Added

• Message @mentions. PostMessageForm and MessageCard edit mode use NcRichContenteditable with the NC core OCS autocomplete API (/ocs/v2.php/core/autocomplete/get), scoped to team members. Mentions render as styled highlight pills in the message body. Backend sends a message_mention NC notification to each mentioned team member (on create and edit).
• Message pagination. 5 messages per page with prev/next controls in the message stream. Page resets to 1 on team switch and after posting. MessageMapper::countByTeamId() added. listMessages now returns total, page, and limit alongside messages.
• Per-team message settings. New Messages tab in Manage team for team admins. Configures minimum role to pin messages and minimum role to post messages, stored as per-team IConfig keys. Post Message button hidden (not just disabled) when the user lacks the post role.
• Calendar view dropdown. Embed bar now has a native select for Month / Week / Day / List variants; selecting reloads the iframe with the chosen view in the URL.
• Calendar embed auto-reload. After adding or deleting events, the calendar iframe reloads automatically so changes appear immediately.
• NC-relative team links. Custom team links now accept apps/... or /apps/... paths (e.g. apps/collectives/s5) and open in an iframe tab, just like built-in app tabs. External https:// links continue to open in a new browser tab.
• VitePress documentation site in docs/. Covers Nextcloud admins, Team management, Developers, and Users — 20 pages total.
• New migration Version000336200 — remediates auto-generated primary key name on oc_teamhub_team_app_resources for existing PostgreSQL installs.
• message_mention notifier subject in Notifier.php.
• getMessageSettings / saveMessageSettings endpoints (GET/POST /api/v1/teams/{teamId}/messages/settings).
• getCalendarEventsForWeek endpoint (GET /api/v1/teams/{teamId}/calendar/events/week).
• deleteCalendarEvents endpoint (DELETE /api/v1/teams/{teamId}/calendar/events).

Changed

• Calendar iframe URL now uses the public share token path /apps/calendar/p/{token}/{view}/now (team-calendar-only, no personal calendars). Falls back to full app when no token available.
• Calendar connect error handling in ManageTeamView no longer logs the full HTML 500 response body to the console.
• getPinMinLevel reads per-team IConfig key first, falls back to global key. Admin settings Messages tab removed (settings are now entirely per-team).
• activeFilesIsGf / activeFilesIsShared in ManageTeamView use .some() across all active files rows so the GF connect buttons correctly hide when a GF is active even if a shared folder row appears first.
• dav_shares access filter in getRealCalendarIds broadened from IN (1,2) to IN (1,2,3) for compatibility with NC Calendar 5.x circle shares.
• resumeCalendarAccess corrected from access=1 (read-only) to access=2 (read-write).
• Select dropdowns in AppEmbed bar and Manage team Messages tab have no background color (theme-transparent).

Fixed

• MariaDB migration failure on NC 32.0.9: Version000328200 now uses explicit 'th_tar_pk' for setPrimaryKey() — auto-generated name was 31 chars, one over the 30-char DBAL limit.
• Calendar connectExistingCalendar TypeError — ResourceService was passing $resourceId as string to a method expecting int; cast to (int) at the call site.
• GF connect buttons visible when GF already active — activeFilesIsGf now uses .some() instead of .find() so ordering of rows doesn't affect the result.

Added

• Strict 1:1 enforcement for files resources. ResourceDiscoveryService::reconcileApp now snapshots the team's active files state and routes newly discovered rows accordingly: active shared + incoming GF → pending (with isDualFolderPending flag); active GF + anything → ignored (GF precedence); active shared + another shared → ignored. acceptResource and unignoreResource apply the same guard. All refusals write resource.suppressed_duplicate audit entries with reason codes.
• Group folder takes precedence in getTeamResources. When both shared and GF rows are active (dual state during manual migration), the loop explicitly picks the gf: row so widgets and the team home always read from the group folder.
• Dual-folder informational notice in Manage Team → Settings → Team Apps. When a GF is discovered alongside an active shared folder, a blue panel explains the situation and directs the admin to connect the group folder via the existing buttons and migrate files manually.
• Resource-type badge ("Group folder" / "Shared folder") on each active files row in the settings panel.
• Picker filtering by active files type. GET /api/v1/pickers/files now accepts activeFilesType=shared|gf|none. Shared folders are suppressed when one is already active; both types hidden when a GF is active.
• isDualFolderPending flag on panel data rows.
• normalPendingResources, dualFolderPendingRow, dualFolderSharedRow, activeFilesRow, activeFilesIsShared, activeFilesIsGf computed properties in ManageTeamView.vue.
• Create New button for Talk — shown in empty state alongside Connect existing.
• Create New group folder button for Files — shown only when Group Folders is installed; switches label to "+ Create new group folder" when a shared folder is active (signals the workflow).
• Both 1:1 buttons hidden once a resource is connected, except when a shared folder is active and Group Folders is available — then the GF buttons remain so admin can attach a GF for manual migration.

Changed

• ResourceService::upsertResourceRow() — now promotes pending/ignored rows to active on explicit connect instead of skipping. Fixes silent failure when the discovery reconciler had already inserted the resource as pending.
• ResourceService::getTeamResources() — files block prefers gf: row when multiple active rows exist.
• ResourceDiscoveryService::getSettingsPanelData() — adds dual-folder detection and tagging.
• ResourceDiscoveryService::resolveFileName() — falls back to basename(path) when filecache.name is empty (some storage backends).
• FilesService::listConnectableFileFolders() — accepts activeFilesType parameter, filters output accordingly. Also falls back to basename(path) for shared folder names.
• ResourceStateController::getPanelData() — now triggers reconcileTeam before returning panel data, so externally added GF resources appear immediately.
• ManageTeamView::connectExisting() — empty catch block replaced with showError().

Fixed

• Critical pre-existing bug in ArchiveService.php: stray extra } (line ~2770) caused ParseError: unexpected token "try" on every admin archive request. Removed. Archive settings save works again.
• AdminSettings.vue archive form: archiveBeforeDelete was missing from the data() default and from loadArchiveSettings — the toggle had no reactive backing. Both fixed.

Removed

• The auto-migration system (FolderMigrationService, FolderMigrationController, FolderMigrationModal.vue, two endpoints) was scoped, built, and removed per user direction. NcDialog wiring proved unreliable; manual file migration is the supported path. The dual-folder notice remains as an informational signal only.

Security

• All new endpoints check team admin level (≥8) before any action.
• No raw SQL anywhere; no \OC::$server; constructor DI throughout.

Added

• Connect existing app resources to a team. Team owners can now choose, per app, to connect a Calendar / Files folder / Deck board / Talk room they already own instead of creating a new one. Available in the Create-team wizard step 4 and in Manage Team → Settings → Apps.
• Resource pickers (GET /api/v1/pickers/{calendar|deck|talk}) listing the current user's owned resources, scoped to the caller's UID.
• Connect endpoint POST /api/v1/teams/{teamId}/resources/{app}/connect (team-admin required) that inserts the share/ACL row granting the team's circle access to the selected resource.
• ResourcePicker.vue — unified picker component used by both the wizard and the manage-team dialog. Files mode opens NC's standard getFilePickerBuilder dialog; the other three apps render a populated <select> populated from the picker endpoint.
• Connected-resource warning under "Delete team" in Manage Team → Maintenance, explaining that connected resources are deleted with the team and how to preserve them.
• Archive-before-delete admin toggle. New checkbox in Archive Policy controls whether team deletion produces an archive ZIP first or skips archiving entirely. Default OFF for new and existing installs. Same three deletion modes (hard / soft30 / soft60) apply to both archive-on and archive-off paths.
• POST /api/v1/teams/{teamId}/soft-delete endpoint for soft-delete without archive — creates a pending-deletion row and suspends connected app resources but skips archive production.
• Owner-side delete dialog when archive-before-delete is OFF, with description and confirmation text adapted to the chosen deletion mode (immediate hard delete vs 30/60 day grace period without archive).

Changed

• The Delete-team button in Manage Team → Maintenance now branches based on admin policy: archive ON opens the existing archive modal; archive OFF opens a plain NcDialog confirmation.
• Description text for the Delete-team row dynamically reflects the active archive policy and deletion mode.

Fixed

• PostgreSQL SQLSTATE[22P02]: invalid input syntax for type smallint: "f" on team creation. The enabled (in teamhub_team_apps) and is_builtin (in teamhub_integ_registry) columns are SMALLINT (per the v3.9.0 cross-database fix), but their bind parameters were still using IQueryBuilder::PARAM_BOOL. PostgreSQL refuses the boolean-to-smallint coercion at the wire-protocol level; MySQL accepted it silently. Fixed by casting to int and binding as PARAM_INT in TeamAppMapper::upsert() and IntegrationRegistryMapper::register().

Security

• Every connect endpoint re-verifies that the user owns the specified resource (WHERE owner = currentUid or IRootFolder::getById() for Files), preventing forged-resourceId attacks across the four supported apps.
• Each app refuses to connect a second resource if one is already linked to the team (one-resource-per-team invariant).
• Picker endpoints scope listing to the caller's UID — never accept a UID from request parameters.

