​

OdontoX v1.7 Stable — internal release notes

​

1. Header — scope and deploy artifacts

• Branches merged: all v1.7 → v1.10 work on main. No long-lived feature branches outstanding.
• Worker version IDs: see Cloudflare dashboard → odontox-server → Deployments. Most recent referenced in entries: hotfix bundle for 0051 + email matrix on 2026-05-21.
• Pages deploy IDs: odontox-app canonical promotion is enforced after every deploy per feedback_commit_deploy memory. marketplace-app is its own Pages project under marketplace-app/.
• Bridge artifacts: Bridge-1.1.0-x64.exe, Bridge-1.1.0-arm64.exe (rename + autostart + tray icon fixes shipped 2026-05-11). v1.0.2 earlier in the window (queue dedup + TIFF retry fix). v1.0.1 before that.

​

2. Headline milestone — Module Marketplace launch

​

Why a separate subdomain

​

Tables (migration 0045, extended by 0050)

• app.marketplace_listings — one row per app. Primary key is id (matches the addon AVAILABLE_MODULES.key from the platform module registry, so a listing and its runtime feature flag share an identity). Display columns: display_name, tagline, long_description_md, pricing_summary, hero_color, category (clinical / admin / infra / comms). Visuals: icon_kind + icon_value (lucide icon name or R2 key for an uploaded image), screenshots jsonb (array of { key, alt }). Lifecycle: status (draft / published / archived), version_label, last_updated_at, sort_order. Catalog metadata: what_you_get jsonb (string array), faq jsonb (array of { q, a }), security_badges jsonb. Relationships: related_modules text[] and dependencies text[] (added in migration 0050). Audit: created_at, updated_at, updated_by. Full DDL in section 5.1.
• app.marketplace_releases — versioned release notes per app. Foreign key listing_id → marketplace_listings.id. Columns: version_label (semver-shaped string), released_at, summary (one-liner), body_md (long-form), is_major flag. Surfaced on the app detail page and at the per-app /apps/<app>/releases feed.

​

Billing model (revenue gate)

1. Tenant clicks Subscribe on a listing → POST /api/v1/protected/marketplace/requests creates an addon_requests row with status='pending'.
2. OdontoX team issues an invoice via Invoice Studio. The “Invoice ready — pay to activate” email goes to the clinic owner.
3. Clinic pays through the bank QR / IBAN / EasyPaisa / JazzCash flow already on subscription invoices.
4. OdontoX team confirms payment → marks request status='approved'. The addon’s module key flips on; the listing’s “Subscribe” button changes to “Open App”; the app_activated email fires with a 3-step quickstart.
5. Cancellation works the same way in reverse — cancel_requested → manual review → cancelled with effective-date prorate.

​

Permissions

• marketplace.view — see the marketplace in the sidebar and browse listings.
• marketplace.request — submit a subscribe request.
• marketplace.cancel — submit a cancel request.

​

Marketing automation

• Invoice ready — “we’ve issued the invoice; here’s how to pay; once paid we’ll activate within one business day.”
• App now live — “your app is on; here’s the 3-step quickstart and the link to open it.”
• New app on Marketplace — broadcast email when a new listing publishes (gated by clinic preference; opt-in).
• What’s new in v2.0 — per-app version release announcement; sent to subscribers of that app only.
• Overdue-invoice reminder — automated daily nudge from the marketplace billing cron.
• 30-day idle nudge — automated weekly nudge for active subscriptions with zero engagement.

​

Cron jobs

• Daily marketplace overdue-invoice nudge — idempotent, rate-capped.
• Weekly marketplace idle-subscription nudge — idempotent, lifts when usage signals reappear.

