NewsBreak local editorial copy guardrails
• Each vertical now receives short and long editorial headline variants with {city} or {state} localization.
• Every generated headline includes the publication year, and descriptions front-load the real publication month and year.
• MoneyOps blocks exclamation marks, all-caps copy, sales language, unsupported authority claims, missing numeric detail, and verticals without a local token.
• Copy is fitted at word boundaries and remains editable before launch without bypassing server-side validation.

NewsBreak funded discovery and creative-level attribution
• Upload one to five creatives per vertical; every uploaded image is now published as its own ad inside the same NewsBreak campaign/ad set.
• Every vertical receives a unique MoneyOps route, ClickFlare campaign, and NewsBreak campaign/ad set with every uploaded creative active as an ad.
• NewsBreak objects are created OFF, read back, and activated only after Full USA, English, NewsBreak-only, iOS/Apple, event, budget, URL, and attribution checks pass.
• Added PREPARE ONLY, SHADOW, and FAST DISCOVERY launch profiles with required dollar capacity, working-capital, maturity, and latency controls.
• Replaced the five-click CPC kill rule with mature revenue economics: five clicks now trigger an attribution review only.
• Added shared $5 vertical discovery rounds, $3 initial loss control, qualified extension, validation, deterioration, and guarded 20% scaling rules.
• Destination protection pauses delivery instead of replacing a paid destination with a fallback URL.
• Batch progress and risk views now show lead selection, queued retests, policy stage, N/K/C/R/P/ROI evidence, and exact decision reasons.

NewsBreak creative groups and ad-level CPC control
• Identical creative files now reuse the NewsBreak asset that was already accepted instead of failing with a duplicate-media error.
• The ad-level pause threshold is now above $0.25 CPC after at least five clicks.
• Batch History now lets you switch between every recent upload instead of showing only the latest batch.
• Fixed NewsBreak campaign, ad-set, and ad status parsing after the API changed its list response field.
• The supplied US flag image is now the automatic default logo for every new NewsBreak ad.
• Each new vertical now requires exactly five creatives and launches as one campaign, one ad set, and five image ads.
• Creative filenames are grouped automatically by their shared topic, including numbered, lettered, copy, version, and hook-text variants.
• After an individual ad reaches five clicks, MoneyOps pauses only that ad when CPC is above $0.25.
• Updated the default NewsBreak headline and description templates.
• Campaigns are paused after two consecutive completed UTC days of negative profit.
• NewsBreak ads are paused before an offer or Tracking 2 destination is archived, removed, or changed to the Google fallback.
• Batch progress and monitoring now show vertical, creative, clicks, spend, CPC, and the ad-level decision.

• Removed Account Risk Limits, daily ceiling, test-risk allowance, manual checks, and capacity queues from NewsBreak publishing.
• NewsBreak now has dedicated Save and Test & Save actions; saved tokens remain visible as a masked value after refresh.
• NewsBreak bulk launches now default to Click here - {topic} and Click here for {topic}.
• Removed Expected RPC and Launch CPA Goal from the NewsBreak bulk publisher.
NewsBreak bulk publisher
• Upload one or many named images and MoneyOps creates each article, Tracking 2 offer link, ClickFlare campaign, NewsBreak campaign, ad set, and image ad.
• Added resumable batches, API pacing, duplicate protection, and direct NewsBreak CDN uploads.
• NewsBreak bulk publishing uses fixed $10 test budgets with automatic reporting checks, loss stops, pause verification, and a visible decision ledger.

Productivity subtool
• Added a standalone /productivity/ tool for manually logging campaigns started by date.
• Buyers can update approval and profitability later; admins get the master view across everyone.
• Optional Clickflare verification checks logged campaigns against matching CF campaign/report data.

Daily buyer audit
• Added an admin-only Buyer Audit view for daily media-buyer publishing checks.
• Shows who created campaigns, whether each one spent, whether Clickflare shows profit/loss, and the pixel/ad account stored on the matching FB launch.
• Includes buyer rollups, campaign drilldown, search/filter controls, and CSV export.

