Release v2.486.0

​

Hosted Legal Policies (NJ-1860)

• Admin Editor – Legal Settings tab gains a UI for creating/editing hosted policies with rich-text editing
• HTML Sanitization – Uploaded policy content is sanitized to prevent XSS and malicious scripts
• User Access – Legal pages render on a public-facing route accessible without login
• Fallback Support – Policies can fall back to external URLs if no hosted version is configured

1. Org admin opens Legal Settings in Control Room
2. Selects “Host on Nudj” for Terms, Privacy, or custom policies
3. Enters HTML/rich-text content with live preview
4. Content sanitized and stored in platform config
5. Users see hosted pages at yourapp.nudj.app/legal/terms without authentication

​

User Exclusions & Date Ranges (NJ-1989, NJ-1990)

• Exclude Users – Admins add a list of user IDs to exclude from leaderboard rankings
• Time Windows – Each exclusion can have optional start/end dates (e.g., exclude from Jan 1–15 only)
• Active Resolution – System compares current date/time to determine which exclusions apply
• Audit Trail – Exclusion history viewable in leaderboard config editor

• Exclude internal testing accounts permanently
• Temporary fairness windows during competitive events
• Seasonal resets that expire exclusions
• Disqualified participant removal with explicit end date

​

Manual Reward Distribution Toggle (NJ-1954)

• Toggle Setting – New “Manual Distribution” checkbox in leaderboard config
• Default Behavior – When enabled, rewards wait for admin approval before crediting
• Distribution Interface – Admin can bulk-approve/reject pending rewards in leaderboard dashboard

​

Challenge Answer Color Customization (NJ-1995)

• Color Editor – New “Answer Area Color” picker in Branding settings
• Live Preview – Storybook fixtures show all question types with the selected color
• Applied Across – Color applies to multiple-choice, rate-your-experience, select-from-list, and other choice-based questions
• CSS Variable System – Uses CSS custom properties for easy theme switching

• Multiple-choice options
• Single-select buttons
• Rating stars and scales
• Date/time selectors
• Prediction choices

​

MultiPlusCard Settings Relocation (NJ-1982)

• Third-Party Tab – New “Third-Party Platform Config” section in Admin settings
• MultiPlusCard Controls – Enable/disable MultiPlusCard login for the organisation
• Environment Selection – Choose sandbox or production environment
• Unified Interface – All payment/login integrations in one place (alongside OAuth, SSO, etc.)

​

Public Legal Pages (NJ-1860)

• Route Structure – /legal/[policy] (e.g., /legal/terms, /legal/privacy)
• No Login Required – Accessible to anonymous users
• Fallback Support – Missing pages can redirect to external URLs
• E2E Coverage – Full test suite for page rendering, routing, and error states

• Footer link to Terms/Privacy
• No sign-in required
• Page renders with proper layout and styling
• External fallback if no hosted version configured

​

Answer Choice Styling

• Multiple-Choice – Button backgrounds use brand color
• Rate-Your-Experience – Star colors match answer theme
• Select-From-List – Option highlight color synchronized
• Predictions – Choice backgrounds branded
• Other Choices – Date, range, and image-selection controls all updated

​

Reward Drawer Visual Fix (NJ-2091)

• Overflow Prevention – Container no longer bleeds beyond viewport during scroll
• Parallax Smooth – Animation stays within bounds

​

Social Handle Normalization (NJ-1729)

• Format Flexibility – Accept handles with or without @ prefix
• URL Parsing – Extract username from profile URLs (e.g., instagram.com/username)
• Validation – Character limits and allowed symbols per platform
• Profile URL Builder – Automatically construct correct social profile URLs

• Instagram (@username or URL)
• TikTok (@username or URL)
• Twitter/X (@handle)
• YouTube (channel or custom URL)
• Twitch (channel name)

​

Security Hardening: Org Membership Enforcement (NJ-2025)

• Route Coverage – All /api/admin/* endpoints check organisationId cookie against user’s orgs
• Test Suite – 679-line comprehensive test coverage for auth boundary violations
• Scope Validation – Prevents cross-tenant data access even with valid tokens

• Organisation settings endpoints
• Cache clear operations
• Chat context retrieval
• File uploads
• Preview deployment access
• MCP tool availability checks
• Widget preview rendering

​

GDPR Data Erasure (NJ-2016)

• Contact Email Cleanup – Email addresses removed alongside other PII on erasure
• Backfill Migration – Historical erased users’ contact emails cleaned up
• Service Layer – Dedicated email scrubbing utility for consistent erasure

​

Anonymous Reward Purchase Blocking (NJ-2054)

• Session Check – Purchase button disabled for anonymous users
• Validation – Reward purchase API rejects unauthenticated requests
• UX – Clear prompt to sign in before purchasing

​

Blob Deletion Org Scoping (NJ-2023)

• Org Validation – Blob deletion checks org ownership before removal
• Security and access-control hardening.

