Changelog

Added

None.

Changed

• Recurring actions are generated every morning automatically; manual generation controls have been removed.

Fixed

• Daily generation is scheduled at 05:00 UTC (06:00 in Paris in winter, 07:00 in summer). Cron failures return a safe error response.

Security

• Cron requires CRON_SECRET; duplicate protection, assignment, tags and Private Space restrictions are preserved.

Technical

• Added runtime regression coverage for cron authorization, generation, retries and inactive templates.

Added

None.

Changed

None.

Fixed

• Reporting chart dates follow your selected language, with readable day, week and month labels. Calendar days remain stable across time zones.

Security

None.

Technical

None.

Added

None.

Changed

None.

Fixed

• Login sessions now expire after 24 hours, even when the application remains in use. Editable actions now allow quick due-date changes directly from Table mode, with the same calendar as tiles and without opening action details.

Security

• Expired sessions also end admin impersonation and cannot be restored by returning to admin.

Technical

None.

Added

• Separate open and overdue counters for visible actions created by you.

Changed

• Personal reporting now counts assigned actions only; labels describe action counts and closure cadence.

Fixed

• Delegated actions no longer inflate personal open or overdue counts. Planned snapshots count open actions only and overdue uses the same day boundary as My Actions.

Security

• Existing operational visibility, Private Space restrictions and manager responsibility perimeters are preserved.

Technical

None.

Added

• Added Reporting with personal and managerial metrics, configurable charts, contributor tables and successful-login activity.

Changed

• Added Reporting below saved custom filters and before Administration in desktop and mobile navigation.

Fixed

None.

Security

• Reporting intersects operational action visibility and Private Space access with the authorized personal or responsibility perimeter.

Technical

• Added UserActivityLog and indexed successful-login instrumentation; PostgreSQL computes reporting aggregates without loading action records.

Added

• Action review now provides close and reopen controls while keeping the reviewed action visible.

Changed

None.

Fixed

• Action review now localizes due dates and prominently identifies overdue actions.

Security

None.

Technical

None.

Added

None.

Changed

None.

Fixed

• Followed-action news on the Home dashboard now opens the related action directly.

Security

None.

Technical

None.

Added

None.

Changed

None.

Fixed

• Action review fields now refresh correctly when moving to the previous or next action.

Security

None.

Technical

None.

Added

None.

Changed

• Action review now shares the Action Detail priority wording, dots and P1–P3 color treatments.

Fixed

• Refined review field and section borders to use Loop's subtle slate surfaces and focus states.

Security

None.

Technical

None.

Added

None.

Changed

• Refined the Action review screen with Loop-style layered surfaces, stronger depth, and large animated navigation controls.

Fixed

• Replaced undersized review arrows with prominent accessible controls and clear hover feedback.

Security

None.

Technical

None.

Added

• Added a full-screen action review mode with server-built filtered queues, deterministic ordering and reusable action editors.

Changed

• Renamed Team View to Action Views in the interface while preserving the /team-view route.

Fixed

None.

Security

• Review queues reuse Action Views visibility and Private Space constraints; mutations reuse existing action permission checks.

Technical

• Renamed Team View to Action Views and added full-screen action review mode.

Added

None.

Changed

None.

Fixed

• Date selection calendars now start the week according to the selected language locale.

Security

None.

Technical

• All action due-date calendars share centralized locale, weekday-order and month-alignment logic.

Added

• Added daily recurrence and a configured daily automatic generation schedule.

Changed

• Recurring templates are now personal automation rules visible and manageable only by their owner.

Fixed

• Automatic recurring generation now reports safe generation counts and uses the shared idempotent generation path.

Security

• All recurring template operations are owner-scoped server-side, and the cron endpoint requires CRON_SECRET.

Technical

• Daily, weekly and monthly generation considers today and future dates in the 45-day horizon without backfilling older missed occurrences.

Added

• Added authorized recurring template deletion with an in-app confirmation dialog.

