chore(release): 1.51.0 [skip ci]

# [1.51.0](v1.50.0...v1.51.0) (2025-09-16)

### Bug Fixes

* add DEQUEUED state handling in OnboardingTracker component ([74d7151](74d7151))
* add missing newlines in package.json and index.ts files for consistency ([f33bb34](f33bb34))
* add missing port number to database connection string ([bafbb27](bafbb27))
* add newline at end of package.json for proper formatting ([fb91918](fb91918))
* add persistent cmd session support in Windows script ([bfad924](bfad924))
* add robust database connectivity rules for CodeBuild ([50c9a7e](50c9a7e))
* add verification for public directory in buildspec.yml ([b8e2064](b8e2064))
* Added Control property to task sidebar ([8cc503b](8cc503b))
* Allow access to auditor role ([1553400](1553400))
* **auth:** rename email parameter for invite function to improve clarity ([95bb6c9](95bb6c9))
* **buildspec, Dockerfile:** update Node.js version and adjust Prisma client generation path ([2d677d0](2d677d0))
* **buildspec:** adjust working directory for dependency installation ([0774214](0774214))
* **buildspec:** enhance type checking step with optional script handling ([f151692](f151692))
* comprehensive Prisma deployment fix for Vercel monorepo ([6ef5033](6ef5033))
* **config:** update Vercel environment check for standalone output ([39f3710](39f3710))
* copy Prisma binary to locations where runtime is searching ([7c3af89](7c3af89))
* correct Docker entry point for monorepo structure ([bb3aecb](bb3aecb))
* correct environment variable assignment for Prisma query engine in Next.js config ([1ccaae1](1ccaae1))
* correct indentation in package.json scripts section ([f3ed25a](f3ed25a))
* correct static file paths for next.js standalone monorepo structure ([55442ab](55442ab))
* correct static file paths for next.js standalone monorepo structure ([12adfa6](12adfa6))
* correct Windows path formatting in fleet label creation script ([f34610f](f34610f))
* **deploy:** ensure pulumi update completes before starting build ([d47e9b5](d47e9b5))
* **docs:** Broken contributing guide link in PR template ([7c8f509](7c8f509))
* Enforce role-based access control in app ([8a81f42](8a81f42))
* enhance directory and marker file handling in Windows script ([49e3ec4](49e3ec4))
* enhance elevation and error handling in Windows script ([1a67177](1a67177))
* enhance elevation process in Windows script for better user experience ([9b4aeee](9b4aeee))
* enhance logging and error handling in Windows script ([9c54eb0](9c54eb0))
* enhance session token retrieval in middleware ([27a7254](27a7254))
* enhance structure and logging in Windows script ([e27a003](e27a003))
* ensure consistent newline handling in Prisma client and exports ([b5ce5f1](b5ce5f1))
* ensure Prisma binaries are included in Vercel deployment ([fa43f5e](fa43f5e))
* ensure Prisma binaries are included in Vercel deployment with custom output path ([e877714](e877714))
* ensure Prisma client is generated during Next.js build for deployment ([a9ee09a](a9ee09a))
* ensure Prisma query engine binary is properly copied in Trigger.dev deployment ([8d2fe33](8d2fe33))
* fixed search ([36e12f1](36e12f1))
* improve directory creation logic in Windows script ([71858ec](71858ec))
* improve directory selection logic in Windows script ([b2da074](b2da074))
* improve Docker entry point detection for Next.js standalone build ([4e11649](4e11649))
* improve error handling in file upload processes ([af52289](af52289))
* improve error handling in ToDoOverview component ([d4dd686](d4dd686))
* improve PowerShell command in Windows script for better execution ([a313739](a313739))
* improve variable handling and logging in Windows script ([042db43](042db43))
* **infra:** correct echo command syntax in buildspec for database URL check ([1140eba](1140eba))
* **infra:** correct secrets manager syntax for codebuild and container ([7ada508](7ada508))
