Changelog

Added GSTR-2B/IMS reconciliation: upload the JSON file you download free from the GST portal, and GSTSahi checks it against your expense records - flagging vendors who haven't filed their own return this period (real Input Tax Credit risk under the now-mandatory IMS accept/reject workflow). Expense records can now optionally store a vendor's GSTIN and invoice number, which is what makes this check possible.

The CA Portal's Filing Readiness view now also flags clients who haven't run a GSTR-2B check yet this period, or whose check found vendors at ITC risk - visible to a CA across all their clients at once, without opening each dashboard separately.

Surfaced two features in the CA Portal that already existed on the backend with no way to reach them: a Filing Readiness view, and a CSV bulk-import tool for onboarding many clients at once.

Added a "Vendors" tab to the dashboard, wiring up the Vendor Compliance Radar feature which existed on the backend but had no route or UI at all - completely unreachable until now. Added automatic pruning of old reminder-log entries (180-day retention) to keep the largest database table from growing unbounded, and fixed a crash bug in the WhatsApp assistant's plain-language GST question handling.

Fixed a crash bug in the WhatsApp assistant's plain-language GST question handling (an undefined variable meant this path silently failed). Four collections — referral records, CA weekly digest history, service-message log, and real-time nudge log — were writing to local storage only and never reaching Postgres; a server restart on free-tier hosting would have silently wiped them. Now mirrored durably like everything else. Added automatic pruning of old reminder-log entries (180-day retention) to keep the largest database table from growing unbounded.

The WhatsApp assistant now remembers recent conversation per business (so a follow-up like "and last month?" makes sense), and applies a daily fair-use limit on AI-assisted questions to keep costs predictable rather than open-ended.

Anyone can now text a GSTIN or ask a GST rate/HSN question on WhatsApp and get an instant, free answer — no account or login needed. CA referral links shared in the weekly digest are now individually trackable, so a forwarded recommendation can actually be attributed back to the referring CA.

Added a seasonal cash-flow outlook (India-wide festival/demand calendar, personalizes once a business has a year of its own data), opt-in mutual invoice verification between two GSTSahi businesses, a CA spare-capacity marketplace (visibility only — no automated client transfer or fees), and dormant-buyer detection ("which clients have gone quiet") in the WhatsApp assistant.

Removed a paid AI provider from the free-tier fallback chain — it wasn't actually free and didn't belong in a chain meant to guarantee zero AI cost.

CA Portal now has its own password reset flow, matching the business side. AI-suggested GST rates now show why they were suggested (matched keyword, HSN description, or a business's own past correction) and the date the rate table was last checked — not just a bare number.

Added an immutable audit trail: every invoice creation, payment, and AI-suggestion override is logged with a timestamp and a plain-English explanation — append-only, nothing can be edited or deleted after the fact. Anomaly detection results now surface proactively in the CA's daily digest instead of waiting to be checked manually.

Fixed a stored-XSS gap affecting the CA portal and the daily digest email — user-controlled names (buyer, vendor, client) weren't being escaped before being rendered. The CA portal instance was the real risk, since one business's bad data could otherwise have affected what a CA sees across their other clients.

AI GST-rate suggestions are now shown and editable before an invoice is created, instead of being silently applied. If a suggestion is wrong, you see it and can fix it — the system never applies a guess you never saw.

GST HSN rate table corrected for the GST 2.0 reform (effective 22 Sept 2025): apparel threshold raised from ₹1,000 to ₹2,500/piece, bakery products moved from 18% to 5%, fresh unbranded milk moved to Nil, most medicaments moved from 12% to 5%. The table had gone stale after the reform and was fixed to match the actual CBIC notifications.

CAs can bulk-onboard an existing client list in one request — already-registered clients get linked automatically, new ones get created with a temp password. Real-time error alerting added so failures get caught quickly rather than sitting unnoticed in a log file.