​

Asset pipeline

• Icon and screenshot uploads — POST /api/v1/protected/superadmin/marketplace/upload writes to R2 with a 2 MB cap and a PNG / JPEG / WebP whitelist.
• Screenshot delivery — auth-gated streaming via /marketplace/screenshots/:listingId/:asset. Screenshots are private to authenticated sessions; nothing is exposed via a public CDN URL.
• Hero artwork — served from assets.odontox.io with a 1-year immutable cache header (not user-uploaded; provisioned per-deploy).

​

Eight seed listings

​

Sidebar flyout (main app)

​

Why this matters operationally

​

3. All public headlines, plus extra technical detail

​

Clinic Owners & Admins

​

Doctors

​

Receptionists (Calendar overhaul — 2026-05-20)

​

Patients & Portal users

​

4. Architecture & data-flow diagrams

​

4.1 Deploy topology

​

4.2 Marketplace request → activate (revenue gate)

​

4.3 Notification event matrix — send-side gating

​

4.4 WhatsApp lifecycle automation

​

4.5 v1.7-era data model (new and extended tables)

​

5. Schema changes — migrations 0027 → 0051

​

5.1 DDL excerpts — headline new tables

CREATE TABLE app.marketplace_listings (
  id                       text PRIMARY KEY,
  display_name             text NOT NULL,
  tagline                  text NOT NULL,
  icon_kind                text NOT NULL,                       -- 'lucide' | 'upload'
  icon_value               text NOT NULL,                       -- lucide name or R2 key
  hero_color               text NOT NULL,                       -- tailwind token
  long_description_md      text NOT NULL DEFAULT '',
  what_you_get             jsonb NOT NULL DEFAULT '[]',         -- string[]
  screenshots              jsonb NOT NULL DEFAULT '[]',         -- {key, alt}[]
  faq                      jsonb NOT NULL DEFAULT '[]',         -- {q, a}[]
  version_label            text NOT NULL DEFAULT 'v1.0.0',
  last_updated_at          timestamp NOT NULL DEFAULT now(),
  pricing_summary          text NOT NULL DEFAULT '',
  category                 text NOT NULL,                       -- 'clinical'|'admin'|'infra'|'comms'
  security_badges          jsonb NOT NULL DEFAULT '[]',         -- string[]
  related_modules          text[] NOT NULL DEFAULT '{}',        -- 0050
  dependencies             text[] NOT NULL DEFAULT '{}',        -- 0050
  status                   text NOT NULL DEFAULT 'draft',       -- 'draft'|'published'|'archived'
  sort_order               integer NOT NULL DEFAULT 0,
  created_at               timestamp NOT NULL DEFAULT now(),
  updated_at               timestamp NOT NULL DEFAULT now(),
  updated_by               text
);

CREATE TABLE app.marketplace_releases (
  id              text PRIMARY KEY,
  listing_id      text NOT NULL REFERENCES app.marketplace_listings(id) ON DELETE CASCADE,
  version_label   text NOT NULL,
  released_at     timestamp NOT NULL DEFAULT now(),
  is_major        boolean NOT NULL DEFAULT false,
  summary         text NOT NULL DEFAULT '',
  body_md         text NOT NULL DEFAULT '',
  created_by      text
);

CREATE TABLE app.addon_requests (
  id                      text PRIMARY KEY,
  clinic_id               text NOT NULL,                        -- FK to clinics.id (enforced in SQL)
  requested_by            text NOT NULL,                        -- users.id
  addon_type              app.addon_type NOT NULL,              -- enum: storage|portal_seats|dicom_imaging|whatsapp_api|ipd|insurance|marketing|mrn
  quantity                integer NOT NULL,
  unit_price_pkr          integer NOT NULL,
  total_price_pkr         integer NOT NULL,
  status                  app.addon_request_status NOT NULL DEFAULT 'pending',  -- pending|invoiced|paid|approved|rejected|cancel_requested|cancelled
  approved_by             text,
  approved_at             timestamp,
  cancelled_at            timestamp,
  cancelled_by            text,
  rejected_reason         text,
  invoiced_at             timestamp,
  invoice_id              text,
  paid_at                 timestamp,
  cancel_requested_at     timestamp,
  cancel_reason           text,
  last_overdue_email_at   timestamp,
  last_idle_nudge_at      timestamp,
  notes                   text,
  created_at              timestamp NOT NULL DEFAULT now(),
  updated_at              timestamp NOT NULL DEFAULT now()
);

