Every change we ship, in plain English.

Quieter surfaces so the work gets louder. Sidebars in shell-tone, main panels white, no more card-on-card shadow stacking. 91 pages swept in one pass. Layout mode is now "modern" everywhere — the legacy chrome is gone. Every shell now reads with the same restraint as the marketing site.

Click the launcher tile from cms / crm / accounting and the destination URL now uses the platform domain rather than the current host. No more cross-shell links that quietly point at the wrong subdomain.

After the build, every element on every page is editable in place: setText, setClasses, setAttribute, aiReshape, insertBefore, insertAfter, wrap, unwrap, duplicate, delete, move, setSectionBackground, insertSection, connectToData, improveWithAi. The AI draft is a starting point, not a ceiling. Every EditOp appends a tagged revision so undo is never destructive.

Bind any element to a typed slot. Always available: business name, phone, email, address, opening hours, social links. When you have it: Companies House number and registered office, VAT number, products and product cards, bookable services and a booking widget, course catalogue and instructor profiles, team grid, testimonials carousel, contact form, blog feed. Slots only appear if the underlying module is enabled — so a bind targeting a product grid will not show up on a service business.

Pick a tone preset (more confident, plain, shorter, UK-formal, industry-aware, fix grammar, add CTA power) to rewrite a block in place. Or point the builder at a reference image — Clone mode reproduces the visual shape with placeholders for the parts that are not yours; Inspired mode keeps the structure and rewrites it for your business with your copy and brand.

Hierarchy tree on the left with right-click context menu and insert palette. Live canvas in the centre that scales-to-fit at full 1440 desktop and switches to tablet (768) and mobile (390) viewports. Inspector on the right with seven tabs: content, design, layout, background, animation, responsive, advanced. Tree click reveals and scrolls to the element with a selection ring; instant DOM-patched preview before the server commit.

Every EditOp appends a tagged revision row with an opSummary label. Walk back through history, restore any prior state. The hard publish gate (BPP-5) means draft work never reaches the live site until you approve it.

Drag elements anywhere in the tree or on the canvas; auto-wraps in a sensible container, respects nesting rules, and the bottom drop-zone catches the obvious "stick this at the end" gesture. Window confirm() is gone — every destructive action runs through a branded ConfirmDialog.

Two operators can edit the same site at the same time with live presence cursors. Shared gallery cache keeps image picks instant. Hero and section imagery is generated from prompts that respect your brand colour and tone — Gemini primary with OpenAI fallover, served from the same R2 storage as the rest of YionStack.

Stop maintaining seven divergent navs. Site Chrome means the header and footer are reused across every page; edit once, update everywhere. Hamburger visibility, mobile-menu reveal registry and a MegaMenu primitive complete the navigation system. Match-homepage applies the home aesthetic to any page in one click.

The Pages tab now does what an operator expects: Preview and Edit open in new tabs, drafts are publicly previewable at preview links scoped to the subdomain, slugs deduplicate automatically, dead links are inert until they have a target, and Rebuild routes a single page through the live build screen.

Country-aware sitemap, structured-data emitter, on-page SEO surface and the redirects table all live inside the same shell. SEO is a first-class operating tool, not a plugin.

CPP-1: extended MemberRole with BUYER, BOOKING_CUSTOMER, SUBSCRIBER, CLIENT, GUARDIAN. CPP-2: per-business branded magic-link sign-in at /portal/{slug}/login. CPP-7: customer-portal hydrators for ecommerce, bookings and B2B client. CPP-E1/E2: buyer order list + detail. CPP-B1/B2: booking customer landing + detail. CPP-C1/C2: B2B client area with invoices and projects. One identity for staff, customers, learners and clients — no parallel auth stack.

The platform now speaks the language UK SMEs actually use: "my business", not "my workspace". Full rename across the column, FKs, RLS GUC, class hierarchy and admin URLs. UNIQUE(businessId) on the websites table enforces one website per business — sub-domains, sub-paths and microsites live inside that one website via the domains table.

cms.yionstack.co.uk, crm.yionstack.co.uk, accounting.yionstack.co.uk, mail.yionstack.co.uk, marketing.yionstack.co.uk, commerce.yionstack.co.uk, people.yionstack.co.uk, education.yionstack.co.uk, workplace.yionstack.co.uk and platform.yionstack.co.uk each render their own marketing landing for visitors and their own product chrome for signed-in operators. Apps launcher hops between shells with shared session.

OSG-17.5: connect any IMAP / SMTP mailbox via /settings/integrations/mailbox. AES-256-GCM encrypted credentials live in YionVault automation secrets. The poller pulls mail on a cron and ingests into Workplace inboxes. OSG-27 self-serve mailbox-history migration brings your back-catalogue across.

