Aquiis.SimpleStart v1.1.0

🔒 Aquiis SimpleStart v1.1.0 - Security & Schema Enhancement Release

Release Date: February 19, 2026
Previous Version: v1.0.1
Database Schema: v1.1.0 (requires automatic migration)

🎯 Release Highlights

This is a major security and schema release featuring enterprise-grade database encryption, sample data management, multi-tenant data integrity enhancements, and comprehensive Content Security Policy implementation. All features include automatic migration with zero manual intervention required.

---

🆕 What's New

🔒 Database Encryption at Rest

The flagship feature of v1.1.0 - Enterprise-grade database encryption using SQLCipher AES-256.

• User-controlled master password with 12+ character requirement
• PBKDF2 key derivation (100,000 iterations with SHA-256)
• OS keychain integration for password caching (Linux via libsecret)
• One-click enable/disable with automatic app restart
• Encrypted backups preserve encryption automatically
• Compliance ready: GDPR, CCPA, SOC 2 Type II, HIPAA-ready

Location: Application Settings → Database Management → Database Encryption

🏷️ Sample Data Management

New IsSampleData flag added to 30+ entity tables to distinguish real data from demo/sample data.

• Automatic flagging of system-created sample data
• Enables bulk operations targeting sample data only
• Data export/import can exclude sample data
• Supports clean testing and training scenarios

🛡️ Multi-Tenant Data Integrity

Fixed unique index constraints on Invoice and Payment tables:

• New composite indexes: (OrganizationId + Number)
• Prevents number conflicts across organizations
• Ensures data integrity in multi-tenant deployments

🔐 Content Security Policy (CSP)

Comprehensive security headers to protect against XSS, clickjacking, and MIME-sniffing attacks:

• Content-Security-Policy (Blazor-compatible)
• X-Content-Type-Options: nosniff
• X-Frame-Options: DENY
• X-XSS-Protection: 1; mode=block
• Referrer-Policy: strict-origin-when-cross-origin
• Permissions-Policy

Smart Detection: Automatically skipped in Electron mode, applied in web mode.

---

🔄 Breaking Changes & Automatic Migrations

Database Schema v1.1.0

New Tables:

• DatabaseSettings - Tracks encryption state and configuration

New Columns:

• IsSampleData (boolean) - Added to 30+ tables
• EncryptionSalt (nullable string) - Encryption support

Index Changes:

• Invoice/Payment indexes now composite: (OrganizationId + Number)

Migration: All schema changes applied automatically on first startup. No manual intervention required.

Database Location Change

Old: ~/.config/Electron/app_v1.0.0.db (or %APPDATA%\Electron\)
New: ~/.config/Aquiis/app_v1.1.0.db (or %APPDATA%\Aquiis\)

User Impact: None - migration happens automatically on first launch.

Application Naming Convention

Old: Aquiis-SimpleStart-1.0.0.AppImage
New: Aquiis-1.1.0-x86_64.AppImage

Cleaner naming convention that supports multiple products (SimpleStart, Professional).

---

🐛 Bug Fixes

• Electron Port Binding Issue: Fixed blank page with ERR_CONNECTION_REFUSED by removing conflicting Kestrel endpoints from appsettings.Production.json
• Database Path Inconsistency: Synchronized async/sync path resolution to consistently use "Aquiis" folder
• Startup Deadlock: Changed service registration to use synchronous path resolution

---

📦 Downloads

Linux:

• Aquiis-1.1.0-x86_64.AppImage - Universal Linux binary

Windows:

• Aquiis-1.1.0-x64-Setup.exe - NSIS installer
• Aquiis-1.1.0-x64-Portable.exe - Portable executable

Installation:

# Linux
wget https://github.com/xnodeoncode/Aquiis/releases/download/v1.1.0/Aquiis-1.1.0-x86_64.AppImage
chmod +x Aquiis-1.1.0-x86_64.AppImage
./Aquiis-1.1.0-x86_64.AppImage

---

🚀 Upgrade Instructions

For Existing Users

1. Download and install v1.1.0 from above links

2. Launch the application

3. Automatic migration happens on first launch:

   • Database schema upgraded from v1.0.0 to v1.1.0
   • Database file moved to new Aquiis folder
   • All backups migrated automatically
   • Complete in < 1 second

4. (Optional) Clean up old files:

   # After verifying migration success
   rm -rf ~/.config/Electron/

For New Users

No special steps - download, install, and run!

