A record of improvements, fixes, and new features shipped to the Workel platform.
All four backend services (Laravel API, Payment Service, AI Agent Service, YJS Server) deployed to Azure App Service. File storage migrated from local disk to Azure Blob Storage with geo-redundant storage. 32 secrets configured in Azure Key Vault. Over 100 files migrated to cloud storage.
Comprehensive audit of the Tiptap rich text editor system across the full stack. Found and resolved 45 issues across 7 critical, 12 high, and 26 medium/low severity findings. Fixes include authorization enforcement on page content updates, broadcast channel access control, image upload validation, and production logging cleanup.
End-to-end refactor of the workspace and project invitation system. Fixed 45 bugs including deferred billing from invite-time to acceptance-time, added expiration enforcement, created authorization policies, and resolved cross-workspace data leakage. 37 new tests added covering all invitation flows.
Defense-in-depth permission refactor across backend policies, route middleware, and broadcast channels. Added ClipPolicy and TaskCommentPolicy, fixed broadcast channel authentication for DMs, reduced permission cache TTL for faster role propagation, and gated frontend UI elements by role.
Complete overhaul of subscription usage tracking. AI credits now enforced via middleware, storage limits checked on upload, project and user deletions properly decrement counters. All operations use atomic database increments to prevent race conditions. Weekly storage recalculation scheduled for drift detection.
Added the ability to archive and unarchive projects from the sidebar context menu, project grid cards, and list views. Archived projects are hidden from the main project list and sidebar but can be revealed with a toggle. Full stack implementation including migration, API filtering, and frontend UI.