Changelog

Recent updates, fixes, and new features. Newest first.

Legal & Security Trust Surface May 27, 2026

NEW Full legal coverage: expanded Terms of Service + Privacy Policy; added Refund Policy, Acceptable Use Policy, Cookie Notice, DMCA Policy, Accessibility Statement, Data Processing Addendum, Service Level Agreement.
NEW Security trust pages: Security Overview, Vulnerability Disclosure Policy, RFC 9116 security.txt.
SECURITY HTTP security headers (HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, Cross-Origin-Opener-Policy).
NEW Help center, status page, this changelog.

IMPROVED Generator enforces a 6-day consecutive workday cap by default (admin-configurable) — applies to all roles including nocturnists and residents.
IMPROVED Rest-after-streak rule prevents the "6 on, 1 off, 6 on" cluster — requires 2 rest days after a cap-hitting streak.
IMPROVED Stronger month-wide spread: new PACE scoring term pushes ahead-of-pace providers back so the schedule spreads evenly instead of clustering.
NEW Per-site APP staffing count — site A can need 2 APPs while site B needs 1.
NEW Per-site visual differentiation — each site gets its own emoji + color (🏥 🏢 🏨 🏛 🏬) across Open Shifts, My Schedule, and the trade modal.

NEW Trades tab split into Pending / Accepted / Cancelled-Declined sub-tabs with live counts (both provider and admin views).
IMPROVED Larger trade modal (920px wide vs 440px) with per-site key legend at the top.
IMPROVED Each cell in the trade picker shows the site short-name + per-site emoji so multi-site cells are immediately distinguishable.
FIX Cross-day trades now correctly unblock when offering across sites.
FIX Trade picker cells across days no longer false-positive as "already working" in multi-site groups.

FIX Open claims now appear on the claimer's My Schedule (multi-site fix).
FIX Provider Team view now reads across all siteScheds, so cross-site assignments render correctly.
FIX Provider can no longer claim an open shift on a day they're already working at another site.
SECURITY Atomic same-day double-book guard: rapid-fire claim clicks can't race past the check.
NEW Site indicator now shown on every Open Shifts row (not just giveaways).

NEW Out-of-town vacation blocks AND recurring weekly patterns now show as blocked immediately on the Availability calendar AND both team views (no need to regenerate).
NEW Recurring blackouts gained per-shift narrowing chips ("AM-only on didactic Wednesdays").
IMPROVED Team board now shows correct site availability: "All sites" when truly all, "2/3 sites" when a subset, or the site name when only one.
FIX My Schedule no longer paints open-shift days in blue — only the "OPEN" label.

NEW Undo, auto-flag for sketchy patterns, change diff modal before publish, per-provider re-publish email with diffs.
NEW ICS calendar export — download or subscribe via webcal:// (auto-refreshes on publish).
NEW Copy-last-month-as-template seeds the new month with prior config.
NEW Reports CSV export for payroll/HR handoff.

NEW NOC + weekend + holiday carryover from prior cycles balance schedules over time.
NEW Admin schedule-change digest (NOTIF-01) — coalesced into a single email every 5 minutes.
NEW Provider holiday preferences (3 avoid + 1 hard block + 1 want).
NEW First-time deficit import + spread cap so prior-cycle backlogs catch up over multiple months.

NEW Full residency variant: PGY targets, ACGME duty-hour validator, didactic blocks, PTO requests, per-block site pinning, holiday tally, liability acknowledgment, residency-specific tour.
NEW ED + residency combined provisioning (one Stripe subscription → two groups).

Onboarding tour, multi-site scheduling, NOC fairness, in-app feedback, provider trade UX v2, and the core scheduling engine.
See repository for full commit history.