Versions.

Verification performance correction.

• File transfers can continue while earlier files are checked, with bounded pending verification.
• Parallel S3 range reads verify the complete original without repeated database checks for each small network fragment.

Parallel upload update.

• Up to four gallery files upload concurrently, overlapping transfer and confirmation waits.
• Pause, resume, cancellation and per-gallery destinations remain independent.

Upload performance update.

• Fast filename checks before upload, with Skip duplicates and explicit Replace.
• New cloud uploads send file bytes directly from the browser to private storage.
• Replacements preserve client hiding and keep the previous original until verification succeeds.

Prepared update; installation is separate.

• Private receipt file inbox with batch drag and drop, local document reading and reviewed expense creation.
• Original receipts remain attached to saved expenses. Duplicate warnings and payment confirmation help prevent incorrect entries.
• VPS migration preparation and service/proxy templates.

Maintenance update.

• Maintenance update.

Maintenance update.

• Maintenance update.

Maintenance update.

• Maintenance update.

Prepared from 0.33.4. Read RELEASE-0-33-5.md and TEST-RESULTS.md. Installation remains separate.

• Storage setup logs cover browser clicks, server validation and provider operations with safe correlation IDs.
• Test reports what blocks it rather than silently staying disabled.
• Download a safe report containing browser diagnostics and private server logs without credentials.
• Existing storage cleanup, account permissions, encrypted settings and migration history are preserved.

Prepared from 0.33.2. Read RELEASE-0-33-3.md and TEST-RESULTS.md. Installation remains separate.

• OVH regional or matching bucket endpoints work with supported private-bucket checks and clearer connection errors.
• Administrator MFA is optional, with no repeated factor checks for admin actions; password and owner permissions remain.
• Removed Notes, Admin Finance, Customer Capacity, Diagnostics, Email marketing, Backups, Server Status, Website search visibility and Account retention panels.
• Public website search visibility is always enabled; private pages and files remain protected.
• Ordinary accounts inactive for twelve months receive warning emails and thirty days to sign in before full account purge. Administrators remain protected.

Prepared from 0.33.1. Read RELEASE-0-33-2.md and TEST-RESULTS.md. Installation remains separate.

• Create a separate administrator in the portal without an inbox or email invitation, then choose its password.
• The current owner confirms password and fresh MFA; the new account must complete MFA and Terms before ownership transfer.
• Remove pending user and administrator invitations with setup-link revocation and queued-email cancellation. Existing accounts and licences are preserved.

Prepared from 0.33.0. Read RELEASE-0-33-1.md and TEST-RESULTS.md. Installation, reviewed cleanup and account separation remain explicit web actions.

• New managed media uploads and temporary upload chunks use private object storage without local file staging or a local fallback.
• Owner-managed connection testing, activation and explicit migration of existing media through the web portal.
• Reviewed file-only cleanup can clear protected owner storage while keeping the account, licence and business records.
• Separate platform administration from the original photography account using recipient-owned password setup, MFA and immutable account identities.
• Original photographer business notes, finance and consent-bound marketing remain private to their original owner; demotion removes platform-wide marketing audience access.

Prepared from 0.32.1. Read RELEASE-0-33-0.md and TEST-RESULTS.md for verified scope. Installation and provider activation are separate.

• Gallery drag/drop and whole-batch upload progress, with an explicit workflow gallery checkbox and automatic new-client portal invitation.
• Password-protected published gallery links, sharing without a client, client slideshow, expiry reminders and photographer-chosen permanent expiry deletion.
• Revocable upload-only invitations for other services.
• Encrypted web-managed OVH S3-compatible object storage with local staging, streamed private delivery and immutable file-provider bindings.
• Ultimate adds 2 TB at £79/month with the existing annual discount.
• Owner-reviewed Free, paid-lapse and self-deleted account retention with durable notice and recovery holds.
• Branded itemised invoices and immutable per-job terms/questionnaire tools.

Prepared review corrections and mobile header fix. Read RELEASE-0-32-1.md and TEST-RESULTS.md for current verification. Installation and live restore checks remain separate.

• Gallery writes refresh the same account or client session after reading the request body and reject changed access before committing.
• Failed gallery-share writes roll back their share and queued-mail records.
• Subscription webhooks recheck completed receipts after acquiring the account lease without losing failed-event retries.
• Administration reports test mode, suppressed background workers and missing trusted client-IP configuration.
• A compact responsive homepage header retains both account buttons on small phones.
• Existing gallery/email features, pinned dependency graph, migration bytes, licences and storage are retained.