Changed

• Improved Recurring Actions page styling and added recurring template deletion.

Fixed

• Recurring template cards, status badges, actions and empty state now match Loop's visual system.

Security

• Recurring template deletion reuses the server-side template management perimeter.

Technical

• Deleting a recurring template preserves generated actions through the existing nullable SetNull relation.

Added

• Added lightweight recurring actions that generate normal action occurrences automatically.

Changed

• Recurring templates are managed separately and never appear in operational todo views.

Fixed

None.

Security

• Template management uses action assignment perimeters and Private Space visibility; cron generation requires CRON_SECRET.

Technical

• Added weekly and monthly recurrence, a 45-day generation horizon, organization-timezone calendar calculations, and database-backed deduplication.

Added

None.

Changed

• Action list group separators now have balanced spacing and show the number of actions in each group.

Fixed

None.

Security

None.

Technical

None.

Added

• Added persistent tile/table display modes and grouped sorting for action list screens.

Changed

• My Actions keeps its awareness and lifecycle sections while grouping actions within each section by priority, assignee or due date.

Fixed

None.

Security

• Display and sorting preferences do not alter action visibility, permissions, Team View filters or Private Space rules.

Technical

• Shared action list preferences are validated and stored locally without a data-model migration.

Added

• Added acknowledgement for just-created actions and a new recently assigned tasks section in My Actions.

Changed

None.

Fixed

• Fixed the production build failure caused by mixed Tiptap extension and core versions.

Security

• Recent assignment acknowledgement is scoped to the connected user and preserves existing Private Space visibility.

Technical

• Added durable, notification-independent ActionRecentAssignment records without changing action lifecycle or audit behavior.
• Aligned all direct Tiptap packages and the lockfile on version 3.31.3 so TypeScript resolves one compatible extension type graph.

Added

None.

Changed

None.

Fixed

• Workstream sub-actions now appear as actionable items in My Actions and Team View, even when assigned to the same user as the parent workstream.

Security

• Standalone and nested sub-actions continue to use their own Private Space visibility and existing action permissions.

Technical

• Operational list queries now treat linked sub-actions as normal actions for sorting and filtering without changing their parent relationship.

Added

• Directors and administrators can configure organization names and IANA timezones.

Changed

• Action dates and timestamps now use consistent English or French formatting and organization timezone settings.
• Comments and audit histories now show newest entries first.

Fixed

• Date-only due dates retain their intended calendar day across timezones.

Security

• Organization settings updates validate permissions, organization scope, names and timezones server-side.

Technical

• Added centralized Intl date formatting helpers and an Organization timezone field defaulting to Europe/Paris.

Added

None.

Changed

• Action description link insertion now uses an in-app dialog, and formatting controls include localized guidance.

Fixed

• Fixed rich description editor color rendering, indentation controls, link modal and toolbar tooltips.

Security

• Description colors remain palette-restricted and links accept only safe HTTP and HTTPS destinations.

Technical

• Indent and outdent availability now subscribes to Tiptap editor state so controls update with every cursor and selection change.

Added

None.

Changed

None.

Fixed

• Fixed quick action input layout shift and due-date picker month navigation behavior.

Security

None.

Technical

• Due-date month navigation is now separate from explicit day selection across Team View, action tiles and Action Detail.

Added

• Added headings, underline, lists with indentation, quotes, safe links, text colors, undo, redo and clear formatting to action descriptions.

Changed

• Replaced the custom action description editor with a richer open-source Tiptap editor.

Fixed

• List indentation now persists after saving and can be changed with toolbar controls, Tab and Shift+Tab.

Security

• Rich description HTML remains sanitized server-side with safe web links and a controlled text-color palette.

Technical

• Tiptap open-source MIT-licensed packages are used without Pro, Cloud, AI or collaboration extensions, and description storage remains sanitized HTML.

Added

None.

