Tymeslot

[1.1.0] — 2026-06-16

Bug Fixes

• core: Correct sender identity in host operational alert emails
• core: Treat unfinished Stripe onboarding as incomplete, not restricted
• core: Distinguish superseded from expired email verification links
• core: Stop duplicate emails when SMTP delivery is slow
• core: Keep verification and reset links valid after a resend
• core: Repair custom-field min/max persisted as JSON numbers
• core: Prevent Google Calendar sync crash on token-refresh failure
• core: Harden crash reporter and skip it when admin alerts are disabled
• core: Prevent admin-alert floods from repeated crashes and job failures
• core: Attach crash reporter after the supervision tree is up
• core: Correct crash reporter loop-prevention domain filters
• core: Update final onboarding step CTA to go to dashboard
• core: Correct Docker Compose env forwarding, volumes, and DB config
• core: Stop endless sync retries when a calendar is deleted on the provider side
• core: Auto-deselect Google calendars deleted on the provider side
• core: Make POSTGRES_PASSWORD optional when building the Docker image
• core: Prevent admin alert email floods when many jobs fail at once
• core: Redact calendar identifiers and token-bearing paths from logs
• core: Keep password-reset and verification links out of job logs
• core: Redact identifiers from request and LiveView logs
• core: Update final onboarding step CTA to go to dashboard
• core: Correct Docker Compose env forwarding, volumes, and DB config
• core: Make the calendar private-IP guard configurable
• core: Fill missing English catalogue entries for new messages
• core: Reject theme video uploads when transcoding is unavailable
• core: Give dropdown dialogs accessible names
• core: Improve the dashboard tour on small screens
• core: Restore centred embed layout and make wide layout opt-in
• core: Translate booking flash messages
• core: Remove orphaned calendar events when booking sync fails
• core: Block private-network addresses in calendar server URLs
• core: Prevent a crash when dismissing an announcement twice
• core: Prevent locking yourself out of sign-in settings
• core: Validate custom question answers and bounds more strictly
• core: Improve paid booking reliability and payment errors
• core: Keep video meeting links in sync when bookings change
• core: Protect Slack webhook secrets and handle rate limits
• core: Validate LiveComponents via live/0 instead of optional update/2
• core: Fill missing English translation for "New feature" label
• core: Keep dashboard sidebar fixed while only the content scrolls
• core: Preserve typed answers when navigating booking questions
• core: Reject overly long phone numbers in booking questions
• core: Keep Quill meeting-type cards a fixed size on hover and selection
• core: Size Quill meeting-type step to match the calendar step
• core: Remove clipped copy-link confirmation tooltip in dashboard sidebar
• core: Stop false type-change warning when editing a custom question
• core: Show embed live preview before embed domains are configured
• core: Copy booking link to clipboard on onboarding ready step
• core: Show Rhythm booking meeting-type descriptions on wide screens
• core: Show Quill booking meeting-type descriptions on wide screens
• core: Keep Quill booking time-slot buttons a uniform size
• core: Keep Quill booking time slots scrollable and free of overflow on small screens
• core: Reflow the Quill booking overview to fit and use space across screen sizes
• core: Prevent embedded booking from flickering and lurching on resize
• core: Apply all Stripe Connect account updates, not just the first
• core: Translate booker-facing booking and payment strings for de/fr/uk/it
• core: Show payment confirmation time in the attendee's timezone
• core: Let attendees return to booking after a cancelled payment
• core: Stop admin alerts for benign Connect application_fee events
• core: Record disputes and refunds that arrive before payment confirmation
• core: Allow refunds when no reason is supplied
• core: Record Stripe charge id to enable refunds and disputes
• core: Fix checkout failure for paid bookings
• core: Heal booking_payments attendee columns to nullable on stale databases
• core: Pass event details when provisioning video room from calendar edit
• core: Seed custom answers for embedded paid booking confirmation
• core: Allow disconnecting a Slack OAuth integration
• core: Harden DashboardTour hook against scroll-jack and resize
