Release Notes: May 1, 2026
Release Date: May 1, 2026
Status: Ready to Deploy
This release marks a critical security and infrastructure milestone for Valstorm. We are introducing a robust API Scopes system to enable secure guest and portal access, launching the Valstorm CLM (Contract Lifecycle Management) suite, and delivering a significant overhaul to the Mobile Experience. Additionally, we've finalized a massive deployment of internal data migration and notification logic.
🚀 Major Features & Epics
API Scopes & Secure Access (Phase 1 & 2)
Epic: NF-6ae350b1, NF-52c3fe85
To support the upcoming rollout of client portals and guest users, we have implemented API Scopes. This adds a second layer of defense on top of the standard Role Hierarchy.
- Technical Breakdown: Every API endpoint now requires a specific scope (e.g.,
records:read). Authentication tokens for guest users or external apps are now restricted to a minimal subset of scopes.
- Integrated Apps: OAuth connections and third-party integrations can now be "scoped down" to prevent overexposure of organizational data.
- Discovery: Admins can view all available scopes by querying
https://api.valstorm.com/v1/routes.
Valstorm CLM: Contract Signing
Ticket: NF-93eb1326
We are introducing the first phase of our native Contract Lifecycle Management (CLM) system.
- Autonomous Signing App: A new lightweight application dedicated to the guest signing experience.
- Document Orchestration: Users can now send documents for signature directly from a record, track the signing status, and have the finalized, signed PDF automatically saved back to the record's file attachments.
Mobile App: Home & Global Navigation
Ticket: NF-43672b60
The Valstorm Mobile App has received a major layout update to improve speed and discoverability.
- New Home Page: Replaces the static footer notifications with a dynamic Home dashboard. Users can access any object in the system or leverage their custom "Speed Panel" views from the web app.
- Global Notifications: Notification access has moved to a persistent header icon, and the notifications page now functions as a high-density override of the default list view.
✨ New Features
- Portals (NF-8adeaa9e): Initial infrastructure for dedicated client-facing portals is now live in the backend.
- UI File Downloads (NF-4dee263f): A new "Download" action is available for App Builder buttons, allowing users to trigger file downloads directly from custom pages.
- App Builder Input Overhaul (NF-c47a3345): A massive update to the component library. We've added standardized Phone, Boolean, Number, Currency, and Address inputs with built-in validation and auto-formatting (e.g., US Phone formatting).
- SMS Template Builder (NF-85b3c3b1): You can now inject dynamic query data and system variables into SMS templates, moving beyond basic contact field merge tags.
- Dynamic Notification Node (TICKET-02): A new "SendDynamicNotification" node is available in the Automation Flow Builder for real-time, logic-based alerting.
🛠️ Feature Improvements
- Google Drive Read-Only Scopes (FI-ee1abd09): Added support for "Read-Only" Google Drive permissions for organizations that want to sync documents without allowing the platform to delete or modify files in GCal/Drive.
- Emoji Cursor Logic (FI-28d712ce): Fixed the emoji picker in rich text editors to correctly insert at the last cursor location rather than appending to the end of the text.
- Campaign SMS Branding (FI-2be4736a): SMS messages sent via Campaigns now support a "Friendly Phone Name" to provide better brand recognition for recipients.
- Shared With Initialization (FI-06ad257c): Refactored how the
shared_with field is initialized during record creation to ensure consistent permissions across all object types.
🐞 Bug Fixes
Critical & High Priority
- Call Automations Recovery (B-a247168a): Resolved a critical regression where call-routing automations were failing due to a change in API return methods.
- Data Integrity & UUIDs (NF-a24986b1): Updated core Pydantic models to ensure unique IDs are generated correctly during high-volume bulk operations, preventing record collisions.
General Fixes
- Conversation Sync (S-23745172): Fixed a complex sync issue where Twilio participants were incorrectly linking to Leads instead of Contacts, preventing the text panel from opening.
- Direct Convo Generation (B-702fb03a): Resolved a bug where the system would fail to generate a new direct conversation if a group conversation with the same participants already existed.
- Flow Mustache Editor (TICKET-02): Fixed a misalignment bug where variable updates in the automation editor were failing to map to the correct field names.
📚 Training & Documentation
- API Scopes Guide: View API Reference
- App Builder Input Guide: New documentation for Address and Phone input validation rules.
📊 Release Stats
- Total Tickets: 20+ (Major tickets)
- Major Features: 3
- Bug Fixes: 8
- Security Scopes Added: 100% Coverage of V1 Routes
