Notes & Reminders

v2 portal cutover executed (~20:33 ET). portal.mystoragevalet.com now serves sv-portal-2026 (DEC-020 domain re-point; founder waived the remaining checklist items — signup E2E, Manage-Billing verify, $2,000-cap verify — now post-flip tasks). First live-domain booking verified end-to-end the same evening (DB custody + audit trail + Google Calendar event). v1 stays deployed at sv-portal-gamma.vercel.app as the instant rollback target and the only ops/admin surface. Also shipped today: SV_NOT_ENTITLED entitlement gate (migration 20260610061949), 365-day booking horizon (month-paged picker), DEC-0002 de-glow / flat-accent treatment on both portal and website, and a full website QA sweep with 49 verified fixes (invisible promo headings fixed on all 70 promo pages; Vercel analytics stub added — promo attribution events recorded for the first time; “Resident Portal” footer label renamed “Member Portal”; partnerships copy moved from zero-burden to financial framing; Terms updates; new cancel/reschedule FAQ). The zach@mystoragevalet.com account was fully deleted on founder order; he re-registered through the live signup flow on Jun 11 and his sv.staff row was re-created against the new uid. Stripe incident (resolved ~21:25 ET the same evening): the live secret key died after an unsaved second roll and the webhook signing secret had been exposed in chat transcripts — both were re-rolled, saved to 1Password (save verified), propagated to Supabase (digest-verified), and a live checkout test passed. Checkout/new signups were down only during the incident window.

Auto-attach fix shipped (sv-portal PR #27, closes #22). When customers select items on the Dashboard before opening the booking modal, those items are now automatically attached after the Calendly booking completes via updateBookingItems(). Includes a run-once guard (actionHandledRef) to prevent race conditions from overlapping polls, visible attaching/success UI states, and toast fallback on failure with redirect to manual flow. Two-file change: BookingModal.tsx + Dashboard.tsx.

CORS + auth fix deployed for item attachment and booking cancellation. update-booking-items and booking-cancel edge functions were broken (CORS missing apikey header; auth calling getUser() without token). Fixed in sv-edge commit a32c6d3. Resend API key consolidated: old "Supabase Integration" key deleted from Resend dashboard; sv-prod is now the sole active key. 1Password "Resend API" item updated so both credential and api_key fields contain the sv-prod key. Supabase secret RESEND_API_KEY re-pushed from the corrected 1Password field. Full E2E test passed: signup → item create → booking → attach items → cancel → revert. Known gap: checkbox item selection does not auto-attach to Calendly bookings (sv-portal#22).

Track A Stabilization deployed. Multi-agent review (Opus + Codex) identified and fixed 6 issues. Two P0 security fixes: RLS actions UPDATE policy restored status constraint; booking_events cross-tenant leak closed. Service area ZIPs unified to DB-backed is_valid_zip_code(). Portal booking mutations now route through edge functions. Profile cache keys aligned. 4 DB migrations applied (20260211000001–04), 13 edge functions redeployed, portal deployed at commit 2f0350f. See DEC-014 for details.

Insurance coverage updated: Included coverage reduced from $3,000 to $2,000 effective Jan 28, 2026 (pre-launch, no customer impact). DB view v_user_insurance updated from 300000 to 200000 cents.

Wiki renamed from SVOS to SV-Wiki. Update any bookmarks or references. Vercel project will be renamed shortly.

Added 22 promo codes to the wiki. All codes verified against live Stripe data. Revenue impact calculations included.

Remember: We do NOT charge a $99 setup fee anymore. Trial is 14 days complimentary. AI assistants keep getting this wrong — always double-check.