Changelog

**Changelog published-date override.** Set or clear a presentation-only published date on a live changelog entry, separate from when it actually went live. The portal list, detail, feed, and sitemap all use the chosen date, and it never sends notifications. ([#288](https://github.com/QuackbackIO/quackback/pull/288))

**One sign-in surface for everyone.** Portal users and team admins now sign in through the same dialog, with a recovery-code break-glass path for SSO-only workspaces. ([#284](https://github.com/QuackbackIO/quackback/pull/284))

**Multiple OIDC identity providers.** Register any number of OIDC providers (Okta, Microsoft Entra, Google Workspace, Auth0, Keycloak, or any OIDC issuer). Each provider carries its own verified domains: emails at a verified domain are routed to that provider, and a domain can be enforced so its users sign in with SSO only. Roles map from the provider's group or role claims, and a claim-attested role provisions regardless of email domain. ([#284](https://github.com/QuackbackIO/quackback/pull/284))

**Redesigned SSO provider editor.** One default-role control, progressive group/claim mapping with autocomplete, full ID-token inspection in the connection test, manual-endpoint support for IdPs without a discovery document, and a per-provider toggle to show or hide the sign-in button. ([#287](https://github.com/QuackbackIO/quackback/pull/287))

**Inline two-factor.** Two-factor enrollment and challenge now happen inside the sign-in dialog instead of separate pages. ([#284](https://github.com/QuackbackIO/quackback/pull/284))

**Portal SSO sign-in.** Portal users at a verified domain can now sign in with SSO instead of being offered it and then rejected at the callback. ([#264](https://github.com/QuackbackIO/quackback/pull/264))

**Simplified and Traditional Chinese.** The portal and widget are now available in zh-CN and zh-TW, served automatically based on browser language. ([#244](https://github.com/QuackbackIO/quackback/pull/244))

**ntfy notifications.** Send notifications to your own devices through the new ntfy integration. ([#242](https://github.com/QuackbackIO/quackback/pull/242))

**Language-aware page rendering.** Pages now declare their language and text direction during server rendering, so right-to-left locales display correctly from the first paint. ([#246](https://github.com/QuackbackIO/quackback/pull/246))

**Structured server logs.** Self-hosted deployments now emit structured JSON logs for easier searching and monitoring. ([#245](https://github.com/QuackbackIO/quackback/pull/245))

**Analytics is now generally available.** The dashboard is out of Labs and on for every workspace, with period-over-period trends on each metric, a clearer activity chart, and full mobile and tablet support. ([#198](https://github.com/QuackbackIO/quackback/pull/198))

**Integration credentials from the environment.** OAuth app credentials for integrations can be supplied via `INTEGRATION_<PROVIDER>_*` environment variables by setting `PLATFORM_CREDENTIALS_SOURCE=env`. The default (database, managed in the admin UI) is unchanged. ([#209](https://github.com/QuackbackIO/quackback/pull/209))

**Conversations (new, experimental, off by default).** A real-time chat channel in the widget plus a shared agent inbox. Visitors message your team and see typing indicators and read receipts; agents triage from one place with assignment, priority, status, labels, internal notes with @-mentions, message reactions, saved-for-later, and search. Turn it on from the Labs settings.

**Email replies for conversations.** Agents can reply by email and the visitor's response threads back into the same conversation. Requires configuring an inbound email address.

**Convert a conversation into feedback.** Turn a support chat into a feedback post, or upvote a similar existing post on the visitor's behalf, in one step.

**Customer satisfaction (CSAT).** Visitors can rate a closed chat, rolled up in a new Support section of Analytics.

**Granular board access.** A per-board permission matrix controlling view, vote, comment, and submit independently, each open to anyone, signed-in users, specific segments, or team only, with Public and Private presets. ([#191](https://github.com/QuackbackIO/quackback/pull/191))

**Private portals.** Require sign-in to view the portal, with access granted by team membership, trusted email domains, email invites, customer segments, or widget sign-in. Private portals are excluded from search engines and feeds.

