Changelog
What's new
Every published update to lacspace.com, Lacspace One and the platform underneath, newest first.
Latest update
Inbox improvements
Improved · API · 29 October 2026 · v3.166.0
Display unread message counts in the sidebar
Recently launched
The latest entries marked New.
- API · 29 October 2026Staff inbox for messagesTriage messages in the staff inbox
- API · 29 October 2026Platform updateGhost plan: 55 included (90 after paid upgrade), plan endpoint, self-serve Rs 14,000 upgrade bill, block new/re-activated ghosts over the plan
- API · 29 October 2026Platform updateMail: sender address comes from FROM_EMAIL (SES SMTP users are access-key ids), SMTP_USER stays the fallback
What the changelog covers
- API
- The public API.
- 120 updates · last 29 October 2026
All updates
Filter by type or area. Every entry has its own link you can share.
Type
Area
120 updates
October 2026120 updates
Inbox improvements
- Display unread message counts in the sidebar
- Preserve plain-text body of inbound replies
- Automatically mark older messages as read
Staff inbox for messages
- Triage messages in the staff inbox
- Reply to emails in threads
- Sync inbound messages
Enhanced scheduling and task management
- Streamlined scheduling options
- Added pinning for important tasks
- Improved label and notes functionality
- Enabled bulk actions for efficient workflow
- Support for merging and duplicating tasks
Ghost usage limits
- Ghosts are now suspended if you exceed your plan's limits.
- Resuming ghost usage after upgrading your plan or fitting within limits.
- Plan endpoint now shows total ghost count and suspension messages.
Platform update
- Ghosts: Trash with 30-day automatic deletion
- Store demo seed: country-neutral client (USD, card/wallet copy) and a fuller project chat
Platform update
- Store demo client: seed script for screenshots + App Review login; excluded from public user count
Platform update
- Growth: personal referral codes (GET /api/users/me/referral) and referralCode on demo requests from lacspace.com/book-demo?ref=
Platform update
- Clients: pay invoices with eSewa from the app (one.lacspace.com return URL only), approve/request changes on releases, meeting requests the team confirms (client can only cancel), project messages with team replies as push
Platform update
- Push: audience-split campaigns twice a day, personal client pushes from real invoices/meetings/releases/progress, brighter cards with real figures (resvg + brand fonts), real app routes
- Auth (F1 stage 1): refresh tokens carry jti + session family; replays after a 60s grace are logged, and revoke the family when REFRESH_REUSE_ENFORCE=1
Platform update
- Ghost plan: 55 included (90 after paid upgrade), plan endpoint, self-serve Rs 14,000 upgrade bill, block new/re-activated ghosts over the plan
Platform update
- Stats: count unscoped Lacspace CLIs with the npm packages
Platform update
- Public /api/v2/content/stats: counted company numbers (products, client platforms, users, countries, posts, npm packages, Play installs), cached 6h
Platform update
- Support notifications open the app's Support screen
Platform update
- Quotes: requester details for staff, quote amount/message/link for clients, notify client on status change, hide internal notes, safe request ids
Platform update
- Badges: pending attach requests count
Platform update
- Apps list: hide WeNepal and Game Collection (retired from Lacspace surfaces)
Platform update
- Public projects API returns Live projects with public fields only
Platform update
- One: user persona (client/developer/general) + project attach requests
Platform update
- Auth: name/phone sign-up with auto country, email+code login, remember me, per-user rate limits
Platform update
- Payments: eSewa callbacks on payments.lacspace.com, order id on failure URL, HTML landing instead of JSON
- Articles: iSmartExams coming-soon sign-up links (#classes #teachers #institutions)
- Articles: iSmartExams 'What's next' (coming soon: classes, video, teachers, institutions)
- Articles: iSmartExams free set in every subject (H.A. Set A now free)
- Articles: iSmartExams new pricing (Rs 10–60 per exam, bundles Rs 300/500/1,200), 415 exams, 8,502 questions
- Articles: iSmartExams Oct 2026 series (7 new + factual rewrite of the Sep article)
Platform update
- Product mail relay: /api/product-mail/send + /logs with product key, From hello@/info@/payments@lacspace.com, per-product hourly cap, marketing needs List-Unsubscribe
Platform update
