What changed, in order

Adds three scoped portals so each party sees only its own case information. Examinees see appointment details and rights, examiners see briefs and availability, and referrers see report status. Commit 080d771.

Makes navigation react to the signed-in role. Coordinator, reviewer, examiner, and admin each see the sections they can act on. Commit 23f6c0b.

Adds workspace invites and member management so an admin can add teammates, assign roles, and revoke access. Commit 32c5a75.

Enforces tenancy at the platform, workspace, and case tiers and checks permissions on every request. Commit db94ec1.

Removes the scheduled intake poll and replaces it with an explicit refresh action the coordinator controls. Commit 10038e9.

Connects the intake queue to the case lifecycle and extends session length so a coordinator does not lose context mid-review. Commit eab9089.

Documents the staging test users and the steps to sign in and exercise the workflow without touching production data. Commit 56282a3.

Pins the safe part of CI to the Dell runner so builds use the private runner for steps that need it. Commit 23d5f5e.

Moves referral extraction to Workers AI inside the Cloudflare account and removes the external Cohere call. Keeps medical content in region. Commit 3a25445.

Cancels prior CI runs for the same branch when a new push arrives, so runners do not waste time on stale commits. Commit 2310530.

Adds the changesets scaffold that the Release workflow expects, so the version step no longer fails on a clean branch. Commit b2f564a.

Removes OCR provider code that could no longer be reached after the move to in-account Workers AI. Smaller surface, fewer branches. Commit 0d4dd3f.

Fixes a path where the OCR step returned an empty result. The queue now returns the text that Workers AI produced. Commit 123cacd.

Moves the attachment OCR call into the queue consumer so large files do not block the request and can retry cleanly. Commit e21550f.

Connects the AI provider for each environment so the OCR path resolves at runtime on staging and on prod. Commit 4f3f5b6.

Adds an OCR provider that calls Workers AI through the Cloudflare account, so no external token is exposed to the file. Commit 69dd989.

Detects when two email threads name the same claimant with conflicting facts and flags the case for the coordinator to review. Commit d88423a.

Adds a viewer that shows the source email or document beside the extracted fields, with highlights on the spans the model cited. Commit 5aee033.

Takes attachments from the referral email and feeds them into the records pipeline for OCR and indexing, so loose PDFs do not stay in the thread. Commit 0563f98.

Fixes the Microsoft Graph token refresh to omit the scope parameter, so a scope change on the app does not invalidate existing refresh tokens. Commit bba74c2.

Passes the email subject into the extractor so a reply that carries the referral details only in the subject still populates the case. Commit 8e5172e.

Requests the Mail.ReadWrite Graph scope so the poll can mark a message as read after it is ingested. Commit 7f371ff.

Looks for the D1 unique-constraint error on the cause chain, not only on the top-level error, so duplicate intakes are reported correctly. Commit 4d73978.

Sorts polled mail from oldest to newest so a follow-up lands on the case that the original already opened. Commit d0511c0.

Groups intake emails into threads and applies follow-up messages as updates to the existing case, rather than opening a duplicate. Commit 04f6d8a.