Prepared email and reference-gallery presentation. The wider release and object storage remain deferred; installation is separate.

• Compact full-width gallery headers and natural-proportion photo grids for client galleries, photographer previews and private gallery shares.
• Shared galleries support keyboard and touch full-screen viewing while retaining their scoped access and original-download permissions.
• Owner-reviewed Resend domain and DNS configuration checks in Admin Email.
• Explicit domain-wide account-email tracking disablement with fresh authenticator and password confirmation.
• Verified provider bounces, complaints and suppressions prevent repeated transactional and marketing sends. Marketing-only unsubscribes remain separate.
• Existing sender settings, campaign pacing, account-email allowance reservations and private provider credentials are preserved.

Prepared from verified 0.30.0. See RELEASE-0-31-0.md, GEOAPIFY-0-31-0.md and TEST-RESULTS.md. Installation remains separate.

• Geoapify road estimates can be enabled for active photographer accounts through encrypted owner-managed Admin integration settings.
• UK postcode-centre estimates calculate outward and return miles independently, with source attribution and no live traffic claim.
• Durable shared daily reservations, per-user limits and request identity protect against repeated provider calls; the owner sees local usage rather than provider billing.
• Backup restore holds routing until the next UTC day; account erasure removes personal routing rows without refilling the shared daily allowance.
• Privacy notice 0.31.0 explains optional routing locations. Manual actual mileage remains separate and is never created automatically.
• No Google integration, new dependency, plan change, automatic provider activation or deferred home-screen job card.

Prepared from verified 0.29.0 for the website review. See RELEASE-0-30-0.md and TEST-RESULTS.md. Installation remains separate.

• Clearer public photography-business wording and a consistent one-month no-card trial journey.
• Seven detailed feature pages and nine searchable getting-started and task guides.
• Public pricing explains current tools, annual totals, trial storage and reviewed plan changes.
• Owner-managed public domain, search visibility and independent AI search/training crawler choices take effect without a rebuild.
• Private content stays protected; no automatic live charging or new customer feature claims.

Prepared from verified 0.28.5. See RELEASE-0-29-0.md and TEST-RESULTS.md. Installation remains separate.

• Removed photographer FTP/SFTP, the private photo editor and homepage editing claims; existing stored photographs and backup destinations are retained.
• Existing manual and complimentary licences are shown without a duplicate checkout prompt.
• Reviewed paid storage upgrades retain the billing cycle and renewal date; downgrades and monthly/yearly changes wait until the paid term ends.
• Account invitations support safe retries and recipient-owned password creation through their original inbox.

Signup and compact upload correction from verified 0.28.4. See RELEASE-0-28-5.md and TEST-RESULTS.md.

• Uploads use a compact bottom-right panel with Hide and Show controls; hidden uploads continue.
• Active and finished transfers have separate views with retained pause, resume, retry and cancellation controls.
• Workspace setup uses a simple Website field.
• Completing the original invitation link confirms the account email without another inbox code, while retaining normal sign-in and MFA.

Verified subscription entitlement repair from 0.28.3. See RELEASE-0-28-4.md and TEST-RESULTS.md.

• Verified Stripe payments activate the selected plan and catalogue storage for every eligible photographer account during the paid period.
• Current plan, billing cycle and storage refresh together after checkout confirmation.
• Existing completed subscriptions are recognised automatically; baseline administrator assignments and trial history are retained.
• Unpaid, expired, canceled, refunded, disputed or unbound records cannot activate subscription access. Stripe remains in test mode; no SQL or dependency changes.

Checkout compatibility repair from verified 0.28.2. See RELEASE-0-28-3.md and TEST-RESULTS.md.

• Uses the supported Stripe card-only checkout parameter.
• Safely recovers cached legacy requests while retaining the pending checkout identity and checking provider history before replacement.
• Existing trial history, storage, encrypted web settings, customer bindings and server test mode are preserved.
• No SQL migration or dependency changes.

Prepared Subscription cleanup and checkout recovery from verified 0.28.1. See RELEASE-0-28-2.md and TEST-RESULTS.md. Installation remains separate.

• Trial, current plan and account details share one responsive card.
• Removed SAR request, plan-comparison header, manual status check and testing labels from Subscription.
• Known pending checkouts recover automatically; expired requests are reconciled before a different plan can be chosen.
• Bounded provider requests avoid long implicit network retries while preserving durable checkout identity.
• Existing accounts, storage, trial history, encrypted settings and server test mode are retained. No SQL or dependency changes.

Prepared pricing and billing update from verified 0.28.0. See RELEASE-0-28-1.md and TEST-RESULTS.md. Installation remains separate.