- Payments: compare eSewa amounts numerically ("40.0"/"1,000.0"), expire NOT_FOUND after 30 min but let a late signed success complete it, re-deliver webhook on status change
Platform update
- Payments: keep PENDING when eSewa status API has not indexed the transaction yet; signed redirect wins over gateway NOT_FOUND
Platform update
- Ghost last stop: GET/PUT /last-stop (latest wins by client time), lastStop on /me, admin clear
Platform update
- Ghost CRUD lock follows bills: unlocks automatically when no bill is outstanding
Platform update
- Ghost API: GET /billing answers 404 NOT_AVAILABLE instead of falling through to admin /:id
Platform update
- Ghost API v2: mount /api/v2/ghosts, retire v1 app endpoints for pre-2.1.0 apps
Platform update
- Ghosts: suspend/re-activate no longer behind the billing lock; re-activation gives a clean start (device registration + blocked log cleared, history kept)
Platform update
- Ghosts: app analytics — POST /api/ghosts/events (batched, deduped, offline-safe) + GET /api/ghosts/insights (totals, 7-day Nepal-time series, device); shared device-bound ghost auth
Platform update
- Ghosts: one ghost = one device = one app — device auto-registered on first sign-in (id, app, model, OS, IP, country), mismatches refused + logged, device-bound tokens, admin reset-device; legacy builds allowed until GHOST_REQUIRE_DEVICE=true
Platform update
- Intro videos use the new own-account bucket, not the old shared one
Platform update
- Mail: sender address comes from FROM_EMAIL (SES SMTP users are access-key ids), SMTP_USER stays the fallback
Platform update
- Admin login: per-person staff accounts (work email must match an active Staff record, no enumeration), sessions/passkeys scoped per person, module list in session-check, admin-only MCP tokens + chat, per-device pending codes
Platform update
- Ask Lacspace: admin chat on the Claude API (streaming SSE, tool use over the MCP tool set, threads, monthly USD cap)
Platform update
- Mcp tools: correct spam/status filters (spam.flagged, DemoRequest 'New', unpaid bill statuses)
Platform update
- Lacspace MCP server at /api/mcp (Streamable HTTP, bearer tokens minted on the dashboard, 13 read tools over the master-dashboard data) + token management endpoints
Platform update
- Admin security: step-up freshness (5-min) for dangerous actions via passkey or code, session backfill, new-device / new-country sign-in alert email
Platform update
- Admin security: passkeys (WebAuthn) as second factor + idle unlock, persisted sessions with revoke / sign out everywhere, audit event types
Platform update
- Admin otp: record the SMTP queue id/response on every send event
Platform update
- Admin otp: log the passphrase prompt (428) in the audit trail
Platform update
- Admin login: 2 codes per device per 15 min, 24h device-bound sessions, end-to-end audit log (ip/network/geo/device), reset-budget + events routes
Platform update
- Admin otp: report the send limit before the 30s spacing
Platform update
- Admin otp: never expose the mailbox (no email in responses/JWT), cap sends at 2 per 15 min, optional ADMIN_LOGIN_PASSPHRASE gate with lockout
Platform update
- Ghost: lock account management (no create/edit/reactivate); reads + login/me stay open
- Tests: replace real phone numbers in fixtures with fake ones
Platform update
- Sms: SMSRay-only branding in everything the module sends
Platform update
- Sms: keep the last phone-reported error code per SIM
Platform update
- Sms: SMS_FCM_PUSH_SENDS switch (send jobs by poll; FCM keeps voice/screening)
Platform update
- Sms: voice phase 1 (10.1-10.5 P15/P16)
- Sms: platform workspaces list filters by country
Platform update
- Sms: country-neutral platform (0.5 P14)
Platform update
- Sms: SMSRay web links move to smsray.com (phone base URL stays api.smsray.in)
Platform update
- Sms: app automation engine (1.14 P13)
Platform update
- Sms: prebuilt template library (2.5.19.1)
Platform update
- Sms: staff send + per-phone stats for the SMSRay app (1.13 P12)
Platform update
- SMSRay: template approval, monthly plans, customer-side de-disclosure
- SMSRay: default pairing QR is the SMSRay app (smsray:// on api.smsray.in); qrLegacy for APK 1.0
Platform update
- SMSRay admin: superadmin passes every check; staff edit every client detail
Platform update
- SMSRay wave 2: analytics, detection & automation, API controls, packages, tools, activity, exports
- SMSRay: APK 1.0-safe pairing; keep OTP rows 30 days
- SMSRay phone app move to com.smsray.app
- SMSRay: restrictions foundation, API request log, test mode, new admin resources