Added

• Mobile single-canvas layout for viewports ≤ 768px and tablet portrait (≤ 1024px portrait). New MobileWidgetView.vue: scrollable canvas, collapsible icon bar at bottom with one icon per accessible widget, FAB action button.
• FAB widget actions — in-canvas action button rows removed; actions surfaced via FAB: single action fires directly, multiple actions open a slide-up sheet.
• Tablet landscape layout for viewports ≤ 1200px landscape: 60/40 split with message stream left and collapsible widget column right. Widget cards have spacing and rounded borders.
• NC sidebar auto-close on mobile/tablet-portrait — uses NcAppNavigation :open.sync prop to close reactively after selecting a team or action, instead of fragile DOM manipulation.

Changed

• Embedded app iframe content height set to 100% (previously 90%).
• Edit layout button hidden on both mobile and tablet layouts (editing not available in these modes).
• Seven modals (ManageLinksModal, AddEventModal, AddTaskModal, AddPersonalTaskModal, InviteMemberModal, ScheduleMeetingModal, TeamMeetingModal) now set min-width: 0 on viewports ≤ 768px to prevent horizontal overflow on phones.
• MessageStream accepts hide-header prop and exposes openPostForm() method for FAB integration.

Added

• DELETE /api/v1/comments/{commentId} — hard-delete a comment. Author may always delete their own; team admins (Circles level ≥ 8) may delete any comment. Audit event comment.deleted written with metadata { message_id, author_id, deleted_by_admin, cleared_solved }.
• Solved-question revert on answer deletion. If the deleted comment is the marked answer to a question, the parent message is automatically reverted to unsolved (question_solved=0, solved_comment_id=NULL). The confirmation dialog warns the user before proceeding.
• Delete button on comments. Visible to the comment author and team admins. Confirmation dialog; disabled/spinner during async delete. Error messages are HTTP-status-aware (403, 404, generic).
• currentUserIsTeamAdmin Vuex getter (level ≥ 8) — derived from current_user_level now returned by GET /api/v1/teams/{teamId}/members.
• Markdown formatting toolbar in PostMessageForm.vue (new messages) and CommentsSection.vue (comments): Bold, Italic, Inline code, Code block, Heading (H2), Bullet list, Link. @mousedown.prevent preserves contenteditable selection; execCommand('insertText') fires at cursor.
• Markdown toolbar on edit message. Same seven buttons in MessageCard.vue edit mode. Uses native selectionStart/End + setSelectionRange (plain textarea — no execCommand needed).

Fixed

• XSS via v-html in message and comment bodies. Both renderMarkdown functions now pass output through DOMPurify.sanitize() with an explicit ALLOWED_TAGS/ALLOWED_ATTR allowlist before binding to v-html.
• Headings (## text) and bullet lists (- item) rendered as literal text. renderMarkdown was a flat .replace() chain ending with \n → <br>, so heading and list regexes (which need multiline anchors) never matched. Rewrote using a null-byte placeholder pattern: code blocks and inline code are stashed before block-level rules run; restored after <br> conversion. Applied to MessageCard.vue and CommentsSection.vue.
• Deck boards created with permission_edit = 0. Deck's AclMapper does not mark entity fields dirty when set via __call magic, so setPermissionEdit(true) was a no-op. Added enforceAclEditPermissions(): one independent QB UPDATE per column (permission_edit, permission_share, permission_manage), each try/caught so a missing column throws silently without blocking the others. Schema confirmed from live DB.
• All Deck boards and Calendars provisioned in the same blue colour. createTeamResources() now picks one random colour per team ($teamColour = self::randomTeamColour()) and passes the same value to both createCalendar() and createDeckBoard().
• Provisioned resources (Talk, Files, Calendar, Deck) not deleted when a team is deleted. deleteTeam() now fetches the team's app list from teamhub_team_apps before destroying the circle, then calls deleteTeamResource() for each app. Resources are deleted before circleService->destroy() so CalDAV/Talk can still resolve the circle principal. All apps are cleaned regardless of their enabled flag.

Changed

• GET /api/v1/teams/{teamId}/members response now includes current_user_level (integer) alongside is_direct_member.
• DELETE /teams/{teamId} now deletes all provisioned Nextcloud app resources before destroying the circle.
• ResourceService::TEAM_COLOUR_PALETTE — 12-colour curated palette for NC-friendly team colours.

Fixed

• Indirect members (added via NC group/sub-team) could not see built-in app tabs (Talk, Files, Calendar, Deck). ResourceService::getTeamResources() checked only for a direct circles_member row; indirect members have none, so the method threw and the controller returned all-null resources. Added isEffectiveTeamMember() helper in ResourceService that mirrors the two-step indirect-membership check (circles_member → circles_membership) used elsewhere, without introducing a circular dependency on MemberService.
• Member count in members widget was inflated when groups or sub-teams were present. getEffectiveMemberCount() used COUNT(*) FROM circles_membership, which includes group-proxy and sub-team-proxy circles as rows alongside individual users. Replaced with a query that inner-joins circles_member on user_type=1, level=9 to isolate personal user circles, and uses COUNT(DISTINCT user_id) to deduplicate users who appear via multiple membership paths.
• Pages widget hidden after team creation even when Intravox page was successfully created. create-resources did not write to teamhub_team_apps, so getTeamResources found no intravox row and returned resources.intravox = false.
• Manage team → Settings → Team apps showed all apps enabled after creation, regardless of wizard selections. Same missing write: ManageTeamView fell back to defaultEnabled = true for every app when no rows existed. The wizard now sends a complete appStates payload (all apps, enabled and disabled) with create-resources; the backend validates and persists these via updateTeamApps().

Added

• WCAG 2.2 accessibility audit and remediation (Sessions 1–3). Full codebase reviewed against all A and AA criteria. The following fixes were applied:

1.1.1 Non-text content

• AppEmbed.vue: <iframe> now carries :title="label" so screen readers identify embedded apps (Chat, Files, Calendar, Deck).
• MessageCard.vue: poll options now carry role="button", aria-pressed, aria-label, tabindex, and @keydown.enter/space handlers — keyboard and AT users can vote in polls.

1.3.1 Info and relationships

• TeamWidgetGrid.vue: all 11 widget title <span> elements replaced with <h2> (margin/padding reset added to prevent browser defaults from breaking layout). Screen reader users can now navigate widgets by heading.
• MessageCard.vue edit mode: bare <input> and <textarea> now have associated <label> elements linked by unique per-message id.

1.4.1 Use of color

• MessageCard.vue: voted poll option now shows a CheckCircleOutline icon alongside the background highlight — vote state is no longer conveyed by colour alone.

1.4.3 Contrast — hardcoded colours

• DeckWidget.vue: #0e7490 teal replaced with var(--color-info-text, var(--color-main-text)).
• FilesFavoritesWidget.vue: #f6c342 gold replaced with var(--color-warning, #f6c342).
• TeamWidgetGrid.vue: #1a1a1a on success/warning badges replaced with var(--color-success-text, #1a1a1a) and var(--color-warning-text, #1a1a1a).

2.1.1 / 2.4.7 Keyboard access and focus visible

• All 10 components with outline: none on :focus migrated to :focus-visible with 2px solid var(--color-primary-element) ring. Mouse/touch users are unaffected; keyboard users now see focus indicators.
• App.vue: duplicate :focus-visible blocks consolidated; outline: none removed.
• TeamTabBar.vue: role="tablist", role="tab", and aria-selected added to all tab buttons. Tab/Shift+Tab moves focus; Left/Right arrow reorders the focused tab and restores focus after re-render via $nextTick.
• TeamWidgetGrid.vue (edit mode): all 11 drag handles gain tabindex="0" and @keydown handlers for ↑ ↓ ← → to move widgets on the grid. moveWidget() swaps positions with the neighbour in sorted order (fixes vue-grid-layout vertical compaction cancelling y ± 1 nudges).

2.4.6 Headings and labels

• Same as 1.3.1 widget <h2> and edit input <label> changes above.

2.5.7 Dragging movements

• Tab bar: Left/Right arrow keys on focused tab provide a keyboard alternative to drag-to-reorder (WCAG requires a pointer/keyboard alternative).
• Widget grid: ↑ ↓ ← → on focused drag handle provide a keyboard alternative to grid drag-and-drop.

4.1.2 Name, role, value

• TeamTabBar.vue: role="tablist" + aria-label="Team navigation" on wrapper; role="tab" + aria-selected on each button tab; web link tabs correctly excluded from tab role.
• TeamWidgetGrid.vue: all 11 collapse/expand buttons now include the widget name in their aria-label (e.g. "Collapse Team Messages" instead of "Collapse").
• AppEmbed.vue: <iframe title> fix (see 1.1.1).

4.1.3 Status messages

• PostMessageForm.vue: attachment list wrapped in aria-live="polite" aria-atomic="false" — upload status changes (Uploading…, ✓, error) are now announced to screen readers. Checkmark symbol ✓ given :aria-label="Upload complete".