CREATE TABLE app.addon_pricing (
  id                                  text PRIMARY KEY,           -- always 'current'
  storage_50gb_pkr                    integer NOT NULL,
  storage_200gb_pkr                   integer NOT NULL,
  storage_500gb_pkr                   integer NOT NULL,
  storage_1tb_pkr                     integer NOT NULL,
  portal_seats_3pack_pro_pkr          integer NOT NULL,
  portal_seats_3pack_pro_plus_pkr     integer NOT NULL,
  module_addon_pricing                jsonb NOT NULL DEFAULT '{}', -- {moduleKey: {pro, proPlus}}
  updated_at                          timestamp NOT NULL DEFAULT now(),
  updated_by                          text
);

CREATE TABLE app.conversations (
  id                    text PRIMARY KEY,
  clinic_id             text NOT NULL REFERENCES app.clinics(id) ON DELETE CASCADE,
  type                  text NOT NULL,                          -- 'patient' | 'staff_peer'
  patient_id            text REFERENCES app.patients(id) ON DELETE CASCADE,
  staff_a_id            text REFERENCES app.users(id) ON DELETE CASCADE,
  staff_b_id            text REFERENCES app.users(id) ON DELETE CASCADE,
  assigned_to_user_id   text REFERENCES app.users(id) ON DELETE SET NULL,
  is_pinned             boolean NOT NULL DEFAULT false,
  is_archived           boolean NOT NULL DEFAULT false,
  is_muted              boolean NOT NULL DEFAULT false,
  snoozed_until         timestamp,
  labels                text[] NOT NULL DEFAULT '{}',
  last_message_at       timestamp,
  last_read_at          jsonb NOT NULL DEFAULT '{}',            -- {userId: timestamp}
  created_at            timestamp NOT NULL DEFAULT now(),
  updated_at            timestamp NOT NULL DEFAULT now()
);

CREATE TABLE app.messages (
  id                  text PRIMARY KEY,
  patient_id          text REFERENCES app.patients(id) ON DELETE CASCADE,
  recipient_id        text REFERENCES app.users(id) ON DELETE SET NULL,
  clinic_id           text NOT NULL REFERENCES app.clinics(id) ON DELETE CASCADE,
  conversation_id     text,                                                -- 0037
  type                app.message_type NOT NULL,                           -- sms|email|portal|call|whatsapp|internal (0037 added internal)
  direction           app.message_direction NOT NULL,                      -- inbound|outbound|internal (0037)
  subject             text,
  message             text NOT NULL,
  status              app.message_status NOT NULL DEFAULT 'unread',
  is_starred          boolean NOT NULL DEFAULT false,
  sent_by             text REFERENCES app.users(id) ON DELETE SET NULL,
  read_at             timestamp,                                           -- 0031
  wamid               text,                                                -- 0037
  whatsapp_status     app.whatsapp_status,                                 -- 0037: queued|sent|delivered|read|failed
  status_updated_at   timestamp,                                           -- 0037
  failure_code        text,                                                -- 0037
  failure_reason      text,                                                -- 0037
  reply_to_id         text,                                                -- 0037
  format              app.message_format NOT NULL DEFAULT 'text',          -- 0037 + 0039 sticker: text|image|document|audio|video|template|sticker
  r2_key              text,                                                -- 0039
  size_bytes          bigint,                                              -- 0039
  created_at          timestamp NOT NULL DEFAULT now()
);

