Church+ 1.3 (in progress) — "People Power Tools" (Module 2)
Released incrementally. First slice below.

v1.5.0 — Module 2 complete (merge duplicates + advanced search)
  - Module 2.5 Merge duplicates (Administration -> Merge Duplicates, admin
    only): finds likely duplicates by name, email, or phone, or merge any two
    manually. Side-by-side compare, pick the survivor, and all gifts,
    attendance, group memberships, notes, and custom-field values move onto
    it; blank survivor fields can be filled from the other profile. Handles
    shared groups/events/fields without duplicating, promotes the survivor to
    leader if the duplicate led a shared group, runs in one transaction, and
    is fully audit-logged.
  - Module 2.3 Advanced search (Ministry -> Advanced Search): combine status,
    gender, city/state, group membership, custom-field value, giving activity
    (finance roles), and attendance recency (incl. a "lapsed since" filter).
    Save any result as a named List, reusable in the Print Center.
  - Migration 004 (member_lists, member_list_members). Print Center gains a
    "saved list" audience.
  MODULE 2 IS NOW COMPLETE (2.1 custom fields, 2.2 groups, 2.3 search,
  2.4 notes, 2.5 merge, 2.6 timeline).

v1.4.0 — Module 2 "People Power Tools" (groups, notes, timeline)
  - Module 2.2 Groups & Ministries: real group records (Ministry, Leadership
    Group, Class, Committee, Other) with leaders, rosters, add/remove from
    either the group or the person, bulk transfer (move or copy), printable
    roster, and a one-click import of the legacy ministries text field.
  - Module 2.4 Notes with privacy levels: per-person notes with a category
    (General, Prayer Request, Pastoral, Health) and visibility. PASTORAL AND
    HEALTH NOTES ARE ADMIN-ONLY — never shown to staff or viewer roles and
    never included in any export. Health/Pastoral category forces admin-only
    visibility automatically. Every note records author and date.
  - Module 2.6 Activity timeline: one chronological stream per profile —
    attendance, gifts (finance roles only), group joins, and notes.
  - Migrations 002 (groups) and 003 (member_notes).
  - Fix: custom fields (2.1) now show to all roles, not only finance/admin.
  Still to come in Module 2: 2.3 Advanced search and 2.5 Merge duplicates,
  shipping as the next release (2.5 is destructive, so it gets its own).

v1.3.0
  - Migrations runner (scripts/migrate.php) + schema_migrations tracking.
    Every release from here that changes the database ships numbered
    sql/migrations/NNN_*.sql files; run `php scripts/migrate.php` per church.
  - Module 2.1 Custom Profile Fields: admins define their own fields under
    Administration -> Profile Fields (text, long text, date, number,
    dropdown, checkbox, file attachment). Fields render on the member form
    and profile automatically. Reorder, hide, edit, or delete; hiding keeps
    saved data, deleting removes it.

Church+ 1.2 — Production Release
Released: June 2026

Consolidated cumulative build. Includes everything from v1.0, the v1.1
session/logo patch, and the full v1.2 module set. This is the complete,
market-ready codebase — clone it as your Master template.

Cumulative changelog
---------------------
v1.2 (current)
  - Caching disabled platform-wide; updates are visible immediately
  - Church+ brand logo (header + login); church's own logo moves to top-right
  - Member profile photos (profile, People list, printable directory)
  - Edit and delete across every module (people, families, attendance,
    gifts, funds, staff accounts), each confirmed and audit-logged
  - Print Center: directory, Avery 5160/5161/5163 labels, 5395 name tags,
    QR code sheets, mail-merge letters
  - Import Data: people & gifts CSV, matched by envelope number or exact
    name, preview-before-commit, transactional with rollback; accepts common
    date formats (MM/DD/YYYY, 2-digit years, spelled-out months)
  - State dropdown, Title dropdown, phone auto-format, ZIP validation

v1.1
  - Session save path moved to a private writable dir (fixes "session
    expired" 419 errors on some hosts)
  - Church logo upload in Settings

v1.0
  - People, Families, Giving, Funds, Attendance, Reports (IRS giving
    statements + CSV), Staff accounts with four roles, Dashboard
  - Security: bcrypt, login lockout, CSRF on every form, prepared
    statements, session idle timeout, full audit log
  - Multi-tenant: control-plane admin DB + one database per church,
    routed by subdomain