QPSCheckSecure player access

Updates

Release Notes

Version 0.26.10.15.1 is the current beta release published on October 15, 2026.

Version 0.26.10.15.1 · Beta

Reliable workspace access recovery

October 15, 2026
  • Workspace access interruptions now offer a retry without requiring another Google sign-in.
  • Clearer service messages replace misleading stale-session guidance when access checks are temporarily unavailable.

Version 0.26.09.10.1 · Beta

Unified theme and sign-in recovery

September 10, 2026
  • Restored the complete QPSCheck theme, logo system, favicon, and login artwork across the public site and workspace.
  • Fixed Refresh sign-in so stale sessions clear cleanly and return directly to the sign-in page.
  • Published the canonical release identity for September 10, 2026 with the runtime version and public Release Notes entry kept in sync.
  • Updated Cookie Choices so Only necessary and Accept analytics remain keyboard-accessible, clickable, and visibly aligned with the QPS Check brand.
  • Release versions now use the unambiguous 0.YY.MM.DD.V format, with the Beta channel displayed separately.
  • Production promotion now requires a matching customer-facing Release Notes entry and fails verification when the version or notes drift.
  • Company Owners can now add Players within their authorized Organization and Casino scope for real-world operations and testing.
  • Player registration remains server-authorized and audited, while cross-Organization and out-of-scope Casino attempts continue to fail without exposing protected records.
  • Authorized feedback reviewers can now receive an immediate protected inbox item and Toast when new feedback is submitted.
  • Each reviewer can independently choose Toast, email, both delivery methods, or neither from Notification preferences.
  • Feedback notification messages stay generic and link back to the protected review page without exposing submitted text, reporter identity, or tenant details.
  • Authorized reviewers can now approve acknowledged feedback for implementation by moving it to Planned and documenting the expected outcome and acceptance checks.
  • Approved feedback is safely queued into the private engineering workflow with duplicate protection, bounded processing, redaction, and visible implementation progress.
  • Feedback remains untrusted product input: it cannot authorize permission changes, policy changes, secret access, code merge, or Production deployment.
  • The workflow prepares one isolated implementation and pull request at a time, then waits for human review and separate Production approval before completion.
  • Company Owners can now add Games and Tables within their authorized Organization so Casino setup and real-world operational testing can proceed without global administrator access.
  • Player pages no longer show a New player action to accounts that are not authorized to create players.
  • Player status changes now save reliably when reviewing imported players, including moving a player from Pending Review to Active.
  • If a player profile cannot be saved, the page now clearly confirms that no changes were applied and provides a useful next step.
  • Staging demonstrations now stay current with realistic recent Casino visits, sessions, buy-ins, and cash-outs.
  • Demo activity rotates across active Casinos throughout the day so dashboards, reports, and player workflows remain useful for testing.
  • Refreshed the latest Compliance, administration, billing, player, and reporting improvements across both customer environments.
  • Revalidated sign-in boundaries, database readiness, scheduled processing, and responsive workflows for a more dependable day-to-day experience.
  • Improved keyboard access, text zoom, and responsive layouts across Compliance, Cage operations, Staff access, billing recovery, and player media workflows.
  • Compliance alerts can be opened from the keyboard, and wide transaction tables now provide clearer navigation for assistive technology and smaller screens.
  • Recurring workspace errors can now create a clean, deduplicated bug in Feedback so important issues are easier to find and act on.
  • Automatic bug reports use concise customer-friendly descriptions and include a support reference without copying sensitive account details.
  • Improved operational alerts for sign-in problems, permission issues, billing callbacks, database setup, imports, and slow or failed workspace operations.
  • Added stronger request tracing so the team can follow an issue from the customer experience through investigation and resolution.
  • Added automatic cleanup for short-lived error-tracking metadata so the monitoring system stays bounded over time.
  • Organization lists now load Casino counts in bounded batches instead of repeating the same database work for every Organization.
  • Audit Logs now load staff names in one bounded batch, making busy audit pages faster and more predictable.
  • Added automated query and index assurance so missing, stale, or unbounded database access is detected before a release.
  • Verified all required database indexes are ready in both Staging and Production, including Compliance ledger and Casino directory queries.
  • Added safer deterministic demo-data verification and archive planning that retains financial and audit history.
  • Fixed Start billing so authorized administrators can move directly into secure Stripe Checkout after creating the Casino footprint.
  • New Casinos remain inactive until payment is confirmed, while inactive records stay available to administrators for billing review and recovery.
  • Billing status can now be refreshed directly from Stripe even when the Casino count has not changed, so canceled or past-due subscriptions do not continue to appear active.
  • Subscription quantities now stay aligned with the Organization's active and billing-pending Casino footprint instead of values submitted by the browser.
  • Stripe updates use the approved $999 per-Casino monthly price and reject mismatched subscriptions before changing access.
  • Billing retries safely resume any unfinished Casino activation without creating duplicate billing activity.