• core: Persist dashboard tour completion across all dismissal paths
• core: Make dashboard tour backfill irreversible
• core: Preserve first-seen timestamp on dashboard tour mark
• core: Anchor sidebar tour step on the real aside element
• core: Dim page on welcome step of dashboard tour
• core: Cancel stale anchor polling in DashboardTour hook
• core: Accept both yes and no as valid answers to a yes/no question
• core: Keep edit button visible on each custom-question list row
• core: Assign empty custom-field defaults on honeypot path and tighten typespecs
• core: Note acknowledgement not accepted in custom questions wizard
• core: Persist custom_fields through the meeting type save path
• core: Handle malformed step nav and single-question wizard skip
• core: NoteAckValidator must reject non-UTC timestamps
• core: Tighten TimeValidator and DateValidator strictness
• core: Keep dropdown phx-click-away bound when closed
• core: Show Zoom as an OAuth provider in the video integration list
• core: Repair Zoom meeting creation and harden the OAuth flow
• core: Prevent Zoom meeting creation crash on malformed datetime
• core: Tighten Zoom provider stub edge cases and adapter dispatch
• core: Align Slack channel picker dropdown with design tokens
• core: Polish Slack integration form before launch
• core: Tighten Slack integration lifecycle and error reporting
• core: Correct Slack worker retry handling and rate-limit backoff
• core: Allow disabling password auth when no admin auth path is currently active
• core: Block password auth disable when any admin still uses it
• core: Redirect non-admins to dashboard from admin page
• core: Show Baikal in the dashboard calendar integration list
• core: Remove jumping hover effect on action buttons
• core: Enforce refund window in cancel-meeting modal
• core: Correct refund and disconnect flow in host payments dashboard
• core: Show Pro and Stripe-required automation gates as user flashes
• core: Make Stripe Connect onboarding country configurable
• core: Block default currency change when pending payments exist
• core: Omit application_fee_amount when zero in Stripe Checkout sessions
• core: Prevent duplicate payment notification emails on Oban retry
• core: Return 503 when Stripe Connect webhook secret is missing
• core: Serialise charge.refunded webhook against in-app refunds
• core: Recover meeting state when paid checkout completes after expiry
• core: Close TOCTOU race when host disconnects Stripe with pending bookings
• core: Preserve booking payments past host deletion with nil attendee data
• core: Use integer arithmetic for payment money math
• core: Correct PaymentsLive dashboard correctness pass
• core: Serialize concurrent refund attempts and block refunds on disputes
• core: Correct Stripe Connect onboarding race and replay idempotency
• core: Persist Stripe charge id on checkout completion
• core: Widen Webhooks @spec to cover full feature_access error union
• core: Drop the literal "there" salutation on anonymous refund emails
• core: Include awaiting_payment in slot conflict queries
• core: Add awaiting_payment and expired statuses to meeting state machine
• core: Fix pixelated Cloudron dashboard icon
• core: Show booker-facing emails in the recipient's language for de/fr/uk
• core: Return bare access token from Teams OAuth fallback refresh
• core: Show calendar reconnect prompt when event creation needs reauth
• core: Allow disconnecting a Slack OAuth integration
• core: Harden DashboardTour hook against scroll-jack and resize
• core: Persist dashboard tour completion across all dismissal paths
• core: Make dashboard tour backfill irreversible
• core: Preserve first-seen timestamp on dashboard tour mark
• core: Anchor sidebar tour step on the real aside element
• core: Dim page on welcome step of dashboard tour
• core: Cancel stale anchor polling in DashboardTour hook
• core: Accept both yes and no as valid answers to a yes/no question
• core: Keep edit button visible on each custom-question list row
• core: Assign empty custom-field defaults on honeypot path and tighten typespecs
• core: Note acknowledgement not accepted in custom questions wizard
• core: Persist custom_fields through the meeting type save path
• core: Handle malformed step nav and single-question wizard skip
• core: NoteAckValidator must reject non-UTC timestamps
• core: Tighten TimeValidator and DateValidator strictness
• core: Keep dropdown phx-click-away bound when closed
