​

Machine Spend Analytics

​

Hardened Approval Workflows

• Sequential approver enforcement — When a policy specifies an ordered approver list, approvals must arrive in order. Out-of-order responses are rejected.
• Role-based authorization — Action-token approvals from external channels (Slack, email, webhooks) are now subject to the same role checks as in-app approvals.
• Encrypted notification secrets — Slack bot tokens, webhook secrets, and Telegram tokens are now encrypted at rest and redacted in API responses.
• Idempotent payment requests — Send the same idempotencyKey twice and you’ll get the same payment back. Send a different payload with the same key and you’ll get a clear 409 Conflict.

​

Dashboard UX Refresh

• Persistent setup guide with a 4-step checklist on the dashboard for new organizations.
• Transactions table now supports date range filtering, column sorting, inline denial reasons, and a one-click retry button.
• Approval timeline with a visual connector, timestamps, and auto-expand for pending requests.
• Policy cards include priority explanation tooltips so the evaluation order is always clear.
• Cmd+K command palette for keyboard-driven navigation.
• Mobile-responsive navigation with a slide-out drawer and hamburger menu across the dashboard, marketing site, and blog.
• Clickable transaction and agent rows that link straight to the detail pages.
• SpendChart now offers 24h / 7d / 30d / 90d range selectors.

​

Accessibility Improvements

• Skip-to-content link for keyboard users.
• Screen reader announcements for sidebar navigation changes.
• Table semantics improved with proper scope attributes.
• Dark mode contrast bumped to meet WCAG AAA on muted text.

​

Admin Panel Updates

• View last login time (not just date) on the admin users page.
• Filter the audit trail by search term, action type, and resource type.
• New user signup alerts can be sent to a configurable admin email.

​

Developer Page Polish

​

Improved AI Assistant Experience

• Mobile-friendly panel with full-width layout, slide animations, and an Escape-to-close shortcut.
• Auto-focus on the input when the panel opens.
• Keyboard shortcut badge (⌘J / CtrlJ) visible directly in the header.
• Clearer error states with retry, dismiss, and high-contrast styling.
• Improved confirmation cards with larger tap targets, friendly action names (“Delete Agent” instead of delete_agent), and an amber banner reminding you when a confirmation is pending.
• Tool progress indicators now show green checkmarks on completion.

​

Global AI Assistant

• 3-tier confirmation system for destructive, high-risk, and preview actions.
• Streaming responses with structured preview cards and inline tool progress.
• Persistent chat state across page navigations (last 50 messages persisted).
• Role-aware — only OWNER, ADMIN, and MANAGER roles can execute write tools.
• Rate limited to 30 requests/minute per user with abort handling.

​

Auth Form Improvements

• Password visibility toggles on login, register, and reset password forms.
• Real-time password strength indicator during registration.
• Registration success banner when redirected from signup to login.
• Lockout hints appear after 4+ consecutive failed attempts.
• Browser autofill properly supported via autoComplete attributes.
• Account lockout threshold raised from 5 to 10 attempts to reduce friction for legitimate users (rate limiting remains the primary defense).

​

Dashboard Design System Cleanup

• Sidebar navigation is now grouped into Operations, Intelligence, and Platform sections.
• Policies moved under Operations for better discoverability.
• Tabular numerics applied across all monetary displays for cleaner alignment.
• Reduced motion: removed entrance staggers, hover-scale, and decorative animations.