Versions & updates

Android 1.0.0-beta.35

Version code 35 · website

Chat System Update

Website 3.3.30

2026-10-16

Agency beta35: compact chat controls, fixed composer, online-only right sidebar, actual avatar/bitmap conversation icons with background contact loading, and integrated eight-step Tagalog guide. Online filter runs before pagination. No SQL migration over3.3.29; Authenticator beta10 unchanged.

Website 3.3.29

2026-10-15

Agency beta34: online members and participant-only private text chat, private FCM routing, popup notification defaults and Android conversation bubble support. Enter sends; Shift+Enter inserts a line; digit-only messages have Copy. Import chat-private-upgrade.sql and restart the push worker. Authenticator beta10 unchanged.

Website 3.3.28

2026-10-14

Agency beta33: FCM chat alerts with account-safe device bindings and notification tap routing. PHP queue/worker reuses existing Firebase service account; notification sending stays outside the chat Send request. Authenticator beta10 unchanged.

Website 3.3.27

2026-10-14

Faster web Chat: one-second active checks, compact unchanged responses, confirmed message rendering from Send, and immediate refresh after an interrupted poll. Existing URL/send fixes retained. Agency beta32 and Authenticator beta10 unchanged.

Website 3.3.26

2026-10-14

Web Chat resolves its endpoint from the current browser page URL so internal PHP path prefixes cannot redirect chat requests. Agency beta32 and Authenticator beta10 unchanged.

Website 3.3.25

2026-10-14

Web Chat transport update: dedicated endpoint, explicit POST body routing, redirect detection and preserved retry drafts. Agency beta32 and Authenticator beta10 unchanged.

Website 3.3.24

2026-10-14

Agency Chat added to the website and native Android app beta32: shared messages, avatars, history, unread counts, admin removal and safe retries. Existing tasks and login features retained.

Website 3.3.23

2026-10-11

Full native Admin menu matching website destinations, searchable proof/claim queues including unfinished entries, shared CSRF/admin actions, streaming APK uploads and publishing/launch settings. Agency beta31/code31; Authenticator beta10 unchanged; no new SQL required.

Website 3.3.22

2026-10-10

Sunday-only countdown on the Weekly Tasks page, shared website/native server deadline. Shows selected-week expiry and handles native background/resume. No daily timers or upload-policy change. Agency beta30, Authenticator beta10 unchanged; no SQL.

Website 3.3.21

2026-10-09

Shared web/native weekly monitoring with pagination, member search, historical weeks, complete seven-day qualification, fair late-retry timing and admin-only proof modals. Four screenshots require Final submit to count. Agency beta29; Authenticator beta10 unchanged. No new SQL.

Website 3.3.20

2026-10-09

Website and native login approval-number modals; Authenticator large keypad popup after unlock for one pending request or the exact notification request. Multiple requests require explicit selection. Expiry, denial and six-digit fallback retained. Agency beta28 and Authenticator beta10 sources; no new SQL.

Website 3.3.19

2026-10-09

Tagalog Authenticator tutorial3.0: QR account enrollment, same-phone setup, compact Copy/timer, native Use authenticator/Approve and return code/Verify and continue, website login, backups and notification approvals. 43 picture/video chapters. Agency beta27 and Authenticator beta9 unchanged; no SQL or APK rebuild for tutorial files.

Website 3.3.18

2026-10-09

Clean Agency beta27 and Authenticator beta9 source. QR2 parity and certificate-pinned bridge for existing separate signing keys. Source/APK checks; no new SQL for this repair.

Website 3.3.17

2026-10-09

Complete Authenticator beta8: compact Copy code cards, direct QR/Sign-in approvals controls, number matching and Approve/Deny retained. Full-source and built-APK feature checks prevent accidentally using old code-only artifacts. Agency beta25 and QR2 enrollment unchanged. No SQL.

Website 3.3.16

2026-10-09

QR2 parity: visible QR, identical Copy setup and staged activation; setup capability checks detect incomplete website deployment. Agency beta25 connects to the canonical v3 subdomain. Backup codes retained until acknowledgement/15-minute expiry. Authenticator beta7 scanner unchanged. No SQL.

Website 3.3.15

2026-10-08

Local QR rendering for account enrollment and notification linking; native agency beta24 and Authenticator beta7 scanner. QR import is explicit and never activates the server factor without its current-code confirmation. No additional SQL.

Website 3.3.14

2026-10-08

Resumable Authenticator setup, individual manual copy buttons, and separate action-bound account approvals. Email changes still require admin approval and new-inbox verification. Additive authenticator-actions-upgrade.sql; agency beta23 and companion beta6.

