TechFix Guides

What's New

Release and development history. Follow new features, improvements, fixes, testing, and the ideas behind TechFix Repair Assistant.

Security

Pre-Production Security and Reliability Hardening

Completed the final staging hardening pass for environment isolation, migration consistency and protected editorial operations.

Read details
  • Enforced fail-closed separation between Stripe sandbox and live configuration. Server operations now verify both the configured key mode and the livemode state of prices, customers, checkout sessions, subscriptions and financial events.
  • Made the canonical application URL mandatory and HTTPS-only for deployed production environments while retaining narrowly scoped, exact Vercel Preview origins for authentication requests.
  • Reconciled the recorded Supabase migration history and added idempotent care-reminder creation, including repeated custom tasks without a template.
  • Removed the Branch Preview hostname from database review-evidence logic. Evidence attachment now passes through a server-verified, service-role-only bridge that independently requires the verified actor, staff authorization and AAL2.
  • Enabled leaked-password protection in staging Auth and reviewed RLS, private Storage and SECURITY DEFINER exposure. Public read functions remain intentionally limited; mutation paths retain account, staff or service-role checks.
  • The final branch commit passed the complete CI workflow, reached a READY Vercel Branch Preview and returned an exact healthy status. Production configuration, data and domains remain unchanged until the separate production target and final Go/No-Go are confirmed.
Testing

Physical Backup Recovery and Deployment Rollback Validation

Completed an isolated recovery exercise covering database, Auth, private Storage objects and a compatible application rollback.

Read details
  • Restored an isolated Supabase project from a physical backup and reconciled representative protected content, Storage metadata and schema migrations against the source.
  • Rehydrated protected Storage content required for the isolated recovery exercise and re-established environment-specific authentication and API configuration.
  • Verified account sign-in, repair history, a protected draft, row-level access controls and private-asset delivery through the Branch Preview using an isolated non-production identity.
  • Built and tested an earlier compatible application commit against the recovered project, then returned the Branch Preview to the current commit. Production was not changed.
  • Measured approximately 7 hours 20 minutes of restore-point age, three to four minutes for database-project readiness and approximately 3 hours 2 minutes for the complete manual operational exercise. These observations are not contractual service levels.
Testing

Offline Recovery and Accessibility Acceptance Completed

Completed the responsive, keyboard, zoom and network-loss acceptance checks for the Branch Preview.

Read details
  • Verified the supported mobile and tablet layouts and the desktop account workspace without changing production.
  • Verified keyboard navigation, main-content focus behavior and 200% zoom on the current Preview implementation.
  • Simulated an offline profile save, confirmed the application displayed a clear uncertain-write warning and did not retry the write automatically.
  • Restored connectivity, reloaded the saved profile state and completed one explicit retry with unchanged values. UAT Block 10 is recorded as PASS.
Bug Fix

Corrected Renewal Status for Canceled Subscriptions

Canceled subscriptions no longer display a contradictory message that future renewal is on.

Read details
  • The account retained its confirmed paid-access date, but the settings page previously derived the renewal message only from cancel_at_period_end.
  • The display now treats canceled subscriptions as renewal off, keeps active, trialing and past-due renewable states explicit, and uses a neutral message for non-renewable intermediate states.
  • Regression tests cover canceled, active, incomplete and scheduled-cancellation states. No Stripe subscription, payment or billing record is changed by this presentation fix.
Testing

Community Contribution Workflow Acceptance

Completed the staging contribution path from explicit terms consent through editorial review, publication and reader verification.

Read details
  • Finalized the approved Contribution Terms page and authenticated PDF while keeping the visible editor link concise and accessible.
  • Verified immutable submission snapshots, explicit rights consent, administrator review and publication using isolated staging content.
  • Verified the published guide for a separate reader and retained the withdrawal and former-member attribution safeguards.
  • The exercise used temporary UAT content on the Branch Preview. It did not publish a production guide or activate unrelated creator and rewards programs.
New Feature

What’s New and Account Notifications

Implemented a public development history and an account notification centre, with separate personal events and product updates.

Read details
  • Read the complete English history without signing in, including clearly identified planning and testing milestones.
  • Signed-in users can track read and unread updates. Eligible subscribers and administrators also see their own existing account notifications.
  • Administrators can preview, publish, schedule, edit, archive and pin updates. Edits retain an audited revision history.
  • The historical import does not send emails or push notifications and does not generate a backlog of unread alerts.
Improvement

Privacy and Operator Information Improvements

Implemented the approved separation between the TechFix Guides support page and the operator’s legal identification.

Read details
  • Removed the operator name, registered address and business identification number from Contact while preserving support email and account feedback.
  • Added a publicly accessible Operator Information PDF generated on the server from the current operator configuration.
  • Added direct access from the footer, legal documents and the subscription selection flow.
  • The Czech sole trader remains the service operator. Stripe billing and the payment model are unchanged.
Bug Fix

Improved Account Deletion and Data Retention

Implemented stronger account closure verification and documented choices for published community guides.

Read details
  • Added a secure account deletion flow with fresh authentication and email confirmation, plus MFA verification when enabled.
  • Users can retain or request withdrawal of their published community guides. Published guides are retained by default with former-member attribution.
  • Added protection against unauthorized account deletion and safeguards for subscription cancellation and account closure.
  • Updated contribution and data retention documentation and expanded automated authentication, billing and database security tests.
Security

Improved Community Guide Submission

Implemented versioned terms and stronger submission safeguards. Contribution submission remains disabled pending activation.