Changed

• Refined Loop branding, navigation typography and active menu styling.
• The Loop logo now appears as the browser tab icon.
• Action tiles now use a cleaner inset priority band with smoothly finished edges.
• The centered Loop logo area now uses balanced spacing without a surrounding container.

Fixed

None.

Security

None.

Technical

None.

Added

• Added Team View selection mode with bulk assignee and due-date updates.

Changed

None.

Fixed

• Team View selection highlighting now clears immediately when a tile is deselected and uses a softer elevated treatment.
• The bulk due-date control now opens a visible calendar field reliably.

Security

• Bulk updates validate edit permissions and Private Space assignment visibility for every selected action before making changes.

Technical

• Bulk changes are transactional and create a separate audit entry for each action whose value changes.

Added

• Added a Team View filter to show only actions followed by the connected user.

Changed

None.

Fixed

None.

Security

• The followed-actions filter is applied server-side in addition to existing action visibility and Private Space restrictions.

Technical

• Saved Team View filters and filtered return URLs now preserve the followed-actions criterion.

Added

None.

Changed

• Improved Team View filtering performance and responsiveness without changing filter behavior.

Fixed

None.

Security

• Team View visibility, edit rights, follow rights and Private Space restrictions continue to use the existing server-side permission rules.

Technical

• Team View now uses reusable server-side query construction, compact tile data, batched permission decoration and development-only load timing instrumentation.

Added

• Added Team View Private Space filtering, overdue filtering and a compact filtered-actions summary.

Changed

None.

Fixed

None.

Security

• Team View Private Space filter options, action results and summary counts are scoped server-side to spaces and actions visible to the connected user.

Technical

• Saved Team View filters now preserve the Private Space criterion through the existing filter serialization.

Added

None.

Changed

• Improved action tile visual density, rounded priority strip alignment and due-date spacing for localized labels.

Fixed

None.

Security

None.

Technical

None.

Added

None.

Changed

None.

Fixed

• Strengthened action permission checks, Private Space reassignment validation and security regression tests.

Security

• Action finish now uses centralized edit permissions, and reassignment verifies that the selected assignee can view attached Private Spaces.

Technical

• Added Node test-runner regression coverage for permission perimeters and rich-text/XSS sanitization, and runs it in CI.

Added

• Improved action detail comments, followers, closing behavior and rich description editing.

Changed

• Action detail Back and close controls now return to the previous browser context when available.
• Description audit records now state only that the description changed.

Fixed

• Restored reliable rich-description color and indentation persistence, and clarified description audit wording.

Security

• Comment edits are author-only; follower additions validate organization and Private Space visibility before creating a relation or notification.
• Rich description formatting remains constrained by the sanitizer allowlist.

Technical

• Added follower-added Home news events and safe rich-text font-family sanitization.

Added

• Improved Home agenda with current-day highlight and month navigation.

Changed

• Home agenda now keeps the displayed month in the URL and reloads due counts for the selected month.
• Clicking the Home agenda month label opens a lightweight month selector.
• Home agenda month changes preserve the user scroll position on the calendar and localize month and weekday display order.

Fixed

None.

Security

• Home agenda counts continue to use the existing assigned-action visibility and Private Space restrictions.

Technical

• Documented Home agenda calendar guardrails and Definition of Done checks.

Added

• Added quick due-date rescheduling directly from action tiles.

Changed

None.

Fixed

None.

Security

• Quick tile rescheduling uses the existing action due-date update permission checks and audit path.

Technical

• Documented quick action tile control guardrails and reused the existing due-date update server action.

Added

• Added heading and title-size controls to rich action descriptions.

Changed

None.

Fixed

• Fixed rich description encoding so punctuation, special characters and accented characters display as readable text instead of visible HTML entities.

Security

• Legacy encoded rich descriptions are decoded only before passing through the existing sanitizer; unsafe tags, event handlers and dangerous links remain blocked.