Security

• renderMarkdown (pre-existing): v-html binding in MessageCard.vue and CommentsSection.vue renders user content without HTML sanitization. Logged as open issue for a dedicated security session — fix requires DOMPurify.sanitize() before return.

Removed

• Debug console.log calls in TeamWidgetGrid.vue (moveWidget) and TeamTabBar.vue (moveTabLeft, moveTabRight).

Fixed

• Double margin-top gap below NC top bar. NC page frame and NcContent both applied margin-top: var(--header-height) to the same element. Added #content-vue.app-teamhub { margin-top: 0 } to zero the page-frame copy only.
• TypeError: e.n is not a function on team pages. translatePlural imported at module scope is invisible to Vue 2 templates — added n to methods: { t, n } in all five affected components; AdminSettings gets an inline n() method matching its existing t() pattern.

Changed

• All error messages use {error} named placeholder instead of string concatenation. Allows translators to reposition the error detail within the sentence (22 call sites across 10 components).
• All count-bearing strings converted to n() plural forms (14 strings across 5 components). Translators can now supply correct plural rules per language.

Added

• Transifex plumbing. .tx/config and .l10nignore added. Stale l10n/en.js / l10n/en.json removed. Ready for NC community bot once @nextcloud-bot is invited to the repo.
• TRANSLATORS: hints on ambiguous strings: Comment, Leave, Join (team vs. meeting), poll vote labels.
• Translation standards added to SKILLS.md — every string written in future sessions must be translation-ready immediately.

Removed

• Debug logging purged. 23 JS (console.log / console.error) and 15 PHP (error_log) calls removed across App.vue, FeedbackModal.vue, FilesSharedWidget.vue, TeamView.vue, FeedbackController.php, FeedbackService.php, TeamService.php, TelemetryService.php. The console.warn in TeamView.menuItemUrl() is intentionally kept as a security signal.

Fixed

• Calendar widget now reloads automatically after adding an event, scheduling a meeting, or creating a team meeting — all three modal close handlers now call refreshCalendar() via the widget grid ref.
• Meeting notes public share link now grants read+write access (was read-only), so attendees can edit the notes file directly from the shared link.
• @nextcloud/vue no longer logs "missing appName / appVersion" console errors — webpack.DefinePlugin now injects appName and appVersion as compile-time bare globals, which is what the library reads at module evaluation time.
• Members widget: removed redundant border-top from .teamhub-memberships-list; Show all button width set to 90%; left-side padding unified to 12px across avatar stack, membership rows, and show-all button.
• Removed redundant "Team Messages" heading from the message stream body (the accordion header already shows this label).
• Removed duplicate "Post First Message" button from the empty-state — the header-level "+ Post Message" button already handles this.
• All semantic color text uses (--color-error, --color-success, --color-warning) replaced with their high-contrast -text variants across 21 components, improving readability. Backgrounds and borders retain the base variables.

Added

• Group and team members are now fully recognised. When a Nextcloud group or another team is added to a team, its users count towards the team's member total and gain access to the team. The members widget shows direct users as avatars (up to 16, sorted by role then last activity), followed by a flat list of added groups and teams with a GROUP or TEAM pill and their user count. A "Show all N members" link opens a searchable modal listing every effective user, deduplicated.
• Manage Team → Members tab displays three buckets: Direct Members, Groups & Teams (with name and effective user count), and Pending Join Requests. Admins can remove whole groups or teams, which also clears their users' indirect access.
• Invite modal can now search for and add other user-created teams (circles) in addition to users, groups, email invites, and federated contacts.
• New GET /api/v1/teams/{teamId}/members/all endpoint — returns the flat deduplicated list of all effective users (direct plus expanded from groups and sub-teams) for the Show All modal. Requires member-level access.
• New GET /api/v1/teams/{teamId}/members/manage endpoint — structured response (direct, groups, circles, effective_count) for the Manage Team members tab. Requires admin-level access.
• BrowseTeamsView teams now return an isDirectMember flag so indirect members see a disabled Leave button with an explanatory tooltip rather than being allowed to "leave" a team they were never directly added to.
• leaveTeam now detects indirect membership and returns a 403 with an indirect_member sentinel so the UI can show the tooltip explanation.

Changed

• The GET /api/v1/teams/{teamId}/members response shape changed from a flat array to {members, memberships, effective_count, has_more, is_direct_member}. members is limited to the top 16 direct users (sorted by role then last login), memberships is the flat list of added groups and teams for the widget.
• Admin Settings → Maintenance team member count column now reflects effective membership (direct users plus users from added groups and sub-teams) instead of only the three top-level rows in circles_member.
• removeMember() now correctly handles groups (user_type=2) and teams (user_type=16) by using single_id as the delete key. It also calls MembershipService::onUpdate() after deletion so removed indirect users actually disappear from share pickers.
• Pending Join Requests in Manage Team has extra top padding to separate it from the membership summary.
• Group and Team icons/pills use the primary-element (blue) and warning (amber) tones respectively — the previous success-green was too low-contrast.

Fixed

• Integrity check in Admin Settings → Maintenance no longer flags teams as mismatched just because they have a group or sub-team as a member. It now flags only teams whose circles_membership cache is genuinely empty while direct members exist.
• getTeamMembers no longer fails on the u.last_login column (which does not exist on oc_users); last-login sorting now reads from oc_user_preferences / oc_preferences.
• browseAllTeams correctly detects membership via groups or sub-teams in addition to direct rows.

Security

• getTeamMembers now enforces requireMemberLevel — previously any authenticated user could enumerate any team's member list by guessing a circle ID.
• lastLogin timestamps (used internally for sort order) are stripped from the members response so they are never exposed to the client.

Added

• Shared Files widget — new dashboard widget showing files and folders that team members have shared directly with the team circle (e.g. from Nextcloud Notes or Files). Displays item name, type icon (including a dedicated note icon for .md files), sharer display name with avatar, and share date. Paginated at 10 items per page, sorted newest first.
• New GET /api/v1/teams/{teamId}/files/shared endpoint — returns paginated list of files/folders shared with the team circle, excluding the team folder itself. Accepts page and limit query parameters.
• New shared_files app toggle in the Team Apps section of Manage Team — defaults to off; team owners enable it explicitly. Independent of the Files (team folder) toggle.

Fixed

• Fixed team folder query in ResourceService incorrectly picking up individual file shares (e.g. Notes shares) as the team folder when no folder was configured — query now filters on item_type = 'folder'.
• Fixed shared_files toggle defaulting to on in Manage Team UI for teams that had no saved state yet — default is now off.

Added

• Upcoming Tasks widget now shows personal tasks alongside Deck tasks. When the NC Tasks app is installed and the team has a calendar, VTODO tasks from the team calendar are fetched server-side (Sabre/VObject, direct DB query on calendarobjects) and merged with Deck cards into a single sorted list. Each task row shows a source pill — blue "Deck" or teal "Personal task" — so users can distinguish at a glance. The two task types also use different badge icons.
• New GET /api/v1/teams/{teamId}/tasks endpoint — returns upcoming (≤14 days, non-completed) VTODO tasks from the team calendar.
• New POST /api/v1/teams/{teamId}/tasks endpoint — creates a VTODO in the team calendar via CalDavBackend (QB fallback if unavailable).
• New Create personal task action in the Upcoming Tasks widget header, which opens a modal (title, optional description, optional due date/time). Shown only when Tasks app is installed and team has a calendar.
• The existing Add task action renamed to Create Deck task to distinguish it from personal tasks. Shown only when team has a Deck board.
• resources payload from GET /teams/{teamId}/resources now includes a tasks: bool flag indicating whether the NC Tasks app is installed.
• New AddPersonalTaskModal.vue component.
• New lib/Service/TaskService.php service.
• New migration Version000310001 — ensures teamhub_integ_registry exists and drops the legacy teamhub_integration_registry table if it survived an NC uninstall. Fixes a scenario where NC's "delete all data" uninstall keeps migration history, causing the new-name table to never be created on reinstall.

Fixed

• Fixed oc_teamhub_integ_registry does not exist error on installs where NC's uninstall-with-delete-data flow preserved migration history, causing migration 000209000 to be skipped on reinstall while the old teamhub_integration_registry table survived.