---

🧪 Testing Summary

All features tested and verified:

• ✅ Database encryption/decryption with password
• ✅ Keychain auto-unlock (Linux)
• ✅ Cross-computer database restore
• ✅ Schema migration v1.0.0 → v1.1.0
• ✅ Database location migration
• ✅ CSP headers in web mode
• ✅ Sample data flagging
• ✅ Composite unique indexes
• ✅ Zero-downtime migration

---

⚠️ Known Issues

Database Encryption:

• Windows/macOS keychain integration not yet implemented (Linux only)
• Users will see Database Unlock Password Prompt on startup (no auto-unlock)
• Workaround: Enter password once per session (cached for duration)
• Planned: Windows Credential Manager (v1.2.0), macOS Keychain (v1.2.0)

Note: This does not affect encryption security, only convenience.

---

📚 Documentation

• 📖 Full Release Notes
• 🚀 Quick Start Guide
• 💾 Database Management Guide
• 🔒 CSP Implementation Guide
• 🛡️ Security Enhancements

---

🔜 Coming in v1.2.0

Phase 2 Security Completion:

• Antiforgery tokens in all forms (CSRF protection)
• Rate limiting for login endpoints (brute-force prevention)
• Windows Credential Manager integration
• Code signing (Windows Authenticode)

---

💬 Support

Getting Help:

• 🐛 Report Issues
• 💡 Feature Requests
• 📧 Email: cisguru@outlook.com

Security Vulnerabilities:
Please report privately to: cisguru@outlook.com

---

🙏 Thank You

Thank you to all users who provided feedback on v1.0.1. Your input directly shaped the security enhancements in this release.

⭐ Star this repository if you find Aquiis helpful!

---

Full Changelog: v1.0.1...v1.1.0

Copyright © 2026 CIS Guru. Licensed under the MIT License.

v1.0.1 Hotfix - Invoice Processing & AppImageHub Compliance

Aquiis v1.0.1 Hotfix Release Notes

Release Date: January 29, 2026
Release Type: Hotfix
Previous Version: v1.0.0 (January 28, 2026)

Overview

Version 1.0.1 addresses critical business logic issues and UX improvements identified during initial v1.0.0 release testing. This hotfix resolves invoice processing race conditions, implements AppImageHub naming standards, and improves notification center accessibility.

Critical Fixes

1. Invoice Late Fee Processing (Critical - Business Logic)

Issue: Race condition in scheduled task execution caused inconsistent late fee application. If UpdateInvoiceStatuses ran before ApplyLateFees, invoices were marked overdue without late fees applied, and subsequent runs would not apply fees because status already changed.

Resolution:

• Backend: Consolidated two separate tasks (ApplyLateFees and UpdateInvoiceStatuses) into single atomic ProcessOverdueInvoices operation
• Payment Processing: Added auto-apply logic when partial payments made on past-due invoices (catches scenario where scheduled task hasn't run yet)
• Status update and late fee application now occur in one transaction (both scheduled task and payment processing)
• Prevents any invoice from being marked overdue without proper late fee evaluation
• Administrator UI: Updated ServiceSettings and ApplicationSettings to show single "Update Invoice Statuses" task (subtitle: "Mark pending invoices as overdue and apply late fees")

Files Changed:

• 2-Aquiis.Application/Services/ScheduledTaskService.cs - Consolidated scheduled task methods
• 2-Aquiis.Application/Services/PaymentService.cs - Added ApplyLateFeeIfEligibleAsync() method
• 5-Aquiis.Professional/Features/Administration/Settings/Pages/ServiceSettings.razor - Updated manual trigger UI
• 4-Aquiis.SimpleStart/Features/Administration/Settings/Pages/ApplicationSettings.razor - Consolidated background task UI

Impact: Ensures all overdue invoices have late fees applied correctly regardless of how they become overdue (scheduled task OR payment processing).

2. AppImage Naming Convention (Critical - AppImageHub Compliance)

Issue: AppImage filename AquiisPropertyManagement-1.0.0.AppImage did not follow AppImageHub standard nomenclature, preventing automatic version detection and updates.

Resolution:

• Changed productName from "AquiisPropertyManagement" to "Aquiis" (matches repository name)
• Updated buildVersion to "1.0.1"
• New filename: Aquiis-1.0.1-x86_64.AppImage (compliant with AppImageHub standards)
• Enables automatic version detection: https://github.com/xnodeoncode/Aquiis/releases/whatever/Aquiis-1.0-x86_64.AppImage → auto-discovered

Files Changed:

• 4-Aquiis.SimpleStart/electron.manifest.json

Impact: AppImageHub can now automatically detect new releases without manual PR updates. Users can discover application via AppImageHub once listing approved.

UI/UX Improvements

3. Notification Center Accessibility

Issue: Notification bell dropdown only appeared when unread notifications existed. Users couldn't access notification preferences or view history when inbox empty.

Resolution:

• Dropdown now always accessible regardless of notification count
• Shows "No new notifications" message when empty
• "View all" link always available for notification history access
• Badge displays "0" when no notifications (visual consistency)

Files Changed:

• 3-Aquiis.UI.Shared/Components/Notifications/NotificationBell.razor

Impact: Users can access notification center and preferences at any time, improving discoverability.