Website 3.3.13

2026-10-08

Restore Authenticator and Login tutorial in the mobile website menu; scroll long menus on short screens. Agency beta22/code22 adds direct Login tutorial buttons on Profile and login. Companion beta5 unchanged. Notification approval remains sign-in only; sensitive account actions continue using email verification. No SQL.

Website 3.3.12

2026-10-07

Complete 10m21s Tagalog Authenticator video: download, installation, initial setup, backup codes, notification pairing, number keypad, login and recovery. 34 chapters and picture guide with modal previews. No SQL or APK rebuild for the tutorial update.

Website 3.3.11

2026-10-07

Authenticator beta5/code5: native 0–9 approval keypad, two digit slots, Delete, Approve enabled only with both digits, explicit approval and English app wording. Agency beta21/code21 and website use English approval/setup/notification messages. Preserve number matching, phone unlock, expiry, denial and existing code fallback; no SQL. Copy approval setup fix retained.

Website 3.3.10

2026-10-07

Fix Copy approval setup for already enrolled authenticator accounts. Initialize copy controls independently of first-time setup; give approval-specific paste/link guidance and visible manual-copy fallback. Keep current codes and phone entries. Website files only; no SQL or new Android build.

Website 3.3.9

2026-10-07

Optional sign-in approval using Firebase Spark/FCM and existing PHP/MySQL hosting. One-time protected pairing, two-minute session-bound number matching, device revoke/replace, consume-once completion, code/recovery fallback. Agency beta20 and companion beta4; Firebase configuration and signed APKs required. No Cloud Functions, paid database or SMS.

Website 3.3.8

2026-10-07

Add admin member/day-specific weekly task retry, audited reason and previous completion, one further upload per proof type, 24-hour/current-week expiry, revoke, and consume-on-Final-submit. Preserve proof counters and other-member/day rules. Admin Enable retries button plus repeatable SQL fallback. Agency beta19 reads per-proof attempt limits and shows retry notice; rebuild/publish with existing key. Authenticator beta3 unchanged.

Website 3.3.7

2026-10-06

Integrate 6m42s Tagalog weekly task tutorial, 23 actual website demo screenshots, captions, chapter shortcuts, lazy-loaded picture guide and modal previews. Add links on Weekly tasks, task details and Tasks & claims. Public read-only tutorial; Monday generation, daily final submission and locks retained. No SQL or Android rebuild.

Website 3.3.6

2026-10-06

Add CSRF-protected admin Enable email change requests button on Change email and Members. Add only missing verification/pending-email fields and a unique pending-email index; preserve accounts/current addresses. Include repeatable phpMyAdmin fallback. Existing member password/current-email OTP, admin approval and new-inbox verification retained. Agency beta 18 and Authenticator beta 3 unchanged.

Website 3.3.5

2026-10-06

Track Authenticator 1.0.0-beta.3/code 3: compact native cards, copy-current-code icon, countdown bar and compact account controls. Update companion publishing defaults. Website 3.3.4 setup-resume/backup acknowledgement fix retained. Rebuild and publish only the authenticator APK with the same key; no SQL or agency Android update.

Website 3.3.4

2026-10-06

Refresh the website phone-code form with a safe GET after Na-save ko na sa app. Reject stale activation CSRF and return to a fresh form without activating. Keep backup codes in the activating browser session for up to 15 minutes until explicit CSRF-protected acknowledgement; native API remains one-time. Clear expiry/restart guidance. No SQL or Android rebuild required.

Website 3.3.3

2026-10-06

Update Tagalog authenticator video to 4m12s with 15 actual website demo screenshots, email-template preview, magnified controls, pulsing button highlights, always-visible captions and 18 seekable chapters. Two Android-app sections are labelled phone instructions pending actual device photos. Replace website guide illustrations with captured website pictures and version image links. Authenticator beta 2 and agency beta 18 unchanged; no new SQL or app rebuild for the tutorial.

Website 3.3.2

2026-10-06

Simplify website authenticator enrollment into guided Tagalog confirmation, copy-and-paste account linking, separate phone-code confirmation and required backup acknowledgement. Add short Tagalog tutorial and collapsed help. Keep password/current-email setup verification, expiry, replay prevention, encrypted seeds and recovery rules. No SQL or Android rebuild for this website update. Companion beta 2/code 2 adds one-paste website setup with explicit clipboard access and strict transfer validation; rebuild and publish only the companion APK.

Website 3.3.1

2026-10-06

Replace authenticator tutorial with natural Filipino/Tagalog narration, Tagalog on-screen instructions, synchronized Tagalog captions and seekable chapters. Keep exact app button names and demo-screen privacy masks. Website 3.3.1/build 20261006.2; no SQL or Android rebuild required for this tutorial update.