• core: Align Slack channel picker dropdown with design tokens
• core: Polish Slack integration form before launch
• core: Tighten Slack integration lifecycle and error reporting
• core: Correct Slack worker retry handling and rate-limit backoff
• core: Allow disabling password auth when no admin auth path is currently active
• core: Block password auth disable when any admin still uses it
• core: Redirect non-admins to dashboard from admin page
• core: Show Baikal in the dashboard calendar integration list
• core: Remove jumping hover effect on action buttons
• core: Show Zoom as an OAuth provider in the video integration list
• core: Repair Zoom meeting creation and harden the OAuth flow
• core: Prevent Zoom meeting creation crash on malformed datetime
• core: Tighten Zoom provider stub edge cases and adapter dispatch

Features

• core: Show a loading spinner while opening Stripe Connect onboarding
• core: Auto-save meeting type edits as you change them
• core: Show price and custom-question count on meeting type cards
• core: Add slow fade animations to the dashboard tour
• core: Add a cooldown to the resend verification email button
• core: Attach global crash reporter at startup
• core: Rate-limit crash alerts with one throttle notice per window
• core: Classify and forward process crashes to AdminAlerts
• core: Add CrashReporter crash-filtering predicate
• core: Register unhandled_crash admin alert type
• core: Add admin alerts for permanently failed Oban jobs
• core: Add config-driven extra static sources to the endpoint
• core: Announce custom questions, payments and Zoom in a what's-new modal
• core: Support expiry, admin preview and docs links in announcements
• core: Widen the Quill booking card on short, wide viewports
• core: Trim trailing empty weeks so the booking calendar fits
• core: Fit Quill and Rhythm booking pages to short viewports
• core: Add a payments dashboard for Stripe Connect, currency, and refunds
• core: Let hosts set a price on paid meeting types
• core: Toggle meeting payments from the admin settings page
• core: Show reconnect prompt for revoked video integrations
• core: Default new embed snippets to column layout
• core: Auto-fit embed height and add column layout option
• core: Add Reconnect button to pending Slack OAuth integrations
• core: Add post-onboarding dashboard tour
• core: Add dashboard tour overlay styles
• core: Add DashboardTour JS hook for spotlight positioning
• core: Wire dashboard tour state into DashboardLive
• core: Tag dashboard layout elements with data-tour anchors
• core: Add TourOverlay LiveComponent
• core: Add dashboard tour step catalog
• core: Expose dashboard tour helpers from Auth context
• core: Add mark_dashboard_tour_seen user query
• core: Migrate users.dashboard_tour_seen_at with backfill
• core: Add dashboard_tour_seen_at field to user schema
• core: Gate custom booking questions behind a feature flag
• core: Redesign custom questions step with in-brand answer controls
• core: Edit custom question options as individual fields
• core: Show custom-field answers on host booking cards
• core: Include custom-field answers in ICS event description
• core: Include custom-field answers in appointment emails
• core: Show custom-field answers on Rhythm confirmation step
• core: Show custom-field answers on Quill confirmation step
• core: Confirm before clearing type-specific config on type change
• core: Add custom questions builder to meeting type form
• core: Persist custom-field snapshot and answers on booking submission
• core: Add Rhythm CustomQuestionsComponent for booker custom fields
• core: Wire :questions step into Quill scheduling LiveView
• core: Add Quill CustomQuestionsComponent for booker custom fields
• core: Insert :questions step into scheduling state machine
• core: Add CustomQuestions.Engine state machine for the booker wizard
• core: Add CustomFields context module
• core: Add CustomFields.Snapshot for freezing field definitions onto bookings
• core: Add CustomFields.Validator dispatching by field type
• core: Add select, multi_select, yes_no, note_ack field validators
• core: Add phone, url, date, time, number field validators
• core: Persist custom_fields_snapshot and custom_field_answers on meetings
• core: Embed custom_fields in MeetingTypeSchema
• core: Add FieldDefinition embedded schema for custom-field definitions
• core: Add FieldOption embedded schema for custom-field selects
• core: Add custom_fields and custom_field_answers columns
• core: Export dropdown helpers from CoreComponents
