What's new in 0.3.6

Cloud sync fixes:
- Renaming a tenant now updates the synced copy correctly instead of
creating a duplicate after your next sign-in.
- Edits to a tenant's SharePoint slug or vault link made on another
machine now apply properly, and portal URLs are rebuilt to match.
- Syncing no longer removes tenants that only exist locally (e.g. added
while signed out) — they're preserved and uploaded instead.
- Tenants imported from a JSON backup are now synced to your account.

Privacy & security:
- IP addresses are no longer collected as part of team activity logging.
Activity logs now record only account email, tenant name, portal type,
and time.
- The "Manage plan" link no longer includes session tokens in the URL.
- The extension's data-collection declaration now accurately describes
what is synced to your account (see the Permissions and Data tab).

Other:
- Plan tenant limits (Free: 3, Starter: 20) are now enforced when adding
or importing tenants.
- More reliable sign-in verification when opening portals.

Fixed innerHTML security warnings flagged by AMO linter — update required screens now use safe DOM methods instead of innerHTML.

Fixed activity logging — portal opens from the Manage Tenants page are now logged to the team dashboard with user, tenant, portal type, and IP address. Previously only popup portal clicks were logged.

Improved auth bar design — signed-in state now shows a two-row layout with green indicator dot, truncated email, plan badge, and clearly separated Manage plan and Sign out links. Clicking Manage plan from the extension automatically signs you into the website. Fixed cloud tenant sync — tenants now pull from your account on sign-in and push immediately when added, edited, or deleted.

Fixed tenant sync — tenants stored in your account now automatically populate when you sign in or open the extension. Previously tenants were only read from local storage.

Fixed auth bar layout — email is now truncated so it doesn't overflow. Added inline sign-in form to the Manage Tenants page so users can sign in without leaving the extension.

Added inline sign-in form directly in the extension popup — no more redirecting to the website to sign in. Enter email and password, press Sign in, and your tenants appear immediately.

Added minimum version enforcement — old versions of the extension are blocked from accessing tenant data. An update prompt is shown with a direct link to Mozilla Add-ons.

Fixed Manage Tenants page sign-in gate — main content is now hidden by default and only shown after authentication is confirmed, preventing any tenant data from appearing before sign-in.

Fixed critical access control gap — the Manage Tenants page now requires sign-in, preventing unauthenticated access to tenant data. Combined with v0.1.4 popup enforcement, all extension functionality now requires authentication.

Added clear sign-in/sign-out indicator to the popup. Users not signed in see a sign-in prompt instead of the tenant list. Added Sign Out button. Activity logging now works correctly with the sign-in enforcement added in v0.1.4.

Added sign-in enforcement — users must be signed in to open any portal. This ensures plan limits are always enforced and every portal access is logged for enterprise audit trails.

Added activity logging — every portal access is now recorded with user, tenant, portal type, and IP address for enterprise audit trails.

Fixed revoked access check incorrectly signing out active team members — now only triggers when access is explicitly removed by an administrator.

Fixed invited technicians not being marked as active after accepting their invite and setting their password.

This update improves plan management, team access controls, and adds proactive notifications for revoked team member access.

Changes in this version:

• Plan limit error now links directly to the Manage Plan page instead of showing plain text
• "Manage plan" button added to the extension header and popup for signed-in users
• Team members (invited technicians) no longer see Manage Plan or billing options — their account is managed by the company owner
• If a team member's access is revoked by their company administrator, the extension detects this on next open and shows a notification before signing them out automatically
• "My Account" link updated to use clean URL (no .html extension)
• Minor bug fixes and stability improvements