• Standard pricing buttons say Sign up to this plan and open verified account registration, retaining monthly or annual selection.
• Selected plans survive normal sign-in, authenticator, email-risk and terms checks without granting paid entitlements or restarting trials.
• Enabled Stripe sandbox billing is available to all active verified photographers with workspaces; manual tester selection is retired.
• Disabled or incomplete checkout remains visible with clear guidance. Existing test customers, pending checkout recovery and encrypted settings are preserved.
• One additive registration migration preserves all 54 historical SQL files; no dependency changes or real charges.

Prepared source update from verified 0.27.2. See RELEASE-0-28-0.md, WEB-SETTINGS-0-28-0.md and TEST-RESULTS.md. Installation remains separate.

• Encrypted backups, Zoom app credentials, routing and SFTP settings are managed in authenticated web forms.
• Account invitations use recipient-controlled password-setup links and reviewed Studio testing access with 20 GB; protected owner accounts retain plan, storage and trial controls.
• The private editor imports multiple presets, provides core colour/detail/crop controls and ISO-aware denoise advice, groups similar photographs and exports approved results to an existing gallery.
• Shared upload controls, secure virtual SFTP folders, gallery naming and revocable gallery-only email sharing preserve current tenant and file permissions.
• Booking workflow assets and meetings have clear stages; additional events and timezone-aware rate bands retain separate calendar and invoice evidence.
• Homepage costs are illustrative, animations honour reduced-motion preference and public release history remains in the footer.

Prepared verification hotfix from verified 0.27.1. See RELEASE-0-27-2.md and TEST-RESULTS.md. Installation remains separate.

• Verify authenticator opens a code dialog directly in the owner Subscription billing panel instead of navigating to general account settings.
• The current Stripe draft is retained while the existing authenticator or single-use recovery-code check updates real server proof.
• Settings still require a separate password confirmation and all owner, MFA, risk, session, origin and revision checks. No provider action starts on verification.
• No SQL migrations or dependency changes; existing encrypted Stripe settings, accounts, trial history and uploads are preserved.

Prepared source update from verified 0.27.0. See RELEASE-0-27-1.md, SUBSCRIPTIONS-0-27-1.md and TEST-RESULTS.md. Installation remains separate.

• Admin → Subscription billing gives the configured owner a web setup menu for Stripe sandbox credentials, connection checks, catalogue, billing portal and webhook setup.
• Settings are encrypted on the server; saved settings take precedence over legacy environment values and can be changed without restarting.
• Verified tester accounts are selected in the web panel; enable, disable and backup recovery remain explicit owner actions.
• Sandbox payments remain separate from real plans, quota, trial history and financial records. Client invoice payments are unchanged.
• One additive migration preserves all 49 historical migrations and existing dependency versions.

Prepared source update from the saved 0.26.1 release. See RELEASE-0-27-0.md, SUBSCRIPTIONS-0-27-0.md and TEST-RESULTS.md. Installation and Stripe sandbox configuration remain separate.

• Photographers can test GlassSuite Essentials, Studio and Studio Plus subscriptions through hosted Stripe Checkout with monthly or annual catalogue prices.
• Signed platform webhooks and an authenticated status check confirm current sandbox payment state; browser returns alone never mark a payment confirmed.
• The sandbox billing portal supports payment-method changes, invoice history and cancellation. Access is limited to the configured owner and explicitly allowed test accounts.
• Sandbox subscriptions remain separate from real account plans, manual allowances, the card-free trial and financial records. Live subscription charging and client invoice payments are outside this update.
• Admin can remove an active trial immediately for testing while preserving its used marker and any manually assigned access.
• Privacy export, purge and backup-recovery protections cover the new private test records. One additive migration preserves the 48 historical migration files; no dependency versions change.

Prepared source update from the saved 0.26.0 release. See RELEASE-0-26-1.md and current TEST-RESULTS.md. Installation remains separate.

• Photo adjustments produce a quick preview when a slider is released or a keyboard/number change settles. Full-resolution edits are saved and rendered separately before approval/export.
• The review photo and adjustments scroll within a constrained dialog with visible status and actions. Rapid changes preserve the latest adjustment.
• Vibrance preserves neutral greys instead of introducing a red cast. The preview and full-resolution tone pipelines are checked together.
• The private editor remains a local preset/correction test with advisory checks. This update does not claim learned editing styles, automatic retouching or a complete culling workflow.
• No schema or Node dependency changes. All existing migrations, accounts, uploaded originals, configuration and private access boundaries are preserved.