Technical

• Rich descriptions continue to be stored as sanitized HTML in Action.description with safe heading tags and predefined font-size values.

Added

• Added password change from My Profile.

Changed

None.

Fixed

None.

Security

• Profile password change requires the current password, updates only the connected user, uses the existing scrypt password helper and is disabled during impersonation.

Technical

• Successful profile password changes clear mustChangePassword without changing profile fields or the admin password reset flow.

Added

None.

Changed

None.

Fixed

• Fixed missing profile password-change translation keys after localization merge resolution.

Security

None.

Technical

None.

Added

None.

Changed

• Improved localization coverage across application screens, buttons and labels.

Fixed

• Replaced remaining hard-coded UI text in action detail, rich description editing, Private Spaces and structure administration controls with English/French translation keys.

Security

None.

Technical

• Documented systematic localization guardrails in CODEX and project Definition of Done materials.

Added

None.

Changed

• Pasted images in rich action descriptions can now fit the documented lightweight inline image limit.
• Private Spaces moved to the left action detail column between due date and followers.
• The action detail tag selector is more compact with search/create above the tag list and a small + create button.

Fixed

• Fixed rich description saves failing when pasted inline images exceeded the previous plain-text description limit.

Security

None.

Technical

None.

Added

None.

Changed

• Rich action descriptions now preserve font size and text color formatting in read-only display.
• URLs typed in rich descriptions are automatically rendered as safe clickable links without using a separate link button.

Fixed

None.

Security

• Description URL auto-linking uses the existing sanitization allowlist and only creates safe http:// and https:// links.

Technical

None.

Added

• Action detail now uses a 3-column desktop layout with a compact title block and a rich description editor opened from a pencil button.

Changed

• Updated action detail layout and added rich description editing.
• Comments now render safe http:// and https:// URLs as clickable links.

Fixed

None.

Security

• Rich descriptions are sanitized before storage and rendering; comment text remains escaped and only safe web URLs are linkified.

Technical

• Rich descriptions are stored as sanitized HTML in the existing Action.description field, preserving existing plain text descriptions without a migration.

Added

None.

Changed

• Updated Workstream sub-action visibility for assignees.
• Standalone Workstream sub-action tiles now display a small explanatory label and action detail identifies the parent Workstream.

Fixed

None.

Security

• Workstream sub-action standalone visibility continues to respect normal action permissions and Private Space restrictions.

Technical

• Adjusted My Actions and Team View action list queries to include eligible assigned sub-actions without duplicating or detaching records.
• Documented Workstream sub-action visibility guardrails and Definition of Done checks.

Added

• Private Spaces let authenticated users create restricted visibility compartments for sensitive actions.
• Actions can be attached to Private Spaces from quick action capture using [ autocomplete and from the action detail page.
• The Administration area now includes a Private Spaces page with owned and shared sections.

Changed

None.

Fixed

None.

Security

• Private Space action visibility is enforced server-side across My Actions, Team View, Home, filters, tags, agenda counts, news and direct action detail routes.
• Private Space membership is organization-scoped and dynamically includes linked team and entity members.

Technical

• Added PrivateSpace, PrivateSpaceUser, PrivateSpaceTeam, PrivateSpaceEntity and ActionPrivateSpace Prisma models and migration.
• Documented Private Space guardrails, permissions, data model and definition of done.

Added

• Team View now includes a Today due-date filter, live title/description search, and a visible tag filter with top tag suggestions.
• Teams, Entities and Assignees filters now use compact multi-select dropdowns.

Changed

• The duplicate current-month due-date option was removed and saved filters using the old this-month value are mapped to Current month.
• The left menu no longer displays the disabled Workstreams/Chantiers entry.

Fixed

None.

Security

• Team View text, tag, due-date, team, entity and assignee filters remain enforced server-side after the existing visibility scope is applied.

Technical

• Documented Team View filter guardrails and visibility-scoped tag suggestion behavior.