Added

• Upcoming Tasks widget now shows personal tasks alongside Deck tasks. When the NC Tasks app is installed and the team has a calendar, VTODO tasks from the team calendar are fetched server-side (Sabre/VObject, direct DB query on calendarobjects) and merged with Deck cards into a single sorted list. Each task row shows a source pill — blue "Deck" or teal "Personal task" — so users can distinguish at a glance. The two task types also use different badge icons.
• New GET /api/v1/teams/{teamId}/tasks endpoint — returns upcoming (≤14 days, non-completed) VTODO tasks from the team calendar.
• New POST /api/v1/teams/{teamId}/tasks endpoint — creates a VTODO in the team calendar via CalDavBackend (QB fallback if unavailable).
• New Create personal task action in the Upcoming Tasks widget header, which opens a modal (title, optional description, optional due date/time). Shown only when Tasks app is installed and team has a calendar.
• The existing Add task action renamed to Create Deck task to distinguish it from personal tasks. Shown only when team has a Deck board.
• resources payload from GET /teams/{teamId}/resources now includes a tasks: bool flag indicating whether the NC Tasks app is installed.
• New AddPersonalTaskModal.vue component.
• New lib/Service/TaskService.php service.
• New migration Version000310001 — ensures teamhub_integ_registry exists and drops the legacy teamhub_integration_registry table if it survived an NC uninstall. Fixes a scenario where NC's "delete all data" uninstall keeps migration history, causing the new-name table to never be created on reinstall.

Fixed

• Fixed oc_teamhub_integ_registry does not exist error on installs where NC's uninstall-with-delete-data flow preserved migration history, causing migration 000209000 to be skipped on reinstall while the old teamhub_integration_registry table survived.

Fixed

• Fixed fresh-install failure: teamhub_team_apps.enabled was declared BOOLEAN NOT NULL which Doctrine rejects when storing false on MySQL/MariaDB; changed to SMALLINT NOT NULL DEFAULT 1.
• Fixed same BOOLEAN/NOT NULL issue on teamhub_integration_registry.is_builtin; changed to SMALLINT NOT NULL DEFAULT 0.
• Added migration Version000300801 to apply both column type fixes to existing installations.

Added

• Telemetry payload expanded with six new anonymous metrics: nc_version, user_count, member_total, message_count, builtin_integrations (per-builtin-app team counts), and link_domains (custom-link hostname frequency map).
• link_domains aggregates custom web-link URLs down to their bare lowercase hostname before sending — no paths, query strings, ports, fragments, localhost entries, or numeric IPs leave the instance.

Changed

• GET /api/v1/admin/telemetry preview object now includes all new fields; admin UI automatically renders them via the existing JSON preview.
• TelemetryService now depends on IUserManager for user counting.

Security

• All new collection paths are read-only DB queries using QueryBuilder with named parameters — no new user-input surface.
• No new endpoints; existing telemetry endpoint remains #[AuthorizedAdminSetting]-guarded.

TeamHub v3.5 — Changes

Admin Maintenance tab — full teams grid

Replaced the old "Orphaned teams" section with a full teams management grid covering every user-created team on the NC instance. What it does: Paginated table with search by name, "orphans only" toggle, and per-page selector (10/20/50/100). Each row shows team name, description, member count, owner (display name + uid), and creation date. Two icon-only action buttons per row: set owner and delete.

Set owner

Admin can assign any NC user as owner of any team — whether or not that user is currently a member.

Delete team (admin)

Admin can delete any team regardless of ownership. Cleans up all associated data before destroying the circle.

TeamHub v3.6 — Changes

Activity widget

Deck activity now scoped to the team's board only — card events (deck_card) and board events (deck_board) handled separately Talk activity scoped to the team's room via numeric room ID — eliminates cross-team bleed Calendar/DAV activity subject strings corrected to match real oc_activity values Friendly human-readable labels for all Deck, Calendar, and Circles activity subjects

Manage Team — Maintenance tab

"Danger Zone" tab renamed to "Maintenance" Transfer ownership added — team owner can promote any current team member to owner Ownership transfer requires two-step confirmation and demotes the current owner to admin Leave team now shows the real server error message (e.g. "Transfer ownership before leaving")

Admin Settings — Membership cache integrity

New section in the Maintenance tab: scan all teams for stale membership cache Compares circles_member (source of truth) against circles_membership (share picker cache) Per-team Repair button rebuilds the cache — fixes teams invisible to Files, Calendar and Deck share pickers

Files

Re-enabling the Files app for a team now works correctly Favourite Files and Recently Modified widgets no longer appear on teams without a connected Files resource

Added

• Message @mentions. PostMessageForm and MessageCard edit mode use NcRichContenteditable with the NC core OCS autocomplete API (/ocs/v2.php/core/autocomplete/get), scoped to team members. Mentions render as styled highlight pills in the message body. Backend sends a message_mention NC notification to each mentioned team member (on create and edit).
• Message pagination. 5 messages per page with prev/next controls in the message stream. Page resets to 1 on team switch and after posting. MessageMapper::countByTeamId() added. listMessages now returns total, page, and limit alongside messages.
• Per-team message settings. New Messages tab in Manage team for team admins. Configures minimum role to pin messages and minimum role to post messages, stored as per-team IConfig keys. Post Message button hidden (not just disabled) when the user lacks the post role.
• Calendar view dropdown. Embed bar now has a native select for Month / Week / Day / List variants; selecting reloads the iframe with the chosen view in the URL.
• Calendar embed auto-reload. After adding or deleting events, the calendar iframe reloads automatically so changes appear immediately.
• NC-relative team links. Custom team links now accept apps/... or /apps/... paths (e.g. apps/collectives/s5) and open in an iframe tab, just like built-in app tabs. External https:// links continue to open in a new browser tab.
• VitePress documentation site in docs/. Covers Nextcloud admins, Team management, Developers, and Users — 20 pages total.
• New migration Version000336200 — remediates auto-generated primary key name on oc_teamhub_team_app_resources for existing PostgreSQL installs.
• message_mention notifier subject in Notifier.php.
• getMessageSettings / saveMessageSettings endpoints (GET/POST /api/v1/teams/{teamId}/messages/settings).
• getCalendarEventsForWeek endpoint (GET /api/v1/teams/{teamId}/calendar/events/week).
• deleteCalendarEvents endpoint (DELETE /api/v1/teams/{teamId}/calendar/events).

Changed

• Calendar iframe URL now uses the public share token path /apps/calendar/p/{token}/{view}/now (team-calendar-only, no personal calendars). Falls back to full app when no token available.
• Calendar connect error handling in ManageTeamView no longer logs the full HTML 500 response body to the console.
• getPinMinLevel reads per-team IConfig key first, falls back to global key. Admin settings Messages tab removed (settings are now entirely per-team).
• activeFilesIsGf / activeFilesIsShared in ManageTeamView use .some() across all active files rows so the GF connect buttons correctly hide when a GF is active even if a shared folder row appears first.
• dav_shares access filter in getRealCalendarIds broadened from IN (1,2) to IN (1,2,3) for compatibility with NC Calendar 5.x circle shares.
• resumeCalendarAccess corrected from access=1 (read-only) to access=2 (read-write).
• Select dropdowns in AppEmbed bar and Manage team Messages tab have no background color (theme-transparent).

Fixed

• MariaDB migration failure on NC 32.0.9: Version000328200 now uses explicit 'th_tar_pk' for setPrimaryKey() — auto-generated name was 31 chars, one over the 30-char DBAL limit.
• Calendar connectExistingCalendar TypeError — ResourceService was passing $resourceId as string to a method expecting int; cast to (int) at the call site.
• GF connect buttons visible when GF already active — activeFilesIsGf now uses .some() instead of .find() so ordering of rows doesn't affect the result.

Added

• Strict 1:1 enforcement for files resources. ResourceDiscoveryService::reconcileApp now snapshots the team's active files state and routes newly discovered rows accordingly: active shared + incoming GF → pending (with isDualFolderPending flag); active GF + anything → ignored (GF precedence); active shared + another shared → ignored. acceptResource and unignoreResource apply the same guard. All refusals write resource.suppressed_duplicate audit entries with reason codes.
• Group folder takes precedence in getTeamResources. When both shared and GF rows are active (dual state during manual migration), the loop explicitly picks the gf: row so widgets and the team home always read from the group folder.
• Dual-folder informational notice in Manage Team → Settings → Team Apps. When a GF is discovered alongside an active shared folder, a blue panel explains the situation and directs the admin to connect the group folder via the existing buttons and migrate files manually.
• Resource-type badge ("Group folder" / "Shared folder") on each active files row in the settings panel.
• Picker filtering by active files type. GET /api/v1/pickers/files now accepts activeFilesType=shared|gf|none. Shared folders are suppressed when one is already active; both types hidden when a GF is active.
• isDualFolderPending flag on panel data rows.
• normalPendingResources, dualFolderPendingRow, dualFolderSharedRow, activeFilesRow, activeFilesIsShared, activeFilesIsGf computed properties in ManageTeamView.vue.
• Create New button for Talk — shown in empty state alongside Connect existing.
• Create New group folder button for Files — shown only when Group Folders is installed; switches label to "+ Create new group folder" when a shared folder is active (signals the workflow).
• Both 1:1 buttons hidden once a resource is connected, except when a shared folder is active and Group Folders is available — then the GF buttons remain so admin can attach a GF for manual migration.