Read details
  • Added versioned contribution terms and explicit consent handling before submission for review.
  • Added protection against bypassing review, with clearer errors for conflicts and configuration problems.
  • Preserved unsaved editor content when a submission cannot be completed.
  • Expanded tests for guide submissions and permissions. These safeguards do not activate the contribution workflow or disabled author programs.
Testing

Community Guide Editor Testing

Testing focused on autosave, revisions, reader preview and content persistence.

Read details
  • The editor testing milestone covered saving work, retaining revision state and checking the reader preview.
  • This historical record identifies the testing scope; it is not a claim that every guide or editorial workflow passed acceptance.
Bug Fix

Care Reminder Fix

Fixed reminder displays to use the task’s saved timezone, including daylight-saving changes.

Read details
  • The saved deadline was correct; the display had used the server timezone.
  • Care and overview displays now format the stored instant in the saved timezone. Existing deadlines and recurrence rules were preserved.
  • Automated cases cover daylight-saving boundaries, UTC, offset timezones and calendar rollover.
Improvement

Subscription Improvements

Improved Checkout, cancellation handling and scheduled billing-period changes.

Read details
  • Refined subscription cancellation handling and the display of billing state.
  • Improved scheduled plan changes and renewal-anchor handling while preserving the existing billing model.
  • Implementation and automated regression evidence are recorded in the billing fix documents; this entry does not certify every live payment scenario.
Testing

User Account and Access Testing

Testing focused on account roles, permissions and subscription access.

Read details
  • Reviewed the separation between regular accounts, subscriber access and editorial roles.
  • Recorded account and access testing as a development milestone, without implying complete production acceptance.
Security

Administrator Security

Strengthened the separation of administrator roles and MFA-protected editorial access.

Read details
  • Administrative and editorial operations use explicit role checks.
  • Privileged operations require the existing verified MFA session. Regular accounts do not gain administration access through UI navigation.
Bug Fix

Authentication Fixes

Worked on registration, email confirmation and password reset reliability.

Read details
  • The historical milestone covers registration and confirmation flows together with password reset handling.
  • Follow-up password reset changes are documented separately on 23 October; the history does not move that later fix to this earlier date.
Development

First Working Staging Environment

Connected the application’s staging environment to Vercel, Supabase and the configured email service.

Read details
  • Applied the initial database schema and seed without inventing an administrator or publishing draft guides.
  • Verified staging HTTP responses, migration execution and database access controls.
  • The staging verification record explicitly separates these checks from end-to-end registration, MFA and payment acceptance.
Research & Planning

Creator Commission Program — Proposal

Explored a creator commission program as an initial concept. It was not implemented or activated.

Read details
  • Considered a future commission-based creator collaboration model.
  • This entry records a proposal only. It does not announce commissions, payouts, eligibility or a change to the current payment model.
Development

Source Import Completed

Imported the v2.2 source, documentation, migrations and original artwork.

Read details
  • Preserved the supplied brand artwork alongside application code and database migrations.
  • The imported specification describes intended capabilities; importing it does not activate disabled programs or prove completion of every acceptance criterion.
Development

Development Repository Created

Established GitHub source control for TechFix Repair Assistant.

Read details
  • Created the development repository to track application changes and deployment history.
  • Source control became the reference for subsequent implementation and fixes.
Development

First v2.2 Implementation

Prepared the initial v2.2 application source, database and user interfaces.

Read details
  • Implemented the initial application structure and database workflows described by the v2.2 specification.
  • Creator, contributor reward and AI review programs remained gated; implementation did not enable those programs.
Research & Planning

v2.2 Specification — Video Creator Program

Planned video creator collaboration, invitations and public creator badges in the v2.2 specification.

Read details
  • Specified versioned creator offers, delivery review and administration of video collaboration.
  • Public creator status and badges require separate approval and consent. These were specification decisions, not an announcement of an active program.
Research & Planning

v2.1 Specification — Contributor Levels and Rewards

Planned community contributor levels and a separate rewards framework.

Read details
  • Defined the direction for contributor recognition, review trust and eligible annual renewal benefits.
  • This specification milestone does not activate rewards, automatic discounts or contributor privileges.
Research & Planning

v2.0 Specification — Community Guides and Visual Identity

Expanded the concept to community guides, assisted review and a consistent visual identity.

Read details
  • Planned community contributions and a structured editorial review process.
  • Proposed AI-assisted review and brand design requirements. This planning milestone does not mean AI review was activated.
Research & Planning

v1.0 Specification — Repair Assistant

Defined the initial interactive repair assistant, subscription access and maintenance reminders.

Read details
  • Outlined guided repair flows and a subscription-supported service.
  • Included recurring device care and reminders as part of the initial product direction.
Research & Planning

Birth of TechFix Repair Assistant

Developed the first product idea, working name and repair-assistance concept.

Read details
  • Focused the concept on clear, step-by-step help for everyday technology problems.
  • Established the starting point for the later specifications and implementation.
Research & Planning

TechFix Apps Lab — Initial Concept

Explored an ecosystem of practical SaaS applications under the TechFix brand.

Read details
  • Considered how complementary tools could support everyday technology needs.
  • This was an ecosystem concept, before the specific Repair Assistant implementation.
Research & Planning

Initial SaaS Research

Investigated opportunities for subscription-based software services.

Read details
  • Researched potential SaaS directions and recurring-service models.
  • This research preceded the product naming, specifications and implementation milestones.