Commit Graph

78 Commits

Author SHA1 Message Date
pavlov346346-source
232222c7a7 fix: remove order reminders UI and notification logic 2026-09-11 15:21:13 +03:00
pavlov346346-source
a7e95db66b fix: show comment button under every order position 2026-09-11 14:55:46 +03:00
pavlov346346-source
bd0d9f2cbe ci: publish main to production immediately during active development 2026-09-11 14:55:20 +03:00
pavlov346346-source
1e648c90ac
Fix visible comments on order positions 2026-09-11 14:37:16 +03:00
pavlov346346-source
9bf75ccf11
Add order comments, reminders, search and delivery totals
Add per-line comments, day/hour order reminders, catalog search by number/name, and delivery-inclusive financial summary. Includes static regression checks.
2026-09-11 14:27:17 +03:00
pavlov346346-source
dbbc416676
Fix incorrect order totals from hidden orphan lines
* chore: add one-time order total repair

* fix: exclude hidden orphan lines from totals [order-total-fix]

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-11 13:19:24 +03:00
pavlov346346-source
d5265a1c11
Merge pull request #24 from pavlov346346-source/fix/caterium-branding-v1774
Finish Caterium visible branding
2026-09-11 10:06:01 +03:00
pavlov346346-source
3977fd5f0f test: include Caterium branding checks 2026-09-11 10:03:45 +03:00
pavlov346346-source
1e92a56085 test: guard Caterium visible branding 2026-09-11 10:03:35 +03:00
pavlov346346-source
6ece9ed21e brand: update PWA identity to Caterium 2026-09-11 10:03:25 +03:00
pavlov346346-source
8625f2f532 chore: remove one-time branding repair workflow 2026-09-11 10:03:07 +03:00
github-actions[bot]
b82b2cb8d0 brand: replace visible legacy name [branding-repair] 2026-09-11 07:02:38 +00:00
pavlov346346-source
5c3ee9b679 chore: add one-time branding repair 2026-09-11 10:02:29 +03:00
pavlov346346-source
9290cc0103
Merge pull request #23 from pavlov346346-source/fix/edge-import-pin-v1774
Pin employee Edge import map
2026-09-11 09:59:51 +03:00
pavlov346346-source
bca7408f90 test: enforce exact employee edge import pin 2026-09-11 09:57:33 +03:00
pavlov346346-source
29efa95b5d security: pin employee edge import map 2026-09-11 09:57:23 +03:00
pavlov346346-source
81c63b27b0
Merge pull request #22 from pavlov346346-source/docs/production-source-of-truth-v1774
Make Timeweb the production source of truth
2026-09-11 09:56:29 +03:00
pavlov346346-source
785e75eeda ops: make Cloudflare deploy explicit fallback only 2026-09-11 09:37:03 +03:00
pavlov346346-source
2150257158 docs: mark Cloudflare as verified-production fallback 2026-09-11 09:36:55 +03:00
pavlov346346-source
2817717efd docs: make Timeweb production source of truth 2026-09-11 09:36:48 +03:00
pavlov346346-source
5f6e00c49b
Merge pull request #21 from pavlov346346-source/fix/edge-function-hardening-v1774
Harden employee Edge Function boundary
2026-09-11 09:36:00 +03:00
pavlov346346-source
53a8451132 test: guard exact Caterium employee roles 2026-09-11 07:54:37 +03:00
pavlov346346-source
da78e3125e fix: align edge validation with Caterium employee roles 2026-09-11 07:54:22 +03:00
pavlov346346-source
2d4af76983 test: include employee edge hardening checks 2026-09-11 07:53:19 +03:00
pavlov346346-source
0c4830dcc6 test: guard employee edge security boundary 2026-09-11 07:53:03 +03:00
pavlov346346-source
7044d36ae6 security: harden employee edge function boundary 2026-09-11 07:52:54 +03:00
pavlov346346-source
3fd899978b
Fix high-severity npm audit findings
* security: pin wrangler 4.131.0

* chore: refresh lockfile for security update

* security: refresh npm lockfile [npm-lock-refresh]

* chore: remove one-time npm lock refresh workflow

* ci: use locked dependencies and fail on high audit findings

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-11 07:51:06 +03:00
pavlov346346-source
fccea79255
Harden Supabase advisor findings 2026-09-11 07:45:08 +03:00
pavlov346346-source
5e38bf867b
Fix malformed style boundary and guard HTML integrity
* chore: add one-time index html repair script