Changed

• ResourceService::upsertResourceRow() — now promotes pending/ignored rows to active on explicit connect instead of skipping. Fixes silent failure when the discovery reconciler had already inserted the resource as pending.
• ResourceService::getTeamResources() — files block prefers gf: row when multiple active rows exist.
• ResourceDiscoveryService::getSettingsPanelData() — adds dual-folder detection and tagging.
• ResourceDiscoveryService::resolveFileName() — falls back to basename(path) when filecache.name is empty (some storage backends).
• FilesService::listConnectableFileFolders() — accepts activeFilesType parameter, filters output accordingly. Also falls back to basename(path) for shared folder names.
• ResourceStateController::getPanelData() — now triggers reconcileTeam before returning panel data, so externally added GF resources appear immediately.
• ManageTeamView::connectExisting() — empty catch block replaced with showError().

Fixed

• Critical pre-existing bug in ArchiveService.php: stray extra } (line ~2770) caused ParseError: unexpected token "try" on every admin archive request. Removed. Archive settings save works again.
• AdminSettings.vue archive form: archiveBeforeDelete was missing from the data() default and from loadArchiveSettings — the toggle had no reactive backing. Both fixed.

Removed

• The auto-migration system (FolderMigrationService, FolderMigrationController, FolderMigrationModal.vue, two endpoints) was scoped, built, and removed per user direction. NcDialog wiring proved unreliable; manual file migration is the supported path. The dual-folder notice remains as an informational signal only.

Security

• All new endpoints check team admin level (≥8) before any action.
• No raw SQL anywhere; no \OC::$server; constructor DI throughout.

Added

• Connect existing app resources to a team. Team owners can now choose, per app, to connect a Calendar / Files folder / Deck board / Talk room they already own instead of creating a new one. Available in the Create-team wizard step 4 and in Manage Team → Settings → Apps.
• Resource pickers (GET /api/v1/pickers/{calendar|deck|talk}) listing the current user's owned resources, scoped to the caller's UID.
• Connect endpoint POST /api/v1/teams/{teamId}/resources/{app}/connect (team-admin required) that inserts the share/ACL row granting the team's circle access to the selected resource.
• ResourcePicker.vue — unified picker component used by both the wizard and the manage-team dialog. Files mode opens NC's standard getFilePickerBuilder dialog; the other three apps render a populated <select> populated from the picker endpoint.
• Connected-resource warning under "Delete team" in Manage Team → Maintenance, explaining that connected resources are deleted with the team and how to preserve them.
• Archive-before-delete admin toggle. New checkbox in Archive Policy controls whether team deletion produces an archive ZIP first or skips archiving entirely. Default OFF for new and existing installs. Same three deletion modes (hard / soft30 / soft60) apply to both archive-on and archive-off paths.
• POST /api/v1/teams/{teamId}/soft-delete endpoint for soft-delete without archive — creates a pending-deletion row and suspends connected app resources but skips archive production.
• Owner-side delete dialog when archive-before-delete is OFF, with description and confirmation text adapted to the chosen deletion mode (immediate hard delete vs 30/60 day grace period without archive).

Changed

• The Delete-team button in Manage Team → Maintenance now branches based on admin policy: archive ON opens the existing archive modal; archive OFF opens a plain NcDialog confirmation.
• Description text for the Delete-team row dynamically reflects the active archive policy and deletion mode.

Fixed

• PostgreSQL SQLSTATE[22P02]: invalid input syntax for type smallint: "f" on team creation. The enabled (in teamhub_team_apps) and is_builtin (in teamhub_integ_registry) columns are SMALLINT (per the v3.9.0 cross-database fix), but their bind parameters were still using IQueryBuilder::PARAM_BOOL. PostgreSQL refuses the boolean-to-smallint coercion at the wire-protocol level; MySQL accepted it silently. Fixed by casting to int and binding as PARAM_INT in TeamAppMapper::upsert() and IntegrationRegistryMapper::register().

Security

• Every connect endpoint re-verifies that the user owns the specified resource (WHERE owner = currentUid or IRootFolder::getById() for Files), preventing forged-resourceId attacks across the four supported apps.
• Each app refuses to connect a second resource if one is already linked to the team (one-resource-per-team invariant).
• Picker endpoints scope listing to the caller's UID — never accept a UID from request parameters.

Added

• Mobile single-canvas layout for viewports ≤ 768px and tablet portrait (≤ 1024px portrait). New MobileWidgetView.vue: scrollable canvas, collapsible icon bar at bottom with one icon per accessible widget, FAB action button.
• FAB widget actions — in-canvas action button rows removed; actions surfaced via FAB: single action fires directly, multiple actions open a slide-up sheet.
• Tablet landscape layout for viewports ≤ 1200px landscape: 60/40 split with message stream left and collapsible widget column right. Widget cards have spacing and rounded borders.
• NC sidebar auto-close on mobile/tablet-portrait — uses NcAppNavigation :open.sync prop to close reactively after selecting a team or action, instead of fragile DOM manipulation.

Changed

• Embedded app iframe content height set to 100% (previously 90%).
• Edit layout button hidden on both mobile and tablet layouts (editing not available in these modes).
• Seven modals (ManageLinksModal, AddEventModal, AddTaskModal, AddPersonalTaskModal, InviteMemberModal, ScheduleMeetingModal, TeamMeetingModal) now set min-width: 0 on viewports ≤ 768px to prevent horizontal overflow on phones.
• MessageStream accepts hide-header prop and exposes openPostForm() method for FAB integration.

Added

• DELETE /api/v1/comments/{commentId} — hard-delete a comment. Author may always delete their own; team admins (Circles level ≥ 8) may delete any comment. Audit event comment.deleted written with metadata { message_id, author_id, deleted_by_admin, cleared_solved }.
• Solved-question revert on answer deletion. If the deleted comment is the marked answer to a question, the parent message is automatically reverted to unsolved (question_solved=0, solved_comment_id=NULL). The confirmation dialog warns the user before proceeding.
• Delete button on comments. Visible to the comment author and team admins. Confirmation dialog; disabled/spinner during async delete. Error messages are HTTP-status-aware (403, 404, generic).
• currentUserIsTeamAdmin Vuex getter (level ≥ 8) — derived from current_user_level now returned by GET /api/v1/teams/{teamId}/members.
• Markdown formatting toolbar in PostMessageForm.vue (new messages) and CommentsSection.vue (comments): Bold, Italic, Inline code, Code block, Heading (H2), Bullet list, Link. @mousedown.prevent preserves contenteditable selection; execCommand('insertText') fires at cursor.
• Markdown toolbar on edit message. Same seven buttons in MessageCard.vue edit mode. Uses native selectionStart/End + setSelectionRange (plain textarea — no execCommand needed).

Fixed

• XSS via v-html in message and comment bodies. Both renderMarkdown functions now pass output through DOMPurify.sanitize() with an explicit ALLOWED_TAGS/ALLOWED_ATTR allowlist before binding to v-html.
• Headings (## text) and bullet lists (- item) rendered as literal text. renderMarkdown was a flat .replace() chain ending with \n → <br>, so heading and list regexes (which need multiline anchors) never matched. Rewrote using a null-byte placeholder pattern: code blocks and inline code are stashed before block-level rules run; restored after <br> conversion. Applied to MessageCard.vue and CommentsSection.vue.
• Deck boards created with permission_edit = 0. Deck's AclMapper does not mark entity fields dirty when set via __call magic, so setPermissionEdit(true) was a no-op. Added enforceAclEditPermissions(): one independent QB UPDATE per column (permission_edit, permission_share, permission_manage), each try/caught so a missing column throws silently without blocking the others. Schema confirmed from live DB.
• All Deck boards and Calendars provisioned in the same blue colour. createTeamResources() now picks one random colour per team ($teamColour = self::randomTeamColour()) and passes the same value to both createCalendar() and createDeckBoard().
• Provisioned resources (Talk, Files, Calendar, Deck) not deleted when a team is deleted. deleteTeam() now fetches the team's app list from teamhub_team_apps before destroying the circle, then calls deleteTeamResource() for each app. Resources are deleted before circleService->destroy() so CalDAV/Talk can still resolve the circle principal. All apps are cleaned regardless of their enabled flag.

Changed

• GET /api/v1/teams/{teamId}/members response now includes current_user_level (integer) alongside is_direct_member.
• DELETE /teams/{teamId} now deletes all provisioned Nextcloud app resources before destroying the circle.
• ResourceService::TEAM_COLOUR_PALETTE — 12-colour curated palette for NC-friendly team colours.

Fixed

• Indirect members (added via NC group/sub-team) could not see built-in app tabs (Talk, Files, Calendar, Deck). ResourceService::getTeamResources() checked only for a direct circles_member row; indirect members have none, so the method threw and the controller returned all-null resources. Added isEffectiveTeamMember() helper in ResourceService that mirrors the two-step indirect-membership check (circles_member → circles_membership) used elsewhere, without introducing a circular dependency on MemberService.
• Member count in members widget was inflated when groups or sub-teams were present. getEffectiveMemberCount() used COUNT(*) FROM circles_membership, which includes group-proxy and sub-team-proxy circles as rows alongside individual users. Replaced with a query that inner-joins circles_member on user_type=1, level=9 to isolate personal user circles, and uses COUNT(DISTINCT user_id) to deduplicate users who appear via multiple membership paths.
• Pages widget hidden after team creation even when Intravox page was successfully created. create-resources did not write to teamhub_team_apps, so getTeamResources found no intravox row and returned resources.intravox = false.
• Manage team → Settings → Team apps showed all apps enabled after creation, regardless of wizard selections. Same missing write: ManageTeamView fell back to defaultEnabled = true for every app when no rows existed. The wizard now sends a complete appStates payload (all apps, enabled and disabled) with create-resources; the backend validates and persists these via updateTeamApps().

