Version 0.26.10.23.1 · Beta
Security and reliability maintenance
- Updated the service runtime with the latest security fixes while preserving existing workspace access controls.
Updates
Release Notes
Version 0.26.10.23.1 is the current beta release published on October 23, 2026.
October 23, 2026
Version 0.26.10.15.1 · Beta
Reliable workspace access recovery
- Workspace access interruptions now offer a retry without requiring another Google sign-in.
- Clearer service messages replace misleading stale-session guidance when access checks are temporarily unavailable.
Version 0.26.09.10.1 · Beta
Unified theme and sign-in recovery
- Restored the complete QPSCheck theme, logo system, favicon, and login artwork across the public site and workspace.
- Fixed Refresh sign-in so stale sessions clear cleanly and return directly to the sign-in page.
- Published the canonical release identity for September 10, 2026 with the runtime version and public Release Notes entry kept in sync.
- Updated Cookie Choices so Only necessary and Accept analytics remain keyboard-accessible, clickable, and visibly aligned with the QPS Check brand.
- Release versions now use the unambiguous 0.YY.MM.DD.V format, with the Beta channel displayed separately.
- Production promotion now requires a matching customer-facing Release Notes entry and fails verification when the version or notes drift.
- Company Owners can now add Players within their authorized Organization and Casino scope for real-world operations and testing.
- Player registration remains server-authorized and audited, while cross-Organization and out-of-scope Casino attempts continue to fail without exposing protected records.
- Authorized feedback reviewers can now receive an immediate protected inbox item and Toast when new feedback is submitted.
- Each reviewer can independently choose Toast, email, both delivery methods, or neither from Notification preferences.
- Feedback notification messages stay generic and link back to the protected review page without exposing submitted text, reporter identity, or tenant details.
- Authorized reviewers can now approve acknowledged feedback for implementation by moving it to Planned and documenting the expected outcome and acceptance checks.
- Approved feedback is safely queued into the private engineering workflow with duplicate protection, bounded processing, redaction, and visible implementation progress.
- Feedback remains untrusted product input: it cannot authorize permission changes, policy changes, secret access, code merge, or Production deployment.
- The workflow prepares one isolated implementation and pull request at a time, then waits for human review and separate Production approval before completion.
- Company Owners can now add Games and Tables within their authorized Organization so Casino setup and real-world operational testing can proceed without global administrator access.
- Player pages no longer show a New player action to accounts that are not authorized to create players.
- Player status changes now save reliably when reviewing imported players, including moving a player from Pending Review to Active.
- If a player profile cannot be saved, the page now clearly confirms that no changes were applied and provides a useful next step.
- Staging demonstrations now stay current with realistic recent Casino visits, sessions, buy-ins, and cash-outs.
- Demo activity rotates across active Casinos throughout the day so dashboards, reports, and player workflows remain useful for testing.
- Refreshed the latest Compliance, administration, billing, player, and reporting improvements across both customer environments.
- Revalidated sign-in boundaries, database readiness, scheduled processing, and responsive workflows for a more dependable day-to-day experience.
- Improved keyboard access, text zoom, and responsive layouts across Compliance, Cage operations, Staff access, billing recovery, and player media workflows.
- Compliance alerts can be opened from the keyboard, and wide transaction tables now provide clearer navigation for assistive technology and smaller screens.
- Recurring workspace errors can now create a clean, deduplicated bug in Feedback so important issues are easier to find and act on.
- Automatic bug reports use concise customer-friendly descriptions and include a support reference without copying sensitive account details.
- Improved operational alerts for sign-in problems, permission issues, billing callbacks, database setup, imports, and slow or failed workspace operations.
- Added stronger request tracing so the team can follow an issue from the customer experience through investigation and resolution.
- Added automatic cleanup for short-lived error-tracking metadata so the monitoring system stays bounded over time.
- Organization lists now load Casino counts in bounded batches instead of repeating the same database work for every Organization.
- Audit Logs now load staff names in one bounded batch, making busy audit pages faster and more predictable.
- Added automated query and index assurance so missing, stale, or unbounded database access is detected before a release.
- Verified all required database indexes are ready in both Staging and Production, including Compliance ledger and Casino directory queries.
- Added safer deterministic demo-data verification and archive planning that retains financial and audit history.
- Fixed Start billing so authorized administrators can move directly into secure Stripe Checkout after creating the Casino footprint.
- New Casinos remain inactive until payment is confirmed, while inactive records stay available to administrators for billing review and recovery.
- Billing status can now be refreshed directly from Stripe even when the Casino count has not changed, so canceled or past-due subscriptions do not continue to appear active.
- Subscription quantities now stay aligned with the Organization's active and billing-pending Casino footprint instead of values submitted by the browser.
- Stripe updates use the approved $999 per-Casino monthly price and reject mismatched subscriptions before changing access.
- Billing retries safely resume any unfinished Casino activation without creating duplicate billing activity.
- Complimentary access changes now include clearer audit history for grants, updates, expiration, and revocation.
- Paid access continues when a complimentary period expires and the Stripe subscription is active; canceled or suspended subscriptions are removed from access unless a separate complimentary grant applies.
- Fixed Player Intake so a single visit can record both buy-in and cash-out amounts, with exact net calculations and compliance-ready movement reconciliation.
- Added immediate protected Open player and Session entry actions after completing a new-player intake flow.
- Added an auditable lifecycle reason when archiving or restoring a player and verified that visit, session, and financial history remains available through both transitions.
- Hardened player archive processing so image and video removal is preflighted before the player status changes, deletes only exact player-owned objects, retains checksum and scanner provenance, and stops completely when a legal hold applies.
- Hardened Player Intake, player registration, merge, profile, media, and financial preset submissions so invalid-site requests are rejected before protected form data is parsed.
