Week 25 - 2026
Portal proof path unblocked.
Jun 19v0.14.0 - Portal auth and dogfood audit fixes
Shipped
Admin workflow sidebar restored
- Payload admin now surfaces MAD workflow shortcuts for Portal Access, Portal Readiness, Client Roadmap, and Opportunity Requests
- The Portal Readiness document-storage action now sends admins to Portal Access, where test uploads can be performed
- The repo-side fix is ready for deploy; live production sidebar visibility still needs the next Vercel redeploy
engineeringreview
Shipped
Private document storage smoke passed
- The portal document audit/versioning migration was applied to the configured Supabase database
- `pnpm storage:smoke` passed upload, canonical metadata verification, anonymous-access denial, signed download, checksum verification, and cleanup against `mad-portal-documents`
- The handoff tracker now separates this configured-project proof from the remaining deployed-app proof after redeploy
engineeringreview
Shipped
Dual-role Auth users supported
- Portal authorization now accepts app metadata `portalRoles` arrays while preserving the existing scalar `portalRole` field
- The Portal Access Manager maintains dual-role metadata when the same Supabase Auth user is connected to both investor and client records
- Role checks still trust Supabase app metadata only, not user-editable metadata or stale browser cookies
engineeringreview