RUFREE keeps getting better

First-open onboarding is localized using the RUFREE language preference and acknowledged on the user's profile. The upload action opens the attachment picker without sending a message.

Syllabus intent is routed through the existing syllabus document and extraction pipeline. Course and term candidates come from the user's active schedule, with an explicit choice when the match is uncertain.

Added SafeMarkdown to render headings, lists, tables, blockquotes, bold, italic, and fenced code blocks with one-click copy, strictly rejecting dangerous schemes like javascript: while preserving plain text for user messages.

Consolidated all quota, SSR initialization, chat gatekeeping, and admin diagnostics under getCanonicalAssistantStatus, evaluating disabled_globally, prompt_disabled, disabled_for_user, provider_unavailable, configuration_error, monthly_budget_exceeded, quota_messages_exceeded, quota_tokens_exceeded, and ready with zero logic drift.

Added a non-intrusive status pill in the assistant workspace with color-coded operational states (green for ready, amber for quota exceeded, slate for disabled, red for unconfigured) and a dismissible popover detailing quota usage, timezone reset rules, active model, and helpful guidance without technical error dumps.

Embedded a live Runtime Health panel in Admin AI Center displaying effective provider, model, inheritance badges ([Inherited]), and credential sources (Vault / Env). Introduced a safe 1-token POST probe endpoint (/api/admin/assistant/status) to verify upstream provider connectivity and latency without quota consumption or chat history pollution.

Built a dedicated full-height AI assistant workspace featuring streaming responses via AI SDK, collapsible multi-conversation sidebar, auto-growing composer with keyboard shortcuts (Enter to send, Shift+Enter for newline), document attachments (.pdf, .txt, .md), and interactive starter prompts.

Equipped the Assistant with internal read-only tools connecting to the RUFREE domain engine (get_my_schedule, get_friend_availability, search_people, get_busiest_day). Tool calls render as friendly, scannable execution pills with live status (running, completed, failed) rather than raw JSON payloads.

Added a visible 'How it works' entry and first-time onboarding modal with a 4-step walkthrough, 'Before you start' checklist, lightweight preview example, and local completion persistence to help students connect ChatGPT MCP in under 30 seconds.

Integrated end-to-end notifications when ChatGPT finishes syllabus analysis via draft_course_syllabus MCP tool, including rich metadata, Web Push dispatch, in-app success toasts on /materials, and bell banner alerts across all pages.

Added a segmented control under Settings > General allowing members to choose whether the app icon and logo follow system appearance, stay light, or stay dark. Preferences persist instantly across localStorage and cookies.

Introduced a live preview card with an active status badge, background mode toggles (Compare Both, Light Background, Dark Background), realistic squircle desktop icon badges with glass borders and drop shadows, in-app brand marks, and helpful WebKit caching instructions.

Introduced 4 interactive views in profile analytics: Comprehensive Overview with donut chart and domain mix, 7-Day Rhythm with interactive bar chart and click-to-inspect day inspector, Course Deep Dive with live subject filters and sorting, and Cadence Diagnosis with workload ratings and pacing tips.

Added get_academic_terms MCP tool to safely query active and upcoming semester terms with id, name, date ranges, and active status, authorized under schedule or syllabus read scopes without modifying database records.

Added get_schedule tool supporting up to 14-day schedule queries for both self and accepted friends, with automatic display name / username / nickname resolution and strict privacy masking for private events or hidden course details.

Added compare_schedules tool to evaluate class overlap against up to 5 friends, distinguishing between same_class_session and same_course_different_section, and measuring total concurrent busy time without leaking hidden event details.

Added find_mutual_availability tool to calculate common free meeting windows on target dates across multiple accepted friends within customizable working hours, treating private friend commitments as busy blocks without exposing details.

Exposed draft_course_syllabus tool in /mcp to convert AI-analyzed course policies, grading weights, and deadlines into draft extraction items, bound to active timetable courses without mutating ICS events.

Introduced explicit syllabus:write scope for MCP drafting mutations, strictly isolating it from legacy read-only syllabus tokens and updating OAuth consent UI.

Exposed public /mcp endpoint compliant with MCP specifications (initialize, tools/list, tools/call), returning today's schedule, current/next classes, and assessments due.

Implemented dynamic CIMD resolution with SSRF defense, prioritized token_endpoint_auth_methods_supported to negotiate 'none' with mandatory PKCE S256, and handled OpenAI's production metadata.

Bound authorization codes and access tokens to specific target resources (https://rufree.de/mcp), published /.well-known/oauth-protected-resource metadata, while maintaining 100% backward compatibility for legacy confidential flows.

Implemented standard OAuth authorization and token endpoints supporting ChatGPT Custom GPT Actions, with backward-compatible RFC 7636 PKCE (S256) challenge verification.

Added a new Connected Applications section in Settings allowing users to review active OAuth authorizations, view authorized scopes, and revoke access with atomic multi-token invalidation.

