Version 7.2.0
Security and Billing Update
- Security: important fixes for payment top-ups, identity (KYC) documents, keeping each customer's AI-agent data private, URL import and password-reset links - every installation should upgrade
- Security: payment notifications are refused unless the gateway's webhook secret is set - set yours under Admin > System Configuration
- Changed: Twilio SMS are now charged at your SMS rate - they were never charged before
- Changed: monthly number rental is now charged every month, as intended - it stopped after the first month
- Added: a campaign shows, and lets you choose, the AI agent that takes its calls
- Added: "Reset telephony" can end the calls and campaigns that would otherwise block it
- Added: a Stripe webhook signing secret field in System Configuration
- Added: APP_TRUSTED_HOSTS for sites that answer on more than one domain
- Fixed: Razorpay webhooks credit the top-up they paid for
- Fixed: a top-up in another currency is refused when the exchange rate cannot be fetched
- Fixed: the AI-agent calls CSV export
- Fixed: Plivo setup failed when the site name contained a space
- Fixed: an AI-agent campaign no longer demands a message or audio file before it can launch
- Fixed: applying a campaign template always selects a campaign type
- Changed: only one backup copy of .env is kept, and ENV_BACKUPS=false turns it off
- Changed: the download unpacks straight into your site's folder - app, public, vendor and the rest
- Upgrading? Read CHANGELOG.md in the download first. This release starts charging for Twilio SMS and monthly number rental.
Version 7.1.0
Dual Telephony Provider - Twilio or Plivo
- Added Plivo as an alternative to Twilio - choose one during installation and the app locks to it
- Plivo works across campaigns, the browser softphone, inbound calls, recordings, keypad menus, two-way SMS, AI voice agents, number purchase, KYC phone verification and the inbound call queue
- Added a telephony step to the install wizard and a Telephony page in the admin panel
- Existing installations stay on Twilio automatically - nothing you have set up moves
- Added Plivo webhook signature verification, matching the protection Twilio calls already had
- Fixed: campaign calls to an AI voice agent, which had been failing on every installation since December 2025 - they now run as real conversations, and are charged for their real length
- Fixed: long SMS messages are billed per segment instead of as a single message
- Fixed: AI-agent call records now close, so profit reporting shows the true margin
- Fixed: AI agents no longer forget the conversation after about three exchanges
- Fixed: one exchange with an AI agent was counted three times in turn counts and CSV exports
- Fixed: a call still connected after five minutes is no longer marked failed and the contact re-dialled while the first call is up
- Fixed: an inbound call queue owned by a customer now connects callers to agents
- Fixed: two agents can no longer be handed the same waiting caller
- Fixed: follow-up sequences - the list, the editor and contact enrolment failed on every MySQL installation, and the detail page failed on every installation
- Fixed: creating a campaign through the REST API failed on every MySQL installation
- Fixed: failed SMS sends are reported as failed, and more delivery states are recorded
- Fixed: signing out now disconnects the browser softphone
- Fixed: an AI agent set to transfer with no transfer number no longer drops the call with an error
- Fixed: a repeated provider notification no longer re-runs the AI model and bills twice
- Changed: cost lines read "Telephony:" instead of naming the carrier
- Changed: twilio:fetch-pricing is now an alias of pricing:fetch - existing cron entries need no edit
- Changed: the REST API reads and writes campaign type as tts / audio everywhere - responses, embedded campaigns and filters - as the API documentation always promised
- Upgrading? Read CHANGELOG.md in the download first. Some of these repairs change what you are billed.