Added

None.

Changed

None.

Fixed

• Fixed overdue action highlighting regression in My Actions.

Security

None.

Technical

• Shared the start-of-today overdue helper between My Actions and Team View overdue filtering.

Added

• Added an Overdue section to My Actions for open assigned actions whose due date is strictly before today.

Changed

• My Actions now shows overdue actions above Just created, active/open actions and finished actions without duplicating them in active actions.

Fixed

None.

Security

None.

Technical

• Documented My Actions overdue rules and Definition of Done expectations.

Added

None.

Changed

None.

Fixed

• Fixed Users Management role assignment and edit persistence for MANAGER users with entity/team attachments.

Security

• Entity attachment no longer grants SUPERMANAGER scope unless SUPERMANAGER is explicitly selected and permitted server-side.

Technical

• User account updates now reconcile organization, entity and team assignments in a single transaction.

Added

• Authenticated users now have a My Profile page to update their own first name, last name, login and language.

Changed

None.

Fixed

None.

Security

• Profile updates derive the edited user from the authenticated session, reject impersonation edits and cannot modify roles, rights, memberships or active status.

Technical

• Added server-side profile validation, login uniqueness handling, localized navigation and documentation guardrails.

Added

None.

Changed

• User identifiers are now labeled and handled as login values instead of email addresses across authentication and Users Management.

Fixed

• User creation, update, lookup and sign-in no longer require email-format validation.

Security

• Existing identifier values are preserved by renaming the database column from email to login, so existing users can keep signing in with the same string.

Technical

• Updated Prisma User.login, login normalization, bootstrap admin configuration and documentation guardrails.

Added

• Home now provides an operational dashboard with followed action news, an assigned open actions priority donut chart, and a monthly agenda.
• Team View supports exact due-date filtering from agenda day clicks.

Changed

• Home agenda counts now focus on actions assigned to the connected user, and priority donut segments link to Team View priority filters.

Fixed

None.

Security

• Home news, seen updates and purge are scoped to the connected user; agenda date filters reuse Team View server-side visibility.

Technical

• Added FollowedActionNews for followed action closure and due-date change events.

Added

None.

Changed

None.

Fixed

• Fixed Users Management team options for SUPERMANAGER users whose SUPERMANAGER scope comes from Entity membership.

Security

• Server-side user management permissions now resolve the organization for Entity memberships before computing SUPERMANAGER team scope.

Technical

None.

Added

None.

Changed

None.

Fixed

• Fixed SUPERMANAGER team visibility in Users Management user creation.

Security

• Server-side user creation validation now matches the SUPERMANAGER entity perimeter and organization fallback for team assignment.

Technical

None.

Added

• Team View now includes an Overdue due-date filter for actions whose due date is strictly before today.

Changed

• Saved Team View filters can persist and replay the overdue due-date criteria, with results recomputed dynamically each time the view opens.
• Team View now hides finished actions by default and offers a filter checkbox to show them again.

Fixed

None.

Security

• The overdue filter is applied server-side after existing Team View visibility rules and combines with other filters without changing action permissions.

Technical

• Documented the Team View overdue definition and Definition of Done expectations.

Added

• Loop now has an English/French localization foundation with lightweight dictionaries and a per-user language selector in the authenticated topbar.

Changed

• Visible interface text is normalized to English as the default baseline before translation switching.
• Localization coverage now includes main pages, action tiles, Team View, changelog and administration page content.

Fixed

None.

Security

• Language updates are authenticated, limited to supported language codes and scoped to the connected user only.

Technical

• Added User.language with a safe default-English migration for existing users.

Added

• Topbar quick action capture now recognizes due-date tokens, priority tokens and a permission-scoped @ assignee autocomplete.
• My Actions now includes a Just created section for quick-captured open actions until their detail page is opened.

Changed

• Quick-created action titles now remove parsed date, priority and selected assignee tokens before saving.

Fixed

None.