Added Personal Access Token (PAT) authentication and OpenAPI endpoints in Settings for seamless connection with ChatGPT Custom GPT Actions and Gemini Function Calling.

Fall and Winter count independently, the break between terms shows no misleading week number, and generated exams, deadlines, birthdays, and friends' schedules never affect the count.

The existing bilingual welcome template now sends once when onboarding first completes, respecting account language and email preferences.

Course links now use the appropriate UTM, Arts & Science, or UTSC catalog.

Admins can regenerate one member's saved Today brief for a specific date. The operation reuses the stored verified context, rewrites only AI copy, resets view counts, and never changes calendar facts.

Each Prompt lists every value the application can actually supply, its source, whether it may be blank, and whether the current template uses it. Unsupported variables are flagged before they silently resolve to empty text.

Today daily plan shows every field contained inside verified_context and, when available, the latest real payload saved for an actual generation. Samples are clearly labeled when no real record exists.

Each event policy can optionally generate the variable message inside a fixed branded email. Admins can preview the exact composition by language, while model failure falls back to deterministic notification copy.

Social, schedule, assessment, material, birthday, recap, and operations events now expose editable English and Chinese titles and bodies with fact-bound variables and a device preview.

Admin records are grouped by member and collapsed by default. Each generated day reveals the complete nine-moment copy timeline and the verified schedule facts supplied to AI.

App settings now preview upcoming controls for preferred names, tone, detail, reminder emphasis, emoji, and phrases to avoid. Controls remain disabled until the personalization contract is finalized.

The calendar sidebar and your public profile both expose App settings directly, while the profile editor links back to the personal profile section.

Each browser keeps a separate position for each account, calendar view, and date range. Returning to a week no longer sends you back to the first column; Today and assessment jumps still take priority.

When relevant items exist, a collapsible strip above the calendar shows the upcoming count and jumps to the exact all-day or timed event without taking over the calendar layout.

Admins can review who received a brief, the final copy, prompt version, deterministic schedule facts, generation time, and view counts. Raw syllabus files and document text are never included.

Evidence-backed confirmed facts are shared by normalized course code and exact term. Another year or term never matches by accident.

Materials labels course-shared facts without revealing the contributor, filename, storage path, full extracted text, or private document history.

An exam with a verified date but no reliable time creates one course-labeled all-day exam reminder. It never invents a clock time or conflicts with ordinary classes.

Each confirmed exam creates a separate course-labeled all-day marker such as “MAT232H5 Term Test 1 · Exam today”. It follows the same sharing setting as the exam and is excluded from availability calculations.

Date-only due items such as Credit/No Credit or Late Withdrawal deadlines appear in the all-day lane, with the course code included in the title. They do not block free-time calculations.

FSC courses now use a compact fingerprint mark wherever subject icons fit naturally.

A newly seen daily AI brief receives one short sweep and confetti-line animation. It runs once per unique brief and respects reduced-motion settings.

Grading, assessments, aid policy, key rules, and missing information are visualized with page-level evidence. Server-side quote checks prevent unsupported claims, and course Q&A explicitly says when the source has no answer.

Uploads return immediately, analysis continues after navigation, interrupted jobs are safely requeued, and completion or failure creates a durable in-app notification with Push delivery on enabled devices.

A bilingual responsive timeline shows confirmed personal exams and friend-shared exams. Exams default to shared, while assignments and other due dates remain private unless changed before confirmation.

After 6 PM, Today shows a compact locally calculated preview of tomorrow even when the AI provider is disabled or unavailable.

Exact matches link without changing ICS data, conflicting same-day times are blocked for correction, and unmatched items become visibly separate private AI events.

Confirmed material items can return to draft. Undo removes only events created by AI, while linked ICS events remain untouched; PDF page evidence is retained when available.

Every schedule version can be inspected and compared with the active version without switching production data or notifying friends. The page now opens the active term instead of the oldest term.

Configure lead time, local send time, language, audience, template, channels, and retry limits for exams, assignments, schedule changes, birthdays, recap, and announcements.

Test a single notification policy from the admin center and inspect delivery attempts without losing the in-app audit record.

Profiles show a privacy-aware snapshot of weekly class time, subject mix, course levels, busiest day, and course share.

Published recap archives can now receive asynchronous AI narration from privacy-minimized, verified aggregates. Statistics remain deterministic, copy is cached by archive signature, language, and prompt version, and the local summary stays visible whenever AI is disabled or unavailable.

Local rules calculate workload, timing, and upcoming dates. AI only turns those verified facts into warmer copy, cached by day, input signature, and prompt version.

Today shows confirmed exams, assignments, and due dates from the next two weeks, with direct access to course-material management.

Confirmed assignments can create one-day reminders through the same in-app, Push, and email event path, with deterministic fallback copy.