Prepared source release from the verified 0.25.0 ZIP. See RELEASE-0-26-0.md, AI-EDITOR-0-26-0.md and the current TEST-RESULTS.md. Installation and local runtime setup are separate.

• Private local photo-editor test restricted to two authorised accounts, with dedicated resumable uploads and automatic preview processing after each upload completes.
• Per-account Lightroom XMP preset uploads, selectable batch styles and explicit supported/approximate/unsupported settings. Originals and rejected photographs are retained.
• Sequential CPU processing, advisory culling, before/after review and manual corrections. Approved JPEG/XMP downloads and explicit gallery export; no automatic client publication or notification.
• No commercial upload-count, file-size or editing-credit quotas for the private test. Physical storage checks, resource safety and existing access/MFA/risk/support boundaries remain enforced.
• Completed editor data is included in protected account export, purge and encrypted backup/restore. One additive SQL migration; all 47 historical migration files remain unchanged.
• The optional Python image-processing runtime is installed locally. This source release does not include personal sample photographs/presets, installed libraries or model binaries, and does not claim exact Lightroom rendering or a personally trained editing model.

Prepared from verified 0.24.0 source. See RELEASE-0-25-0.md and TEST-RESULTS.md. Provider configuration and live installation are separate.

• Invoice reminders add reviewed manual chasing, configurable overdue schedules, pause/dispute controls and delivery history.
• Clients can book meetings from available photographer slots, with workflow prompts, calendar reservations and optional photographer-owned Zoom connections.
• Admin announcements, client quick links and private document shares keep portal communication together.
• One-month no-card trials and reviewed opt-in account email automations preserve manual access and never start an automatic charge.
• Sign-in session controls, encrypted incremental hourly backups, public release history and open-source acknowledgements complete the update.
• Stripe invoice checkout uses the maintained SDK, session-bound Connect authorisation, verified payment/refund evidence and replay-safe webhooks. Invitation actions stay aligned when email addresses are long.

Prepared from the verified 0.23.1 source ZIP. See RELEASE-0-24-0.md and this release’s TEST-RESULTS.md. Live installation is separate.

• Owner marketing supports reviewed CSV imports, complete searchable contact lists, segment membership, editable campaigns and templates, previews, owner tests and explicit Send or Schedule. Existing drafts never send automatically.
• Resend Email API delivery shares the account allowance, prioritises account messages, reserves capacity and pauses at provider limits. Durable retries, signed outcomes, individual unsubscribe links and suppression preserve delivery history.
• Routine Admin Inbox messages use one Delete/Cancel confirmation, without a Bin prerequisite or password prompt. Existing bins can still be restored; photographer feedback history stays intact.
• Published blog articles appear in the sitemap with recorded dates. Public FAQs and factual brand/product/article markup improve search and answer clarity; private access and the explicit indexing gate remain protected.

Footer-only hotfix from the verified 0.23.0 release. See RELEASE-0-23-1.md and TEST-RESULTS.md; installation is separate.

• Public information and legal links use compact navigation instead of a block of boxed buttons.
• The brand, navigation and sign-in controls align on desktop and wrap deliberately on tablet/mobile in both appearance modes.
• Instagram, appearance, Cookie settings and keyboard access remain available. Private footers, authentication, data and migrations are unchanged.

Built from the recovered 0.22.0 source. See RELEASE-0-23-0.md and TEST-RESULTS.md for verification. Installation is separate.

• The homepage keeps a concise founder story and portrait, restores the device showcase, and shares a tidy footer with Instagram and consistent social previews.
• Admin uses anchored account actions with direct Ban/Unban, decimal GB storage, and recoverable Inbox deletion. Retired panels and IP banning are removed; passive server monitoring remains.
• Persistent failed-login counters, escalating short lockouts and Turnstile after three failed attempts protect sign-in. New and changed passwords require a capital letter, symbol and common/breached-password checks.
• Account security records sign-ins and sessions; new devices and available geographical risk require additional verification without automatic country bans.
• Durable onboarding records prevent welcome email during email changes. Owner email marketing remains private and draft-only.

Continued from the recovered 0.22.0 development copy and verified with isolated source, build and HTTP checks. See RELEASE-0-22-0.md and TEST-RESULTS.md. Installation is separate.