OSG-28: Caddy on-demand TLS provisions and renews certificates automatically when a customer points DNS at YionStack. Zero ops for the operator, zero ops for the customer. Reserved subdomains protected against takeover.

Passwords are gone. Sign-in is magic link or passkey (WebAuthn) with Google / Microsoft OAuth as identity providers. Intent-aware OAuth carries shop / book / member / client signup intents through the round-trip. Linked sign-in methods on every account.

@nestjs/throttler v6 silently only skipped the "default" named throttler with the bare @SkipThrottle decorator. Replaced with @SkipAllThrottlers on every public/internal route that legitimately needs to be unmetered (health probes, public-site, public files). 50-probe burst tests confirm zero 429s.

Three vault surfaces shipped: a personal vault for an operator's own credentials, a business vault for shared team secrets with role-gated access, and a secure-share flow for time-bound external sharing. All three encrypt at rest, all three are auditable.

OSG-8: the API now publishes a full OpenAPI 3.1 spec on every build. Internal SDKs regenerate from the spec, so type drift between API and clients is caught at compile time, not in production.

mail.yionstack.co.uk now has its own three-pane mail experience (folders / list / reader) wired to the Workplace inbox tables. Dashboards: a configurable custom-desks builder lets operators assemble their own per-role landing surfaces from widgets across modules.

Release control: trigger server updates, package upgrades and dependency bumps from the platform-admin UI rather than SSH. Auto-prune of the docker layer cache when disk hits 75% during build. Page-editor + pages-panel for the platform-admin Website console.

Mature support-session flow: an operator clicks into a tenant from /platform, lands inside their workspace as a clearly-labelled support principal, performs the work, exits cleanly. Every action is audit-logged to the tenant's row and the platform audit log.

New Knowledge module — categorised help articles with slug-based URLs and helpful-vote counters. Three audiences: PUBLIC (marketing site), CLIENT (logged-in B2B portal at /client/help), STAFF (internal-only).

The /portal/{slug}/client surface is feature-complete. Files (workplace_files filtered by client link), timesheets (approved hours by project), projects (kanban / list scoped by clientId), contracts (sign in-portal), help (knowledge base). One identity, one branded surface, one round-trip from your marketing site.

InvoicePaymentService dispatches by provider — Stripe (default) or PayPal. PayPal Orders API integrated; flips on the moment you set PAYPAL_CLIENT_ID + PAYPAL_CLIENT_SECRET. UK businesses with PayPal-paying clients can now accept either rail without leaving YionStack.

Education customers get a full learner experience: home → programme tree → lesson player (video / live / text / external) → quizzes auto-graded → assignments submitted → timetable + library → grades + credentials + account. Five surfaces shipped this week (LDP-L1 through L5).

On 13-page sites the Composer + Copy specialists were truncating output at the maxTokens ceiling and burning the full retry budget on identical truncation. Both now chunk pages into groups of ≤3-4 per LLM call, giving observable progress between chunks and unblocking premium-quality validation.

Numbers will be filled in as soon as the certificates are issued — the placeholder is explicit so there is no ambiguity in the meantime.

No more dashboard-first 404 for stranger arrivals. Indigo /offline rebranded to YionStack tokens. Root error boundary catches render crashes with a reference ID.

New ProjectsSpecialist wraps all 22 ProjectsService methods with proper role gating. NAV_MODULE_TO_AI_SPECIALIST flips central → projects.

WebAuthn passkeys (mig 0030), Stripe Tax automatic_tax on checkout, /pricing public, TrialBanner mounted.

Six operators (platform_admin + 5 role tiers) each in their own dir; capability-aware createPlan pre-flight; decision trace across the orchestration layer.

New education-safeguarding module (DBS, DSL, vetting, branches, calendar, guardians, assessor assignments, moderation versions, findings, corrective actions, external verifier grants). Five new awarding-body packs registered.

Local app uses yionstack_app role (NOSUPERUSER, NOBYPASSRLS) so RLS actually enforces. yionstack admin role bypasses for migrations.

Auth-500 fix, Block[] editor fence, real triage rows, submission PDF, truth-only builder, centre publish-readiness, milestones, checklist-aware drafts (mig 0006).

Fabric.js editor, 26 presets, 8 seed templates, marketing attach bridge, ad readiness heuristics.

Unified search, file preview + rename + provenance, chat edit/delete + attachments, calendar edit. Workplace is the canonical collaboration layer (no Nextcloud).

Email channel attached. Throttler hardened (SkipThrottle-all-named + trust-proxy=1).