CREATE TABLE app.whatsapp_automations (
  id                        text PRIMARY KEY,
  clinic_id                 text NOT NULL REFERENCES app.clinics(id) ON DELETE CASCADE,
  name                      text NOT NULL,
  trigger_kind              app.automation_trigger_kind NOT NULL,
    -- enum: appointment_upcoming | appointment_missed | last_visit_recall | invoice_overdue
    --     | appointment_requested | appointment_scheduled | appointment_confirmed
    --     | appointment_cancelled | appointment_rescheduled | appointment_no_show
    --     | last_visit_completed
  trigger_offset_minutes    integer NOT NULL,
  template_name             text NOT NULL,
  template_language         text NOT NULL DEFAULT 'en',
  param_mapping             jsonb NOT NULL DEFAULT '{}',   -- {"1": "name", "2": "nextAppointmentTime", ...}
  reconcile_notes           text,
  reconciled_at             timestamp,
  is_enabled                boolean NOT NULL DEFAULT false,
  created_at                timestamp NOT NULL DEFAULT now(),
  updated_at                timestamp NOT NULL DEFAULT now()
);

CREATE TABLE app.doctor_schedules (
  id            text PRIMARY KEY,
  clinic_id     text NOT NULL,
  doctor_id     text NOT NULL,
  day_of_week   text NOT NULL,        -- 'monday' | 'tuesday' | ... | 'sunday'
  start_time    time NOT NULL,
  end_time      time NOT NULL,
  is_off        boolean NOT NULL DEFAULT false,
  created_at    timestamp NOT NULL DEFAULT now(),
  updated_at    timestamp NOT NULL DEFAULT now(),
  UNIQUE (clinic_id, doctor_id, day_of_week)
);

CREATE TABLE app.mobile_role_permissions (
  id           text PRIMARY KEY,
  clinic_id    text NOT NULL REFERENCES app.clinics(id) ON DELETE CASCADE,
  role         text NOT NULL,                 -- 'patient' | 'doctor' | 'admin' | 'receptionist'
  module       text NOT NULL,                 -- e.g. 'appointments' | 'records.treatment_plans' | 'billing.invoices'
  enabled      boolean NOT NULL DEFAULT true,
  updated_at   timestamptz NOT NULL DEFAULT now(),
  UNIQUE (clinic_id, role, module)
);

​

6. New backend modules / files (significant)

• email-gate.ts — shouldSendEmail(clinicId, event, audience, prefsHint?) chokepoint, used by every clinic-operational email site.
• notification-defaults.ts — Source-of-truth defaults + role→audience mapping.
• pkt.ts — Canonical Asia/Karachi date helpers (pktMidnight, pktEndOfDay, pktHour, formatDatePKT, formatDateLongPKT). 5 unit tests at server/src/lib/pkt.test.ts.
• plan-limits.ts — Single source of truth for plan caps (Pro / Pro+ patients, portal seats, storage GB). Supersedes patient-quota.ts.
• amount-limits.ts — assertAmountWithinClinicLimit(db, clinicId, kind, total, currency). 60s TTL cache. Default ceiling 99,999,999.99 (matches numeric column precision).
• short-lived-cache.ts — Worker-isolate 5-minute in-memory cache for hot reads.
• image-conversion.ts — TIFF (utif2) + DICOM (dicom-parser, dental bone windowing 700/3000) → PNG via pure-JS encoder. Runs non-blocking via ctx.waitUntil().
• png-encoder.ts — Pure-JS PNG encoder using CompressionStream('deflate') (RFC 1950 zlib-wrapped) + CRC32. No OffscreenCanvas required.
• backfill-conversations.ts — Idempotent walker materialising conversations rows from existing messages.
• bank-qr.ts + .test.ts — Bank QR upload + render.
• automation-templates.ts — TEMPLATE_DEFAULTS, defaultTemplateForTrigger(triggerKind). defaultLanguage = en_US.
• automation-dispatcher.ts — Shared runOne path for cron + inline dispatch.
• meta-client.ts — markAsRead, sendTemplate, verifyHmac, fetchApprovedTemplates.
• chat-events.ts + .test.ts — SSE event types and helpers.
• chat-flags.ts — chat_v2 per-clinic flag check.
• db-rows.ts — toRows<T>() unwraps drizzle-neon-http .execute() { rows: [...] } shape.
• audit-helper.ts — Actor + on-behalf-of helpers for impersonation-aware audit rows.
• audit-impersonation.test.ts — Tests covering the impersonation filter.
• email-appointment-dispatch.ts, email-appointment-gate.test.ts, email-senders-appointment.ts — Appointment status email dispatcher infra.
• addon-pricing.ts + .test.ts — Storage and seat addon pricing.
• dicom-quota.ts + .test.ts — DICOM AI quota tracking + next_reset + 30-slice clamp.
• document-numbering.ts + .test.ts — Extended with treatmentPlan and prescription in DOCUMENT_TYPES. peekDocumentNumber() helper (read-only preview).
• endpoint-registry.ts — Registry of all API endpoints (used for the auto-generated docs).