Security

• Quick action assignment is validated server-side and cannot use users outside the connected user's assignment perimeter.

Technical

• Added Action.justCreatedAt with a safe nullable migration and server-side clearing without audit-log noise.

Added

None.

Changed

• Team View now shows Organization-wide actions to every member of the Organization while keeping ADMIN visibility across all Organizations.
• Action detail and Team View tiles now separate view access from edit controls, so visible actions stay read-only when the connected user lacks edit permission.

Fixed

• Follow and unfollow now use action visibility instead of edit permission, allowing users to follow visible non-assigned actions in their Organization for themselves only.

Security

• Server-side permission helpers now distinguish Team View visibility, action edit scope and follow permission instead of reusing edit permission as a proxy.
• Team View filter options and action results are scoped to the connected user's Organizations, with action Organization inferred from assignee membership when no action organization field exists.

Technical

None.

Added

• Actions now support free-form tags from the action detail page, with compact tag pills on details and action tiles.
• Administration now includes a Tags page for MANAGER+ users showing tags used inside their visibility perimeter, with SUPERMANAGER+ tag deletion.

Changed

None.

Fixed

None.

Security

• Tag suggestions and tag administration are scoped server-side to actions visible to the connected user.

Technical

• Added Tag and ActionTag data models with normalized unique tag names, cascade cleanup of action tag associations, and administration deletion that removes tag links without otherwise changing actions.

Added

• Users Management now shows a confirmation modal before destructive user deletion, including the number of related actions that will be removed.

Changed

• Confirmed user deletion now removes the user plus actions they created or were assigned to, while preserving unrelated actions.

Fixed

None.

Security

• User deletion impact preview and deletion are permission-checked server-side and prevent users from deleting their own account or users outside their perimeter.

Technical

• User deletion now runs in a transaction that cleans related action children, sessions, memberships, saved filters, followers and remaining user references.

Added

• Users can now follow visible actions assigned to someone else with a discreet eye toggle on action tiles.
• Action detail now shows a read-only list of users following the action.

Changed

None.

Fixed

None.

Security

• Follow and unfollow always use the connected user from the server-side session and cannot be managed on behalf of another user.

Technical

• Added the ActionFollower data model with unique action/user records and cascade deletion through a safe additive Prisma migration.

Added

None.

Changed

• Team View filters can now be collapsed, and saved Team View links open with the filter area collapsed so results stay prominent.

Fixed

None.

Security

None.

Technical

None.

Added

• Team View page with perimeter-scoped action filters, user-specific saved views, and saved filter links in the left menu.
• Returning from an action opened through Team View now restores the filtered Team View URL.

Changed

None.

Fixed

None.

Security

• Team View action results, filter options and saved filter mutations are scoped server-side to the connected user's authorized perimeter.

Technical

• Added the SavedTeamViewFilter data model and safe additive Prisma migration for private saved Team View criteria.

Added

None.

Changed

• Users Management now groups users by organization, then entity, then team, with entity-level users shown before teams inside each entity.

Fixed

None.

Security

None.

Technical

None.

Added

None.

Changed

• Users Management now displays entity-scoped SUPERMANAGER users with their effective SUPERMANAGER badge instead of showing only their STANDARD organization membership.

Fixed

• Editing a SUPERMANAGER onto an entity no longer makes the tile appear as a STANDARD user after validation.

Security

None.

Technical

None.

Added

• User creation and edit forms now include entity scope selection so SUPERMANAGER users can be attached to an entity without requiring a team.

Changed

• SUPERMANAGER user creation and edit validation now accepts entity assignment as a valid scope in addition to team assignment.

Fixed

None.

Security

None.

Technical

None.

Added

• Administration tiles now expose compact action bubbles to edit, deactivate or delete organizations, entities, teams and users.

Changed

• Edit fields now stay hidden until the edit bubble is clicked, keeping Teams Management and Users Management in tile mode by default.

