What's new in Zemofin

Zemofin logomark, legal entity line, OAuth branding runbook and the six-month roadmap

• New text-free quadrant logomark shipped at /logomark.svg, with a 64px PNG favicon and a 512px square app icon generated from the same source.
• The site now declares the logomark as its favicon and Apple touch icon, so browsers and future mobile wrappers use Zemofin's own mark.
• Terms of Use and the Privacy Policy now carry 'Zemofin is a product of Behavion Intelligence LLP', and the intellectual-property clause names the LLP as owner.
• Organization structured data names Behavion Intelligence LLP as the parent organisation and points at the new logomark.
• A second google-site-verification tag was added for the connected Search Console account, alongside the existing one, ready for the approved verification sequence.
• New guide: Google OAuth own-brand setup — how to move sign-in onto our own OAuth client so the consent screen shows only Zemofin, plus the Drive scope verification track.
• New guide: Search Console unblock runbook with the approved verification path and the prioritised launch-blocker list.
• New guide: Future Roadmap v3.0 covering Aug 2026 to Jan 2027, with shipped items struck off, blockers and owners named, and new proposals added. v2.1 is archived, not overwritten.

Google consent-screen branding still needs an own OAuth client created in the Google Cloud account behavion.intelligence@gmail.com — see the OAuth guide. Search Console verification needs a publish first so the new meta tag is served from zemofin.app.

Release approvals, 45-day trials and the coupon system

• Release notes logged from now on are numbered, versioned and timestamped, and must be approved before they count as the copy of record.
• Approving a note emails a branded summary to the admin address, with an 'automate it' switch that sends every approval automatically and an optional recipient override.
• Approved notes can be re-sent if a copy is lost, and send failures are shown against the entry.
• Admin → People → Trials can start a 45-day Pro trial for one account or for an entire billing tier in one action, with a preview of how many accounts it would touch.
• A trial never overwrites the stored tier: when it lapses the account returns to its own plan with read-only retention, and an admin can end a trial early.
• My Account shows the running trial, its end date and what the account falls back to.
• New coupon system: Admin → People → Coupons issues 20% (or any) discount codes with validity, usage caps and notes, and shows who redeemed each code and when.
• Coupons and their redemption history can be deactivated or archived but never deleted — the database blocks deletion outright.
• Influencer partners get a private share link (/partner/<token>) where they can mint their own codes within admin-set limits on count, percentage and expiry; the admin keeps override authority over every code.
• Users attach a coupon from My Account → Billing & usage; it is honoured on the first paid invoice once billing goes live.

Migration added release_notes, release_settings, plan_trials, influencers, coupons and coupon_redemptions with append-only deletion guards. Plan resolution now folds an active trial over the stored tier.

Plus tier, Clinical mode and scoped AI abuse blocking

• High-severity AI abuse events now block only the offending visitor key for the configured window instead of pausing the AI queue for everybody; a global pause is an explicit admin action again.
• Signed-in callers are alerted on rather than auto-blocked, so a paying account is never locked out by the monitor.
• Tapping the Zemofin logo in the admin workspace on a phone now opens the admin dashboard instead of leaving the admin area.
• New Plus tier (~$2.50/month): 20 cases, 100 files, 250 MB storage, 100 invoices & receipts and 200 bills a financial year, 200 one-click settlements, 200 copilot questions a month.
• A4 print preview moved from Pro to Plus; every other Pro-only capability is unchanged.
• Per-tier quota table replaces the old Free-or-Pro checks across issuing, settlements, copilot metering and storage ladders.
• Admin → People can now set any account to Free, Plus or Pro, with Plus counted separately in the tally.
• Existing Free accounts stay Free — nothing is remapped.
• Clinical mode: chosen once during setup and permanent for that account, enforced by a database trigger.
• Clinical accounts capture a practice licence number, printed on bills and invoices as entered and deliberately not verified in this release.
• Updated the Feature → Benefit list with the new tier table, Clinical mode and the monitoring changes.

Migration added profiles.practice_mode (general/clinical, one-way) and profiles.practice_license_number. Plus is manually granted until payments go live.

Release notes log in Admin

• New Admin → Overview → Release notes tab listing every shipped change with IST and UTC timestamps.
• Search by text, filter by area and by release type; each entry expands to its full item list.
• Download the whole log, or a single entry, as Markdown.
• Seeded the log with the shipped history to date so it starts complete rather than empty.

The log lives in src/lib/release-notes/registry.ts. Every future change must add an entry here.