Profitable policy-stop watchlist
• FB Reports now surfaces a separate Policy-stopped profitable campaigns panel when a campaign made money in the selected window but Meta now reports a policy rejection / policy-limited status.
• Each row shows campaign, status, profit, ROI, spend, profit streak, and the exact Meta policy reason, with Ads Manager and copy-ID actions.
• Added a Policy-stopped winners table filter and row highlight. This is inspection-only: policy-rejected ads stay blocked from relaunching the same creative/copy/URL.

Recovered delivery-error cleanup
• Reports now clear stale saved delivery issues when Meta returns a clean current status, so recovered/page-fixed campaigns stop showing old delivery errors.
• Manual Refresh / Deep Scan now force-checks Meta instead of reusing cached status.

Geo-tiered decision rules
• 🎯 T2/T3 countries (IN, AE, BD, PK, NG, PH, etc.) — kill after 1 loss day (was 3). Scale ready after 1 profit day, full scale after 2. Results land within 24h, no point waiting 3 days on a dead campaign.
• 🏦 T1 countries (US, CA, GB, AU, DE, FR, IT, JP, KR, etc.) — keep 3-day kill / 2-day warn patience. Data is noisier at higher CPMs, needs time to settle.
• 🚫 PAUSE tier is T1-only. T2/T3 skips straight from TESTING to KILL — no intermediate warning.
• 🏷 Every card, streak chip, action button, and decision line now shows [T1] or [T2/T3] with the exact threshold that fired.
• 📖 Help docs updated with separate T1 / T2/T3 threshold tables.

Clickflare data fixes
• 🔧 CF pagination fix — was pageSize:1000, page:1 with NO loop. Daily reports with 50+ campaigns over 14–30 days silently dropped data past row 1000. Revenue/conversions vanished for some campaigns. Now loops through all pages.
• 📊 EPC metric added end-to-end — CF returns EPC in every response but it was collected and then thrown away. Now surfaced on cards, detail table, and per-day breakdown. EPC = Revenue ÷ CF clicks.
• 🐛 Per-day RPC was showing EPC — daily CF rows never extracted dynamicPayout, so "RPC" fell back to revenue/clicks (which is EPC). Fixed: RPC now shows real dynamicPayout, EPC is its own column.
• 📈 Per-day CF metrics — daily breakdown now extracts dynamicPayout, epc, cvr from each CF row instead of computing approximations.

Pause reappearing bug fix
• 🐛 Cards kept reappearing after clicking Kill/Pause — optimistic UI flipped to PAUSED, then fbReportLoad(true) fetched stale server cache (still ACTIVE) and the card popped back. Fixed with _fbStatusOverrides map that persists the optimistic status across reloads for 2 minutes or until the 60s reconcile confirms.

Per-day reasoning table scroll
• 📱 Table was stuck — couldn't scroll horizontally to see all 15 columns. Fixed: min-width:1100px forces overflow, overflow-x:auto actually works now.
• 📌 Date column pinned (position:sticky left:0) — stays visible while scrolling right.
• 🖱 Drag-to-scroll — grab and drag the table horizontally instead of hunting for a scrollbar.
• 🗑 PPC column removed — was mixing CF revenue-per-click with FB cost-per-click (different denominators). Meaningless metric, gone.