• Rates can include a booking fee; accepted proposals preserve the fee, balance schedule and cancellation policy. Venue TBC, Project team contacts and itinerary locations support planning.
• Admin gains compact mobile user controls, reviewed bulk actions with failure-only retry, protected administrator invitations, private database snapshots and configured ingress IP bans.
• The owner marketing area records contacts, segments, templates, campaign drafts and suppression. Sending remains disabled.
• Quote acceptance, amendment totals, stale edit rejection, client links, cancelled uploads, durable file deletion and fair bin cleanup address confirmed QA failures.
• Unsaved workspace drafts remain protected during browser navigation; equipment and administrator invitations survive sign-in and MFA. Next.js and Better Auth receive verified maintenance updates.

Prepared from the verified 0.20.0 release. See RELEASE-0-21-0.md and TEST-RESULTS.md. Installation is separate.

• Projects are the working hub, with Today and attention views using green/on-track, yellow/soon, red/customer-waiting and blue/on-hold states.
• Client quote acceptance creates or confirms the linked Project workflow, booking and calendar while preserving the accepted price snapshot and audit trail.
• Assets contains Asset Register and Rentals; rental listings reuse Asset records and no longer present Studio Spaces copy.
• Photographer client-portal preview is unmistakable and disables client-only actions; upload Stop All is scoped to the upload tray.
• Project-linked expenses and mileage feed a concise operational finance summary; Accountant sharing can recommend and guide MFA setup.

Prepared from the verified 0.19.0 release. See RELEASE-0-20-0.md and TEST-RESULTS.md. Installation is separate.

• Autofilled sign-in values survive Remember Me, password reveal and unrelated renders; form submission reads actual browser values.
• A shorter workflow-led homepage with connected job and multiple-app demonstrations, motion controls and readable mobile product views.
• Compact unchanged plan prices, a detailed pricing comparison and a concise roadmap page.
• Assets and Asset Register terminology across the interface, with existing equipment records and internal identifiers preserved.
• Staged CSP, trusted HTTPS-only HSTS and Permissions Policy, retaining authentication, private-route and cookie protections.

Prepared from the verified 0.18.4 release. See RELEASE-0-19-0.md and TEST-RESULTS.md. Installation is separate.

• A prominent Stop all uploads button cancels active and queued transfers, including certificates and receipts; completed files remain saved.
• PAT certificates, validity dates, private calendar renewal actions, hidden certificate types with settings restore, and controlled third-party certificate packs.
• Plain-text photographer terms in client portals and named, expiring, revocable accountant access with selected financial records and optional receipts.
• Hourly equipment rental prices, invitations between existing verified photographers, reserved availability, fixed request prices, delivery arrangements and parcel tracking.
• Animated onboarding, invoicing and equipment workflow illustrations on the website, with reduced-motion support.

Prepared locally from 0.18.3. Read TEST-RESULTS.md for this release verification. Installation is separate.

• New rates choose Photography, Video production or Content creation; categories stay available and change with the service. Older general rates require an explicit service when edited. Existing bookings keep their saved prices.
• Calendar agenda and travel cards, booking surfaces, shared-studio cards, uploads, document panels and plan cards follow dark appearance. Shared control surfaces use independent colour tokens.
• Edit, Archive, Restore and other formerly underlined actions use visible buttons across the application. Future action screens must follow this rule.

Prepared and tested locally with Node 24 and the pinned application dependencies; installation is separate. Read TEST-RESULTS.md.

• Button confirmations replace typing names, email addresses and action words. Password and MFA checks remain for sensitive account operations.
• Deleting a gallery stops active and queued uploads. Its files count towards storage until permanent removal, automatically after 30 days in the bin.
• Calendar and booking dialogs retain unsaved changes after outside clicks, Escape and Close, with a warning and brief shake. Keyboard dates and times work alongside the picker.
• Remembered sessions return straight to the workspace or matching private client portal rather than unnecessarily displaying sign-in forms again.
• Galleries can be created without a client and assigned one later; owner previews remain private. Existing gallery metadata edits and publishing safeguards are retained.
• Recent Activity formats structured booking details as readable amounts, rates and durations. Existing audit evidence remains unchanged.

Hotfix for the 0.18.1 updater build failure; runtime job-kit behaviour is unchanged.

• Fixes TypeScript inference for live Standard-carry kit planning during the Admin updater build.
• No database, pricing, invoice, portal, authentication or kit-behaviour changes from 0.18.1.
• 0.17.0 remains safe to upgrade directly to 0.18.2; 0.18.0 and failed 0.18.1 can be skipped.

Prepared from 0.18.0 before that release was installed on the owner laptop. Full laptop validation required before install.

• Future Standard-carry bookings follow the current everyday bag while retaining per-job extras and exclusions.
• Custom kit stays independent. Completing a shoot freezes the final historical kit.
• Unavailable explicit extras are flagged for review rather than silently replaced.