Added

• WCAG 2.2 accessibility audit and remediation (Sessions 1–3). Full codebase reviewed against all A and AA criteria. The following fixes were applied:

1.1.1 Non-text content

• AppEmbed.vue: <iframe> now carries :title="label" so screen readers identify embedded apps (Chat, Files, Calendar, Deck).
• MessageCard.vue: poll options now carry role="button", aria-pressed, aria-label, tabindex, and @keydown.enter/space handlers — keyboard and AT users can vote in polls.

1.3.1 Info and relationships

• TeamWidgetGrid.vue: all 11 widget title <span> elements replaced with <h2> (margin/padding reset added to prevent browser defaults from breaking layout). Screen reader users can now navigate widgets by heading.
• MessageCard.vue edit mode: bare <input> and <textarea> now have associated <label> elements linked by unique per-message id.

1.4.1 Use of color

• MessageCard.vue: voted poll option now shows a CheckCircleOutline icon alongside the background highlight — vote state is no longer conveyed by colour alone.

1.4.3 Contrast — hardcoded colours

• DeckWidget.vue: #0e7490 teal replaced with var(--color-info-text, var(--color-main-text)).
• FilesFavoritesWidget.vue: #f6c342 gold replaced with var(--color-warning, #f6c342).
• TeamWidgetGrid.vue: #1a1a1a on success/warning badges replaced with var(--color-success-text, #1a1a1a) and var(--color-warning-text, #1a1a1a).

2.1.1 / 2.4.7 Keyboard access and focus visible

• All 10 components with outline: none on :focus migrated to :focus-visible with 2px solid var(--color-primary-element) ring. Mouse/touch users are unaffected; keyboard users now see focus indicators.
• App.vue: duplicate :focus-visible blocks consolidated; outline: none removed.
• TeamTabBar.vue: role="tablist", role="tab", and aria-selected added to all tab buttons. Tab/Shift+Tab moves focus; Left/Right arrow reorders the focused tab and restores focus after re-render via $nextTick.
• TeamWidgetGrid.vue (edit mode): all 11 drag handles gain tabindex="0" and @keydown handlers for ↑ ↓ ← → to move widgets on the grid. moveWidget() swaps positions with the neighbour in sorted order (fixes vue-grid-layout vertical compaction cancelling y ± 1 nudges).

2.4.6 Headings and labels

• Same as 1.3.1 widget <h2> and edit input <label> changes above.

2.5.7 Dragging movements

• Tab bar: Left/Right arrow keys on focused tab provide a keyboard alternative to drag-to-reorder (WCAG requires a pointer/keyboard alternative).
• Widget grid: ↑ ↓ ← → on focused drag handle provide a keyboard alternative to grid drag-and-drop.

4.1.2 Name, role, value

• TeamTabBar.vue: role="tablist" + aria-label="Team navigation" on wrapper; role="tab" + aria-selected on each button tab; web link tabs correctly excluded from tab role.
• TeamWidgetGrid.vue: all 11 collapse/expand buttons now include the widget name in their aria-label (e.g. "Collapse Team Messages" instead of "Collapse").
• AppEmbed.vue: <iframe title> fix (see 1.1.1).

4.1.3 Status messages

• PostMessageForm.vue: attachment list wrapped in aria-live="polite" aria-atomic="false" — upload status changes (Uploading…, ✓, error) are now announced to screen readers. Checkmark symbol ✓ given :aria-label="Upload complete".

Security

• renderMarkdown (pre-existing): v-html binding in MessageCard.vue and CommentsSection.vue renders user content without HTML sanitization. Logged as open issue for a dedicated security session — fix requires DOMPurify.sanitize() before return.

Removed

• Debug console.log calls in TeamWidgetGrid.vue (moveWidget) and TeamTabBar.vue (moveTabLeft, moveTabRight).

Fixed

• Double margin-top gap below NC top bar. NC page frame and NcContent both applied margin-top: var(--header-height) to the same element. Added #content-vue.app-teamhub { margin-top: 0 } to zero the page-frame copy only.
• TypeError: e.n is not a function on team pages. translatePlural imported at module scope is invisible to Vue 2 templates — added n to methods: { t, n } in all five affected components; AdminSettings gets an inline n() method matching its existing t() pattern.

Changed

• All error messages use {error} named placeholder instead of string concatenation. Allows translators to reposition the error detail within the sentence (22 call sites across 10 components).
• All count-bearing strings converted to n() plural forms (14 strings across 5 components). Translators can now supply correct plural rules per language.

Added

• Transifex plumbing. .tx/config and .l10nignore added. Stale l10n/en.js / l10n/en.json removed. Ready for NC community bot once @nextcloud-bot is invited to the repo.
• TRANSLATORS: hints on ambiguous strings: Comment, Leave, Join (team vs. meeting), poll vote labels.
• Translation standards added to SKILLS.md — every string written in future sessions must be translation-ready immediately.

Removed

• Debug logging purged. 23 JS (console.log / console.error) and 15 PHP (error_log) calls removed across App.vue, FeedbackModal.vue, FilesSharedWidget.vue, TeamView.vue, FeedbackController.php, FeedbackService.php, TeamService.php, TelemetryService.php. The console.warn in TeamView.menuItemUrl() is intentionally kept as a security signal.

Fixed

• Calendar widget now reloads automatically after adding an event, scheduling a meeting, or creating a team meeting — all three modal close handlers now call refreshCalendar() via the widget grid ref.
• Meeting notes public share link now grants read+write access (was read-only), so attendees can edit the notes file directly from the shared link.
• @nextcloud/vue no longer logs "missing appName / appVersion" console errors — webpack.DefinePlugin now injects appName and appVersion as compile-time bare globals, which is what the library reads at module evaluation time.
• Members widget: removed redundant border-top from .teamhub-memberships-list; Show all button width set to 90%; left-side padding unified to 12px across avatar stack, membership rows, and show-all button.
• Removed redundant "Team Messages" heading from the message stream body (the accordion header already shows this label).
• Removed duplicate "Post First Message" button from the empty-state — the header-level "+ Post Message" button already handles this.
• All semantic color text uses (--color-error, --color-success, --color-warning) replaced with their high-contrast -text variants across 21 components, improving readability. Backgrounds and borders retain the base variables.

Added

• Group and team members are now fully recognised. When a Nextcloud group or another team is added to a team, its users count towards the team's member total and gain access to the team. The members widget shows direct users as avatars (up to 16, sorted by role then last activity), followed by a flat list of added groups and teams with a GROUP or TEAM pill and their user count. A "Show all N members" link opens a searchable modal listing every effective user, deduplicated.
• Manage Team → Members tab displays three buckets: Direct Members, Groups & Teams (with name and effective user count), and Pending Join Requests. Admins can remove whole groups or teams, which also clears their users' indirect access.
• Invite modal can now search for and add other user-created teams (circles) in addition to users, groups, email invites, and federated contacts.
• New GET /api/v1/teams/{teamId}/members/all endpoint — returns the flat deduplicated list of all effective users (direct plus expanded from groups and sub-teams) for the Show All modal. Requires member-level access.
• New GET /api/v1/teams/{teamId}/members/manage endpoint — structured response (direct, groups, circles, effective_count) for the Manage Team members tab. Requires admin-level access.
• BrowseTeamsView teams now return an isDirectMember flag so indirect members see a disabled Leave button with an explanatory tooltip rather than being allowed to "leave" a team they were never directly added to.
• leaveTeam now detects indirect membership and returns a 403 with an indirect_member sentinel so the UI can show the tooltip explanation.

Changed

• The GET /api/v1/teams/{teamId}/members response shape changed from a flat array to {members, memberships, effective_count, has_more, is_direct_member}. members is limited to the top 16 direct users (sorted by role then last login), memberships is the flat list of added groups and teams for the widget.
• Admin Settings → Maintenance team member count column now reflects effective membership (direct users plus users from added groups and sub-teams) instead of only the three top-level rows in circles_member.
• removeMember() now correctly handles groups (user_type=2) and teams (user_type=16) by using single_id as the delete key. It also calls MembershipService::onUpdate() after deletion so removed indirect users actually disappear from share pickers.
• Pending Join Requests in Manage Team has extra top padding to separate it from the membership summary.
• Group and Team icons/pills use the primary-element (blue) and warning (amber) tones respectively — the previous success-green was too low-contrast.