4. Email/SMS/Digest Notifications Disabled with "Coming Soon" Badges

Issue: Email, SMS, and Digest notification settings were interactive but non-functional (services not yet integrated), causing user confusion.

Resolution:

• Added "Coming Soon" warning badges to email, SMS, and digest sections
• Badges styled consistently with clock icon and positioned on right side of card headers
• Replaced toggles with disabled checkboxes (visual indication)
• Added explanation alerts: "This feature requires [email/SMS/email] service integration and will be enabled in a future release"
• Applied opacity styling (75%) to visually distinguish from active features

Files Changed:

• 3-Aquiis.UI.Shared/Components/Notifications/NotificationPreferences.razor

Impact: Sets clear expectations for users about feature availability timeline and maintains consistent UI design.

5. NavMenu Cleanup - Removed Tenants Direct Navigation

Issue: Tenants link in navigation menu had no destination page - tenants should be accessed via lease context, not direct navigation.

Resolution:

• Removed "Tenants" navigation link from all role-based menus
• Tenants remain accessible through:
  • Lease details (primary access path)
  • Prospect conversion workflow
  • Search functionality

Files Changed:

• 4-Aquiis.SimpleStart/Shared/Layout/NavMenu.razor - Removed from OrganizationAuthorizeView
• 5-Aquiis.Professional/Shared/Layout/NavMenu.razor - Removed from both PropertyManager and User sections

Impact: Eliminates dead-end navigation path, encourages proper lease-centric workflow.

6. Owner Role Available in User Management (Reverted)

Consideration: Initially restricted Owner role from dropdowns to prevent improper assignments. However, this prevents legitimate account inheritance scenarios (business transitions, ownership transfers).

Final Decision:

• Owner role REMAINS available in role change dropdowns
• System allows role flexibility while enforcing role-based permissions on features
• Enables account transitions without losing historical data/audit trail
• Creating new accounts for ownership transfers would lose activity history

Files Changed:

• 4-Aquiis.SimpleStart/Features/Administration/Organizations/Pages/ManageUsers.razor - Owner role available in dropdowns
• 5-Aquiis.Professional/Features/Administration/Organizations/Pages/ManageUsers.razor - Owner role available in dropdowns

Impact: Supports real-world business transitions and ownership transfers while maintaining audit trails.

Testing Results

✅ Build Status: All projects compiled successfully (20.4s build time)
✅ Compilation Errors: 0
✅ Test Projects: All 7 test projects built successfully

Database Impact

Schema Changes: None
Migration Required: No
Database Version: v0.0.0 (unchanged from v1.0.0)

Users can upgrade from v1.0.0 to v1.0.1 without any database migration. All existing data remains intact and compatible.

Deployment Notes

For End Users (Upgrade from v1.0.0)

1. Download new AppImage:

   curl -L -o Aquiis-1.0.1-x86_64.AppImage \
     https://github.com/xnodeoncode/Aquiis/releases/download/v1.0.1/Aquiis-1.0.1-x86_64.AppImage
   chmod +x Aquiis-1.0.1-x86_64.AppImage

2. Verify checksum (will be provided in release)

3. Run desktop integration script (if needed):

   ./install-desktop-integration.sh ~/path/to/Aquiis-1.0.1-x86_64.AppImage

4. No database backup required - no schema changes

Windows (Portable Executable)

1. Download portable exe:

   Download Aquiis-1.0.1-x64.exe from the v1.0.1 release page

2. Verify checksum:

   # PowerShell
   Get-FileHash -Algorithm SHA256 Aquiis-1.0.1-x64.exe
   # Compare with checksums.txt from release

   # Command Prompt (using certutil)
   certutil -hashfile Aquiis-1.0.1-x64.exe SHA256

3. Run the application:

   • Double-click Aquiis-1.0.1-x64.exe to launch
   • No installation required (portable exe)
   • Windows Defender SmartScreen may show warning (code not yet signed)
   • Click "More info" → "Run anyway" to proceed

4. No database backup required - no schema changes

For Developers (Build from Source)

git checkout v1.0.1
dotnet build Aquiis.sln -c Release
cd 4-Aquiis.SimpleStart
electronize build /target linux    # For Linux AppImage
electronize build /target win      # For Windows portable exe

For Administrators (Manual Task Testing)

Test Invoice Processing:

1. Navigate to Administration → Settings → Services (or Application Settings in SimpleStart)
2. Click "Run Now" on "Update Invoice Statuses"
3. Verify both status updates AND late fees applied in single operation
4. Check logs for consolidated message: "Processed X overdue invoice(s): Y status updated, Z late fees applied"

Test Payment Processing Late Fee Auto-Apply:

1. Create invoice with due date in past (beyond grace period, e.g., 5 days ago)
2. Ensure late fee settings enabled with auto-apply
3. Make partial payment on the invoice (less than total due)
4. Expected: Invoice marked Overdue WITH late fee applied immediately
5. Check invoice notes for "Late fee of $X applied on [date]" message
6. Verify late fee added to invoice amount

Test Notification Center:

1. Click notification bell (even with 0 notifications)
2. Dropdown should appear with "No new notifications" message
3. Click "View all" → navigates to /notifications
4. Check notification preferences → Email/SMS/Digest sections show "Coming Soon" badges with consistent styling

Known Issues (Carried Forward from v1.0.0)

• None critical for hotfix release
• See v1.1.0 roadmap for planned enhancements

GitHub Release Artifacts

• Aquiis-1.0.1-x86_64.AppImage (Linux, ~230MB)
• Aquiis-1.0.1-x64.exe (Windows portable, ~150MB)
• checksums.txt (SHA256 hashes)
• install-desktop-integration.sh (Linux helper script)
  ...

Aquiis SimpleStart [v1.0.0] - General Availability

First stable release for public distribution of Aquiis SimpleStart - a multi-tenant property management system for small landlords managing up to 9 residential properties.

Highlights

• Linux AppImage (230MB, ~2 second startup)
• Windows Portable Executable (150MB, no installation required)
• Desktop integration helper scripts (Linux)
• Performance optimized (60x faster than initial builds)
• Comprehensive documentation and user guides
• Ready for User Acceptance Testing (UAT)

Downloads

• Linux: AquiisPropertyManagement-1.0.0.AppImage (230MB)
• Windows: AquiisPropertyManagement 1.0.0.exe (150MB)
• Helper Script: install-desktop-integration.sh (Linux only)
• Verification: checksums.txt

Installation Instructions

Linux (AppImage)

# Make executable
chmod +x AquiisPropertyManagement-1.0.0.AppImage

# Option 1: Desktop integration (recommended)
./install-desktop-integration.sh AquiisPropertyManagement-1.0.0.AppImage

# Option 2: Run directly
./AquiisPropertyManagement-1.0.0.AppImage

Windows (Portable Executable)

1. Download AquiisPropertyManagement 1.0.0.exe
2. Move to permanent location (e.g., C:\Program Files\Aquiis\ or C:\Users\YourName\Applications)
   - ⚠️ Important: Database and settings are stored relative to the .exe location
3. Double-click to run
4. First launch: Windows SmartScreen will display a warning (expected for unsigned applications)

• Click "More info" → "Run anyway"
• Code signing is planned for v1.1.0

Verify Download (Recommended)

Linux:

sha256sum -c checksums.txt

Windows PowerShell:

Get-FileHash "AquiisPropertyManagement 1.0.0.exe" -Algorithm SHA256

Expected Checksums:

• Linux: 317eb38b9f8fd611387bdce6337127684d35718f5e88276143cbd671209a6d77
• Windows: 47e6ac81850b9abb5ed2a1b9cace8b80fbf7ddc118f00c34fe431caca1b8de2b

What's Included

• Property Management: Track up to 9 residential properties
• Tenant Lifecycle: Prospect → Application → Screening → Lease → Renewal/Termination
• Financial Management: Automated invoicing, payment tracking, late fee calculation
• Maintenance Tracking: Work orders, repairs, vendor management
• Document Management: Lease agreements, inspection reports, financial statements
• Inspections: Move-in, move-out, and routine property inspections with 26-item checklist
• Security Deposit Investment Tracking: Annual dividend distribution to tenants
• Multi-Tenant Support: Secure organization isolation with role-based access control

System Requirements

• Linux: Any modern distribution with FUSE support (Ubuntu 20.04+, Fedora 36+, RHEL 9+, etc.)
• Windows: Windows 10 (version 1809+) or Windows 11
• RAM: 2GB minimum, 4GB recommended
• Disk Space: 500MB for application + database storage (grows with data)
• Database: SQLite (embedded, no separate installation required)

Known Limitations (v1.0.0)

• Windows: Executable is unsigned (SmartScreen warning on first launch)
• Maximum Properties: 9 residential properties per organization
• Maximum Users: 3 users per organization (1 Administrator + 2 Property Managers)
• Database Backups: Manual only (automatic backups planned for v1.1.0)
• Updates: Manual download and replace (auto-update planned for future releases)

Support & Feedback

• Documentation: README.md
• Issues: Report bugs via GitHub Issues
• Email: cisguru@outlook.com

What's Next?

• v1.1.0: Code signing for Windows, automatic daily backups, database migration wizard
• v1.2.0: Microsoft Store distribution (MSIX), CDN mirrors for downloads

---

License: MIT
Built with: .NET 10, Blazor Server, ElectronNET, SQLite