Prepared locally from the saved 0.17.0 source while the owner's SSH access was unavailable. Not installed. New local checks do not replace the required Node 24 production build and actual browser/authentication tests. Read TEST-RESULTS.md and SSH-0-18-0.md.

• Standard-carry equipment flags, live Standard-carry planning for future bookings with final-kit snapshots at completion, service/category rates and optional customer travel-charge waiver without deleting mileage.
• Existing clients can request a shoot through their portal. Estimates and local-calendar conflict checks remain private until the photographer reviews; invoice drafting and issue are explicit actions.
• Photographer-branded PDF invoices, unique per-studio numbers from 1000 for future issues, frozen seller/customer/payment details, optional invoice-only recipient and revocable scoped PDF links.
• Manual capture of an actual paid GlassSuite supplier invoice as one Software expense with private PDF evidence. No subscription charge or tax filing is invented.
• Free routine CSV import/export restrictions retain privacy/recovery exports and client invoice/photo downloads. Optional 3/6/9/12-month inactivity notices lead to protected manual review, not automatic destruction.
• Shared System/Light/Dark appearance control; invoice documents remain light and printable. Previous MFA and tenant-access safeguards retained.

Source prepared from 0.16.2. See TEST-RESULTS.md for actual validation. Installing remains a separate action.

• Timed password visibility and consistent new-password policy; junk/spam guidance for verification and delivery.
• Assign testing plans from invitation records before studio setup. Existing byte allowances are retained and displayed in decimal MB/GB.
• Active-customer usage and promised storage, separate physical disk percentage, accessible colour warnings.
• Private support screenshots, up to 5 MB each; account-scoped processing and admin/private or shared feedback attachments.
• Portal gallery list with separate full-width gallery pages; styled Open gallery buttons; generic branded link preview without private images.
• Retains 0.16.2 navigation/dialog repairs and all existing MFA safeguards. Quote-first onboarding, clientless galleries and MFA email recovery remain separate outstanding work.

Functional source passed an isolated production build and real MFA/HTTP suites on the test laptop. Final release metadata and packaging require a final staging run and browser review; not installed. See TEST-RESULTS.md.

• Workspace sections use URL history for Back, Forward and direct links while retaining the upload provider.
• Compact bounded action dialogs; ordinary move-to-bin and restore use simple confirmations. Permanent removal keeps its separate warning and typed confirmation.
• Removes only the global workspace-header CSV shortcut; financial exports and the protected endpoint remain.
• Two MFA negative-test status expectations match the pinned provider rejection status, with additional unauthenticated-session/Admin checks. No production MFA guard, policy, dependency or migration changes.

Source patch from 0.16.0 after the reported TS18048 build failure. Focused checks are not a full production build; see RELEASE-0-16-1.md and TEST-RESULTS.md.

• Explicitly reject a missing account before reading the email and verification fields in the account-email status route. Existing MFA-aware viewer, read-only support and private/no-store responses remain.
• Added a focused semantic TypeScript regression with a negative control that reproduces both original user-is-possibly-undefined errors, plus synthetic route behaviour cases.
• No dependency changes, new migrations, automatic MFA enrolment, policy change or server restart. Mandatory built MFA HTTP validation remains in staging.

Prepared from the 0.15.0 source. Source candidate; not a live deployment. Full locked build and real MFA provider/HTTP/browser tests remain to be run. See TEST-RESULTS.md.

• Microsoft Authenticator-compatible TOTP using the existing Better Auth plugin; local QR generation, verified enrolment and ten single-use recovery codes. No Microsoft push/Entra integration.
• Password then authenticator/recovery login, session-bound MFA proofs and fresh-factor checks for sensitive security changes. No trusted-device or email/SMS factor bypass.
• Optional photographer MFA and staged Admin enforcement: verified administrator explicitly enables the requirement after enrolment. Unenrolled administrators retain access only to setup once required.
• Recovery-code regeneration, phone replacement, session revocation, account-security notices and a stopped-server recovery tool. Password reset does not remove MFA.
• Account security links, Admin MFA status and updated Help. Client-gallery access and existing settings/uploads/financial data remain unchanged.

Prepared from the recovered 0.14.1 source. Source candidate only; not a live deployment. Read TEST-RESULTS.md for uncompleted production checks.

