- Pending workspace invites with accept/decline + bell notifications;
invite permission extendable via workspace.invite group right
- Notifications API (list/unread, mark read, read-all) + realtime push
to per-user socket rooms; chat messages notify other members
- Workspace team chat API (list/post/delete) + chat:join socket rooms
- Image uploads (multer, 5MB image-only) served from /uploads
- Teams (managers/members), team-owned workspaces (TEAM badge), team
task boards (team_id) and task assignees (workspace members only)
- Permission groups with teams.create/edit/invite + workspace.invite,
default Team Creators seeding, hasPerm/canManageTeam guards
- Public registration disabled after install; admins create users
(pending invites auto-link); users gain bg_glass setting
- Crash fix: express-async-errors + 400 on malformed IDs instead of
unhandled rejections killing the server
x3
c3c77333db