* **infra:** correctly resolve database connection string for codebuild ([093bcb3](093bcb3))
* **infra:** update health check configuration in container module ([c9b41a6](c9b41a6))
* **infra:** update health check endpoint in container configuration ([5f3f4a2](5f3f4a2))
* Keep the `getRowId` and `rowClickBasePath` optional ([544afdc](544afdc))
* Member edit only for owner/admin ([1a2b9d2](1a2b9d2))
* Move role checks on org level ([a4056bf](a4056bf))
* prevent build failure when metadata service is inaccessible ([951f462](951f462))
* prevent infinite loop in TrustPortalSwitch by updating useEffect dependencies ([5f28201](5f28201))
* Prisma seed command in `packages/db` ([a9957cd](a9957cd))
* properly separate app env vars from infra env vars ([55aa5d6](55aa5d6))
* refine directory creation logic in Windows script ([bfbfca0](bfbfca0))
* refine directory existence checks and logging in Windows script ([37ea28b](37ea28b))
* refine directory handling and logging in Windows script ([3982150](3982150))
* remove duplicate dependsOn key ([#1426](#1426)) ([9035238](9035238))
* remove duplicate import of HealthModule in app.module.ts ([e02a51c](e02a51c))
* resolve CodeBuild database connectivity issues ([04b1555](04b1555))
* resolve YAML syntax error in buildspec.yml ([a458015](a458015))
* restore import of environment variables in Next.js config ([1e01ae4](1e01ae4))
* restore prebuild script in package.json for Prisma client generation ([4850e68](4850e68))
* Restrict member management actions to Owner/Admin roles ([260131d](260131d))
* set controller versioning to VERSION_NEUTRAL for API consistency ([9ede4e8](9ede4e8))
* simplify Prisma extension to copy generated client to correct location ([556bd17](556bd17))
* streamline elevation process in Windows script for clarity ([2705540](2705540))
* streamline script structure and enhance logging in Windows script ([e9a5afd](e9a5afd))
* Type errors ([ec77b2f](ec77b2f))
* **ui:** Align Employee breadcrumb and highlight People tab ([97c353b](97c353b))
* update assetPrefix configuration to ensure proper URL handling in production ([3487041](3487041))
* update BINARY_TARGET for Prisma extension ([639ac5e](639ac5e))
* update Dockerfile to remove unnecessary bunfig.toml copy ([05193c1](05193c1))
* update invitation email domain configuration ([04579b0](04579b0))
* update marker file handling in Windows script ([fe37a73](fe37a73))
* Update member role check ([3848a65](3848a65))
* update OpenAI model in onboarding and policy helpers for consistency ([fcb070f](fcb070f))
* update Prisma extension to properly handle generated client location in Trigger.dev deployment ([a53cb42](a53cb42))
* update registry path formatting in Windows script ([d48ea60](d48ea60))
* update role query in onboard-organization to use 'contains' for owner ([af9f1c3](af9f1c3))
* update role validation in InviteMembersModal to prevent admin and employee overlap ([#1485](#1485)) ([18f3440](18f3440))
* update S3 bucket name environment variable ([1cc4fb2](1cc4fb2))
* update S3 bucket name environment variable ([74b98bc](74b98bc))
* update typecheck:ci filters to correct package names ([dc8f93b](dc8f93b))
* use dynamic port variable for database connection strings ([f1f6030](f1f6030))
* Validate user role for adding employee ([194b462](194b462))
* Validate user role when revoking invitation ([7263791](7263791))

### Features

* add @ai-sdk/rsc package and update imports ([15d7d66](15d7d66))
* add advanced mode functionality for organizations ([#1503](#1503)) ([04a9e26](04a9e26))
* add API endpoint to approve organizations for QA team ([3b526b4](3b526b4))
* add API endpoint to delete users for QA team ([89a6d16](89a6d16))
* add BETTER_AUTH_URL to environment variables and buildspec validation ([a767884](a767884))