FB Reports — Auto-buying decision terminal
• 📊 Action queue with eight tiers: KILL · PAUSE · NO CONV · DAY-1 BREAKOUT · SCALE · SCALE READY · UNSTABLE · TESTING / PAUSED / IDLE
• 🎯 Geo-tiered rules (v4.7.43): T2/T3 countries kill after 1 loss day + scale at 1–2d profit. T1 countries (US, EU, etc.) keep 3d loss/2d warn patience + scale at 2–3d profit. Zero-click blowout / NO CONV / BREAKOUT universal.
• 💰 Headline metric on every card: RPC − CPA per conv (the profit signal in RSOC), green/red by sign
• 📈 Volatility gate — profitable streaks with CV > 0.5 downgrade to UNSTABLE instead of recommending scale
• ⚠ "Worsened today" badge — auto-rule escalations across renders flagged automatically
• 🔄 Pause reconcile — 60s after a pause, MoneyOps re-checks Meta to confirm; red badge if not paused
• 📋 "Why is this flagged?" dropdown per card — 14-column per-day breakdown with 3-day linear-regression trend arrows
• 🇺🇸 Country flag chips, "X days old" age chip (UTC calendar days), ACTIVE/PAUSED status pill on every card
• 🔁 Drag-to-reorder columns in the detail table; CF / FB source pill on every column header
• ⏱ Cache countdown chip — "Cached · refresh in 0:42" / "Fresh data available — click ↻ Refresh"
• 📜 Sticky topbar nav, sticky FB Reports table headers, sticky group headers in the action queue
• 🧱 Two-block CF/FB metric grid — primary tier above (ROI · Conv · CPA · RPC), secondary below (CTR · CPC · CPM · CPV · vCVR)

Streak math correctness
• 🛡 Sub-$1 days break the streak (only today's UTC day gets a partial-day grace) — stops fake "loss 3d in a row" verdicts that jumped over gap days
• 🌐 Meta insights forced to UTC time_zone — fixes off-by-one-day streaks for non-UTC ad accounts
• 📅 Per-day table backfills missing UTC dates so gaps are visible instead of silently disappearing
• 🕐 Timezone hint banner shows current UTC time + your local time + today's UTC date
• 🌍 All amounts FX-converted to USD canonical (~50 currencies). Native amount in tooltip; "FX unknown" chip on rare unsupported currencies

Reliability + scale (rate-limit storm fixes)
• 💾 Disk-backed cache fallback — Render restarts no longer wipe FB report data; reports always render even when Meta rate-limits
• 🤖 Background worker (fbBackgroundRefresh) — Meta calls happen on a polite per-user schedule, not on user clicks (Maximizer-style)
• 🛡 Thundering-herd protection — concurrent identical fetches share one in-flight promise
• ⚡ Per-campaign status cache — kills the 200-launches × 2 status calls per report load (was 400 Graph calls; now ~5)
• 🗂 Cache TTL 5 → 15 min with disk fallback that survives unlimited TTL on cold starts
• 🔑 Cache key per (userId × token-fingerprint) — switching FB Setup 1↔Setup 2 no longer serves stale data
• 🔌 FB token expiry no longer logs you out of MoneyOps — path-based safeguard: any 401 from /api/fb/* /api/cf/* /api/lt/* never triggers logout
• 🔄 Stuck "FB API 276% used" banner now auto-refreshes via opportunistic /me probe
• 🔑 Token TTL 24h → 14 days, max sessions 5 → 15 — stops daily auto-logouts
• 🛟 Defensive per-row try/catch in row builder — single bad launch can't tank whole report

Admin tools
• 👥 Clone User — replicate any teammate's full settings (CF / WP / OpenAI / FB Setup 1 / FB Setup 2) onto a new account in one click
• 🔁 Sync FB Connection — push the active FB OAuth from a source user to one or more target teammates without making them re-OAuth
• 📋 Endpoints: POST /api/admin/clone-user, POST /api/admin/sync-fb-connection

Article generator hardening
• 📝 Articles now ≥1500 words — prompt + word-count guard + 1581-word fallback template (was 400-600)
• 🚫 FB-blacklist regex filters banned words (job, hire, require, opportunity + variants) from NC offer articles — three-layer defense (prompt + post-gen scan + final guard)

Branding + Maximizer-style UI
• 🪜 Sticky topbar with logo + tabs + user actions in one row
• ✍️ Typewriter wordmark "moneyops" + flat M. monogram (was gradient sky-blue tile)
• 🎨 Pure black dark theme (#121212) and clean white light theme; muted blue accent, no glassmorphism
• 🌈 Eye-friendly palette across both themes — desaturated greens/reds/oranges, thinner borders, lighter shadows

