## 2026.10.19

### Highlights

- An owner connects Xero, Flow copies its contacts and items, and Flow sends issued invoices to Xero as drafts. (#32, #33, #36)
- Seazona orders come into a billing ledger through a rate-safe client. (#27, #35, #37)
- The sign-in page and every auth route are rate-limited. (#28)

### Changes

- Create an integration's tables only when it is turned on. (#25)
- Let an integration adapter start its own work at server start. (#29)
- Xero adapter settings, rate-limit governor and API client, with replay mode. (#26)
- An owner connects Xero, and Flow keeps its refresh token encrypted. (#32)
- Seazona API client and shared rate governor. (#27)
- Copy Xero contacts and items into Flow for invoice preparation. (#33)
- An issued invoice records the item code of each line. (#34)
- Seazona sync lanes with per-order failure rules. (#31)
- Seazona adapter on the integration port, with a live-only sync and health. (#35)
- Send issued invoices to Xero as draft invoices, with a free preview. (#36)
- Keep billable jobs in a billing obligation ledger with evidence. (#24)
- Xero answers the billing ledger: invoice lookup and payments. (#38)
- Seazona feed items map onto the billing obligation ledger. (#37)
- Import from the earlier codebase, and sign-in fixes for Replit. (#30)

### Fixes

- Rate-limit the sign-in page and every auth route. (#28)

### Complete contribution record

This audited record covers the complete 1d004b55fb4318b90483f64d3c2fe9e3014ae300..92ff2930532a9603a2b8943b04cce9f51641aa14 history: 16 in-range PRs + 0 retained seed-only PRs = 16 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

#### Pull requests

- **PR #25** Related #13.
- **PR #28**
- **PR #29**
- **PR #26**
- **PR #32**
- **PR #27**
- **PR #33**
- **PR #34**
- **PR #31**
- **PR #35** Related #12.
- **PR #36**
- **PR #24**
- **PR #38**
- **PR #37**
- **PR #30**
- **PR #41**