* add buildspec and deployment scripts for application ([1722e2e](1722e2e))
* add debug scripts for ECS and CodeBuild log retrieval ([02b7df5](02b7df5))
* add delete confirmation dialog to CommentItem component ([a94ecd7](a94ecd7))
* add department column to policies table ([#1499](#1499)) ([cff6bc9](cff6bc9))
* add deployment verification script for ECS ([eee55f6](eee55f6))
* add Dockerfiles for app and portal services ([98efb51](98efb51))
* add E2E and unit testing workflows ([e1f0f7b](e1f0f7b))
* add Font components to email templates for improved typography ([e2059a6](e2059a6))
* add geo field to onboarding process ([fd74000](fd74000))
* add header value sanitization for S3 metadata ([d582d40](d582d40))
* add Husky hooks for commit message validation and pre-push checks ([99fffad](99fffad))
* add migration for JWKS table to support JWT authentication ([9cc1f88](9cc1f88))
* add NEXT_PUBLIC_API_URL environment variable ([f31ee34](f31ee34))
* Add PDF view for policies ([#1451](#1451)) ([c4e52fc](c4e52fc))
* add Prisma client generation task and update build dependencies ([e0061c0](e0061c0))
* add progress bars to ComplianceOverview for improved visibility ([d84daeb](d84daeb))
* add required Next.js environment variables with proper validation ([3d10913](3d10913))
* add risk and vendor action components and regeneration functionality ([6b7d3a4](6b7d3a4))
* add shouldGenerateTypes option to PrismaExtensionOptions ([cbc1d36](cbc1d36))
* Add sorting options for organization list ([bcf4434](bcf4434))
* add TCP connectivity debugging to buildspec ([804bcb3](804bcb3))
* add TipTap content validation utilities for AI-generated content ([9d0437e](9d0437e))
* enable cross-subdomain cookies for authentication ([e7d8521](e7d8521))
* enable dynamic rendering and set revalidation for layout component ([27f2555](27f2555))
* enhance content validation by removing empty text nodes ([ba735e4](ba735e4))
* enhance control status logic and onboarding process ([4e00985](4e00985))
* enhance delete user API to require email for user deletion ([4548a0c](4548a0c))
* enhance DeviceAgentAccordionItem for macOS support and update download handling ([ebff53e](ebff53e))
* enhance download agent with improved error handling and configuration ([900d99a](900d99a))
* enhance editor functionality with linkification and configurable extensions ([5bb1f94](5bb1f94))
* enhance Fleet label creation and error handling ([8f84460](8f84460))
* enhance framework compliance tracking and UI ([c566a01](c566a01))
* enhance GitHub OIDC module to support existing provider usage ([9212589](9212589))
* enhance HybridAuthGuard and update authentication interfaces ([3868a3e](3868a3e))
* enhance invitation handling and user redirection ([e3fb7d3](e3fb7d3))
* enhance MemberRow component and onboarding task updates ([41f8006](41f8006))
* enhance onboarding process with local development support ([a7fab14](a7fab14))
* enhance onboarding tasks with increased concurrency and retry logic ([362cef8](362cef8))
* Enhance PDF handling in policy viewer ([#1476](#1476)) ([c005b3e](c005b3e))
* enhance policy management with regeneration and UI improvements ([c4b4c0d](c4b4c0d))
* enhance Prisma client generation and application secrets management ([d44cfa3](d44cfa3))
* enhance Prisma client generation process with detailed logging ([a9210a8](a9210a8))
* enhance Prisma exports and update db:generate script ([2d6195d](2d6195d))
* enhance PrismaExtension to resolve and copy schema from @trycompai/db package ([8bd0263](8bd0263))
* enhance schema resolution in PrismaExtension for monorepo support ([c413f6f](c413f6f))
* enhance ToDoOverview component with dynamic tab selection ([e03f402](e03f402))
* implement attachment download functionality and metadata retrieval ([dde6d48](dde6d48))
* implement auto-resizing for TaskBody textarea ([758cbb2](758cbb2))
