> ## Documentation Index > Fetch the complete documentation index at: https://docs.engagefabric.com/llms.txt > Use this file to discover all available pages before exploring further. # Changelog > EngageFabric changelog and release notes. Track new features, API changes, bug fixes, and improvements across all platform versions. Stay up to date with the latest features, improvements, and bug fixes. ## Blog Content & Admin Redesign ### Features * **Admin Console**: Superhuman-inspired UI redesign with refreshed theme across the admin experience * **Blog**: "Redis vs PostgreSQL for Real-Time Leaderboards" — when to choose each, with scaling curves and a decision rubric * **Blog**: "5 Gamification Anti-Patterns That Tank Engagement" — patterns to avoid when designing engagement systems * **Blog**: "The Onboarding Playbook" — a 4-stage journey from first orientation to power user ## Blog Content & Tag Filter ### Features * **Blog**: New blog content and improved tag filter for better content discovery ### Documentation * Updated SEO audit report and action plan ## CORS Hotfix ### Fixed * **CORS**: Added `X-Project-ID` to allowed headers — SDK requests were blocked after security hardening, breaking the demo site ## Security Hardening ### Features * **Security**: Comprehensive security hardening across all applications — input validation, XSS protection, CSRF hardening, rate limiting improvements, and security headers ## SEO Improvements Round 2 ### Features * **SEO**: OG image generation, enhanced meta tags, and structured data improvements * **SEO**: Marketing site metadata overhaul — better page titles, descriptions, and social sharing * **Marketing**: Updated "Why We Built" component and tutorial page content ### Fixed * **Signup**: Removed duplicate captchaToken property * **API Docs**: Synced OpenAPI specification ## Security & Anti-Spam Protection ### Features * **Anti-Spam**: Cloudflare Turnstile CAPTCHA on signup form to block bot registrations * **Rate Limiting**: Endpoint-specific rate limiting on registration (5 attempts per hour per IP) * **Honeypot**: Hidden field detection to silently reject automated form submissions * **Email Validation**: Disposable email domain blocking (130+ providers) * **SEO**: Comprehensive metadata overhaul across marketing site ### Fixed * **Blog**: Horizontal scroll on mobile tables for improved readability ## Mobile Blog Fix ### Fixed * **Blog**: Add horizontal scroll to blog tables on mobile for improved readability ## New Blog Content & Sitemap Fix ### Features * **Blog**: "Gamification Platform Comparison 2026" — side-by-side comparison of EngageFabric, Trophy, and Mambo.IO covering features, pricing, developer experience, and real-time capabilities ### Fixed * **Sitemap**: Sync sitemap with blog publication status for accurate search engine indexing ## SEO Optimization ### Features * **SEO**: Comprehensive marketing website SEO optimization — meta tags, Open Graph, structured data, keyword targeting * **Blog**: Unique images per blog section for improved visual identity * **Docs**: SEO audit report and action plan ### Fixed * **Blog**: Tree diagram rendering fix ## New Blog Content ### Features * **Blog**: "The Real Cost of Building Gamification In-House" — detailed build-vs-buy cost analysis for engineering leaders * **Blog**: "Quest Systems: The Missing Engagement Layer" — quest design principles, branching paths, and implementation architecture ## Production Blog Sync Fix ### Fixed * Blog posts now correctly sync in production (marketing container waits for API health) * Improved sync reliability with better Docker service dependency ordering * Enhanced diagnostic logging for blog sync troubleshooting ## Blog Sync Fix ### Fixed * Blog posts now properly sync to the Super Admin portal in production * Added blog sync secret to deployment pipeline ## Blog Content & Super Admin ### Features * **Blog Content**: New Duolingo streak gamification case study blog post * **Super Admin**: Blog publication control - publish/unpublish blog posts ### Fixed * Improved CTA button visibility in blog posts * Fixed broken documentation links in blog content * Added production demo URL to CORS configuration ## Blog & SEO Improvements ### Features * **Blog Section**: Marketing website blog with MDX content support * Blog listing page with article cards * Individual blog post pages with rich formatting * **SEO**: Sitemap and robots.txt for search engine indexing ### Fixed * Google site verification meta tag placement for Mintlify rendering * Production health check and Content Security Policy fixes ## Analytics & Documentation ### Features * **Plausible Analytics**: Privacy-friendly analytics tracking for marketing site * No cookie consent required * Lightweight, GDPR-compliant tracking ### Changed * Documentation improvements with GSD framework research baseline ## Pricing Page Update ### Changed * **Simplified Pricing Tiers**: Removed Enterprise tier from pricing page * Now showing three tiers: Free, Starter, Professional * Cleaner 3-column layout ### Fixed * Super Admin logs page visibility ## Security Fixes & Email Logging ### Features * **Email Delivery Logging**: Track email delivery status with detailed logs * View sent emails in Admin Console * Monitor delivery status (sent, delivered, failed) ### Fixed * **Security Improvements**: Resolved security vulnerabilities from code review * Improved input validation and sanitization * Addressed OWASP security recommendations * **Tech Debt**: Code quality and performance improvements ### Documentation * Integrated GSD (Getting Stuff Done) framework for project planning * Updated OpenAPI specification ## Billing, Subscriptions & Enterprise Features ### Features * **Billing Module**: Lemon Squeezy integration for subscription management * **Team Management**: Invite team members, manage roles, view pending invitations * **Custom Domains**: Configure custom domains for your API endpoints with DNS verification and SSL provisioning * **Enterprise SSO**: SAML and OIDC single sign-on configuration for organizations * **Plan-Based Limits**: Enforce usage limits based on subscription tier ### Admin Console * Billing page with plan display and usage meters * Team settings section with member list and invite dialog * Role management (Owner, Admin, Member, Viewer) * Pending invitations management ### Marketing Website * Updated pricing page with monthly/annual toggle * Four pricing tiers: Free, Starter ($49), Professional ($149), Enterprise * Alpha program messaging and feature comparison ### API Endpoints * `GET/POST/DELETE /v1/team/members` - Team member management * `GET/POST/DELETE /v1/team/invitations` - Invitation management * `GET/POST/DELETE /v1/enterprise/domains` - Custom domain management * `GET/PUT/DELETE /v1/enterprise/sso` - SSO configuration * `GET/POST /v1/billing/*` - Billing and subscription endpoints ## Marketing Website Improvements ### Changed * **Marketing Website**: Multiple improvements and fixes * Fixed Dockerfile sharp installation (use bundled version in Next.js standalone) * Added `aria-hidden` to decorative image overlays for accessibility * Added `sizes` prop to Image components for better optimization * Removed contact page (hardcoded content) * Removed "Talk to Us" button from pricing page * Updated stats: replaced unverified "2hrs Integration Time" with "15+ Metrics Tracked" * Updated target size terminology for EdTech and Health & Wellness * Added "Platform Preview" section to homepage * Updated API reference link in footer * Changed "Founding Customer Badge" to "Founding Customer Discount" * Updated FAQ with data security recommendations for unique player IDs * Added favicons and web manifest * **Demo Website**: Updated leaderboard avatars to use photo-realistic images * **Admin Console**: UI improvements from testing feedback ## Leaderboard Tests & CI Improvements ### Added * **Tests**: Comprehensive unit tests for AdminLeaderboardController (13 test cases) * Tests for CRUD operations, locking logic, tenant isolation * Tests for metrics retrieval, rankings pagination, reset functionality ### Changed * **CI/CD**: Streamline pipeline - production deploys skip redundant tests (already verified on staging) * **CI/CD**: OpenAPI sync now uses develop branch and creates PRs instead of direct push * **API**: Optimize leaderboard statistics with batch query (fixes N+1 pattern) * **Admin Console**: Extract leaderboard form and rankings dialogs into separate components * **Admin Console**: Add client-side pagination to leaderboards list (10 items per page) ### Fixed * **API**: Use `ParseBoolPipe` for `includeInactive` query parameter type safety * **Admin Console**: Replace browser `confirm()` dialogs with accessible AlertDialog components * **Admin Console**: Add fallback gradient for broken MetricCard images ## Analytics, Insights & Webhooks ### Features * **Analytics Dashboard**: New analytics page with retention metrics, cohort analysis, and player segments * **Conversion Funnels**: Track player progression through custom-defined conversion paths * **Webhooks System**: Configure HTTP callbacks to receive real-time event notifications * **Webhook Events**: New events for XP granted, currency granted, and adventure progress * **Data Export**: Export analytics data in CSV or JSON format ### Admin Console * Analytics page with Retention, Funnels, and Segments tabs * Webhooks management with delivery logs and testing * Available Events reference for webhook subscriptions ### API Endpoints * `GET /api/v1/analytics/overview` - Overview metrics with trends * `GET /api/v1/analytics/trends` - Historical trend data * `GET /api/v1/analytics/segments` - Player segment distribution * `POST /api/v1/webhooks` - Create webhook endpoints * `GET /api/v1/webhooks` - List project webhooks * `POST /api/v1/webhooks/:id/test` - Test webhook delivery ### Security * **Alpha Approval Guard**: Analytics and Webhooks require alpha approval ## Deployment Fix ### Fixed * **Deployment**: Auto-resolve failed migrations in production deployment workflow * Marks previously failed migrations as "applied" when schema already exists * Fixes deployment blocked by Prisma's failed migration detection ## Database Migration Fix ### Fixed * **Database**: Made migration idempotent to handle production databases where schema was applied via db push * Uses `IF NOT EXISTS` for tables, indexes, and columns * Uses exception handling for enum type creation ## Schema Drift Detection & OAuth Profile Completion ### Added * **CI/CD**: Schema drift detection to ensure migrations are created for all schema changes * **Auth**: Profile completion flow for OAuth users (Google/GitHub) ### Fixed * **Marketing**: Removed broken footer links * **Production**: Corrected all URLs to use .com domain (engagefabric.com) * **Email**: Improved email templates to reduce spam filter triggers * **Deployment**: Added superadmin.engagefabric.com to CORS origins * **Super Admin**: Fixed auth callback race condition in super admin portal * **Database**: Added missing migrations for tenant\_members columns and profile\_completed field ## URL Migration to .com Domain ### Changed * **URL Migration**: Migrated all URLs from engagefabric.cloud to engagefabric.com * Updated API endpoints to use api.engagefabric.com * Updated admin console references to admin.engagefabric.com * Updated marketing site to use engagefabric.com ### Fixed * **Mobile Overflow**: Fixed horizontal overflow issue on marketing site mobile views * **CI Type-Check**: Fixed type-check task failing in CI by adding build dependency for SDK types ## Alpha Access Management System ### Features * **Alpha Approval Workflow**: New accounts now start with pending status until approved * **Admin Console**: Added approval status banner for pending accounts * **Marketing Website**: Updated alpha messaging and expectations ### Changed * New signups default to PENDING approval status * Clear communication about alpha program requirements ## Marketing Website Content Refresh ### Added * **Marketing Website Redesign**: Complete content overhaul with industry-focused messaging * New hero section with "Gamification Without the Glitches" tagline * Industry-specific use cases: EdTech, SaaS, Retail, Fitness, Finance * Redesigned features section highlighting core platform capabilities * Updated pricing preview with Alpha Access positioning * New customer testimonials with realistic avatars and metrics * Improved CTA banners and call-to-action messaging ### Changed * **Content Strategy**: Shifted from generic gamification to industry-specific value propositions * **Visual Improvements**: Enhanced hero, features, and pricing sections with modern design ## Demo Website Overhaul & Admin Charts ### Features * **Demo Website UI Overhaul**: Complete redesign with modern UI, interactive charts, and improved mobile responsiveness * **Admin Console Charts**: Added interactive activity charts and XP progress visualization to the dashboard * **API Enhancements**: New project statistics endpoint and event processor improvements ### Fixed * XP granting and tenant isolation bugs in demo website * Dashboard timezone issues showing "future" data for users in earlier timezones ## Admin Console Redesign ### Features * **Settings Page**: Added settings with theme toggle (light/dark mode) * **Brand Identity**: Integrated EngageFabric brand logos into admin console ### Changed * Complete admin console UI redesign with EngageFabric brand colors * Visual polish and updated color scheme across all pages ### Fixed * OAuth callback error handling improvements * TypeScript errors in projects page ## Critical Nginx Fix ### Fixed * **CRITICAL**: Removed duplicate nginx configuration files causing production outage * Duplicate .cloud domain configs conflicted with .com production configs * Staging proxy configs referenced non-existent SSL certificates * Fixes complete production outage of engagefabric.com and admin.engagefabric.com ## Phase 14 Completion & Security Hardening ### Features * **Email Integration**: Welcome, verification, and onboarding complete email templates via Resend * **Performance Testing**: k6 load test scripts for registration and multi-tenant queries * **Data Migration**: Comprehensive migration scripts for existing data ### Security * **Critical Fix**: Fixed credential exposure vulnerability in deployment workflows * Database passwords and OAuth secrets now properly protected * Replaced direct secret interpolation with secure environment variables ### Fixed * OAuth configuration and error handling improvements * Admin console tenant isolation for project API calls ## Initial Production Release We're excited to announce the first stable release of EngageFabric! ### Features * **Player Management**: Complete player lifecycle with XP, levels, currencies, and lives * **Rules Engine**: Event-driven automation with 8 condition types and 10 action types * **Quests & Adventures**: Multi-step quests with progress tracking and seasonal adventures * **Leaderboards**: Real-time rankings with Redis-powered sorted sets * **Lobbies & Chat**: Multiplayer lobby management with real-time chat * **WebSocket Gateway**: Live updates for all player state changes * **Admin Console**: Full-featured dashboard for configuration and analytics * **JavaScript SDK**: `@engagefabricsdk/sdk` for easy integration * **React Components**: `@engagefabricsdk/react` pre-built UI components ### API Endpoints * Authentication (login, register, API keys) * Players (CRUD, identify, XP/currency management) * Events (track, batch tracking) * Quests (list, progress, completion) * Adventures (list, unlock, progress) * Leaderboards (rankings, updates) * Lobbies (create, join, leave, ready) * Chat (messages, moderation) ### Documentation * Comprehensive API reference * Getting started guides * Concept explanations * SDK documentation *** ## Subscribe to Updates Subscribe to receive email notifications when we release new versions *** ## Versioning Policy EngageFabric follows [Semantic Versioning](https://semver.org/): * **Major (X.0.0)**: Breaking changes requiring migration * **Minor (0.X.0)**: New features, backward compatible * **Patch (0.0.X)**: Bug fixes, backward compatible ### Deprecation Policy * Deprecated features are announced at least 6 months before removal * Deprecated endpoints return `X-Deprecated: true` header * Migration guides are provided for all breaking changes