Platform update
- SMSRay admin: staff need a verified email (admin sign-in is email only)
Platform update
- SMSRay admin: optional email + password sign-in for RBAC staff
Platform update
- SMSRay: hellolacspace@gmail.com is a default superadmin alongside info@lacspace.com
Platform update
- SMSRay admin RBAC: superadmin (info@lacspace.com) from config, staff roles with per-resource view/create/update/delete, permission gate on every platform route, RBAC switch, me.access
Platform update
- SMSRay: master-dashboard admin API (workspaces/members/users/clients CRUD, balance ledger, overview), closed self sign-up, SMSRay branding
Platform update
- Sms: SMPP simulator only with explicit NODE_ENV test/development (prod runs with NODE_ENV unset)
Platform update
- Sms: email + OTP sign-in for portal and staff app; bootstrap admin emails (SMS_PORTAL_BOOTSTRAP_EMAILS); verified-identifier accounts
Platform update
- Sms: new Lacspace SMS module (device gateway, portal phone+OTP auth, tenancy, v1 client API, device security, app login) at /api/sms; ships disabled
Platform update
- Ghost: shut down Ghost portal APIs (503 kill switch, GHOST_API_ENABLED=true to restore)
Platform update
- Cors: expose Retry-After so clients can show the real wait on 429/503
Platform update
- Webmail: /events accepts tickets only (legacy ?token= removed); clientIp strips ::ffff:
Platform update
- Cors: allow Idempotency-Key request header, expose Idempotent-Replayed
Platform update
- Webmail: hardening wave A — idempotent writes, device sessions, download tickets, double-send guards
Platform update
- Webmail: bump email-lint 1.0.1, email-builder 1.1.0, sequence 1.1.0
Platform update
- Webmail: Lead Finder — lacspace-leads --push receiver, saved searches, smart lead dedupe, bulk actions, file import
Platform update
- Webmail: wave 4 — Templates Studio (brand kit, lint, test send, Lumi drafting), Campaigns (merge, A/B, windows, tracking, suppression, signed unsubscribe), Sequences (own-mailbox follow-ups under send ceiling, reply/bounce stop), Leads pipeline (timeline, enrichment, import), sound prefs; adopts @lacspace/{bounce,mail-merge,sequence,email-lint,email-builder}@1.0.0
Platform update
- Webmail: @lacspace/mail-auth 1.1.1 (provider hop + mailbox host both trusted); drop M365 id-less fallback
Platform update
- Webmail: @lacspace/mail-auth 1.1.0 — full header block with Received hops, auto-trusted authserv-id per mailbox host, upstream tldVariants/mailingList options; M365 id-less fallback
Platform update
- Webmail: per-user (JWT subject) and per-email sign-in rate limits; stats accept day / from–to / category filters for deep-linkable Insights
Platform update
- Webmail: wave 3 — sender authentication & phishing checks, subscriptions + one-click unsubscribe, automations 2.0 with webhooks/forward/auto-reply/log, daily briefing, web push (VAPID), attachment text preview, keyless Lumi fallbacks; built on @lacspace/mail-auth, @lacspace/unsubscribe, @lacspace/ics
Platform update
- Webmail: conversations, snooze, follow-ups, auto-reply, smart categories, Insights, Lumi AI, calendar invites, files, search operators
Platform update
- Webmail: try Hostinger/Titan servers first for domains in the Hostinger portfolio
Platform update
- Webmail: allow every domain in the Lacspace Hostinger portfolio (API sync at boot, daily, and from Admin)
Platform update
- Webmail: standalone sessions (no Lacspace One), mailbox-only sign-in, allowed-domain list
Platform update
- Webmail: mailbox login — sign in with any Hostinger/GoDaddy/Titan/Google/M365/Zoho/IMAP mailbox
Platform update
- Webmail: mount before global guards so health, invite preview, SSE and downloads work without headers
Platform update
- Lacspace Mail: webmail module at /api/webmail (Lacspace-Mail database)
Platform update
- Content(wenepal): page assets + CMS product record aligned with wenepal.com (independent newsroom, slug wenepal)
Platform update
- Content(wenepal): 7 articles on WeNepal (intro, newsroom checks, app, governance tracker, Pulse, Nepalis abroad, brand) + WeNepal scene system and image generator
Platform update
- Content(stockyatra): 7 articles on reviews, video lessons, daily call, IPO, safety, Promote & Earn, tools; Rate Us 20k + weekly-league fixes
Platform update
- Content(stockyatra): CMS product record → three markets, community, Bazaar
Platform update
- Content(stockyatra): three markets + Bazaar + top-app batch
Refined AI Content Formatting
- Ensured AI-generated content no longer includes duplicate 'read more' links.