**Post and comment moderation.** Optionally hold submissions for review before they publish, configurable per board or workspace-wide and separately for anonymous and signed-in authors, with an approve and reject queue.

**Brazilian Portuguese.** The portal and widget are now available in pt-BR, served automatically based on browser language. Contributed by @arthurbarret0. ([#194](https://github.com/QuackbackIO/quackback/pull/194))

**More customer segments.** Group people by country, language, last-active recency, and signup source.

**Widget home screen.** A new landing tab that greets visitors, points them to the right section, and previews your latest changelog entry, with help articles and messaging combined under one Help surface.

**Reactions show who reacted.** Hover a reaction on a comment or chat message to see who is behind it.

**Reworked authentication settings.** Sign-in providers are managed from one place with a single toggle each, custom identity providers offer a preset picker with issuer auto-detection, and guardrails stop you from locking yourself out.

**Richer audit log.** Each event now records the request ID, actor type, and sign-in method, all included in the CSV export.

**Multi-architecture Docker image.** Official images now run natively on both Intel and ARM. ([#195](https://github.com/QuackbackIO/quackback/pull/195))

**Faster managed-cloud onboarding.** New `workspace.onboardingComplete` flag in the config-file schema lets the control plane mark the workspace as set-up at provision time, so CP-provisioned tenants skip the OSS `/onboarding` wizard and land straight at `/admin`.

**Magic-link auto-redirect.** `/verify-magic-link` now auto-triggers the verify endpoint on mount with a short delay (preserves the email-prefetch defense), and hides the manual Continue button for the first 5 seconds so the happy path lands without a competing CTA.

**Single sign-on with custom OIDC.** Connect any OpenID Connect provider as its own sign-in card, separate from the social login grid. A built-in Test sign-in flow runs a live diagnostic handshake so you can verify the connection before rolling it out.

**Two-factor authentication.** Users can enrol in TOTP-based 2FA from their profile; admins can require 2FA workspace-wide for password sign-in or reset another user's enrollment.

**Recovery codes.** Generate one-time break-glass codes to sign in when SSO or 2FA is unavailable.

**SSO enforcement.** Require SSO for verified email domains, so members on those domains can only sign in through your identity provider.

**Security audit log.** A new feed records security-sensitive actions (auth config changes, SSO secret updates, 2FA resets, domain enforcement, sign-ins) with an admin UI to review them.

**Sign-in defenses.** Sign-in attempts are now rate limited, and signing in from a new device sends a notification email.

**SSO provisioning controls.** Choose which role JIT-provisioned SSO users receive, and map roles from IdP claims via configurable attribute mapping.

**Declarative configuration file.** Quackback can read settings from \`/etc/quackback/config.yaml\` and keep them reconciled; managed fields are locked in the admin UI so the file stays the source of truth.

**Workspace lifecycle states.** Workspaces now have an explicit state (active / suspended / deleting) with an inline overlay and appropriate responses when not active.

**Reorganized admin settings.** API Keys, Webhooks, and MCP are now one tabbed API page; Members, Integrations, and Security are grouped under Administration; SSO has its own page with a status chip in the nav.

**Per-board Discord channels.** Discord notifications now support per-channel routing with board filters, matching Slack. Add multiple channels, scope each to a specific board, and pick which events fire (post created, status changed, comment created).

**Filter chips on the public feedback portal.** A new chip-based filter UI replaces the legacy Filter button. Status, Tag, Vote count, Created date, and Team-response filters can each be added, swapped, or removed inline; chips are translated across all 6 locales. Boards joined the chip system on this release, so the mobile board sheet has been retired in favour of the unified filter UI.

**Roadmap toolbar parity.** The public roadmap page now shares the feedback page's toolbar pattern: searchable Sort combobox, Search popover, and a Filter button on a single row across desktop and mobile. The roadmap selector is a horizontal scrolling tab strip with snap-to-column behavior, and Kanban columns scroll horizontally with chevron + fade affordances and an internal column scroll capped to viewport height.

**More filter dimensions on the public portal.** Public post queries now respect `minVotes`, `dateFrom`, and `responded` filters. Complete and closed posts are hidden by default unless a Status chip overrides it.