Fixed

None.

Security

• Delete actions are guarded server-side and refuse destructive deletion when records still have related data or history, directing administrators to deactivate instead.

Technical

None.

Added

• Teams Management can now edit or deactivate organizations, entities and teams, including changing a team's entity attachment or moving it directly under its organization.
• Users Management can now edit user profile fields and deactivate user accounts without deleting their actions or history.

Changed

None.

Fixed

None.

Security

• Edit and deactivation actions for structures and users are permission-checked server-side and preserve existing data by using deactivation instead of destructive deletion.

Technical

None.

Added

• Entity layer between organizations and teams, with teams still allowed directly under an organization when no entity is needed.
• Dedicated Teams Management screen for organizations, entities and teams.
• Users Management now focuses on users, rights and organization/entity/team assignments.

Changed

• Administration navigation now separates Teams Management and Users Management.
• SUPERMANAGER scope is entity-based for structure, user and action visibility while DIRECTOR remains organization-scoped.

Fixed

None.

Security

• Server-side administration and action visibility helpers now account for entity perimeters and avoid exposing users or teams outside the actor scope.

Technical

• Added Entity and EntityMembership Prisma models plus nullable Team.entityId with a safe additive migration that leaves existing teams directly attached to their organizations.

Added

• Workstreams let a root action contain sub-actions while staying within the lightweight action tracker model.
• Root actions can be grouped by drag and drop after confirmation, and classic actions can be transformed into empty workstreams from the detail page.
• Expanded workstream tiles and workstream detail pages display compact sub-action tiles that can be opened and completed.
• Workstream detail pages include a simple + form to create sub-actions assigned to the parent workstream assignee.

Changed

• Normal action lists now show only root actions so sub-actions appear only through their parent workstream or direct detail page.

Fixed

None.

Security

• Grouping, transforming, sub-action creation and direct sub-action deletion restrictions are enforced server-side.

Technical

• Added Action self-relation fields parentActionId, parentAction and subActions plus isWorkstream with a safe additive Prisma migration.
• Permanent workstream deletion explicitly deletes comments and audit logs for the parent and all direct sub-actions in a transaction.

Added

None.

Changed

• Improved action detail priority styling with a subtle priority color on the title and assignee summary block.
• Changed action detail description editing to save on blur or with a Save Description button instead of saving while typing.

Fixed

None.

Security

None.

Technical

None.

Added

None.

Changed

• Archived action tiles in Administration now open the action detail page when clicked.
• Archived action tiles now show priority with the same colored dot and left liseret visual language as action tiles instead of P1/P2/P3 labels.

Fixed

None.

Security

None.

Technical

None.

Added

None.

Changed

• Made the finished action delete/archive control more visible while keeping it limited to finished action tiles.

Fixed

None.

Security

None.

Technical

None.

Added

• Finished actions can be reopened from the Finished section and returned to active actions.
• Finished action tiles now include a discreet delete/archive control.
• SUPERMANAGER, DIRECTOR and ADMIN users can access Administration > Archived Actions to view, restore or permanently delete archived actions in their authorized perimeter.

Changed

• STANDARD and MANAGER delete requests on finished actions now archive the action instead of permanently deleting it.
• Normal My Actions views now exclude archived actions from both open and finished sections.

Fixed

None.

Security

• Permanent deletion is restricted server-side to SUPERMANAGER+ users and removes the action together with comments and audit logs without leaving a deletion audit trail.

Technical

• Added nullable action archive metadata fields and a safe additive Prisma migration.
• Permanent action deletion runs in a database transaction and explicitly removes action comments and audit logs before deleting the action record.

Added

• Mobile topbar menu button that opens a left-side navigation drawer on small screens.

Changed

• Desktop and mobile navigation now share the same menu data and permission visibility rules.
• Documentation now records responsive navigation requirements for mobile access.

Fixed

None.

Security

None.

Technical

None.

Added

None.