• Owner-only read-only diagnostics, optional narrowly scoped service-log helper, and persistent private notes; no arbitrary web terminal.
• Users naming, admin-approved ordinary Free-account invitations, unified enquiries/feedback/contact Inbox and potential storage commitments.
• Photo, video and content-creation job types with dependent categories; recoverable gallery/client bins and guarded permanent removal.
• Full-screen swipe photo viewing and bounded native image sharing where supported; no screenshot guarantee or silent Photos-library write.
• Finance cash overview, optional reserve percentage, manual tax reminders and personal/non-company expense classification.
• Concise founder story on the homepage, About redirect, responsive annual copyright/footer, saved contact form, 22 help guides and draft/publish blog tools.
• Private operator address omitted from new public legal views by default without rewriting retained agreement evidence; commercial disclosure requirements still need review.

Prepared source patch; installation is separate.

• Full exact-version Terms shown in the centred acceptance screen for photographers and clients.
• Removed download, export and account-management controls from the agreement screen; normal workspace access remains after acceptance.

Prepared source release. See RELEASE-0-14-0.md and TEST-RESULTS.md. Installation is a separate action.

• Private studio spaces and invitations for existing photographer accounts, including Free; booking requests, shared availability and host decisions.
• Optional explicit rental invoice drafts linked to normal studio finance; price snapshots, private guest invoice access and no automatic charges.
• Charles’s founder About page, worldwide creative-business positioning, and Terms/Privacy links on every page.
• Versioned photographer and client Terms acceptance with immutable document records; real service operator details configured in Admin.
• Seven-day download grace for qualifying Free downgrades above the effective quota, then scoped gallery-media cleanup; financial records and protected documents remain.
• Durable automatic-email counts with separate local previews, provider acceptance and verified delivery events; retries are deduplicated and history starts when recording begins.
• Append-only migrations and supervised upgrade, health and rollback checks retained.

Prepared release; see RELEASE-0-13-0.md and TEST-RESULTS.md for current validation. Installation is a separate action.

• Overall upload pause/resume, byte-weighted progress, measured upload speed and estimated remaining time.
• Administrator network use, distinct transferring people, retained transfer history and daily connection-test support.
• Saved vehicle defaults in Photographer profile, multiple vehicles when needed, and return-journey mileage with postcode-first estimates and manual override.
• Reviewed recoverable job cancellation and coordinated date changes; issued/paid financial history and unrelated client jobs are preserved.
• Visible Remember me choices for studio/Admin sign-in and private client links with per-device client sessions.
• Removes the photographer header shortcut to the first client portal. Client-specific previews remain in Clients.
• Existing accounts, uploaded files, prior SQL migration checksums and supervised upgrade/rollback safeguards are retained.

Source hotfix for the reported 0.12.1 TS2345. Full production build remains to be validated; not a live installation.

• Makes missing or invalid optional routing configuration exit explicitly before URL use; preserves the same controlled errors and manual/postcode workflows.
• Adds a focused strict TypeScript regression test, a failing-guard negative control and valid/invalid origin runtime tests.
• Retains all 0.12.1 features, every existing migration and locked dependency version. Does not disable type checking or configure a routing service.
• 20 focused tests, 46 unit/migration checks and 54 offline workflow groups passed locally. The full locked Next.js build, real authentication/browser and updater checks remain outstanding.

Merged source candidate, not a live installation. See RELEASE-0-12-1.md and TEST-RESULTS.md.

• Preserves 0.11 projects, customer costs and capacity while merging the separate 0.12 finance feature branch.
• Finance submenu, hourly/package rates, when/where/how-long booking setup, calendar journey estimates, quote and invoice drafts.
• Actual UK-tax-year mileage with 55p/25p car/van rates for 2026/27; earlier supported years retain 45p/25p; client travel charges stay separate.
• 100 MB Free forever plan and custom Enterprise enquiries; existing accounts and stored content are preserved.
• Cookie choices, plain-hyphen website title, restored compact homepage section and labelled adjustable savings illustration.
• Verified sign-in, business contact and client email changes; shared photographer/Admin release history with owner-confirmed 28 September dates.
• Saved unit prices are retained on edits unless explicitly repriced. Road routing requires explicit operator configuration; postcode checks and manual travel do not.
• Source candidate only. Full dependency-backed build, real authentication/browser tests and live deployment not completed in this preparation environment.

Prepared source update; see RELEASE-0-12-0.md and TEST-RESULTS.md.