  • Complimentary access changes now include clearer audit history for grants, updates, expiration, and revocation.
  • Paid access continues when a complimentary period expires and the Stripe subscription is active; canceled or suspended subscriptions are removed from access unless a separate complimentary grant applies.
  • Fixed Player Intake so a single visit can record both buy-in and cash-out amounts, with exact net calculations and compliance-ready movement reconciliation.
  • Added immediate protected Open player and Session entry actions after completing a new-player intake flow.
  • Added an auditable lifecycle reason when archiving or restoring a player and verified that visit, session, and financial history remains available through both transitions.
  • Hardened player archive processing so image and video removal is preflighted before the player status changes, deletes only exact player-owned objects, retains checksum and scanner provenance, and stops completely when a legal hold applies.
  • Hardened Player Intake, player registration, merge, profile, media, and financial preset submissions so invalid-site requests are rejected before protected form data is parsed.
  • Fixed Casino creation when timezone, business-day, and shift settings inherit from the Organization instead of using Casino overrides.
  • Corrected new-Casino billing checkout so the requested subscription quantity matches the actual post-create active Casino count without adding an extra Casino.
  • Added inactive and archived management views so administrators can find and restore Casinos and Games after their operational status changes.
  • Added clear success confirmations to Games, Tables, and Locations after authorized create and update actions.
  • Removed the duplicate All assigned Casinos option from Compliance scope selectors.
  • Verified Organization, Casino, Game, Table, and Location create, edit, archive, restore, and audit journeys with deterministic authenticated browser tests.
  • Hardened Organization, Casino, Game, Table, and Location changes so invalid-site and malformed requests are rejected safely before any record mutation can run.
  • Hardened Staff removal and Compliance permission revocation so cross-site requests are blocked before any access change can run.
  • Limited bulk pending-access removal to 100 records per request and now reports complete, partial, and failed results clearly so administrators can safely review and retry.
  • Replaced internal Table location and game identifiers with readable, Casino-scoped selectors for Location, Default game, and Current game.
  • Prevented stale Casino selections when changing Organization scope in Games and Notifications, including direct-link validation before a notification can be sent.
  • Kept Staff roster management inside the compact action menu while preserving accessible Manage access and Remove user controls.
  • Redesigned Staff User Details with account lifecycle, platform role, organization and Casino access, pending invitations, and permission review in one place.
  • Added an authorized last-sign-in timestamp and server-captured IP address to staff account details without trusting browser-supplied network data.
  • Added the Bank Administrator permission set for bank-scoped Title 31 staff administration without granting Organization or Casino administration.
  • Added role-specific Bank and Cage scope validation so Bank Operators can be assigned only to an authorized Cage while Bank Administrators retain Bank-level staff management.
  • Added activation and session-state gates so draft, revoked, expired, or idle-locked customer access cannot load Bank or Casino scope options.
  • Enabled Casino Administrators to grant and revoke staff permissions only within their assigned Casinos, with server-side scope checks and audit coverage.
  • Limited Bank Administrator staff directories to active Bank-scoped staff assignments in the Banks they manage, without exposing ordinary organization or Casino invitations.
  • Added Bank-scoped staff invitations that activate the approved Bank permission set only after the invited user accepts with their own account.
  • Fixed duplicate invitation acceptance so an existing matching access grant also finalizes the pending invitation instead of returning the user to the invitation page.
  • Added clear, account-safe guidance when an invitation is expired, unavailable, or tied to a different Google account.
  • Clarified the Access page when an accepted organization grant is waiting for billing activation.
  • Added a worker-only, read-only Gate E scope inventory for Organization, Bank, Casino, Cage, and approved assignment relationships without creating production data.
  • Added deterministic checksum-bound Gate E manifest drafts that keep approvals and recovery evidence explicitly pending until the customer packet is complete.
  • Updated Title 31 ledger and compliance pages with readable role and field labels, plain-language statuses, correction indicators, and USD-formatted amounts.
  • Hardened sensitive Title 31 exports so fresh Google reauthentication waits for the existing client session and never falls back to an ordinary sign-in.
  • Kept Bank and Casino permission changes fail-closed, audited, and protected by optimistic concurrency checks.
  • Moved pending staff invitations to a dedicated Pending Invitations page with organization and Casino filters and audited removal controls.
  • Clarified scoped permission changes so saving an Organization or Casino permission set replaces the prior role at that exact scope instead of leaving an accidental stale role behind.
  • Corrected delegated access so Company Owners and Casino Administrators send acceptance-based invitations, while only a Super Administrator's explicit Grant Access action activates access immediately.
  • Verified pending-access bulk removal, role boundaries, direct access grants, immediate next-request revocation, and readable access audit history with independent browser sessions.
  • Added conflict-safe Feedback review, scoped Notification delivery, Audit filter navigation, and clear retryable Billing launch errors with checkout cancellation and portal-return handling.

