The workshop.

The team-formation board now has a head-coach picker, the follow-up that #373 deferred when only team rename was wired in. Admins assign a head coach to each team directly from the board, and the existing updateTeamAction primitive validates and persists the headCoachRegistrationId behind it. Building a team now starts where it should: by naming who's running it.

The public site, admin, and apply flow got a full visual overhaul, ported from a design handoff into a photo-led, black-and-white layout with an evergreen accent and a new cross/plus brand mark. The client gave broad creative freedom, and this is the direction it landed on across every surface a visitor or applicant touches. The cause now looks like something you'd trust with your name.

Real Zambia Safari Co got a greenfield site built around the founders' own Zambia photography: a cinematic landing, a Zambia hub with five destination pages, sample itineraries, and an enquiry form that drops leads in the inbox with a branded confirmation. A secret-gated admin with a WYSIWYG editor lets them run the blog without a developer. A Zambian-led outfitter now looks the part to the travelers it's courting.

The admin review dashboard goes live, turning the Phase 1 scaffolding (auth tables, a status state machine, audit logging, CSV export) into a working place to actually process applications. The notification email from Phase 1 finally lands somewhere real: its /admin/applications/{id} link now opens a screen where the admin can move an application through review and export the results. The application someone submitted now has a human on the other end who can act on it.

No More Fatherless went live with its first public slice: a marketing site and, more to the point, an online grant application that lets families apply for support with document uploads instead of paperwork. Submissions persist securely and fire a branded confirmation, so an applicant knows the ministry received them. A cause built on helping families can finally take their request the moment they're ready to ask.

The email-blast panel now lets admins preview the rendered SMS with a live segment count, edit the body per-blast to override the template without touching code, and fire a real test SMS to a phone they pick. That test routes through the same Twilio kill-switch and recipient gates as a live send, so it proves the real path instead of a mock. Admins stop guessing what a blast looks like and start seeing it before it reaches a single parent's phone.

Post a real workout and the daily-floor rows now mark themselves "COVERED BY" with a strikethrough and stop accepting taps, so PAX no longer double-tap to acknowledge a floor a workout already satisfied. The floor header spells out its own purpose, the workout-type row is relabeled "Today's Post" with a one-line explainer, and admin buddy pairings now show F3 nicknames through the shared paxDisplayName helper instead of legal names. Less tapping, clearer rules, and the names everyone actually goes by.

New GET /api/trips/shared/[token] endpoint returns the privacy-projected public trip, opening the door for shared-trip pages backed by a real API instead of one-off URLs. Quote and Itinerary PDFs now embed up to two aircraft photos with photographer credit plus a fine-print broker disclosure block, and the Operating-carrier row hides on the Itinerary so the brokered identity stays where it belongs. Calculator and search hardening rounds it out: in-progress edits no longer get clobbered by a late preferences fetch, and LIKE-pattern escaping closes a % / _ injection seam in the search route. The documents brokers hand to clients now look and behave like the documents clients expect.

New read-only Readiness Dashboard at /league/team-formation/readiness gives admins a per-division pill (red/amber/green) covering roster fill, freeze-form coverage, and address/school signals, so blocked divisions stand out at a glance before formation begins. A new targetTeamCount column on divisions lets admins override the default (8 players per team for coed, 10 for girls) on a per-division basis, and clinic-format divisions are filtered out at the SQL layer since they don't go through formation at all. Phase 1 of the team-formation arc: see the state of every division before trying to solve it.

A sticky 256px sidebar nav now appears on lg+ screens (mobile keeps the existing BBottomNav), with each page capping its own width inside a row layout so the empty space lives on the right instead of around a centered column floating in the void. The layout fetches requireOnboardedUser and getNavFlags once per render via the React cache and threads the secondary nav items into the sidebar so they aren't fetched again page by page. The app no longer looks like a phone screenshot pasted onto a 27-inch monitor.