- Fixed Casino creation when timezone, business-day, and shift settings inherit from the Organization instead of using Casino overrides.
- Corrected new-Casino billing checkout so the requested subscription quantity matches the actual post-create active Casino count without adding an extra Casino.
- Added inactive and archived management views so administrators can find and restore Casinos and Games after their operational status changes.
- Added clear success confirmations to Games, Tables, and Locations after authorized create and update actions.
- Removed the duplicate All assigned Casinos option from Compliance scope selectors.
- Verified Organization, Casino, Game, Table, and Location create, edit, archive, restore, and audit journeys with deterministic authenticated browser tests.
- Hardened Organization, Casino, Game, Table, and Location changes so invalid-site and malformed requests are rejected safely before any record mutation can run.
- Hardened Staff removal and Compliance permission revocation so cross-site requests are blocked before any access change can run.
- Limited bulk pending-access removal to 100 records per request and now reports complete, partial, and failed results clearly so administrators can safely review and retry.
- Replaced internal Table location and game identifiers with readable, Casino-scoped selectors for Location, Default game, and Current game.
- Prevented stale Casino selections when changing Organization scope in Games and Notifications, including direct-link validation before a notification can be sent.
- Kept Staff roster management inside the compact action menu while preserving accessible Manage access and Remove user controls.
- Redesigned Staff User Details with account lifecycle, platform role, organization and Casino access, pending invitations, and permission review in one place.
- Added an authorized last-sign-in timestamp and server-captured IP address to staff account details without trusting browser-supplied network data.
- Added the Bank Administrator permission set for bank-scoped Title 31 staff administration without granting Organization or Casino administration.
- Added role-specific Bank and Cage scope validation so Bank Operators can be assigned only to an authorized Cage while Bank Administrators retain Bank-level staff management.
- Added activation and session-state gates so draft, revoked, expired, or idle-locked customer access cannot load Bank or Casino scope options.
- Enabled Casino Administrators to grant and revoke staff permissions only within their assigned Casinos, with server-side scope checks and audit coverage.
- Limited Bank Administrator staff directories to active Bank-scoped staff assignments in the Banks they manage, without exposing ordinary organization or Casino invitations.
- Added Bank-scoped staff invitations that activate the approved Bank permission set only after the invited user accepts with their own account.
- Fixed duplicate invitation acceptance so an existing matching access grant also finalizes the pending invitation instead of returning the user to the invitation page.
- Added clear, account-safe guidance when an invitation is expired, unavailable, or tied to a different Google account.
- Clarified the Access page when an accepted organization grant is waiting for billing activation.
- Added a worker-only, read-only Gate E scope inventory for Organization, Bank, Casino, Cage, and approved assignment relationships without creating production data.
- Added deterministic checksum-bound Gate E manifest drafts that keep approvals and recovery evidence explicitly pending until the customer packet is complete.
- Updated Title 31 ledger and compliance pages with readable role and field labels, plain-language statuses, correction indicators, and USD-formatted amounts.
- Hardened sensitive Title 31 exports so fresh Google reauthentication waits for the existing client session and never falls back to an ordinary sign-in.
- Kept Bank and Casino permission changes fail-closed, audited, and protected by optimistic concurrency checks.
- Moved pending staff invitations to a dedicated Pending Invitations page with organization and Casino filters and audited removal controls.
- Clarified scoped permission changes so saving an Organization or Casino permission set replaces the prior role at that exact scope instead of leaving an accidental stale role behind.
- Corrected delegated access so Company Owners and Casino Administrators send acceptance-based invitations, while only a Super Administrator's explicit Grant Access action activates access immediately.
- Verified pending-access bulk removal, role boundaries, direct access grants, immediate next-request revocation, and readable access audit history with independent browser sessions.
- Added conflict-safe Feedback review, scoped Notification delivery, Audit filter navigation, and clear retryable Billing launch errors with checkout cancellation and portal-return handling.
Version 0.26.09.02.1 · Beta
Company Owner player registration
- Company Owners can add Players within their authorized Organization and Casino scope.
- Authorized feedback reviewers can choose Toast, email, both delivery methods, or neither for new-feedback alerts.
- Feedback automation safely queues approved feedback into a private, bounded engineering workflow.
Version 0.7.19.26.2b · Beta
Analytics environment wiring and clearer hosted diagnostics
- Added Google Analytics environment wiring for staging and production so the admin analytics page can use the configured GA4 property in both hosted environments.
- Improved analytics failure handling to explain whether the issue is a local credential scope problem or missing hosted runtime access to the GA4 property.
- Logged analytics dashboard failures with runtime identity context so hosted access problems are easier to trace without exposing sensitive credentials.
- Restored the expected Next.js instrumentation entrypoint so the development runtime no longer fails when loading the server instrumentation module.
Version 0.7.19.26.1b · Beta
Lifecycle controls, duplicate merges, and player workflow cleanup
- Added a supervised same-organization duplicate merge flow with dry-run review, required archival reason capture, and full audit coverage.
- Enforced player lifecycle transitions on the server so archive and restore-style changes follow role authority instead of behaving like generic profile edits.
- Refined the player workspace by removing extra guidance panels from the roster and register screens so staff can stay focused on the active task.
- Updated the admin feedback queue so dismissed items no longer appear in the live backlog list.
Version 0.7.18.26.4b · Beta
Player intelligence and operating-hours maturity
- Added server-derived player opportunity scoring with explainable drivers on the player profile.
- Expanded the player profile with advanced insights and casino-footprint analytics.
- Enabled organization defaults with casino-level inheritance and overrides for timezone, business day start, and shift definitions.
- Kept the public landing and login experience aligned with the branded shell while preserving protected-route separation.