v1.0.3 – Pre-Launch Audit Remediation & Admin Role

Written by

Admin role activated across the full RBAC surface – team admins can now manage members, projects, and workspace settings
Direct LTD checkout gate – the on-site purchase endpoint is now behind PICTABASE_ENABLE_DIRECT_LTD so it can be toggled per channel
Integration test harness – wp-phpunit suite boots the real WordPress stack for end-to-end coverage alongside the unit suite
Release stamping – every deploy writes commit, tag, and UTC timestamp to RELEASE.txt for provenance

Unified quarantine code generation – one provisioning path for AppSumo, direct LTD, and remediation flows
Email pipeline extracted – EmailTemplateRenderer and EmailHookRegistrar pulled out of the provisioning service for testability
Lightbox performance – S3 presigned URLs now cached via WordPress transients, eliminating double-loads
Storage quota thresholds standardized – amber warning at 80%, hard lockout at 100%, consistent across upload area, quota bar, and account page

Pre-launch audit remediation (Batches A-L) – atomic rate-limit counters, atomic job claims, deduped asset creation, N+1 collapses in invitations and project queries, and deferred sidecar writes
Closed four WordPress-default attack surfaces identified in the auth audit
Rate-limited public invitation-token endpoints and hardened share-link / AI-scan paths
Fixed DI wiring for WebhookPayloadParser and null-safe post field handling