Public homepage now matches the v3 Claude Design handoff with a dark editorial direction, while every existing wire (registration CTAs, hero photo, season status, sponsors, schedule, scholarship, contact) stays intact underneath. The "Get notified at launch" CTA is no longer cosmetic: it captures the email, stores the subscriber, and a new clinics page slots into the same nav. Visitors who couldn't sign up before now can, against a homepage that doesn't look five years old.

Email OTP, Email + Password (with a 3-tier strength meter and a server-side policy that rejects weak passwords even when the client gate is bypassed), and Google OAuth join the existing magic-link flow, all behind an email-first login that asks for the address once and then offers the available methods against it. A new /forgot-password and /reset-password pair handles credential recovery, and onboarding's height field is now separate ft/in inputs with digit-only filtering on age, weight, and goal weight. The login screen finally meets people where they are instead of forcing one auth flavor.

New Ready to Pull tab on the payments page showing every check released from the hold pile but not yet posted, grouped by PDF batch. Each row surfaces payer, check number, amount, promoted player, and physical PDF location, with per-row Confirm & Queue, bulk confirm, and per-batch Post All Confirmed driving a live progress bar that reattaches across page reloads. The deposit team's checklist is now the app's home screen, not a printed sheet next to the keyboard.

New operator-side Broker P&L view, the missing margin, commission, and forecast surface for the trips workflow. Linked from the user dropdown above Settings and from the mobile FAB so it's one tap away from anywhere. Answering "did this month make money" no longer requires a spreadsheet export.

Added a Suggested Links tab to the YLAFL admin and rolled the design refresh across the surface: tighter type, calmer color, fewer competing primaries. No business logic, server actions, or types touched, just chrome. The fastest way to make the app feel new is to make it stop fighting itself visually.

Rebuilt the dashboard settings page against the Settings v2 design: sticky sidebar nav driven by IntersectionObserver, eight section cards on a 240px + main grid, trip-number prefix and pad-width promoted to first-class operator preferences. A settings page that finally feels like part of the product instead of an admin afterthought.

Added a self-serve "Import default price sheet" button on the ABC Supply page so a fresh org admin goes from zero pricing rows to a complete estimate without anyone touching the database. The server action is org-scoped, idempotent, and ships with the 18 SKUs that show up on every residential reroof. The first estimate now happens before the first hand-holding call.

Shipped production error alerting on League-OS. Vercel log drains pipe into a webhook proxy, the proxy fans out to Slack with a tightened allowlist so only our drains can trigger it. When something breaks after midnight, I know before the first parent does. Quiet ops work, the kind that pays for itself the first time it catches something.

Quiet milestone: the automated check-processing pipeline crossed $50,000 in posted payments. Cash, check, and money order still dominate youth sports, so the app has to turn a photo of a check into a posted payment. Parent uploads to Google Cloud Storage, a Cloud Run container renders pages to images, a Postgres job engine orchestrates the steps, and the payment lands on the ledger. None of it is generic SaaS plumbing. It only exists because the league needed it, and now it's quietly moving real money.

Added profit math to every trip in Jettison Air: wholesale cost, service revenue, margin, running totals. First time the operator can look at a week and say "this one was worth it, this one wasn't" without exporting to a spreadsheet. The spreadsheet was the competition.

Public REST API v1 with admin-issued bearer tokens. There are no integrations yet, and that's the point: drawing the line between "my data, your app" and "our shared surface" before anyone needs it is cheaper than drawing it after.

Manufacturer → grade → component. Pick one, the next field narrows. Roofing has a thousand SKUs and every estimator types the same five. The UI does the typing for you now. Catalog seed, labor matrix, and pricing grid landed the same week. The shape of the product is finally visible.

Roof Guru now pulls measurements straight from HOVER PDFs on intake and projects commission off the estimate the moment it's saved. Estimators already have the data; the app just has to stop asking for it twice.

Finishing a reading plan in Biblical Battle Plans now awards an XP bonus. Tiny change, big feel. Completion wasn't rewarded before, and now it has a number. Games ship feedback loops; reading apps usually don't. This one does.