Change Log

New Features

• Redesigned Instance Page
  • Each instance now has a clear page with Overview, Domains, Modules, Usage, CLI Commands and Logs sections. You can link straight to a section, and Back returns you to the one you were on.

Improvements

• Smoother Loading
  • While a section loads, you see its outline rather than a spinner, so nothing jumps around when the content arrives.
• Status Banners
  • Banners stack up, one for each thing that is currently happening, such as a module update or maintenance.
• Domains and Modules
  • Domains are listed in the same order everywhere, default first, and modules are sorted A to Z with redesigned rows and version cards.
• CLI Commands
  • The CLI Commands tab is now three simple cards for setting up the CLI, instance commands and module commands, each with a copy button.
• Edit Details and Move to Folder
  • Both have been redesigned. Edit Details tidies your URL as you type, warns you what changing it affects, and refuses thumbnails over 2 MB before uploading them.
• Deleting Instances
  • Editors can now delete staging instances, while production still needs an Admin. After deleting, you return to the folder or list you came from.

Security

• Domain Changes
  • Domain changes are now checked against the instance they belong to.

Bug Fixes

• Fixed the Created date showing when an instance was prepared rather than when it was added to your account.
• Fixed staging instances showing a billing plan, as staging is not billed.
• Fixed making a domain the default clearing its address and status.

Bug Fixes

• The bundled tests module (insites_test 1.3.2) no longer breaks Settings > Insites Modules on instances without the core module. insites-cli test run upgrades it automatically on its next run.

New Features

• insites-cli env add on the private stack now signs you in through the Insites Console in your browser. Check that the sign-in page shows the code the CLI prints, then approve. You need at least edit access to the instance, and --url is now optional.
• env add --instance-uuid <uuid> works out which stack the instance is on by itself.
• New --console-tier <tier> option picks the production (default) or staging Console, and --timeout <seconds> stops waiting for the sign-in sooner.

Improvements

• Clearer env add messages: which stack the instance is on, the sign-in code highlighted, how long the CLI will wait, and the deploy command to run next.

Bug Fixes

• env add now saves the stack with each environment, so an instance on a custom domain no longer falls back to the shared stack.

New feature

• Contacts advanced filter can now filter by profile membership and by fields inside a contact's assigned profiles
• Contacts table Display Fields can now show profile fields as columns, plus a new "Profiles" column listing the profiles a contact holds
• Profile "Media - File" / "Media - Image" fields can now actually be uploaded and saved, not just displayed
• CRM Relationships now carry a start and end date-time, so a relationship can record when it began and when it ended

Security

• Bump the global axios loaded by insites_core's shared admin layout and external CRM activity scripts from EOL 0.x releases to 1.19.0
• Pin previously-floating CDN dependency versions and add Subresource Integrity (SRI) hashes to insites_core's dependency partials
• Regenerating the instance API key now always returns a complete key, and a generation that cannot produce one is rejected rather than overwriting the key you already had. If you regenerated your instance API key on 5.14.x, regenerate it once more after upgrading and update any integration that uses it
• Add an upload_restrictions schema and a shared validate_upload function, so file-upload limits are declared once and enforced consistently
• Add the verified sha512 Subresource Integrity hash and crossorigin to the moment.js tag on the Event Stream view

Improvements

• Every nested object reference in the CRM v2 external API now returns id alongside uuid and its reference label, on every method
• CRM date range filter pills now render in the instance's Localization date format instead of always showing ISO YYYY-MM-DD
• Contacts list Birth Date column now follows the instance Date Format
• Time-type field pickers now follow the instance Time Format (12/24hr)
• Companies list gains combined Phone 1/2/3 and Mobile Phone columns
• Companies export gains the address advanced-group filter, and Contacts/Companies exports now show readable values beside their UUID columns
• The Delete Company modal now shows the real record counts for what will be removed