• appointment-invoices.ts — Auto-generation of appointment invoices.
• appointment-reminders.ts — Per-clinic reminder cron, hour batched.
• automation-reconcile.ts — Daily reconcile (02:00 UTC) against Meta’s approved template list per clinic.
• eod-email-report.ts — Daily EOD report cron at 21:00 PKT.
• feedback-email.ts — Post-visit feedback nudge cron.
• installment-invoices.ts — Installment-plan invoice generation.
• inventory-expiry-alerts.ts — Inventory expiry + low-stock cron, 4× per day.
• missed-appointments.ts — Missed-appointment follow-up cron.
• rollup-tenant-activity.ts — Tenant activity rollup for the superadmin Tenants module.
• whatsapp-window-closer.ts — 24h window-close event writer (idempotent).

​

7. API surface changes (selected)

• GET /api/v1/protected/users/me/clinics — multi-clinic membership list.
• GET /api/v1/protected/admin/users/multi-clinic — superadmin cross-clinic visibility.
• GET /api/v1/protected/admin/tenants, /tenants/:id/summary, /tenants/bulk-action, /tenants/:clinicId/users/:userId/permission-overrides (GET/POST/DELETE), /tenants/:clinicId/transfer-admin/:newAdminUserId — Tenants module.
• POST /api/v1/protected/conversations — start a WhatsApp conversation by sending a template.
• GET /api/v1/protected/wa-media/:clinicId/:wamidExt — authed inbound WhatsApp media stream.
• GET /api/v1/protected/patients/search-by-phone — encrypted-phone scan via hash + decrypt.
• GET /api/v1/protected/whatsapp-module/tabs — per-clinic tab map.
• GET /api/v1/protected/files/patients-summary — JOIN+GROUP BY aggregation (replaces N+1).
• POST /api/v1/protected/files/:id/convert — TIFF/DICOM PNG conversion (accepts ?force=true).
• GET /api/v1/protected/files/:id — file metadata.
• DELETE /api/v1/protected/files/:id — hard-delete Bridge Inbox file (only patientId IS NULL).
• POST /api/v1/protected/superadmin/marketplace/upload — R2 image upload for marketplace listings.
• GET /api/v1/protected/billing/upgrade-state — { hasPendingRequest } for the trial banner.
• POST /api/v1/protected/admin/clinics/:clinicId/extend-trial — 3 / 7 / up to 365 days extension.
• POST /api/v1/protected/admin/invoices/:id/resend-receipt — resend receipt after a paid-mark with no receipt email.
• POST /api/v1/public-documents/:token/lab-attachments — lab uploads via shared link.
• GET /api/v1/protected/lab-cases/:id/attachments/:key — authed lab attachment fetch.
• POST /api/v1/public/leads — Website Leads public ingest.
• GET/POST/DELETE /api/v1/protected/leads/* — Website Leads protected surface.
• POST /api/v1/appointments/respond — HMAC-signed patient confirm/cancel from email.
• 22 new chat-v2 routes under /api/conversations/*, /api/messages/*, /api/labels, /api/saved-replies, /api/whatsapp/templates.
• POST /api/v1/protected/whatsapp/:clinicId/webhook rewritten media-types branch.
• /api/v1/protected/billing/{usage,addon-pricing,addon-requests} (POST/GET/DELETE) + matching superadmin routes.
• /api/v1/protected/marketplace/* listing API + media surface.
• /api/v1/protected/admin/denco/maintenance/{save,announce,status} — maintenance mode actions (with /admin/maintenance/announce kept as deprecated alias for one release).