Version 0.26.09.02.1 · Beta

Company Owner player registration

September 2, 2026
  • Company Owners can add Players within their authorized Organization and Casino scope.
  • Authorized feedback reviewers can choose Toast, email, both delivery methods, or neither for new-feedback alerts.
  • Feedback automation safely queues approved feedback into a private, bounded engineering workflow.

Version 0.7.19.26.2b · Beta

Analytics environment wiring and clearer hosted diagnostics

July 19, 2026
  • Added Google Analytics environment wiring for staging and production so the admin analytics page can use the configured GA4 property in both hosted environments.
  • Improved analytics failure handling to explain whether the issue is a local credential scope problem or missing hosted runtime access to the GA4 property.
  • Logged analytics dashboard failures with runtime identity context so hosted access problems are easier to trace without exposing sensitive credentials.
  • Restored the expected Next.js instrumentation entrypoint so the development runtime no longer fails when loading the server instrumentation module.

Version 0.7.19.26.1b · Beta

Lifecycle controls, duplicate merges, and player workflow cleanup

July 19, 2026
  • Added a supervised same-organization duplicate merge flow with dry-run review, required archival reason capture, and full audit coverage.
  • Enforced player lifecycle transitions on the server so archive and restore-style changes follow role authority instead of behaving like generic profile edits.
  • Refined the player workspace by removing extra guidance panels from the roster and register screens so staff can stay focused on the active task.
  • Updated the admin feedback queue so dismissed items no longer appear in the live backlog list.

Version 0.7.18.26.4b · Beta

Player intelligence and operating-hours maturity

July 19, 2026
  • Added server-derived player opportunity scoring with explainable drivers on the player profile.
  • Expanded the player profile with advanced insights and casino-footprint analytics.
  • Enabled organization defaults with casino-level inheritance and overrides for timezone, business day start, and shift definitions.
  • Kept the public landing and login experience aligned with the branded shell while preserving protected-route separation.