• core: Add standardised dropdown component
• core: Add dropdown design tokens
• core: Sync Zoom meetings when bookings are rescheduled or cancelled
• core: Remove Zoom integration automatically when uninstalled from Zoom
• core: Add Zoom as a video meeting provider
• core: Create real Zoom meetings via Zoom REST API v2
• core: Add Zoom OAuth authorization-code flow
• core: Register Zoom as a video provider
• core: Allow refreshing Slack channel list without reopening the form
• core: Notify Slack when meetings are booked, cancelled, or rescheduled
• core: Configure Slack via runtime environment variables
• core: Add Slack dashboard UI
• core: Add Slack input validation helper
• core: Make slack_oauth_available config gate OAuth UI
• core: Add Slack OAuth start/callback controller
• core: Add Slack.OAuth helper with signed state tokens
• core: Clean stale pending OAuth stubs before new install
• core: Auto-disable Slack integration when webhook URL is revoked
• core: Register Slack runtime config defaults
• core: Add Slack.Dispatcher event entry point
• core: Add SlackWorker for async message delivery
• core: Add Slack context module
• core: Add Slack.SlackQueries data access module
• core: Add Slack.MessageBuilder for Block Kit payloads
• core: Add Slack.API HTTP client
• core: Add oauth_init and set_channel changesets to SlackIntegrationSchema
• core: Add SlackDeliverySchema and slack_integration factory
• core: Add SlackIntegrationSchema with OAuth + webhook URL modes
• core: Add slack_deliveries table
• core: Add slack_integrations table
• core: Add SSO, reCAPTCHA, and admin alert toggles to admin settings
• core: Disable password-auth toggle when lockout would apply
• core: Show display name and booking slug in admin users table
• core: Protect admin panel from auth lockout and allow self-demotion
• core: Add admin control panel for self-hosted installs
• core: Group calendar providers into OAuth and CalDAV sections
• core: Add Baikal CalDAV calendar integration
• core: Show what's-new modal on dashboard for unseen feature announcements
• core: Cancel in-flight bookings when host disconnects Stripe
• core: Translate meeting payments into de/fr/it/uk
• core: Retain payment records past user deletion for tax compliance
• core: Support paid bookings inside embed iframes via window.open
• core: Add telemetry events for payments operations
• core: Refresh Connect account state on return from Stripe onboarding
• core: Add reconciliation worker for awaiting_payment meetings
• core: Email hosts when Stripe restricts their connected account
• core: Email hosts when Stripe opens a dispute on their booking
• core: Email attendees when their booking payment is refunded
• core: Add received-amount summary to organiser confirmation email
• core: Add receipt block to attendee confirmation email
• core: Add refunds context and host dashboard refund flow
• core: Handle account.updated Connect webhook to refresh host capability flags
• core: Handle charge.dispute.closed Connect webhook to reconcile booking status
• core: Handle charge.dispute.created Connect webhook to mark booking disputed
• core: Handle charge.refunded Connect webhook to reconcile refunds
• core: Handle checkout.session.expired Connect webhook to free held slots
• core: Handle checkout.session.completed Connect webhook for paid bookings
• core: Add Stripe Connect webhook endpoint with signature and replay protection
• core: Add Rhythm theme payment-processing and payment-cancelled tests
• core: Add Quill theme payment-processing and payment-cancelled return pages
• core: Branch booking orchestrator on paid vs free event types
• core: Add Checkout Session creation for paid bookings
• core: Add currency selector with reset confirmation to payments dashboard
• core: Add status card, payments table, stats, and disconnect to /dashboard/payments
• core: Add Connect Stripe controller for the payments dashboard
• core: Add /dashboard/payments LiveView skeleton
• core: Add Stripe Connect onboarding context with placeholder-first persistence
• core: Add StripeAdapter test seam for Stripe API calls
• core: Retain payment_transactions past user deletion for tax compliance
• core: Add booking_payments schema for paid bookings
• core: Add connect_accounts schema for Stripe Connect
• core: Add payment fields to meeting_types schema
• core: Add :meeting_payments feature atom with default-off self-host gating
• core: Show reconnect prompt for revoked video integrations
