Changelog

🔒 Security

• Email verification required for all new registrations

🔧 Improvement

• Enhanced sign-out and registration error handling

✨ New Feature

• Role-based access for Gym Owners, Trainers, Admin Assistants, and Gym Members
• Workout builder with templates, exercise library, and logging
• Nutrition tracking with adherence-neutral design
• Stripe Connect payments with financial reporting
• CRM with lead pipeline and email marketing automation
• AI coaching chat with voice and photo nutrition logging
• Wearable integration via Terra API

✨ New Feature

• Scheduling with appointment management and calendar sync
• Payroll calculation and RBAC permission system
• Digital waivers and QuickBooks integration

✨ New Feature

• Adaptive TDEE engine with back-calculated energy expenditure
• Readiness score, injury risk indicator, and churn prediction
• Habit coaching and trainer compliance dashboard

✨ New Feature

• Homepage conversion optimization with A/B testing
• Auth flow redesign with subdomain routing
• White-label custom domains and feature tier comparison

✨ New Feature

• Role-specific setup checklists and CSV data import
• Enhanced onboarding for all four personas

🔒 Security

• Firebase App Check with reCAPTCHA Enterprise for web, App Attest for iOS, Play Integrity for Android
• CSP hardening with unsafe-inline removal and strict-dynamic
• Edge function client separation: user-scoped vs admin-scoped Supabase clients
• Stripe webhook idempotency and signature verification
• HSTS preload, Permissions-Policy header, and Android cleartext traffic blocking

🔧 Improvement

• Branded email templates for all auth flows and security notifications