Fixed

• Integrity check in Admin Settings → Maintenance no longer flags teams as mismatched just because they have a group or sub-team as a member. It now flags only teams whose circles_membership cache is genuinely empty while direct members exist.
• getTeamMembers no longer fails on the u.last_login column (which does not exist on oc_users); last-login sorting now reads from oc_user_preferences / oc_preferences.
• browseAllTeams correctly detects membership via groups or sub-teams in addition to direct rows.

Security

• getTeamMembers now enforces requireMemberLevel — previously any authenticated user could enumerate any team's member list by guessing a circle ID.
• lastLogin timestamps (used internally for sort order) are stripped from the members response so they are never exposed to the client.

Added

• Shared Files widget — new dashboard widget showing files and folders that team members have shared directly with the team circle (e.g. from Nextcloud Notes or Files). Displays item name, type icon (including a dedicated note icon for .md files), sharer display name with avatar, and share date. Paginated at 10 items per page, sorted newest first.
• New GET /api/v1/teams/{teamId}/files/shared endpoint — returns paginated list of files/folders shared with the team circle, excluding the team folder itself. Accepts page and limit query parameters.
• New shared_files app toggle in the Team Apps section of Manage Team — defaults to off; team owners enable it explicitly. Independent of the Files (team folder) toggle.

Fixed

• Fixed team folder query in ResourceService incorrectly picking up individual file shares (e.g. Notes shares) as the team folder when no folder was configured — query now filters on item_type = 'folder'.
• Fixed shared_files toggle defaulting to on in Manage Team UI for teams that had no saved state yet — default is now off.

Added

• Upcoming Tasks widget now shows personal tasks alongside Deck tasks. When the NC Tasks app is installed and the team has a calendar, VTODO tasks from the team calendar are fetched server-side (Sabre/VObject, direct DB query on calendarobjects) and merged with Deck cards into a single sorted list. Each task row shows a source pill — blue "Deck" or teal "Personal task" — so users can distinguish at a glance. The two task types also use different badge icons.
• New GET /api/v1/teams/{teamId}/tasks endpoint — returns upcoming (≤14 days, non-completed) VTODO tasks from the team calendar.
• New POST /api/v1/teams/{teamId}/tasks endpoint — creates a VTODO in the team calendar via CalDavBackend (QB fallback if unavailable).
• New Create personal task action in the Upcoming Tasks widget header, which opens a modal (title, optional description, optional due date/time). Shown only when Tasks app is installed and team has a calendar.
• The existing Add task action renamed to Create Deck task to distinguish it from personal tasks. Shown only when team has a Deck board.
• resources payload from GET /teams/{teamId}/resources now includes a tasks: bool flag indicating whether the NC Tasks app is installed.
• New AddPersonalTaskModal.vue component.
• New lib/Service/TaskService.php service.
• New migration Version000310001 — ensures teamhub_integ_registry exists and drops the legacy teamhub_integration_registry table if it survived an NC uninstall. Fixes a scenario where NC's "delete all data" uninstall keeps migration history, causing the new-name table to never be created on reinstall.

Fixed

• Fixed oc_teamhub_integ_registry does not exist error on installs where NC's uninstall-with-delete-data flow preserved migration history, causing migration 000209000 to be skipped on reinstall while the old teamhub_integration_registry table survived.

Added

• Upcoming Tasks widget now shows personal tasks alongside Deck tasks. When the NC Tasks app is installed and the team has a calendar, VTODO tasks from the team calendar are fetched server-side (Sabre/VObject, direct DB query on calendarobjects) and merged with Deck cards into a single sorted list. Each task row shows a source pill — blue "Deck" or teal "Personal task" — so users can distinguish at a glance. The two task types also use different badge icons.
• New GET /api/v1/teams/{teamId}/tasks endpoint — returns upcoming (≤14 days, non-completed) VTODO tasks from the team calendar.
• New POST /api/v1/teams/{teamId}/tasks endpoint — creates a VTODO in the team calendar via CalDavBackend (QB fallback if unavailable).
• New Create personal task action in the Upcoming Tasks widget header, which opens a modal (title, optional description, optional due date/time). Shown only when Tasks app is installed and team has a calendar.
• The existing Add task action renamed to Create Deck task to distinguish it from personal tasks. Shown only when team has a Deck board.
• resources payload from GET /teams/{teamId}/resources now includes a tasks: bool flag indicating whether the NC Tasks app is installed.
• New AddPersonalTaskModal.vue component.
• New lib/Service/TaskService.php service.
• New migration Version000310001 — ensures teamhub_integ_registry exists and drops the legacy teamhub_integration_registry table if it survived an NC uninstall. Fixes a scenario where NC's "delete all data" uninstall keeps migration history, causing the new-name table to never be created on reinstall.

Fixed

• Fixed oc_teamhub_integ_registry does not exist error on installs where NC's uninstall-with-delete-data flow preserved migration history, causing migration 000209000 to be skipped on reinstall while the old teamhub_integration_registry table survived.

Fixed

• Fixed fresh-install failure: teamhub_team_apps.enabled was declared BOOLEAN NOT NULL which Doctrine rejects when storing false on MySQL/MariaDB; changed to SMALLINT NOT NULL DEFAULT 1.
• Fixed same BOOLEAN/NOT NULL issue on teamhub_integration_registry.is_builtin; changed to SMALLINT NOT NULL DEFAULT 0.
• Added migration Version000300801 to apply both column type fixes to existing installations.

Added

• Telemetry payload expanded with six new anonymous metrics: nc_version, user_count, member_total, message_count, builtin_integrations (per-builtin-app team counts), and link_domains (custom-link hostname frequency map).
• link_domains aggregates custom web-link URLs down to their bare lowercase hostname before sending — no paths, query strings, ports, fragments, localhost entries, or numeric IPs leave the instance.

Changed

• GET /api/v1/admin/telemetry preview object now includes all new fields; admin UI automatically renders them via the existing JSON preview.
• TelemetryService now depends on IUserManager for user counting.

Security

• All new collection paths are read-only DB queries using QueryBuilder with named parameters — no new user-input surface.
• No new endpoints; existing telemetry endpoint remains #[AuthorizedAdminSetting]-guarded.

TeamHub v3.5 — Changes

Admin Maintenance tab — full teams grid

Replaced the old "Orphaned teams" section with a full teams management grid covering every user-created team on the NC instance. What it does: Paginated table with search by name, "orphans only" toggle, and per-page selector (10/20/50/100). Each row shows team name, description, member count, owner (display name + uid), and creation date. Two icon-only action buttons per row: set owner and delete.

Set owner

Admin can assign any NC user as owner of any team — whether or not that user is currently a member.

Delete team (admin)

Admin can delete any team regardless of ownership. Cleans up all associated data before destroying the circle.

TeamHub v3.6 — Changes

Activity widget

Deck activity now scoped to the team's board only — card events (deck_card) and board events (deck_board) handled separately Talk activity scoped to the team's room via numeric room ID — eliminates cross-team bleed Calendar/DAV activity subject strings corrected to match real oc_activity values Friendly human-readable labels for all Deck, Calendar, and Circles activity subjects

Manage Team — Maintenance tab

"Danger Zone" tab renamed to "Maintenance" Transfer ownership added — team owner can promote any current team member to owner Ownership transfer requires two-step confirmation and demotes the current owner to admin Leave team now shows the real server error message (e.g. "Transfer ownership before leaving")

Admin Settings — Membership cache integrity

New section in the Maintenance tab: scan all teams for stale membership cache Compares circles_member (source of truth) against circles_membership (share picker cache) Per-team Repair button rebuilds the cache — fixes teams invisible to Files, Calendar and Deck share pickers

Files

Re-enabling the Files app for a team now works correctly Favourite Files and Recently Modified widgets no longer appear on teams without a connected Files resource

Added

• Message @mentions. PostMessageForm and MessageCard edit mode use NcRichContenteditable with the NC core OCS autocomplete API (/ocs/v2.php/core/autocomplete/get), scoped to team members. Mentions render as styled highlight pills in the message body. Backend sends a message_mention NC notification to each mentioned team member (on create and edit).
• Message pagination. 5 messages per page with prev/next controls in the message stream. Page resets to 1 on team switch and after posting. MessageMapper::countByTeamId() added. listMessages now returns total, page, and limit alongside messages.
• Per-team message settings. New Messages tab in Manage team for team admins. Configures minimum role to pin messages and minimum role to post messages, stored as per-team IConfig keys. Post Message button hidden (not just disabled) when the user lacks the post role.
• Calendar view dropdown. Embed bar now has a native select for Month / Week / Day / List variants; selecting reloads the iframe with the chosen view in the URL.
• Calendar embed auto-reload. After adding or deleting events, the calendar iframe reloads automatically so changes appear immediately.
• NC-relative team links. Custom team links now accept apps/... or /apps/... paths (e.g. apps/collectives/s5) and open in an iframe tab, just like built-in app tabs. External https:// links continue to open in a new browser tab.
• VitePress documentation site in docs/. Covers Nextcloud admins, Team management, Developers, and Users — 20 pages total.
• New migration Version000336200 — remediates auto-generated primary key name on oc_teamhub_team_app_resources for existing PostgreSQL installs.
• message_mention notifier subject in Notifier.php.
• getMessageSettings / saveMessageSettings endpoints (GET/POST /api/v1/teams/{teamId}/messages/settings).
• getCalendarEventsForWeek endpoint (GET /api/v1/teams/{teamId}/calendar/events/week).
• deleteCalendarEvents endpoint (DELETE /api/v1/teams/{teamId}/calendar/events).