Website 3.3.0

2026-10-06

Add optional TOTP authenticator login, password + current-email verified enrollment, encrypted per-account secrets, single-use recovery codes, persistent failure locks and replay protection. Add separate offline Dauntless Authenticator Android app with phone-lock protected vault and signature-checked code transfer. Website/native tutorials and captioned video. Website 3.3.0, agency beta 18/code 18, authenticator beta 1/code 1; import authenticator-upgrade.sql. Existing account-action and registration email verification retained.

Website 3.2.23

2026-10-05

Show today’s weekly task first, upcoming days next and previous days at the bottom, dates ascending within each section. Highlight today using server Manila date on website and native app. Historical weeks remain Monday–Sunday; preserve search, completed/locked task states and current-week default. Android beta 17/code 17; API v1; no SQL.

Website 3.2.22

2026-10-05

Add Profile Switch account with confirmed sign-out and a saved-username chooser on website and Android. Remember at most five successfully authenticated usernames locally; require password and email OTP for every new sign-in. Clear the old session, unconfirmed account request and native task/photo state. Preserve locked member identity, admin edits and protected email changes. Android beta 16/code 16; API v1; no SQL migration.

Website 3.2.21

2026-10-05

Lock member full name and Poppo nickname on website/API, including older apps. Preserve admin member editing. Put Request email change at the top of Profile and add an avatar-independent native email request screen. Keep current-email OTP, current password, admin approval and new-inbox verification. Android beta 15/code 15; API v1; no new SQL.

Website 3.2.20

2026-10-05

Track native Android beta 14/code 14: add 14 dp between Paste code and Verify and continue, plus 8 dp before the code expiry message, on login and protected account verification screens in Light/Dark. Verification policy and API v1 remain unchanged; no SQL migration.

Website 3.2.19

2026-10-05

Remove email OTP from weekly generation, weekly/level-up/compensation final submissions, birthday claims and name/nickname edits. Keep login OTP, email-change approval and both inbox checks, password-change OTP/current password, avatar-request OTP and registration activation. Add submission confirmation, code expiry/resend countdowns, and native Paste code; preserve screenshot and weekly rules. Android beta 13/code 13, API v1; no SQL migration.

Website 3.2.18

2026-10-05

Keep admin App update center usable when the optional download counter helper/data is missing or fails. Correct incremental upload-progress packaging to include its counter dependencies. Preserve APK publishing, launch settings, admin guards and stored updates. No SQL or Android rebuild.

Website 3.2.17

2026-10-05

Screenshot upload progress for weekly, level-up and compensation on the website and native Android beta 12. Real byte percentage, separate server-saving stage, slow-connection guidance and saved-proof checks before uncertain retries. No SQL migration; API v1 retained.

Website 3.2.16

2026-10-05

Website download buttons count requests with private locked aggregate storage. Public installation guide shows the total; admin App update center shows total and current-APK requests. Cached APK bytes and native updater links remain unchanged. No SQL migration or Android rebuild.

Website 3.2.15

2026-10-04

Batch level-up and compensation proof lookups for website lists and native API. Avoid repeat attendance transactions before month-end and repeat notice inserts. Release authorized image session locks before rendering/streaming so other page requests can proceed. No SQL migration or Android rebuild.

Website 3.2.14

2026-10-04

Separate Level-up proofs and Compensation proofs shortcuts in admin overview, desktop navigation and mobile menu. Proof review tabs preserve task type during search/clear; compensation From/To/Trading screenshots use existing image modals. No SQL or Android rebuild.

Website 3.2.13

2026-10-04

Portal chooser v1.0.1: editable Philippine-time old-site transition countdown with days/hours/minutes/seconds, fixed deadline across reloads and server clock synchronization. Zero-state transition guidance; no automatic removal of old login access. No SQL or Android rebuild.

Website 3.2.12

2026-10-04

Standalone branded portal chooser v1.0.0 with old/new site choices, Android installation link, responsive Light/Dark appearance and local assets. Main-domain deployment instructions preserve the old login router. No SQL or Android rebuild.

Website 3.2.11

2026-10-04

Persistent password-attempt limits shared by browser and native API sessions; Secure cookies behind HTTPS hosting proxies, strict sessions, private-file protections and compatible response headers. No SQL migration or Android rebuild. Hosting must enforce HTTPS.

Website 3.2.10

2026-10-04

Optional pictured Step 5A for the observed Play Protect warning, between Install and Open. Includes the supplied screenshot unchanged, conditional guidance, full-image scrolling and enlarged preview. Keep Play Protect enabled; normal installation steps and APK delivery unchanged. No SQL or Android rebuild.