Patch trail (4.7.0 → 4.7.42)
• 🎯 v4.7.43: Geo-tiered decision rules — T2/T3 kills after 1 loss day, scales at 1–2d profit. T1 keeps 3/2-day patience. PPC column removed. FB-blacklist 3-layer filter.
• 🐛 v4.7.41: Sync FB Connection UI in Admin tab
• 🐛 v4.7.40: Background worker (fbBackgroundRefresh); /api/admin/sync-fb-connection endpoint
• 🐛 v4.7.38: FB Reports card layout redesign (two-block CF/FB grid)
• 🐛 v4.7.37: Disk-backed cache fallback (data branch)
• 🐛 v4.7.36: Per-day reasoning table layout fix; UTC calendar-day age chip
• 🐛 v4.7.35: getCampaignStatusCached dedup; thundering-herd promise dedup
• 🐛 v4.7.34: Defensive per-row try/catch
• 🐛 v4.7.33: Reverted plain-English tier renames — back to CF/FB jargon
• 🐛 v4.7.32: Live Meta status capture in report worker
• 🐛 v4.7.31: Idle tier chip + honest empty-state messages
• 🐛 v4.7.30: Hoisted totalSpend block (TDZ fix)
• 🐛 v4.7.28: Hoisted launchCurrency / launchBudgetAmount (TDZ fix)
• 🐛 v4.7.27: FX_TO_USD table for ~50 currencies
• 🐛 v4.7.26: Path-based 401 safeguard
• 🐛 v4.7.25: time_zone:'UTC' on insights
• 🐛 v4.7.23: FB token expiry no longer logs out
• 🐛 v4.7.0: Schedule feature uses Meta start_time directly (was a brittle local cron)
• 🐛 RPC − CPA is the profit signal in RSOC (not CPC vs RPC)
• 🐛 Streak walk O(n²) → O(n) on CF days lookup

Facebook Ads launcher — full Meta-native creator
• 📱 Pick a Clickflare campaign from a searchable, filterable list (status filter for white-page presence; preview shows TL2 + display URL)
• 🎬 Image + video creative upload with FB transcoding wait (30-90s); supports JPG · PNG · WebP · GIF · MP4 (with explicit .MOV warning)
• 📤 Multi-creative single-mode launches — pick 2+ files, get N ads in one adset
• 🛠 Multi-adset / multi-ad builder — 1 campaign × N adsets × M ads per adset, fully configurable per adset
• 🌍 Multi-country fan-out — one creative ships as N parallel campaigns, one per country
• 🔑 Setup 1 + Setup 2 OAuth slots — backup FB app for when one gets restricted by Meta
• 🎯 Special Ad Categories: Employment, Financial Products, Credit, Housing, Politics
• 🇪🇺 EU DSA fields (dsa_beneficiary + dsa_payor) auto-resolved for EU/EEA targeting
• 👤 Age / gender / placement / device platform targeting; custom audience exclusions
• 💰 CBO + adset-level budget options, all Meta bid strategies
• ⏰ Meta-native scheduling — campaign goes live + Meta parks as "Scheduled" until start_time
• 🎮 Per-launch controls: Pause / Resume / Retry / Relaunch / Scale-budget (1.2× / 1.5× / 2× / custom)
• 🏥 Connection-health card + per-user FB error log with rotating slot
• 🚦 Live rate-limit chip showing app / business / account budget % used
• 📁 Persistent fb-launches-{userId}.json — full audit trail of every launch
• 👮 Admin oversight tab — every FB launch across every operator, with filters, CSV export, force-pause/relaunch