Changed

• Renamed the administration impersonation menu and page label to English for consistency with the rest of the application.

Fixed

None.

Security

None.

Technical

None.

Added

• ADMIN-only Impersonation page to connect as an active non-admin user for support and validation.
• Topbar impersonation indicator with Back to admin action that restores the original admin session.

Changed

• Administration navigation now includes Impersonation only for ADMIN users.

Fixed

None.

Security

• Impersonation is protected server-side, excludes inactive users and ADMIN targets, and keeps the session cookie opaque and HTTP-only.
• Impersonation START and STOP events are recorded in a dedicated audit log.

Technical

• Added server-side session impersonation metadata and the ImpersonationAuditLog database model with a safe additive migration.

Added

• Action detail page available from My Actions tiles.
• Editable action title, description, assignee, due date and priority fields on the action detail page.
• Append-only action comments with author and timestamp displayed chronologically.
• On-demand action audit trail showing who changed each field, when, and the old and new values.

Changed

• Action tiles now open the detail page when clicking the tile body while preserving completion and priority controls.
• Action detail field edits now save automatically without Save buttons and show a small saved notification.

Fixed

None.

Security

• Action detail, field editing, comments and audit trail access are checked server-side with existing action scope helpers.
• Assignee reassignment is limited to active users from the connected user's current organization.

Technical

• Added Action.description plus ActionComment and ActionAuditLog database models with a safe additive migration.
• Title, assignee, priority and finish mutations now write audit entries only when values actually change.
• Assignee audit entries now store person names instead of user IDs.

Added

• Membership-based organization roles so one user can belong to several organizations with different roles.
• Multi-team memberships so one user can belong to several teams.
• User Management forms to add existing users to organizations or teams without creating duplicate accounts.
• A discreet topbar role badge that shows the connected user's highest effective role with centralized role colors.

Changed

• Administration permissions now compute scope from organization and team memberships while retaining legacy user organization/team fields for migration safety.
• User Management now displays organization members and team members from membership data.

Fixed

None.

Security

• Existing controlled password generation remains one-time only and hashed at rest.
• Server-side perimeter checks now validate organization memberships and team memberships for existing-user assignment flows.

Technical

• Added OrganizationMembership and TeamMembership models plus a migration from existing User.organizationId and User.teamId values.
• Added centralized role helpers for ranking, labels and badge styling, plus reusable action-scope helpers.

Added

• Controlled User Management page for organizations, teams, users and team administration responsibilities.
• Organization and team tenancy model with role hierarchy: Standard, Manager, Supermanager, Director and Admin.
• Secure temporary password generation for controlled user creation and password reset, shown only once.
• Environment-protected bootstrap script to create the first Admin account when no Admin exists.

Changed

• Public self-registration is disabled and account creation is now handled only by authorized users.
• The sidebar now shows Administration and User Management only to Manager-level users and above.
• Legacy roles are mapped to the new role hierarchy during migration.

Fixed

None.

Security

• Administration mutations now enforce server-side role and perimeter checks.
• Temporary passwords are hashed before storage and existing passwords cannot be displayed from the database.

Technical

• Added Prisma models for Organization, Team and TeamAdministrator plus a safe migration for existing users.

Added

• Public MVP information pages for About, Privacy, Terms and Legal.
• Internal legal and deployment documentation for MVP positioning, IP intent and licensing paths.

Changed

• Clarified that Loop is an early-stage MVP for limited evaluation only.
• Clarified separate internal/on-premise and future SaaS tracks.

Fixed

None.

Security

None.

Technical

• Updated project guardrails for intellectual property, deployment and contribution documentation.

Added

• Initial Loop application shell.
• Authentication foundation.
• Quick action creation.
• My Actions compact tile view.
• Finished actions section.
• Discreet application version indicator with changelog access.

Changed

• Added project documentation and Codex guardrails for changelog updates.

Fixed

None.

Security

None.

Technical

None.