​

Auth Link Platform Token Gating (NJ-2010)

• Token Check – Endpoint validates platform token before issuing auth link
• Prevents Brute Force – Limits auth link generation without valid credentials

​

OAuth State Validation (NJ-2007)

• Graceful Degradation – Invalid state hints don’t cause login failure
• Fallback Flow – Routes to standard OAuth flow if state parsing fails

​

CSV Export Formula Injection Prevention (NJ-2019)

• Escaping – Leading =, +, @ characters prefixed with single quote
• Prevents Malicious Cells – Excel/Sheets won’t execute embedded formulas

​

Confirm Dialog Persistence (NJ-2006)

• Retry UX – Users can immediately correct and resubmit without reopening dialog
• Error Visibility – Error message remains visible during retry

​

Third-Party Config API Extensions

• GET /third-party-config – Fetch all third-party platform settings
• PATCH /third-party-config – Update MultiPlusCard, OAuth, SSO, legal policy configs
• New DTOs: ThirdPartyPlatformConfigDtoModel, MultiPlusCardPlatformConfigDtoModel

​

Legal Policy Content Storage

• LegalPlatformConfigDtoModel – Stores Terms, Privacy, and custom policy content
• LegalPolicySourceEnum – EXTERNAL_URL or HOSTED_ON_NUDJ
• LegalPolicyTypeEnum – TERMS, PRIVACY, CUSTOM
• Content sanitized via sanitizeLegalPolicyContent() utility

​

Leaderboard Query Model Extensions

• LeaderboardExclusionDtoModel – User ID + optional date range
• LeaderboardConfigDtoModel.exclusions – Array of exclusion windows
• LeaderboardConfigDtoModel.isManuallyDistributed – Boolean flag
• resolveActiveExcludedUserIds() – Computes active exclusions by current date

​

Search & Pattern Functions

• normalizeSocialHandle() – Utility for parsing social usernames
• buildSocialProfileUrl() – Constructs canonical profile URLs per platform

​

Leaderboard Schema Migrations

• 20260812154937_backfill_leaderboard_exclude_users.ts – Adds exclusion list to leaderboard configs
• 20260812160000_reshape_leaderboard_exclude_users_to_windows.ts – Extends schema with date ranges
• 20260812123456_backfill_leaderboard_is_manually_distributed.ts – Adds distribution toggle with default=false

​

GDPR Erasure Migration

• 20260812120000_backfill_erased_user_contact_email.ts – Clears contact emails for previously erased users (87-line migration with test coverage)

​

All migrations include full test suites with rollback validation.

​

Test Foundation Reliability (NJ-1475, 3 commits)

1. E2E Test Foundation – Fixed race conditions and timing issues in base test setup
2. Admin Visible Controls – E2E tests now interact with rendered challenge controls instead of DOM manipulation
3. E2E Results Reporting – Test runner now reports truthful outcomes without false negatives

​

Browser Automation Improvements

• Removed polling fakes from visibility checks (isVisible({timeout}))
• E2E tests now properly await DOM readiness before asserting rendered state
• Shopify harness test reports upload correctly on green test runs

​

Next.js 16.3.1 Upgrade (NJ-2044)

• Performance – Latest rendering optimizations
• Security – Latest framework patches
• Compatibility – Apps and MCP server fully validated post-upgrade

​

CI/CD Improvements

• Shopify harness reports now upload on green runs (NJ-2058)
• A11y budget ratchet auto-populated from harvested data (NJ-2056)
• Code review load-balanced across multiple reviewers (NJ-2066)
• PR coverage specs integrated into smoke lane (NJ-2059)
• Preview smoke lane now excludes package-only changes (NJ-2081)
• Cancelled lint-and-test runs no longer report as failures (NJ-2060)
• Linear-sync workflow retired; “Not Ready” label auto-applied to PRs (NJ-2085)

​

Chat Defaults

• Admin chat now defaults to Claude Opus 5 (medium reasoning) for better inference

​

Documentation & Brand

• Nudj corporate brand guidelines added to docs (fonts, colors, tone, logo usage)
• Brand template pack created (deck templates, LinkedIn cards, email signatures, OG images)
• Nudj brand skill added for on-brand design work

​

Error Logging Improvements

• Stop logging tRPC request bodies on error (NJ-2017) – Prevents PII/secrets in logs
• Nested extra fields scrubbed before error capture (NJ-2018) – Improved error context isolation
• Excluded auth_accounts from parquet export (NJ-2020) – Prevents sensitive auth data in analytics

​

Documentation Security

• Dev MongoDB URIs redacted from committed docs (NJ-2014)
• Generated release notes auto-redact security details (NJ-2037)
• High-risk code paths flagged in PR review (updated High-Risk Areas registry)