Automated LinkedIn Posting
- Automate your LinkedIn content sharing directly from Lacspace.
Lead Generation Matching
- Improved the accuracy and precision of Overpass name matching in lead generation.
Improved Lead Generation Reporting
- Ensured lead generation processes accurately report completion status.
- Eliminated misleading 'done' messages when no leads were generated.
Improved LinkedIn page connections
- Ensured LinkedIn company pages request only necessary organization permissions.
- Correctly derived page identity from organization access settings.
- Attributed organization connections accurately to the company page.
Improved LinkedIn Connection Management
- Improved stability and management for LinkedIn organization connections.
- Enhanced security with dedicated credentials for each application.
- Faster issue resolution with per-application diagnostics.
New LinkedIn Integration Features
- Improved application readiness and stability for LinkedIn features.
- Provided clearer error messages for LinkedIn authentication.
Corrected Intro Video Play Counts
- Ensured that intro video previews on the dashboard no longer increment play counts.
New Intro Video Features
- Easily set or clear intro video posters using captured video frames.
- Reorder your intro videos as needed.
- View comprehensive serving statistics for your intro videos, including plays by country and reason.
Enhanced LinkedIn Integration
- Seamlessly connect your LinkedIn accounts with a new OAuth flow.
- Benefit from enhanced security for your LinkedIn connection tokens.
- Schedule and queue your posts for LinkedIn publishing.
- Publish posts reliably to LinkedIn using the updated API.
- Monitor the connection status of your LinkedIn channels.
Resolved tool search timeouts
- Fixed an issue that caused tool searches to time out.
Expanded Lead Generation Options
- Utilize 110 grouped business categories for targeted searches.
- Refine lead generation with custom keyword search capabilities.
- Benefit from location and preset hints for easier targeting.
- Filter leads using new 'must-have' options for phone, website, email, or no-website.
Platform update
- Gemini fallback rotates through active keys, marks invalid ones, cools down quota hits
Platform update
- AiComplete falls back to the Gemini key pool when Groq/Cerebras fail
Platform update
- Growth automation API — templates, campaigns, settings, channels, send log, agent, sender cron
Platform update
- GET /captain/search?q= — cross-module admin search
Platform update
- Long mixed-case single-token names flag on their own (scorer v2)
Platform update
- Quarantine for public-form spam — score, hide, restore, purge
Platform update
- GET /captain/metrics — per-module totals + 14-day daily series
Platform update
- GET /captain/badges also returns per-module totals
Platform update
- Admin login code → hellolacspace@gmail.com via shared SMTP mailer
Platform update
- GET /captain/badges — needs-attention counters for the admin shells
- Content(stockyatra): 7 articles — community update, study partner, leagues, achievements, refer & earn, academy, 2026 roundup
Platform update
- Retire the authoring API, keep the public read path
Platform update
- Order the quality checks so each gives its own diagnosis
Platform update
- Quality gates, per-user limits and archive search
Platform update
- Answers — accept, official pin, and answered/unanswered filters
Platform update
- Bump a post's updatedAt when a reply lands
Platform update
- Serve replies on public discussion threads
Platform update
- Give discussions a public, indexable surface
Platform update
- Give intro videos their own RBAC module
Platform update
- Report real compression progress
Platform update
- Keep transcoding out of the other services' way
- Serve the intro video in the visitor's language
- Scripts: restore the assets the SaaS bucket move left behind
- Ideatopic kit: dark-theme callout styles + refresh live counts (2026-09-23)
- Content: IdeaTopic app launch article + store-link update across 18 articles
- Content: fix wrong APIs in dev-kit articles + covers (checked against package READMEs)
- Content: article audit phase D (52 branded in-article figures, thin-article expansions)
- Content: article audit phase C (drop hotlinked stock/news images, fill categories+tags)
Where updates appear
- This page, for site and platform updates.
- Lacspace One, in the app's own What's new, including app-only release notes. About Lacspace One
- RSS, for your feed reader: lacspace.com/whats-new/feed.xml
How an entry gets here
- Shipped. A change goes live in a release.
- Drafted. An entry is drafted from the code changes in that release.
- Reviewed. A person checks the wording and publishes it.
Something you want to see here next?
Tell us what to build or fix next, or report something that is not working.