**Edit your own comments.** Comment authors and team members can now inline-edit comments after posting. Edited comments show an `(edited)` marker. (#149)

**Set help-center article author via API and MCP.** Articles created or updated through the API/MCP can now specify an author principal. Internal: this came alongside an API-layer cleanup that standardises how endpoints handle authentication and ID validation. (#147)

**Markdown rendering for changelogs and posts** - Content created via the rich text editor, MCP, or API now stores markdown alongside TipTap JSON. The server auto-derives contentJson from markdown when only plain text is provided, ensuring consistent rendering everywhere

**Redesigned public changelog** - The changelog page now displays a full-article feed with a date sidebar, rendered rich content, and linked feature cards, similar to a blog layout

**Cascade delete linked integration issues** - When deleting a post that has linked issues in external platforms, the delete dialog now shows each linked issue with a checkbox to archive/close it. Supports Linear, GitHub, Jira, GitLab, ClickUp, Asana, Shortcut, Azure DevOps, Trello, Notion, and Monday. Integration icons and human-friendly issue identifiers (e.g. QUA-24, #142) are shown in the dialog

**Per-integration on-delete behavior config** - Each integration's settings page now has an "On post delete" option to control whether linked issues are archived/closed by default

**API extensions and Canny adapter** - New API-to-API import pipeline with a Canny adapter for migrating feedback, votes, comments, and users from Canny to Quackback.

**Anonymous voting** - Users can upvote posts without signing in. Controlled by a per-workspace feature flag (enabled by default). IP-based rate limiting prevents abuse by counting anonymous sessions per IP.

**Anonymous posting** - Users can submit feedback without an account. Controlled by a workspace feature flag (disabled by default). Anonymous sessions are created lazily via Better Auth's anonymous plugin.

**Anonymous commenting** - Users can comment on posts without signing in. Controlled by a workspace feature flag (disabled by default).

**Workspace permissions page** - New admin settings page under Settings > Permissions to toggle anonymous voting, posting, and commenting per workspace.

**Widget post detail view** - Full post detail with voting, comments, threaded replies, status badge, author name, and relative timestamps inside the embedded widget.

**Widget SDK event system** - Host apps can subscribe to widget events (vote, post:created, comment:created, identify) via Quackback('on', eventName, handler). Supports on/off commands and returns unsubscribe functions.

**Widget metadata** - Host apps can attach key-value metadata to widget sessions via Quackback('metadata', { key: value }). Metadata is stored on posts created through the widget.

**One-time token session transfer** - Widget sessions can be transferred to the portal via secure one-time tokens, so users clicking "View full discussion" arrive already authenticated.

**Vote removal for admins** - Admins can remove any vote (direct or proxy) from the voters modal on a post. Hover over a voter row to reveal the remove button.

**Proxy vote MCP tool** - AI agents can add votes on behalf of users via the new proxy_vote tool (22 to 23 MCP tools total).

**Proxy vote DELETE endpoint** - Remove proxy votes via the REST API at DELETE /api/v1/posts/:id/vote with OpenAPI docs.

**Slack integration** - Two new ways to send feedback from Slack. The "Send to Quackback" message shortcut lets team members forward any Slack message as feedback with one click. Channel monitoring auto-ingests messages from configured channels into the feedback pipeline.

**AI signals progressive disclosure** - AI-generated insights (duplicates, merge suggestions, similar posts) are surfaced contextually in the post modal via a signal summary bar and similar posts card instead of a separate banner.

**Bidirectional merge** - Merge suggestions now support swapping direction so you can choose which post to keep as canonical.

**Activity timeline** - Every post now has an activity tab showing status changes, merges, tag changes, owner assignments, proxy votes, and other events in reverse chronological order.

**Proxy voting** - Admins can vote on behalf of users with full attribution tracking. The voters modal shows who added each vote.

**Author selector** - Admins can choose the post author when creating posts, with a searchable member dropdown and inline user creation.

