Bizigo

Money got a spine. A new **charges ledger** (`Charge` / `ChargeLine` / `PaymentAllocation` / `ChargeAuditLog`, with a backfill migration) replaces the ad-hoc debt math: checkout, credit notes, appointment settlement and the ZCredit path all write through it, payments allocate against charges rather than documents, and **customer credit** is a spendable balance on both web and mobile — bounded, account-scoped, shown on the invoice as "credit applied / balance due", and reconciled with appointments when it's spent. Clinics that don't issue fiscal documents get a **documents-enabled toggle** that consistently hides receipts, fiscal drafts and fiscal document types across web and mobile. **Price quotes** ship as a document type of their own: six themes, a full editor, customer-less quotes, email/WhatsApp delivery, a tokenized public page, and a path straight into checkout. **Recurring appointments** land end to end — a DST-safe recurrence expander, `AppointmentSeries`, this-and-future splits, scope-aware delete, real EXDATEs for skipped occurrences, and an authoritative per-provider conflict check behind advisory locks — with UI on web and mobile. Migration off Easybizy became a product: a new **Bizigo CLI** (`apps/cli`) plus `@bizigo/easybizy-migration` drive a resumable, reviewable, task-list-based import of customers, catalog, appointments, leads, files, photos and financials, with a pre-flight that asks about every predictable problem before writing anything, and a SUPER_ADMIN console to watch runs. Commercially, Bizigo now meters itself: **plan packages, usage limits and overage** with a metric registry, nightly gauge snapshots, monthly period close, an admin usage/plans console, a public **/pricing** page, and a plan-selection step in signup. Clinically, **medical records** gained attachments (with thumbnails) and prefill templates on both platforms, and the web app gained a **clinical-photos workspace** — sessions, uploads, an annotation editor with draggable strokes, compare and sharing. **Forms** got a signature overhaul (per-role signature blocks, per-user saved staff signatures, auto-apply at submit, per-block answers) and full client-side validation of the server's own rules. Messaging can now **search inside message content** at the database level with highlighted matches, and the send pipeline was hardened for scale: at-most-once CAS claims, a dedicated campaign queue, batched sends, Twilio status callbacks moved to pg-boss, and a dry-run stress harness that surfaced a ~1% recipient drop and several campaign-resume bugs. Plus **Shabbat/holiday-aware scheduling**, **document delivery to the clinic's bookkeeper**, an **Israeli egress proxy** so Tax Authority calls stop getting geo-blocked, an **account-activity** admin view, and a broad security pass that closed several public-token endpoints leaking the customer relation graph.