legal versions are immutable, retain operator and content-hash evidence, expose public version history, and can require exact-version reacceptance for material changes
Publishing creates a durable, deduplicated notification outbox for every active staff user, portal account, and platform administrator, with bounded retries, audit visibility, and manual retry controls
Public Terms, Privacy, and subprocessors pages now render from the managed legal-document source, and checkout records the exact current versions accepted
Improvements
The refined 2026-08-23 documents deploy as drafts; existing 2026-08-22 agreements remain current until the legal publisher profile is complete and a platform administrator explicitly publishes a replacement
Publication readiness checks require verified publisher identity, contact, hosting-region, and backup-retention facts before users can be notified or asked to reaccept
Material and non-material changes are handled separately so reacceptance is requested only when the published version requires it
Legal notification delivery is recoverable after interrupted jobs and provides clear per-recipient delivery status without logging protected health information
Bug fixes
Draft deletion now preserves the immutable audit record without leaving a foreign-key reference to the removed draft
A stale final-attempt notification can be recovered safely, and a successful provider delivery is not resent if later delivery-log persistence fails
Registration and public legal pages consistently use the managed current versions rather than duplicated hard-coded version strings