Admin menu re-prioritised, tickets answered from the system

• Left-hand admin menu reordered by urgency: Overview → Monitoring → People → Legal & contact → Site content → Publishing → Guides.
• Support tickets now have an in-app reply composer that sends a branded email from Zemofin's mailbox instead of opening a local mail client.
• Each reply is appended to the ticket's internal notes and moves the ticket to In progress.
• New support-reply email template added to the transactional registry.

Alert channel settings and gating fixes

• Monitoring → Alert settings: manage alert email list, Slack/webhook URL, burst and spike thresholds, auto-pause window and push severity floor.
• Send test alert button verifies every configured channel end to end.
• Developers page renders publicly again; only the API key panel stays behind the Pro check.
• Markdown links with query strings resolve correctly (HTML entities unescaped before encoding).
• RLS hardening: owner UPDATE policy on accounting_project_documents, auth.uid() enforcement in match_user_documents, EXECUTE revoked on internal email queue functions, public insert policy dropped on site_events.

AI cost monitor and abuse spike charts

• New AI cost monitor: metered USD spend by task, model, plan, entry point and country, with cost drift, costliest account and CSV export.
• Token metering wired through all nine AI call sites; rates stored historically so price changes never require a backfill.
• Abuse monitor gained a 48-hour stacked severity spike chart with a 3× average threshold line, plus a per-endpoint heat map.
• Admin logo now returns to the Dashboard instead of the public site.

Admin dashboard, severity-aware abuse monitoring, 16-char export names

• Admin lands on a priority-ordered Dashboard: high-severity abuse first, then audit trail, tickets, users and document volume.
• Abuse events now carry severity, document ID and request ID; high severity auto-pauses the AI queue for 15 minutes.
• Manual IP blocks, admin audit log and CSV export of abuse events by date range and severity.
• Content-aware export filenames capped at 16 characters.
• E2E regression suite for rate-limit hits, payload caps and schema validation.

AI abuse monitoring and naming fixes

• ai_abuse_events table plus server-side monitor hashing visitor IPs and recording rate-limit hits and blocks.
• Burst detection emails the admin on 15 rate-limit events within 10 minutes.
• Filename truncation reworked so Devanagari and other non-Latin titles stay readable.
• Developers CTA no longer bounces visitors to the sign-in screen.

Hosted guides, careers admin and admin shell rework

• Guides sub-section hosts every internal document in-app with automatic last-updated dates from file mtimes.
• Careers: public /careers page and admin jobs panel with Live, Draft and Expired buckets.
• Blogs admin panel with Markdown authoring and live preview.
• Admin navigation moved into the app's primary sidebar as accordion groups.
• Anonymous AI helpers rate-limited to 8 calls/minute; markdown URLs sanitised.

Zemofin Assistant and support tickets

• Branded pop-out assistant with entrance gate, quick replies, star rating and copyable ticket reference.
• Talk to a human raises an idempotent PT-XXXXXXXX ticket and emails both the admin and the visitor.
• Admin Support tab with filters, statuses, internal notes and full transcripts.
• Conversation resume: returning email IDs recall their last seven messages within 72 hours.

Plan gating, storage ladder and accountant portal

• Free/Pro entitlements enforced across invoices, receipts, part payments, print preview, scan analytics and copilot quotas.
• Storage monitoring with 90% warning and 95% lock, plus an alert ladder by email.
• Pro-only book closure, time tracking and expense tracking.
• Token-gated read-only accountant portal at /accountant/$token.
• Entitlements test suite added.

Billing automation and statements

• Automated payment reminders at −3 / 0 / +7 days with a reminder audit log.
• Recurring invoice drafts and a public pay-now share link.
• Statement of account exports in CSV and XLSX.
• Fixed revision double-counting in dashboard totals and exports.

Accounting workspace

• Profession-aware workspace with cases, clients, invoices, bills, receipts and expenses.
• Ask Zemofin semantic search over the user's own documents using pgvector.
• A4 print preview, barcode-tagged documents, locked periods, duplicate detection and arithmetic sanity checks.

Public REST API and MCP server

• Versioned REST API under /api/v1 with hashed API keys and call logging.
• MCP server at /mcp exposing list, get, parse and reconstruct tools.
• Developer dashboard for key issuance and usage.

Intelligent OCR and Google Drive save

• Intelligent OCR route reconstructs a faithful, readable document instead of a table.
• Save outputs to the user's own Google Drive with encrypted per-user connections.
• Original file viewer and branded transactional email templates.

Walk-in quota and authorisation fixes

• Five free conversions per visitor enforced server-side; the sixth prompts a benefit-led sign-in.
• Auto-fix, spell check and translate work for anonymous visitors without authorisation errors.