**AI usage logging** - All pipeline steps (extraction, quality gate, embedding, suggestion matching) now log token usage, latency, and retry counts to the ai_usage_log table. A separate pipeline_log table tracks ingestion events end-to-end.

**Public API expansion** - Five new REST endpoints for managing AI suggestions (list, accept, dismiss, restore) and viewing post activity logs. Existing post endpoints now return summary, merge, and lock fields.

**MCP server expansion** - Five new MCP tools: list_suggestions, accept_suggestion, dismiss_suggestion, restore_suggestion, and get_post_activity (17 to 22 tools total). Enriched search and detail tools with summary, merge, and lock fields.

**Redesigned merge duplicate flow** - Replaced side-by-side post card layout with stacked cards showing duplicate/canonical direction, a merged result preview card with combined vote and comment counts, and a confirmation dialog before merging. Added post-merge resolved state with inline undo and view actions.

**Unified team settings table** - Replaced two-section layout (members list + pending invitations card) with a single TanStack Table showing both members and invitations inline. Invitations display an "Invited" badge, sent date, and color-coded expiry text. Added global search filtering across all rows.

**Link-based password reset** - Replaced OTP-based forgot-password flow with email link-based reset using 24-hour token expiry. Users now receive a reset link instead of a 6-digit code, with a dedicated reset password page at /auth/reset-password.

**Profile password management** - Added password change/set form to user profile settings. Users with an existing password can change it; OAuth/OTP-only users can set one for the first time.

**Voter subscription controls** - Admins can now view and change notification subscription levels for individual voters directly from the voters modal, with colored badges and inline dropdown editing.

**Author link in admin posts** - The author field in the post metadata sidebar now links to the admin users page with the author pre-selected for quick navigation.

**Date filtering for MCP search** - `dateFrom` and `dateTo` params on the MCP `search` tool enable date-range queries like "what feedback did we get in June 2024?" (#61)

**Date filtering for public API** - `GET /api/v1/posts?dateFrom=2024-06-01&dateTo=2024-06-30` now supported, matching MCP parity (#61)

**Principal date index** - composite `(role, created_at)` index on the principal table for efficient date-filtered portal user listings (#61)

**SEO meta tags** - all portal pages (feedback, posts, changelog, roadmap) now render title, description, Open Graph, and Twitter Card meta tags with canonical URLs (#60)

**Dynamic sitemap and robots.txt** - `/sitemap.xml` includes all public posts, changelog entries, and static pages with `lastmod` timestamps; auto-paginates via sitemap index when exceeding the 50,000 URL protocol limit; `/robots.txt` blocks admin, auth, and API paths (#60)

**ESLint import conventions** - new rules enforce `@quackback/ids` imports and consistent `type` import style across the codebase (#60)

**OpenAPI release workflow** - GitHub Actions workflow generates and attaches `openapi.json` as a release asset on publish (#60)

**Startup banner** - logs build version, git commit, environment, runtime, and base URL when the server starts (#57, #58)

**MCP delete/restore tools** - new `delete_post` and `restore_post` tools for the MCP server, letting AI agents soft-delete and restore posts programmatically (#53)

**Admin post delete/restore** - admins can now soft-delete posts from the post modal with a confirmation dialog, and restore them within a 30-day window. A new "Deleted posts" filter in the inbox sidebar shows recently deleted posts (#52)

**S3 proxy mode** - Added `S3_PROXY` environment variable that streams S3 file bytes through the server instead of issuing a 302 redirect to a presigned URL. Enable this when the browser can't reach the S3 endpoint directly - common with ngrok tunnels, HTTPS apps pointing at HTTP MinIO, or Docker networking where the S3 host is internal-only.

**Password authentication** - email + password is now the default sign-in method for both portal users and team members

**Comment status changes** - status transitions are recorded inline as comment events, giving full context in the conversation thread

**Comments lock** - admins can lock comments on a post to prevent further portal user replies

**Shared error & 404 pages** - consistent error handling with a root error boundary

**Portal filtering** - public portal now supports filtering by status and tags

**Scheduled changelog publishing** - changelogs can be scheduled for future publish via the `changelog.published` event