Commit Graph

25 Commits

Author SHA1 Message Date
pavlov346346-source
fccea79255
Harden Supabase advisor findings 2026-09-11 07:45:08 +03:00
pavlov346346-source
736e551369
Security: require verified email for signup
* security: require verified email for client signups

* security: load verified-email auth guard

* test: include auth security guard in deploy checks

* test: guard verified-email signup flow

* security: remove client-controlled email autoconfirm triggers
2026-09-11 07:27:37 +03:00
pavlov346346
66d4414634 Ops: retarget Timeweb auto-deploy to app.caterium.ru, not the apex domain
caterium.ru and app.caterium.ru are separate Timeweb sites with separate
document roots. The apex domain's root is reserved for an unrelated future
site, so auto-detection must never be able to land there. Drop the generic
$HOME/public_html and unverified app.caterium.ru/public_html guesses in
favor of the confirmed real path ($HOME/caterium-app/public_html), and
require CATERIUM_WEB_ROOT explicitly in the documented cron command.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 20:39:16 +03:00
pavlov346346
4eef1c14ae Ops: fix Timeweb cron first-run log dir and document real web root
The documented cron command redirected to $HOME/.caterium-deploy/cron.log
before the script could create that directory, so the very first run
failed before executing. Document mkdir -p as a one-time setup step,
add $HOME/public_html to web-root auto-detection (the confirmed real
document root for this account), and note the CATERIUM_REPO_URL override
needed when the account's SSH config uses a non-default Host alias.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 20:01:00 +03:00
pavlov346346-source
1cc1220e20 Ops: document Timeweb panel cron deploy 2026-09-10 18:51:00 +03:00
pavlov346346-source
9a3a4576b6 Ops: add safe Timeweb production sync 2026-09-10 18:50:50 +03:00
pavlov346346-source
4aa66d0a56
Caterium v17.7.3 — clients server read
Server-preferred normalized client profiles with legacy fallback, canonical snapshot RPC, preserved order metrics, release metadata and tests.
2026-09-09 12:07:37 +03:00
pavlov346346-source
815cc602c5
Caterium v17.7.2 — clients foundation
Canonical client identity, client data layer, legacy loyalty/communication compatibility, normalized Supabase client RPC, release metadata and tests.
2026-09-09 10:42:14 +03:00
github-actions[bot]
dffbd6a27d Fix v17.7.1 E2E data layer module checks 2026-09-08 23:51:20 +00:00
pavlov346346-source
baf77724ae Use isolated module injection in v17.7.1 E2E tests 2026-09-09 02:50:00 +03:00
pavlov346346-source
b3322e436a Add deterministic v17.7.1 E2E loader fix 2026-09-09 02:47:33 +03:00
github-actions[bot]
69d483519e Capture v17.7.1 browser module diagnostics 2026-09-08 23:47:10 +00:00
pavlov346346-source
c257a8f36d Add v17.7.1 browser load diagnostic 2026-09-09 02:46:07 +03:00
github-actions[bot]
e2c11e2928 Capture exact v17.7.1 E2E failures 2026-09-08 23:44:46 +00:00
github-actions[bot]
faaf68a32d Capture v17.7.1 E2E diagnostics 2026-09-08 23:42:22 +00:00
pavlov346346-source
a5a4b10a83 Run final full QA for Caterium v17.7.1 2026-09-09 02:38:51 +03:00
github-actions[bot]
e56b309469 Fix v17.7.1 E2E compatibility coverage 2026-09-08 23:38:40 +00:00
pavlov346346-source
6a7e69cb5b Add v17.7.1 E2E repair script 2026-09-09 02:38:16 +03:00
pavlov346346-source
1e781f51b3 Run full QA for Caterium v17.7.1 2026-09-09 02:35:04 +03:00
github-actions[bot]
b6ec42b2e2 Caterium v17.7.1 - data layer adoption 2026-09-08 23:34:45 +00:00
pavlov346346-source
317931ea20 Add v17.7.1 release patch script 2026-09-09 02:34:12 +03:00
pavlov346346-source
f8bb0a78b4
Caterium v17.7.0 — architecture foundation
Introduce the first data layer, move order auto-completion to server cron with legacy/cloud compatibility, clean error telemetry, update PWA/versioning, and add regression coverage.
2026-09-08 13:24:34 +03:00
pavlov346346-source
4ba730990b
Caterium v17.6.8 — Developer Console UX and error fixes
* Add v17.6.8 Developer Console UX and race fixes

* Add Developer Console numbering delete and grouped error RPCs

* Add one-time v17.6.8 release preparation workflow

* Prepare Caterium v17.6.8 Developer Console UX

* Remove one-time v17.6.8 release workflow

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-08 07:58:54 +03:00
pavlov346346-source
672a8e2237
Caterium v17.6.1 — chat photo compression and server memory
Release v17.6.1 after green GitHub QA and Cloudflare preview checks.
2026-09-07 18:11:05 +03:00
pavlov346346-source
2cd5c3404f Caterium v17.6.0 - GitHub Cloudflare autodeploy 2026-09-07 15:29:20 +03:00