• patientNumber on patient create/update.
• medicalHistory payload on POST /patients.
• appointment_settings, time_format on PUT /clinics/:id.
• paymentInstructions.bankAccounts[].qrCodeDataUrl on document settings.
• documentSettings.limits.{maxInvoiceAmount,maxQuotationAmount}.
• notificationPreferences.emailMatrix.
• whatsappPhone on patient update.
• kind: 'owner' | 'member' and clinicName on WelcomeEmail.

• POST /license-requests with requestType=patient_addon → 410 Gone with redirect to /billing/addon-requests.
• Legacy /admin/maintenance/announce — alias for one release.
• Legacy /messages/conversations*, /contacts, /receptionists, /staff/*, /can-initiate/* chat endpoints → 404.

​

8. Cron jobs added / changed

​

9. Configuration / env vars

• STRIPE_DISABLED=true in both top-level [vars] and [env.production.vars] (Stripe paused; webhook handler ACKs every event with 200 immediately without parsing).
• STRIPE_ENABLED = false build-time constant at ui/src/lib/feature-flags.ts.
• SESSION_TIMEOUT explicitly set to 7d in wrangler.toml for default and production; minimum floor of 7 days enforced so env overrides can never shorten sessions below that.
• UAT uat_auth_token cookie name (distinct from prod) — wrangler.toml UAT env var.
• Cloudflare Rate Limiter binding bumped from 100/60s to 300/60s per user per route prefix (top-level, env.production, env.uat).
• WHATSAPP_WEBHOOK_VERIFY_TOKEN — global webhook verification for Meta.
• Marketplace assets served from assets.odontox.io (1-year immutable cache); domain not new.
• _headers on the marketing site: added https://assets.odontox.io to media-src; added https://ph.odontox.io, https://*.odontox.io, https://*.sentry.io, https://o4511296397901824.ingest.sentry.io to connect-src.

• Access tokens raised from 15m to 90d (matching the existing 90d refresh-token window). Refresh tokens already at 90d, so the effective session window is unchanged — only the access-token half was the friction point. The 7-day token used by 2FA flows and the 15-minute token used for superadmin impersonation are deliberately left as-is — short-lived is the right security default for those.