* chore: run one-time html repair on fix branch

* fix: close mobile style block [html-repair]

* chore: remove one-time html repair workflow

* chore: remove one-time html repair script

* test: add html style integrity checks

* test: enforce html integrity in deploy checks

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-11 07:41:42 +03:00
pavlov346346-source
6b8a1a604e
Fix employee creation for existing accounts
* fix: finalize existing employee accounts

* test: cover existing employee finalize flow

* test: include employee creation regression check

* test: assert existing employee finalize helper path
2026-09-11 07:34:43 +03:00
pavlov346346-source
5aeed250a3 chore: remove accidental placeholder test 2026-09-11 07:31:06 +03:00
pavlov346346-source
8a307c982e noop 2026-09-11 07:30:56 +03:00
pavlov346346-source
736e551369
Security: require verified email for signup
* security: require verified email for client signups

* security: load verified-email auth guard

* test: include auth security guard in deploy checks

* test: guard verified-email signup flow

* security: remove client-controlled email autoconfirm triggers
2026-09-11 07:27:37 +03:00
pavlov346346
606572eb87 docs: note app.caterium.ru as confirmed sole deploy target
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 21:08:22 +03:00
pavlov346346
66d4414634 Ops: retarget Timeweb auto-deploy to app.caterium.ru, not the apex domain
caterium.ru and app.caterium.ru are separate Timeweb sites with separate
document roots. The apex domain's root is reserved for an unrelated future
site, so auto-detection must never be able to land there. Drop the generic
$HOME/public_html and unverified app.caterium.ru/public_html guesses in
favor of the confirmed real path ($HOME/caterium-app/public_html), and
require CATERIUM_WEB_ROOT explicitly in the documented cron command.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 20:39:16 +03:00
pavlov346346
b1bd9676c9 docs: note verified Timeweb production auto-deploy
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 20:26:07 +03:00
pavlov346346
4eef1c14ae Ops: fix Timeweb cron first-run log dir and document real web root
The documented cron command redirected to $HOME/.caterium-deploy/cron.log
before the script could create that directory, so the very first run
failed before executing. Document mkdir -p as a one-time setup step,
add $HOME/public_html to web-root auto-detection (the confirmed real
document root for this account), and note the CATERIUM_REPO_URL override
needed when the account's SSH config uses a non-default Host alias.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 20:01:00 +03:00
pavlov346346-source
1cc1220e20 Ops: document Timeweb panel cron deploy 2026-09-10 18:51:00 +03:00
pavlov346346-source
9a3a4576b6 Ops: add safe Timeweb production sync 2026-09-10 18:50:50 +03:00
pavlov346346-source
71a974ac19
Infra: production branch promotion for app.caterium.ru
Prepare Caterium for Timeweb Cloud App Platform production hosting on app.caterium.ru with QA-gated promotion to the production branch.
2026-09-09 19:09:32 +03:00
pavlov346346-source
4aa66d0a56
Caterium v17.7.3 — clients server read
Server-preferred normalized client profiles with legacy fallback, canonical snapshot RPC, preserved order metrics, release metadata and tests.
2026-09-09 12:07:37 +03:00
pavlov346346-source
815cc602c5
Caterium v17.7.2 — clients foundation
Canonical client identity, client data layer, legacy loyalty/communication compatibility, normalized Supabase client RPC, release metadata and tests.
2026-09-09 10:42:14 +03:00
github-actions[bot]
dffbd6a27d Fix v17.7.1 E2E data layer module checks 2026-09-08 23:51:20 +00:00
pavlov346346-source
95adfc5e3d Retry verified v17.7.1 E2E module checks 2026-09-09 02:50:11 +03:00
pavlov346346-source
baf77724ae Use isolated module injection in v17.7.1 E2E tests 2026-09-09 02:50:00 +03:00
pavlov346346-source
eee001fc55 Validate and fix v17.7.1 E2E loader waits 2026-09-09 02:47:42 +03:00
pavlov346346-source
b3322e436a Add deterministic v17.7.1 E2E loader fix 2026-09-09 02:47:33 +03:00
github-actions[bot]
69d483519e Capture v17.7.1 browser module diagnostics 2026-09-08 23:47:10 +00:00
pavlov346346-source
9839f764f3 Run v17.7.1 browser module diagnostic 2026-09-09 02:46:16 +03:00
pavlov346346-source
c257a8f36d Add v17.7.1 browser load diagnostic 2026-09-09 02:46:07 +03:00