Bug fixes

• GET /insites/core/administrators/:uuid now returns 404 for an unknown or malformed uuid instead of 200 with an empty result set
• Fix the Custom Fields sidebar Edit button on Company and Contact profile pages opening the Documents tab instead of Custom Fields
• Fix the Company Tasks tab Date Range filter rendering a broken, cut-down picker instead of the full calendar
• Cancel the orphaned WebSocket connectivity-check timer on Instance Configuration unmount
• Fix Data > Reports, Settings > System Logs and the Import Database Items file-attach step failing to render for some users with "Error Loading Components". Every shared component tag now carries a cache-buster, and the cache-buster is no longer fetched over the network at page-render time where a timeout silently dropped it
• Fix linked-record custom fields showing blank when the linked record has no name
• Fix the Contact and Company Event Stream tab always returning zero events, stop add_event leaking into the response body on 36 unwrapped v2 external API endpoints, and guard it so a blank Event Stream response cannot throw ParseJsonTagError
• Fix advanced filters being silently dropped when the sort order includes a non-base field
• Write is_archived: false explicitly on every Contact create path, so new contacts cannot be created in an indeterminate archived state
• Fix the Delete Company confirm input never re-enabling after the record counts finish loading

Breaking Changes

• The external GET /asset/api/v2/assets listing endpoint now requires an instance API key. External integrators must send their instance API key on this endpoint or the request will be rejected.

New Features

• Added asset data charts to the Reports page, covering storage growth, file type breakdown and the largest folders.
• Assets now record their file size at upload. Existing assets are backfilled automatically in the background, so storage figures become accurate without any manual step.
• File size is now shown in the assets list and in the file details panel.

Improvements

• Rebuilt the asset upload experience. The upload limit is raised to 600MB, failures are reported instead of failing silently, progress and the remaining limit are visible, and uploads now run concurrently and can be cancelled.
• Rebuilt the Reports page to a new design, with clearer storage units, full folder paths and improved charts.
• Parent folders now use the folder icon, matching sub-folders.

Security

• Asset names are now escaped everywhere they are displayed, and the image preview has been hardened.
• Closed a case where browsing folders could reveal the names of files outside the folder being viewed.

Bug Fixes

• Fixed File Name search returning no results.
• Fixed "Up one folder" not working from a top-level module folder.
• Fixed folder tree indentation collapsing at deeper levels.
• Fixed the folder tree accordion icon only toggling once, and appearing on folders with no subfolders.
• Fixed the folder tree incorrectly highlighting the root folder after a search or refresh.
• Fixed a folder placeholder appearing as a blank file row.
• Fixed a flash of unstyled content on the initial All Assets page load.
• Fixed the "Updated By" spinner hanging when an administrator could not be resolved.
• Fixed File Size and Last Updated font-size inconsistency in list view.
• Fixed direct asset links carrying a duplicated cache parameter.

Improvements

• Faster Pages
  • Permission checks are now much quicker, and the Dashboard, Instances, instance details and People pages load with far fewer requests, so everything feels snappier.
• One Word: Instance
  • The Console now says "instance" everywhere, including buttons, menus and emails.
• Instances Page
  • Your instances list now has its own address, and signing in always takes you to the Dashboard.
• Tags Are Back
  • Add tags to instances and folders again, and in the Create Instance wizard, using your account's tag list.
• Quicker Timeouts
  • If the Console can't reach the server, it now tells you in about 30 seconds instead of a minute.

Bug Fixes

• Fixed an expired invitation link signing the person into a new, empty account. It is now refused with a clear message.
• Fixed a failed team member removal being reported as successful.
• Fixed account owners being offered fewer roles than they actually hold. Owners always keep full access to every instance.
• Fixed a URL check that timed out in the Create Instance wizard being reported as a failed create.

New Features

• Dashboard
  • A new Dashboard greets you with your account at a glance: how many instances you have, a Needs Attention list for anything that needs action, and your recent deploy activity.
• Account Page
  • The Account page has been rebuilt with sections for your logo, name and account number, contacts, tags and plan usage, all saved together.
• Account Tags
  • Manage your account's tags in one place.