​

10. Superadmin tooling (internal-only)

​

11. Known issues / follow-ups

• Neon HTTP 1006 bursts — some bursts exceed 5 seconds total backoff; a small fraction of requests still 500. Follow-up tracked separately — likely needs Neon support engagement or a switch to the WebSocket driver for hot paths. See project_neon_1006_retry memory.
• Server-side PDF renderer — Workers WASM-instantiation bug currently breaks the server PDF endpoint intermittently; My Billing falls back to the local generator. Mark Paid is wrapped in try/catch so the email goes out without an attachment if PDF fails and the response returns pdfPending: true — the rest of the flow still fires.
• AIInsightsPage direct navigation — /dashboard/ai-insights has no module gate; users on Basic/Pro who navigate directly will see 403s. Sidebar entry is hidden by other module checks in normal flows. Wrap with RequireModule (upgrade-prompt fallback) to close the gap.
• patients.mrn dormant column — kept after the patient_number migration; drop once we confirm no other code paths read it.
• Marketplace product mockup — single OdontoX-themed illustration; can be refreshed from the listing editor by uploading a new asset and updating the hero image URL.
• Platform welcome guard — relies on absence of an in-product MFA-disable flow. If a future admin-reset path ever flips mfaEnabled back to false for an admin, the welcome would re-fire. A platformWelcomeSentAt column on users would harden this. Tracked.
• Remember-this-clinic on /select-clinic — power users with >2 clinics re-prompt on every login. Optional follow-up.
• Multi-Clinic Users panel — onManageUser wire-up — endpoints exist; needs prop pass-through and a modal-open trigger.
• Access token revocation ceiling — access tokens are not individually revocable via the KV ban list; a leaked access token is now valid for the full 90-day window. If a tighter ceiling is needed later, 7d access + 90d refresh is the usual middle ground.
• From-name dedup in Gmail — “From: ssh & Associates” can show on a Hassan’s Clinic invite email because Gmail caches sender display name per address. Mitigation would be unique sender per clinic (e.g. [email protected]) requiring Zepto sender configuration changes; out of scope for code-only fix.
• Dormant 2FA email-OTP step — code paths (handleStartEmailSetup, 2fa-email-setup step block) left in place but unreachable from the UI; cleanup follow-up.
• Bun build / lighthouse follow-ups — route-level code-splitting (est. −1,418 KiB JS / −7,200 ms on mobile), ruby.webp hero swap to AVIF (est. −1,883 KiB), oversized logo.webp. Documented in docs/qa/2026-05-14-mobile-pagespeed-results.md.

​

12. Deploy checklist

​

A. Apply database migrations

cd server
pnpm drizzle:generate                  # verify no pending diffs
pnpm tsx scripts/list-pending-migrations.ts   # sanity check
# Confirm with user before running:
pnpm drizzle:migrate                   # applies 0027 → 0051
pnpm tsx scripts/verify-migration-state.ts

pnpm tsx scripts/record-migration-applied.ts 0042

​

B. Deploy the Worker

cd server
pnpm test                              # 88+ tests, including PKT, automation-vars, audit-impersonation, email-gate
pnpm typecheck
pnpm wrangler deploy --env production

​

C. Deploy the UI (Cloudflare Pages)

cd ui
pnpm build
pnpm wrangler pages deploy dist --project-name=odontox-app --branch=main
# Force-promote canonical (per commit/deploy discipline):
pnpm tsx ../scripts/force-promote-canonical.ts

​

D. Deploy the Marketplace app

cd marketplace-app
pnpm build
pnpm wrangler pages deploy dist --project-name=marketplace-app --branch=main

​

E. Bridge release

cd bridge
pnpm package:win
# Upload Bridge-1.1.0-x64.exe and Bridge-1.1.0-arm64.exe to the release surface.

​

F. Smoke verification

1. Sign in at id.odontox.io (verifies passkey + password paths, Neon retry).
2. Land on /dashboard and confirm modules load. Check the trial banner state.
3. Open Settings → Notifications → verify the new matrix renders with backfilled defaults.
4. Open Settings → My Billing → confirm the canonical server PDF previews.
5. Open the calendar — day, week (with a high-density day), month views.
6. Send a WhatsApp message from a test conversation (test tenant ssh & Associates, clinic id b6d3a3f3-... per feedback_test_tenant_ssh_associates) — confirm template fires + lifecycle dispatcher runs + status webhook updates wamid.
7. Open Marketplace at market.odontox.io and confirm listings render with related-modules + dependencies.
8. Open /dashboard/tenants (superadmin) and verify the Tenants module renders, bulk actions, and impersonation audit attribution.
9. Hit Worker Logs (superadmin) and verify OTLP stream is live.
10. Schedule a future maintenance window and confirm the auto-engage / auto-release timing.

​

End