• core: Default new embed snippets to column layout
• core: Auto-fit embed height and add column layout option
• core: Add Reconnect button to pending Slack OAuth integrations
• core: Add post-onboarding dashboard tour
• core: Add dashboard tour overlay styles
• core: Add DashboardTour JS hook for spotlight positioning
• core: Wire dashboard tour state into DashboardLive
• core: Tag dashboard layout elements with data-tour anchors
• core: Add TourOverlay LiveComponent
• core: Add dashboard tour step catalog
• core: Expose dashboard tour helpers from Auth context
• core: Add mark_dashboard_tour_seen user query
• core: Migrate users.dashboard_tour_seen_at with backfill
• core: Add dashboard_tour_seen_at field to user schema
• core: Gate custom booking questions behind a feature flag
• core: Redesign custom questions step with in-brand answer controls
• core: Edit custom question options as individual fields
• core: Show custom-field answers on host booking cards
• core: Include custom-field answers in ICS event description
• core: Include custom-field answers in appointment emails
• core: Show custom-field answers on Rhythm confirmation step
• core: Show custom-field answers on Quill confirmation step
• core: Confirm before clearing type-specific config on type change
• core: Add custom questions builder to meeting type form
• core: Persist custom-field snapshot and answers on booking submission
• core: Add Rhythm CustomQuestionsComponent for booker custom fields
• core: Wire :questions step into Quill scheduling LiveView
• core: Add Quill CustomQuestionsComponent for booker custom fields
• core: Insert :questions step into scheduling state machine
• core: Add CustomQuestions.Engine state machine for the booker wizard
• core: Add CustomFields context module
• core: Add CustomFields.Snapshot for freezing field definitions onto bookings
• core: Add CustomFields.Validator dispatching by field type
• core: Add select, multi_select, yes_no, note_ack field validators
• core: Add phone, url, date, time, number field validators
• core: Persist custom_fields_snapshot and custom_field_answers on meetings
• core: Embed custom_fields in MeetingTypeSchema
• core: Add FieldDefinition embedded schema for custom-field definitions
• core: Add FieldOption embedded schema for custom-field selects
• core: Add custom_fields and custom_field_answers columns
• core: Export dropdown helpers from CoreComponents
• core: Add standardised dropdown component
• core: Add dropdown design tokens
• core: Allow refreshing Slack channel list without reopening the form
• core: Notify Slack when meetings are booked, cancelled, or rescheduled
• core: Configure Slack via runtime environment variables
• core: Add Slack dashboard UI
• core: Add Slack input validation helper
• core: Make slack_oauth_available config gate OAuth UI
• core: Add Slack OAuth start/callback controller
• core: Add Slack.OAuth helper with signed state tokens
• core: Clean stale pending OAuth stubs before new install
• core: Auto-disable Slack integration when webhook URL is revoked
• core: Register Slack runtime config defaults
• core: Add Slack.Dispatcher event entry point
• core: Add SlackWorker for async message delivery
• core: Add Slack context module
• core: Add Slack.SlackQueries data access module
• core: Add Slack.MessageBuilder for Block Kit payloads
• core: Add Slack.API HTTP client
• core: Add oauth_init and set_channel changesets to SlackIntegrationSchema
• core: Add SlackDeliverySchema and slack_integration factory
• core: Add SlackIntegrationSchema with OAuth + webhook URL modes
• core: Add slack_deliveries table
• core: Add slack_integrations table
• core: Add SSO, reCAPTCHA, and admin alert toggles to admin settings
• core: Disable password-auth toggle when lockout would apply
• core: Show display name and booking slug in admin users table
• core: Protect admin panel from auth lockout and allow self-demotion
• core: Add admin control panel for self-hosted installs
• core: Group calendar providers into OAuth and CalDAV sections
• core: Add Baikal CalDAV calendar integration
• core: Show what's-new modal on dashboard for unseen feature announcements
• core: Sync Zoom meetings when bookings are rescheduled or cancelled
• core: Remove Zoom integration automatically when uninstalled from Zoom
• core: Add Zoom as a video meeting provider
• core: Create real Zoom meetings via Zoom REST API v2
• core: Add Zoom OAuth authorization-code flow
• core: Register Zoom as a video provider