Full Production Platform and Security Consolidation
Consolidates the public site, Client Workspace, Admin Center, integrations, billing, account security, and production diagnostics around one V35 design and security contract.
- Introduced the canonical V35 application and public presentation layer, aligning header, breadcrumb, navigation rail, content grid, responsive behaviour, cards, forms, tables, and workspace footer.
- Added a connected Integrations Centre and dashboard health visibility for WordPress, Social Suite, Chatbots, AI provider credentials, and subscription state.
- Added dedicated environment-backed encryption and private-file signing configuration, authenticated credential encryption for new writes, private upload storage, and an administrator Security Center.
- Added optional TOTP two-step verification with replay protection and one-time hashed recovery codes plus shared database-backed authentication rate limits when the V35 migration is installed.
- Strengthened PayPal checkout state, return verification, webhook handling, plan-change reconciliation, and billing management while keeping live provider validation as a deployment requirement.
- Added public About, Security, Privacy, and Terms pages and a repeatable CLI production preflight for PHP, database, schema, storage, and security configuration.
- Removed hard-coded PayPal credential fallbacks from source. Production operators must rotate any previously exposed provider secret and keep the replacement outside public_html.