Add a privileges table to the docs so organisation and event roles are clear.

Drop maskable PWA icons so Android pads the home-screen logo like before.

Remove the unused Cursor Atlas IP allowlist sync helper.

Preserve line breaks when rendering feedback answers.

Comments/suggestions were stored with newlines but collapsed in the stats table and other answer views.

Skip Sass partials when compiling standalone stylesheets.

Unify account, activity, and organisation feedback summaries into one concern.

Use OpenRouter's ~ alias so chat always follows the newest Gemini Flash.

update agents.md

Use Guardian-style display modes so Chrome offers both Install and Create shortcut.

Restore an installable web app manifest so Chrome can offer both Install and Create shortcut.

Remove unused PWA manifest and stub service worker.

Use OpenRouter's gemini-flash-latest as the default chat model.

Always require event admin before adding a cohost.

restrict_cohosting was replacing the event-admin check instead of stacking on it, so an org admin could add their own org to any event and inherit full admin and email access.

Sum equivalent ticket type IDs before enforcing the checkout quantity cap.

Reject checkout quantities above the per-purchase ticket cap.

The UI already limited the dropdown; the POST now checks availability before creating tickets.

Only apply checkout credit when the signed-in buyer owns the order.

Also match banned emails case-insensitively so mixed-case list entries still block.

Fold payment checkout and webhook tests into one suite.

Extract event checkout into a dedicated purchase controller.

Rename test login helpers to sign_in and sign_in_with_rack.

Give comment reaction buttons a darker border on grey reply backgrounds.