Improvements

• Better Form Fields
  • Text, phone, copy, tag, image and color fields have been rebuilt with clearer labels, better keyboard support and consistent behavior.
• Dialogs, Drawers and Notifications
  • Dialogs move your focus to the right place and give it back when they close, Escape closes one layer at a time, and notifications no longer block clicks on the page behind them.
• People and Invitations
  • Invitations, resends and role changes only show as done once they have really been saved, and expired invitation links are refused with a clear message.
• An Account of Your Own
  • People invited to someone else's account can now create an account of their own.

Bug Fixes

• Fixed the Copy button reporting success when the copy had been blocked.
• Fixed setup progress sometimes moving backwards while an instance was being created.
• Fixed instances being left behind when their folder was deleted.

Improvements

• Add Task Due Date advanced filter for opportunities
• Convert parent-relative imports to @/ aliases; wire sass-loader mixin injection (styling-skill audit safe slice)
• Add referring company field (lead_referred_by_company_uuid) with 5-section form regroup
• Add live thousands-separator masking to currency fields
• Pre-fill Company/Contact on Add Opportunity from a CRM entry point
• Attach a quick-added Company/Contact to the Opportunity form
• Show name (email) across all Pipelines person dropdowns
• Add Quick Selection group to contact/administrator dropdowns; show name (email) format
• Add opportunity activity rollup toggle and attach affordance
• Add opportunity Event Stream tracking for 9 approved gaps
• Replace Company/Contact text labels with icons on opportunity Board card

Bug Fixes

• Fix locale/ISO date mismatch causing the Task Due Date filter to always return 0 results
• Fix report charts using dark-mode colour tokens in light mode
• Fix archived referring company still showing name in opportunity export
• Fix currency mask clearing Value/Sales Target Value fields on blur
• Fix opportunity custom fields API — null definitions, unvalidated selects, silent no-op writes; scope custom_field response to its own pipeline
• Fix geojson custom-field spelling mismatch nullifying custom_field response
• Fix Target Conversion Date labels and day-count off-by-one
• Fix doubled plus sign in constructPhoneNumber
• Wrap long SubHeader titles instead of truncating with ellipsis
• Fix Task drawer Due Date calendar running off the viewport
• Fix excess gap between Activities toolbar and list content
• Fix Link custom field wrapping on opportunity Board card

Improvement

• Error responses keep the page's content type: A page that sets its content type, from its format or via {% response_headers %}, no longer has an error rendered afterwards re-negotiated against the Accept header. Unrecognised formats render as text/plain, and errors on .js pages return a JSON string literal so the browser never parses an error message as script.

• Clear response when an instance has no object storage: Requesting a presigned upload URL used to return nothing, and sync reported a failed fetch. The endpoint now returns 501 with a direct_upload_unavailable error, and the CLI falls back to uploading assets through the instance.

• Host-relative asset URLs with local storage: When an instance serves its own assets from disk, asset_url now returns a host-relative URL instead of pointing at a CDN that never received the files, or raising when no asset host is set. Instances using a CDN are unaffected.

Bug Fix

• Dynamically cached pages without a layout: A page combining dynamic_cache with layout: "" rendered on the first request and then failed on every cache hit. Pages that declare no layout are now served from cache as-is, which fixes cached sitemap.xml pages.

• Redundant Liquid context on cache hits: The layout no longer builds a second Liquid context and reparses the layout value on every dynamic cache hit.

• Partner Portal URLs on non-default ports: An instance registered against a portal on a non-default port dropped the port, so later token validations went to the default port and surfaced as a plain 401. Local setups and private stacks were affected; production was not.

• Swapped exception names in low-level error logs: IP spoofing attempts were logged as missing-parameter errors and vice versa. The 403 and 406 statuses returned were already correct.

New Features

• Show the resolved display value beside the identifier for every data source field in the Database Items export.
• Link single-value data source cells in the Database Items list through to the linked record, matching the item details view.

Bug Fixes

• Default the Platform API v2 list page size to 10 instead of the number of query parameters sent.
• Follow the admin theme rather than the device theme in the Address field's Google Places autocomplete.