Website 3.2.9

2026-10-04

Eight labelled Android installation pictures with tap-to-enlarge modal previews, detailed English instructions and Tagalog summaries. Responsive Light/Dark guide; no-JavaScript image links work directly. Download delivery, API v1 and Android app remain unchanged. No SQL or app rebuild.

Website 3.2.8

2026-10-04

Public Android download and installation guide with the latest published APK, Light/Dark appearance, English/Tagalog steps and troubleshooting. Login/dashboard download cards, home link and admin share link. Bare app-download.php redirects to the guide; checksum APK delivery remains immutable. Website-only update; no SQL or Android rebuild.

Website 3.2.7

2026-10-03

Fix verification links for /v3/public and the configured portal folder using exact Android intent paths. Token-free browser fallback avoids Google Play when the installed app cannot open. Beta 10 and earlier keep numeric codes; beta 11 uses email buttons. No SQL migration; API v1 and original-session OTP checks preserved.

Website 3.2.6

2026-10-03

Trial Verify in app email buttons for login and protected final submissions. Encrypted links require the original app session and existing OTP expiry/attempt/account checks. Six-digit codes remain available; a server switch disables links. Android App Links with browser handoff and explicit confirmation. No new SQL or notification permissions.

Website 3.2.5

2026-10-03

Track Android beta 9/code 9: theme-aware Light/Dark splash, opaque background on every animation frame, themed loading/retry/system bars and readable footer. Preserve website Light/Dark appearance, API v1 and existing splash duration settings. No new SQL.

Website 3.2.4

2026-10-03

Website Light/Dark appearance selection in the header and Profile, browser persistence before first paint, synchronized controls/tabs, and dark member/admin/public pages and dialogs. Android beta 8/code 8 and API v1 remain unchanged. No new SQL.

Website 3.2.3

2026-10-03

Track Android beta 8/code 8: remove Original from the theme picker and default to Light. Migrate saved Original preferences to Light while preserving Dark. Website/API/database behavior is unchanged.

Website 3.2.2

2026-10-02

Admin App launch settings saves the splash duration in preserved private settings. API metadata supplies splash_duration_ms. Native Android beta 7/code 7 holds the animated splash for configured foreground time, caches the setting, cancels delayed transitions on retry/destruction and avoids adding delay after slow connections. No new SQL.

Website 3.2.1

2026-10-02

Once-daily attendance confirmation across sessions/platforms and sequential birthday greetings. Admin APK upload center, immutable checksum downloads and published update metadata. Android beta 6/code 6 detects website APK releases and validates package/version/signature before user-approved installation. Redesigned phoenix splash. Reimport login-rewards-upgrade.sql.

Website 3.2.0

2026-10-02

Shared daily login attendance, configurable monthly rewards and manual handling records; birthday greetings. Native Android beta 5/code 5 adds the reward calendar, admin controls, phoenix launcher icon and splash. API v1 remains compatible; import login-rewards-upgrade.sql.

Website 3.1.6

2026-10-02

Remove the renderer left-side portrait fade that hid the shoulder. Preserve full subject alpha inside the portrait circle and above the banner; restore the bundled gold phoenix above the portrait. Twelve regression checks and portrait rendering passed. Android beta 4/API v1 remain compatible.

Website 3.1.5

2026-10-02

Widen the avatar matting boundary according to photo resolution so a wall-colored halo is re-evaluated instead of fixed as opaque foreground. Tested with the supplied original portrait and both saved cutout masks. Android beta 4 and API v1 remain compatible.

Website 3.1.4

2026-10-02

Avatar worker refines hair edges with explicit alpha matting and estimated foreground colors; no coarse fallback on matting failure. Correct RGBA compositing. Android beta 4 and API v1 remain compatible.

Website 3.1.3

2026-10-02

Android beta 4/code 4; add read-only mobile connection discovery and full/thumbnail leaderboard avatars with Poppo IDs. API v1 remains compatible.

Website 3.1.2

2026-10-02

Track native Android beta 3/code 3 and its redesigned member interface. Update mobile branding; API v1 and task rules are unchanged.

Website 3.1.1

2026-10-02

Track Android beta 2/code 2; its Gradle setup reads downloaded checksum text safely on Windows PowerShell.

Website 3.1.0

2026-10-02

Shared native Android API, release history and visible website version. Existing website flows preserved.

Website 3.0.1

2026-10-02

Draft screenshot uploads; final-submit OTP; current-week selector; email-change navigation; admin generation testing.

Website 3.0.0

2026-10-01

Version C portal, automatic avatars, proof modals and manual reward monitoring.

Install the agency app

Android asks you to approve installation.