Reliability + security hardening
• 🛡 Per-user pipeline limit (max 3 concurrent) — no slot hogging
• 🔐 Session limit (5 per user) — oldest evicted on 6th login
• 🚫 Clone counts toward daily limit — no more bypass
• ⛔ Admin can set daily limit to 0 (fully blocks user)
• 🌐 Security headers (X-Frame-Options, HSTS, CSP, no-sniff)
• 🔒 CORS locked down — cross-origin blocked by default
• 🛡 SSRF protection on webhook URLs (HTTPS only, no internal IPs)
• 🔄 Graceful shutdown — waits for pipelines, marks stragglers failed
• 💥 Crash protection — unhandled rejections no longer kill server
• ❤️ /health endpoint for Render monitoring
• 🔍 IP logging on all logins
• 📋 All 12 async routes wrapped in try/catch
• 🤖 OpenAI default key for all users (no setup needed)
• 🧹 Removed unused dependencies

Auth + storage hardening
• 🔐 Password hashing (scrypt) — no more plaintext in storage
• 🔑 Admin can reset any user's password
• 🚪 Session invalidation on password change (force re-login)
• 🧹 Memory cleanup — no more unbounded cache growth
• 🔒 All secrets moved to env vars (zero hardcoded credentials)
• 📊 Proper CSV export with escaping
• ⏱ Clone batch limit: 15 (fits Render 30s timeout)
• 🛡 Auto-random JWT secret when env not set

Performance + persistence
• ⚡ Instant launch + real-time progress with status details
• 🏗️ Per-user campaign files — no write contention
• 🔒 Atomic writes with queue serialization (per-file mutex in github-db.js)
• 🔑 JWT token caching (95% fewer API logins to CF)
• 🎚 Concurrency limiter (max 10 pipelines globally; max 3 per user)
• 🛡 Thundering herd protection on settings reads
• 💾 Persistent logs + users — survive all redeploys
• 🎨 Modern UI refresh with new logo

Multi-user platform
• 👥 Multi-user with JWT auth · 👑 Admin dashboard · 🔄 Retry on failed campaigns · 🗑 Bulk delete · 🔍 Search/filter on history · 🛡 Rate limiting (per-IP + per-user) · 📊 Audit logging (logs.json)

Archive system + 12-fix security audit
• 📦 Soft-delete with restore · ↩ Bulk archive/restore with ownership checks · 🛡 Logs admin-only · 📊 Clickable stat cards · 📥 CSV export respects archived flag · 🎛️ Edit User modal replacing browser prompt()

UI overhaul + colour rebrand
• 🎨 Purple → Sky blue → final muted slate · 💲 Clean $ logo + favicon · 💬 Custom tooltip engine with viewport clamping · 📱 Full mobile responsiveness

NC Offer Creator + multi-site WP
• 🎯 Standalone NC offer tab (article + WP + LT + CF offer, no campaign) · 📥 NC + Replace from Existing Campaigns (bulk regen) · 📝 Multi-site WordPress: 10linesabout, androidadvices, queryvaults · 🔧 TF6 fix: contains not must_be

Three-tier roles: Admin → Team Lead → User
• 👑 Admin: full control · 👥 Team Lead: read-only on team members, sees team campaigns + "launched by" · 🔒 User: own campaigns only · getVisibleUserIds helper scopes visibility on every endpoint

Reliability + error handling
• 🔄 Auto-resume interrupted campaigns (<15 min old) on server restart · ⏱ 3-min pipeline timeout · 🔁 LinkTracker auto-retry on cold start (2 attempts, 45s timeout) · 📝 Human-readable error messages in History

Multi-site WordPress
• 🌐 Per-site credential overrides · 🌍 Site dropdown in Launch + NC tabs

Pipeline + persistence + clone
• 💾 GitHub persistent storage · 🔁 Clone tab (15 batch) · 🔄 Sync LinkTracker · 📱 Mobile responsive · 🌍 52 countries · 🔌 129 integrations · 🤖 OpenAI fallback to template · 📊 Auto-log to Google Sheet

Initial release
• Full pipeline: Article gen → WordPress → LinkTracker → Clickflare offer → CF campaign with TF6 routing