* implement comments and attachments functionality in API ([51162ac](51162ac))
* implement control creation functionality with UI integration ([#1497](#1497)) ([943a7d3](943a7d3))
* implement CORS and security headers for API routes ([35aaeb1](35aaeb1))
* implement DynamicMinHeight component for responsive layout ([09f52cf](09f52cf))
* implement JWT authentication and update related components ([2786ef6](2786ef6))
* implement optimistic updates for comments and task attachments ([7fe5669](7fe5669))
* implement publish all policies action and UI components ([52afe86](52afe86))
* implement risk and vendor mitigation tasks ([da94ecc](da94ecc))
* implement session-based JWT retrieval in ApiClient ([33af882](33af882))
* implement TriggerTokenProvider for access token management ([6812f39](6812f39))
* improve invite page handling and user feedback ([eb9bcab](eb9bcab))
* **infra:** add NEXT_PUBLIC_PORTAL_URL to applications configuration ([bdd5f5f](bdd5f5f))
* **infra:** add source version to build system configuration ([424f6ad](424f6ad))
* **infra:** add STS VPC endpoint for IAM role assumption ([b5a70c4](b5a70c4))
* **infra:** enhance application container to support dynamic secret management ([b5a7ee7](b5a7ee7))
* **infra:** enhance build and deployment configurations for applications ([67fc172](67fc172))
* **infra:** enhance build system to include required secrets from AWS Secrets Manager ([7de1d6c](7de1d6c))
* **infra:** implement SSL certificate management and DNS validation ([da41e90](da41e90))
* **infra:** refactor application secrets management to support individual secrets ([72b00d4](72b00d4))
* **infra:** refactor build system to improve environment variable handling ([cc53704](cc53704))
* initialize API module with NestJS structure and essential configurations ([2ea50d2](2ea50d2))
* initialize Pulumi infrastructure for Pathfinder app ([3cc14fa](3cc14fa))
* integrate Prisma client and update database schema handling ([81c4c3a](81c4c3a))
* integrate Prisma client generation and update imports for local usage ([e7cbc8f](e7cbc8f))
* introduce custom PrismaExtension for enhanced schema handling ([856f869](856f869))
* New & improved dashboard ([38ce071](38ce071))
* optimize build process with parallel processing and enhanced caching ([7276586](7276586))
* optimize width calculation in ToDoOverview component ([6e55979](6e55979))
* read app environment variables from apps/app/.env ([b49fb1c](b49fb1c))
* simplify Prisma exports and update db:generate script ([b6f9757](b6f9757))
* streamline policy generation by directly producing TipTap JSON ([1c799e2](1c799e2))
* Support opening policy in new tab for easier navigation ([42c2626](42c2626))
* support protocol-less links in comments ([a5f124b](a5f124b))
* update AddFrameworkModal to make organizationId optional ([d742463](d742463))
* update API client and auth utility to use Bearer token authentication ([1d95394](1d95394))
* update auto-pr-to-main workflow to include new chas/* path ([861eb35](861eb35))
* update dependencies and enhance onboarding process ([59db96d](59db96d))
* update DeviceAgentAccordionItem to enhance user guidance for macOS and Windows ([ec1876c](ec1876c))
* update OpenAI model and enhance TipTap JSON schema for policy updates ([79c5f2a](79c5f2a))
* update policy signature requirement and dependencies ([bfdbb15](bfdbb15))
* update publishAllPoliciesAction to use parsedInput for organizationId ([67741b4](67741b4))
* update S3 key handling for fleet agent downloads ([9a5ab4f](9a5ab4f))
* update SingleControl component and enhance control status logic ([4287fec](4287fec))
* Update tasks on top level ([3cb06d6](3cb06d6))
* update Trust Portal to include HIPAA compliance framework ([bde32c4](bde32c4))
* use PULUMI_PROJECT_NAME as environment identifier ([29fed1e](29fed1e))
* Vendor delete button ([e98926a](e98926a))

Author: semantic-release-bot