Changed

• Calendar iframe URL now uses the public share token path /apps/calendar/p/{token}/{view}/now (team-calendar-only, no personal calendars). Falls back to full app when no token available.
• Calendar connect error handling in ManageTeamView no longer logs the full HTML 500 response body to the console.
• getPinMinLevel reads per-team IConfig key first, falls back to global key. Admin settings Messages tab removed (settings are now entirely per-team).
• activeFilesIsGf / activeFilesIsShared in ManageTeamView use .some() across all active files rows so the GF connect buttons correctly hide when a GF is active even if a shared folder row appears first.
• dav_shares access filter in getRealCalendarIds broadened from IN (1,2) to IN (1,2,3) for compatibility with NC Calendar 5.x circle shares.
• resumeCalendarAccess corrected from access=1 (read-only) to access=2 (read-write).
• Select dropdowns in AppEmbed bar and Manage team Messages tab have no background color (theme-transparent).

Fixed

• MariaDB migration failure on NC 32.0.9: Version000328200 now uses explicit 'th_tar_pk' for setPrimaryKey() — auto-generated name was 31 chars, one over the 30-char DBAL limit.
• Calendar connectExistingCalendar TypeError — ResourceService was passing $resourceId as string to a method expecting int; cast to (int) at the call site.
• GF connect buttons visible when GF already active — activeFilesIsGf now uses .some() instead of .find() so ordering of rows doesn't affect the result.

Added

• Strict 1:1 enforcement for files resources. ResourceDiscoveryService::reconcileApp now snapshots the team's active files state and routes newly discovered rows accordingly: active shared + incoming GF → pending (with isDualFolderPending flag); active GF + anything → ignored (GF precedence); active shared + another shared → ignored. acceptResource and unignoreResource apply the same guard. All refusals write resource.suppressed_duplicate audit entries with reason codes.
• Group folder takes precedence in getTeamResources. When both shared and GF rows are active (dual state during manual migration), the loop explicitly picks the gf: row so widgets and the team home always read from the group folder.
• Dual-folder informational notice in Manage Team → Settings → Team Apps. When a GF is discovered alongside an active shared folder, a blue panel explains the situation and directs the admin to connect the group folder via the existing buttons and migrate files manually.
• Resource-type badge ("Group folder" / "Shared folder") on each active files row in the settings panel.
• Picker filtering by active files type. GET /api/v1/pickers/files now accepts activeFilesType=shared|gf|none. Shared folders are suppressed when one is already active; both types hidden when a GF is active.
• isDualFolderPending flag on panel data rows.
• normalPendingResources, dualFolderPendingRow, dualFolderSharedRow, activeFilesRow, activeFilesIsShared, activeFilesIsGf computed properties in ManageTeamView.vue.
• Create New button for Talk — shown in empty state alongside Connect existing.
• Create New group folder button for Files — shown only when Group Folders is installed; switches label to "+ Create new group folder" when a shared folder is active (signals the workflow).
• Both 1:1 buttons hidden once a resource is connected, except when a shared folder is active and Group Folders is available — then the GF buttons remain so admin can attach a GF for manual migration.

Changed

• ResourceService::upsertResourceRow() — now promotes pending/ignored rows to active on explicit connect instead of skipping. Fixes silent failure when the discovery reconciler had already inserted the resource as pending.
• ResourceService::getTeamResources() — files block prefers gf: row when multiple active rows exist.
• ResourceDiscoveryService::getSettingsPanelData() — adds dual-folder detection and tagging.
• ResourceDiscoveryService::resolveFileName() — falls back to basename(path) when filecache.name is empty (some storage backends).
• FilesService::listConnectableFileFolders() — accepts activeFilesType parameter, filters output accordingly. Also falls back to basename(path) for shared folder names.
• ResourceStateController::getPanelData() — now triggers reconcileTeam before returning panel data, so externally added GF resources appear immediately.
• ManageTeamView::connectExisting() — empty catch block replaced with showError().

Fixed

• Critical pre-existing bug in ArchiveService.php: stray extra } (line ~2770) caused ParseError: unexpected token "try" on every admin archive request. Removed. Archive settings save works again.
• AdminSettings.vue archive form: archiveBeforeDelete was missing from the data() default and from loadArchiveSettings — the toggle had no reactive backing. Both fixed.

Removed

• The auto-migration system (FolderMigrationService, FolderMigrationController, FolderMigrationModal.vue, two endpoints) was scoped, built, and removed per user direction. NcDialog wiring proved unreliable; manual file migration is the supported path. The dual-folder notice remains as an informational signal only.

Security

• All new endpoints check team admin level (≥8) before any action.
• No raw SQL anywhere; no \OC::$server; constructor DI throughout.

Added

• Connect existing app resources to a team. Team owners can now choose, per app, to connect a Calendar / Files folder / Deck board / Talk room they already own instead of creating a new one. Available in the Create-team wizard step 4 and in Manage Team → Settings → Apps.
• Resource pickers (GET /api/v1/pickers/{calendar|deck|talk}) listing the current user's owned resources, scoped to the caller's UID.
• Connect endpoint POST /api/v1/teams/{teamId}/resources/{app}/connect (team-admin required) that inserts the share/ACL row granting the team's circle access to the selected resource.
• ResourcePicker.vue — unified picker component used by both the wizard and the manage-team dialog. Files mode opens NC's standard getFilePickerBuilder dialog; the other three apps render a populated <select> populated from the picker endpoint.
• Connected-resource warning under "Delete team" in Manage Team → Maintenance, explaining that connected resources are deleted with the team and how to preserve them.
• Archive-before-delete admin toggle. New checkbox in Archive Policy controls whether team deletion produces an archive ZIP first or skips archiving entirely. Default OFF for new and existing installs. Same three deletion modes (hard / soft30 / soft60) apply to both archive-on and archive-off paths.
• POST /api/v1/teams/{teamId}/soft-delete endpoint for soft-delete without archive — creates a pending-deletion row and suspends connected app resources but skips archive production.
• Owner-side delete dialog when archive-before-delete is OFF, with description and confirmation text adapted to the chosen deletion mode (immediate hard delete vs 30/60 day grace period without archive).

Changed

• The Delete-team button in Manage Team → Maintenance now branches based on admin policy: archive ON opens the existing archive modal; archive OFF opens a plain NcDialog confirmation.
• Description text for the Delete-team row dynamically reflects the active archive policy and deletion mode.

Fixed

• PostgreSQL SQLSTATE[22P02]: invalid input syntax for type smallint: "f" on team creation. The enabled (in teamhub_team_apps) and is_builtin (in teamhub_integ_registry) columns are SMALLINT (per the v3.9.0 cross-database fix), but their bind parameters were still using IQueryBuilder::PARAM_BOOL. PostgreSQL refuses the boolean-to-smallint coercion at the wire-protocol level; MySQL accepted it silently. Fixed by casting to int and binding as PARAM_INT in TeamAppMapper::upsert() and IntegrationRegistryMapper::register().

Security

• Every connect endpoint re-verifies that the user owns the specified resource (WHERE owner = currentUid or IRootFolder::getById() for Files), preventing forged-resourceId attacks across the four supported apps.
• Each app refuses to connect a second resource if one is already linked to the team (one-resource-per-team invariant).
• Picker endpoints scope listing to the caller's UID — never accept a UID from request parameters.

Added

• Mobile single-canvas layout for viewports ≤ 768px and tablet portrait (≤ 1024px portrait). New MobileWidgetView.vue: scrollable canvas, collapsible icon bar at bottom with one icon per accessible widget, FAB action button.
• FAB widget actions — in-canvas action button rows removed; actions surfaced via FAB: single action fires directly, multiple actions open a slide-up sheet.
• Tablet landscape layout for viewports ≤ 1200px landscape: 60/40 split with message stream left and collapsible widget column right. Widget cards have spacing and rounded borders.
• NC sidebar auto-close on mobile/tablet-portrait — uses NcAppNavigation :open.sync prop to close reactively after selecting a team or action, instead of fragile DOM manipulation.

Changed

• Embedded app iframe content height set to 100% (previously 90%).
• Edit layout button hidden on both mobile and tablet layouts (editing not available in these modes).
• Seven modals (ManageLinksModal, AddEventModal, AddTaskModal, AddPersonalTaskModal, InviteMemberModal, ScheduleMeetingModal, TeamMeetingModal) now set min-width: 0 on viewports ≤ 768px to prevent horizontal overflow on phones.
• MessageStream accepts hide-header prop and exposes openPostForm() method for FAB integration.