• Finance navigation brings invoices, expenses, mileage and rates together; shoot onboarding records when, where and how long with a saved quote basis.
• Postcode lookup and labelled travel estimates connect shoot planning and mileage without treating estimates as recorded journeys. UK tax-year mileage totals remain separate from customer travel charges.
• Free forever access has 100 MB, three clients and one saved gallery; Enterprise is a custom proposal with individually agreed storage. Existing access and manual overrides are preserved.
• Cookie acceptance, optional-cookie rejection, preferences and a persistent settings link; no new analytics or advertising tracking.
• Restored compact green homepage comparison, editable illustrative software costs and explicit 10% annual price calculations.
• Email changes require verification; photographers and administrators can review and download release history. Charles confirmed the 0.4.0 and 0.5.0 dates as 28 September 2026.

Prepared source update; see RELEASE-0-11-0.md and the current verification report. Not a production installation timestamp.

• Opt-in projects from saved onboarding drafts, manual workflow stages, deadlines, next actions, tasks and an editing queue.
• Same-client links to existing invoices, galleries and calendar events, with non-destructive unlinking and archive/restore.
• Owner-only monthly customer cost allocations, manual expected revenue inputs, CSV export and advisory storage headroom.
• Observed capacity samples and best-effort protected file/preview/ZIP response-byte counters; no retroactive or OVH network metering.
• No new automatic billing, client email, HMRC submission, hosting service or file-transfer size limit.

Prepared source update; see RELEASE-0-10-0.md and TEST-RESULTS.md.

• Right-side Admin menu with separate sections, live host metrics and signup archive/conversion/removal.
• Clear staged-ZIP filename and status; permanent include-dev build fix and explicit tracing root.
• Resized server-watermarked client previews, closed no-download original URL bypass, and device-specific download help. Not screenshot-proof.
• Server-bound owner-only ledger combines management totals without merging source businesses or sending anything to HMRC.
• Expanded available/planned homepage comparison, button contrast fix, Resend setup guidance and dated release history.

RELEASE-0-9-0.md and the historical verification report. A later build on the owner’s laptop passed after including development dependencies; installation date is not recorded here.

• Photographer contact details and private/shared drone, DBS and public liability PDF downloads.
• Private-link dialog with copy, expiry and revoke controls.
• First-stage existing/new-client onboarding and shoot-type drafts.
• Private studio calendar, photographer feedback and administrator replies.
• Published monthly/yearly plans with 10% annual discount and manual account assignment. No automatic billing.

Historical verification report dated 29 September 2026.

• Admin-controlled Resend/SMTP delivery, encrypted provider settings, durable email queue and verified webhooks.
• Email verification/recovery, explicit gallery notifications and owner upload summaries.
• Annual prices calculated in integer pence with 10% upfront discount.
• Historical report documents full build, synthetic-provider/HTTP, transfer, browser and updater checks; these are not new tests of this release.

Historical verification report dated 29 September 2026.

• Readiness connects locally using the configured application Host and verifies the expected version.
• Improved manual recovery safeguards for queued/running updates and matching databases.
• Historical success/rollback checks retained from supplied source.

Historical verification report dated 29 September 2026.

• Version footer and retirement of old hard-coded public-host settings.
• Self-service account deletion with explicit confirmation, session revocation and revoked client links.
• Persistent background transfer queue and responsive subscription account controls.
• Pricing proposal only at this stage; no automatic billing or trial timer.

Historical verification report dated 29 September 2026.

• Synchronized desktop, tablet and phone product views.
• Pause/resume and reduced-motion support; explanatory captions below devices.
• Public presentation update only; no application data migration.

Historical verification report dated 29 September 2026.

• Admin access, isolated photographer studios and time-limited read-only support views.
• Public interest form remains enquiry-only; safe CSV export.
• Recoverable account deletion plus separately confirmed permanent purge.
• Supervised validated source ZIP updates with isolated builds, configuration/data preservation and matching rollback.
• Resumable gallery transfers and streamed gallery ZIP checks documented in the supplied report.

Release date confirmed by Charles on 29 September 2026 as 28 September 2026. TRANSFERS.md identifies this version but includes later amendments; its feature summary is not a verified original release manifest.

• Multiple-file and folder uploads, with retained folder paths and tus-based resumable transfers.
• Pause/resume, retry and cancellation controls; disk space and account quotas still apply.
• Whole-gallery streamed ZIP64 downloads and individual byte-range downloads. Image viewing is not DRM.

Release date confirmed by Charles on 29 September 2026 as 28 September 2026. ROADMAP.md identifies this version but was amended later; later purge/update claims are not assigned retrospectively to 0.4.0.

• Same-login, server-granted platform administration and photographer workspace separation.
• Logged, time-limited read-only support access and equipment register.
• Public introduction alongside existing clients, galleries, private portals, favourites, invoices/manual payments and expenses.