Every tool. Every map. Every byte.

Maps grouped by torque / boost / injection / lambda / EGR / limiter / timing — collapsible tree.

Click cells to select, then STEP ±100/±10/±1, MULTIPLY × factor, SET ABSOLUTE, ADD CUSTOM, RESET TO STOCK.

Survives page reload. Drafts auto-save. Ctrl+Z / Ctrl+Shift+Z keyboard shortcuts.

Jump to any address; pattern search across the BIN.

Sortable table of detected fault codes, on/off toggles, locked-codes for stage tunes, custom code input.

Curated deltas per ECU family + map category, with risk classification (safe/moderate/aggressive) and confidence score.

Short safe-envelope guidance keyed by category — boost limits, smoke caps, IQ ceilings, SOI safe range.

Every modification stored as JSON in editor_drafts, scoped per (user, job, map_key).

13 cell-level actions: copy as TSV, multiply, set, reset, etc.

17 commands across File / Edit / Mode / View groups.

LE/BE × u8/u16/u32/i8/i16/i32/f32 × scale factor — manual override when DAMOS is wrong.

EcuEditorService.generateTunedBin() walks every saved draft and writes raw bytes at the address declared by the map. Bosch checksum recompute included.

JSON describing every modification (map, cells, deltas, risk) for inspection or external flashing tools.

From My Tunes (your uploads), Search Library (central catalog), or fresh upload.

Aggregate risk based on bytes changed × map category × delta percentage.

64 blocks × 16 KB per block, colour-coded by change density.

Bytes changed, maps affected, regions touched, plain-English summary.

Side-by-side HP/Nm curves overlaid for visual diff of power output.

One-click flip baseline and candidate.

Browser print of the entire diff for client reports.

Clipboard with sha A/B + diff structure for sharing.

Pulls vehicle, engine code, stock HP/Nm, ECU family, SW/HW from the file in memory. One-click "Fill typical gains" applies conservative diesel/petrol Stage 1/2/3 deltas.

Empty form for walk-in customers. Type customer name, car, engine, power numbers — generates the same sheet without a BIN.

250-rpm grid, diesel/turbo/NA curve shaping (plateau character respected per fuel type), peak markers.

Stock + Stage 1/2/3 with HP gain, Nm gain, peak rpm.

Per-stage clipboard snippets ready for WhatsApp / email / invoice.

Browser-print or Save-as-PDF, branded with shop name.

Each generated sheet gets a unique DS-XXXXXX reference for re-issue.

SHA exact → HW+SW lookup → catalog fuzzy → catalog HW-only → engine-code resolution → local seed.

Full PHP analyzer on central: detector cascade, map locator, Bosch checksum recompute, 11 features (popcorn / launch / hardcut / NLS / EGR off / DTC off etc.), 12 tuning DTCs. 7 tests / 57 assertions passing.

Same BIN uploaded by N users = ONE physical file. SHA-256 fingerprint indexed in bin_fingerprints table.

Hierarchical catalog: VehicleMake → VehicleModel → VehicleGeneration → VehicleEngine → EcuType.

EDC15 / EDC16 / EDC17, MED9 / MED17, ME7, MEV / MEVD, Continental SID 208/807, Delphi DCM, Denso.

Click any row → file detail. Tooltip + keyboard navigation + focus ring.

Search query persists in URL — bookmark it, share it, link to it.

Top ECUs / brands / vehicles on dashboard → click to filter library.

Plan label, days remaining or ∞ for lifetime, expiry date or Upgrade CTA.

Real numbers from file_uploads. Match rate + bytes processed.

Aggregated from audit_log: file.download + editor.export.bin + editor.export.tune + dyno.print.

Today/7d/lifetime mutations + saved drafts count. Direct CTA to /editor.

Confirmed/cap (2 max), pending devices chip, last-seen timestamp.

Auto-match runs used vs cap, progress bar, monthly reset, ∞ for VIP.

Gradient orange, baseline grid, day markers.

Aggregated from match_payload, top 8 ECU families + 5 brands + 5 vehicles, all clickable.

Inline mini-charts on the original 4-card stat strip.

Auto-fires on first dashboard visit. Skip / Esc / Replay anytime.

7 surfaces have 3-5 step contextual tours. Auto-fire on first visit per page; replay from any time.

Every wire:click button auto-receives spinner + disable + busy-cursor while in flight. Zero markup needed in blades.

Orange gradient, 5 ticks, fires on Livewire navigation + form submit + plain anchor click.

window.toast.ok() / .info() / .warn() / .error() — slide-in spring animation, click to dismiss.

data-tooltip attribute, hover delay, disabled on touch.

For async data loads. Cards, rows, circles, custom heights.

IntersectionObserver-driven fade+translate entrance. prefers-reduced-motion respected.

dropzone, library, editor, compare, dyno, search, devices, error.

Slide-up bottom, essential-only notice, dismiss persists in localStorage.

Icon-? in navbar restarts the current page tour.

Settings → Subscription → reset button clears all localStorage flags.

Tables collapse to cards <768px. Tap targets ≥36px on touch. Stat strip 4→2→1 columns.

6-token system: dropdown / sticky / fixed / modal-backdrop / modal / popover / tooltip / toast.

2px orange-accent outline on every interactive element. Keyboard navigation works end-to-end.

HMAC-signed credential verification, IP whitelist, replay protection (5-min skew window, UUID nonces).

LoginController.syncSubscriptionFromSsoPayload materializes Subscription row on every login. No back-fill jobs needed.

WC order_status_completed → POST /api/v1/internal/subscription on Laravel side. HMAC-signed, IP-whitelisted.

wp_usermeta._instatuner_tier → product postmeta → filter hooks. 54 buyers backfilled (45 standard + 9 premium).

Browser fingerprint hash + email confirmation flow. Auto-revoke after 60 days inactive.

Plan info, days left, Upgrade tier deep-link, Manage on WC, Cancel auto-renewal, Reset all tutorials, Billing contact.

EU Consumer Rights Directive Art. 16(m) cooling-off waiver structure + 4 narrow exceptions (duplicate / provisioning / unauthorised / 72h+ outage).

03:30 UTC, atomic gzip, 30-day retention, /var/www/_backups/db/

Login attempts, uploads, downloads, edits, settings changes, security events. Tied to user_id, IP, timestamp.

URL, status, response time, IP, UA — 90-day retention then aggregated.

Every block / skip / limit / failure surfaces a severity-tagged banner via ReasonBus.

SecurityWatchdog (bruteforce + UA + IP burst + IP-change), TrackDeviceSession (2-cap + email-confirm), SecurityHeaders (HSTS/CSP/X-Frame).

Login (10/min, 5-fail lockout 15min), file detail, manual search.

11 locales × 1254 keys = 13,794 strings translated. EN, RO, DE, FR, IT, ES, NL, PL, PT, RU, TR.

Organization + SoftwareApplication + FAQPage in <head>. Google Rich Results-ready.

404, 403, 419, 429, 500, 503 — branded chrome, animated SVG, request-ID, support email.

Let's Encrypt, auto-renew, HSTS preload-ready.