AI Today, exam copy, assignment copy, prompts, caching, Push, and user preferences are independently controlled and testable.

Upload a private PDF, text, or Markdown syllabus, review extracted exams and assignments, edit uncertain facts, and confirm selected dates into a private calendar.

Original files stay in private Storage, every upload becomes a version, and deletion removes the source, extraction, and calendar events created from it.

Configure UUAPI or official DeepSeek, keep keys in Supabase Vault, switch scenarios independently, version every prompt, and test each scenario with structured output.

Admins can target audiences, schedule delivery, and combine durable in-app notices with optional Push and email channels.

Confirmed exams can receive a one-day reminder generated from an editable prompt; a factual built-in message is used when the provider is unavailable.

A new bilingual leaderboard recognizes meaningful distinctions across shared classes, free-time fit, schedule intensity, course breadth, daily rhythm, and campus footprint.

A dedicated Admin workspace generates or refreshes archives and controls recap and leaderboard publication independently for every academic term.

Per-user, per-term aggregate reports and friend highlights are stored with source signatures and algorithm versions, included in Admin backups, and regenerated without changing source schedules.

Pinned friends receive narrative priority and balanced access to genuinely representative distinctions. Their cards include a warm, fact-based relationship reflection without altering ranks or inventing shared history.

Added an on-demand report for total class time, weekly average, busiest weekday, longest consecutive run, course mix, and recognized UTM building footprint.

Reports identify the friend with the most identical course meetings and the friend or complete Group with the most reliable shared free time.

Generate a RUFREE-branded PNG locally, hide name, buildings, or course codes before sharing, and never expose exact class times, rooms, or the full calendar.

A daily, deduplicated scheduler can create one in-app notice and localized Resend email after a term ends. Only the availability event is stored; report analytics remain on demand.

Events whose location is ZZ TBA now carry a distinct Exam time label in roomy calendar cards and schedule details.

Course codes in the event dialog now open their official UTM Calendar pages, with stricter validation to avoid malformed links.

A private nickname now appears together with the real name across Calendar, Today, profiles, shared courses, birthday events, notifications, Push, and watched-friend email, while remaining visible only to its owner.

Added lightweight, unframed subject icons for major UTM course codes across Calendar, Today, profiles, shared-course results, and schedule-change details. Icons hide automatically when a calendar card is too narrow or short.

The PWA now saves the latest authenticated Calendar shell and restores it with the local schedule snapshot, original layout, and a read-only offline banner. The compact fallback remains available on devices that have never opened Calendar online.

Added a responsive logo launch screen that follows light and dark themes, blocks no interaction, and disappears without waiting for client JavaScript.

Birthday events now sit above the hourly grid instead of stretching across an entire day.

Chinese calendars show lunar dates and highlight traditional festivals directly in each day header.

Added a quiet Updates link at the bottom of Today so release history is discoverable without adding navigation clutter.

Added quick actions to show everyone or only yourself without toggling calendars one by one.

Added a dedicated Updates page with a release timeline and type filters.

Every release note has natural English and Chinese copy with a compact mobile layout.

Localized creation, invitations, approvals, roles, notifications, and destructive actions.

Added grouped views for social, schedule, system, and all notifications with unread counts.

Added branded QQ, WeChat, Google, GitHub, and other configured provider entrances.

Registered users can link and unlink supported providers from their profile.

Added aggregate sign-in settings and a server-side test path for administrators.

Added optional birthdays, private friend birthday notes, calendar events, and watched-friend reminders.

Notifications can show added, changed, and removed classes plus shared-course impact.

Added next-class, time-to-leave, shared-class, and tight building-transfer reminders.

Each reminder type supports its own switch, lead time, quiet hours, deduplication, and devices.

Generates natural messages from class count, free windows, current time, and day of week.

Maintains separate English and Chinese message sets for busy days, late nights, and the weekend ahead.

Standardized DV, MN, IB, CC and common room-format variations such as Davis 1100 and DV1100.

Calculates shared breaks and distinguishes the same building, nearby buildings, and distant routes.

Added live availability with pinned friends first, group filters, and a calendar shortcut.

Compare matching courses across selected friends in one dedicated view.

Search by department or partial code, including codes without the UTM H5 suffix.

Added remove friend, block, and calendar visibility controls with confirmations.

Moved upload, preview, replace, and remove controls into the selected user's account panel.

Day, week, and work-week views with friend overlays, overlap groups, live time, and remembered selections.

Duration and date constraints, availability heatmaps, partial attendance, and highlighted results.

Profiles, avatars, privacy controls, friend discovery, group roles, invitations, and shared availability.

ICS import and export, live subscription feeds, version history, and shareable time proposals.

Installable mobile experience, recent-schedule cache, offline read-only mode, themes, and bilingual preferences.

In-app, email, and Push delivery plus account controls, social graph, backups, audit logs, and feature settings.