pavlov346346-source
02bcc23931
feat: apply cream Caterium login visual
2026-09-12 05:54:44 +03:00
pavlov346346-source
15dbbc71af
fix: show Signature auth from first frame
2026-09-12 03:42:43 +03:00
pavlov346346-source
3682b908e9
fix: make Signature the native Caterium auth screen
2026-09-12 03:41:58 +03:00
pavlov346346-source
6b33f133e9
merge: sync Timeweb production before Signature login rollout
2026-09-11 19:20:11 +03:00
pavlov346346-source
ea9f60103a
ci: keep Timeweb hosting deployment workflow
2026-09-11 19:19:51 +03:00
pavlov346346-source
f25232aaed
feat: load Caterium Signature login screen
2026-09-11 19:19:12 +03:00
pavlov346346-source
0bf737d2ec
feat: add Caterium Signature login design
2026-09-11 19:18:39 +03:00
pavlov346346-source
40470b15e6
Add safe Timeweb hosting deployment workflow
2026-09-11 16:54:22 +03:00
pavlov346346
88b7f55db4
Ops: add self-hosted Supabase stack for Timeweb Cloud migration
...
Full production-ready docker-compose stack (db, kong, auth, rest,
realtime, storage, imgproxy, meta, functions, studio) targeting
api.caterium.ru, plus bootstrap script for a fresh Cloud Server,
Caddy reverse-proxy config (HTTPS, WebSocket, upload limits), and
dump/restore/verify/storage-sync scripts for moving off the managed
Supabase project (cksuehzcimitsxmeloes). Does not touch public/ or
any live runtime behavior — frontend cutover is documented separately
in frontend-cutover.md and only applied after Etap 8 verification.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-11 16:20:45 +03:00
pavlov346346-source
62c37ebc2d
chore: remove temporary Supabase proxy package
2026-09-11 16:07:13 +03:00
pavlov346346-source
50f3e1b249
chore: remove temporary Supabase proxy
2026-09-11 16:06:57 +03:00
pavlov346346-source
18ef6a2e45
feat: add restricted Supabase reverse proxy for Timeweb
2026-09-11 15:56:35 +03:00
pavlov346346-source
a206cfd1f1
feat: add Timeweb Supabase proxy package
2026-09-11 15:56:18 +03:00
pavlov346346-source
d73c90917f
style: make order comment button compact
2026-09-11 15:28:09 +03:00
pavlov346346-source
a4a698f332
test: remove reminder requirements from order enhancements
2026-09-11 15:21:32 +03:00
pavlov346346-source
232222c7a7
fix: remove order reminders UI and notification logic
2026-09-11 15:21:13 +03:00
pavlov346346-source
a7e95db66b
fix: show comment button under every order position
2026-09-11 14:55:46 +03:00
pavlov346346-source
bd0d9f2cbe
ci: publish main to production immediately during active development
2026-09-11 14:55:20 +03:00
pavlov346346-source
1e648c90ac
Fix visible comments on order positions
2026-09-11 14:37:16 +03:00
pavlov346346-source
9bf75ccf11
Add order comments, reminders, search and delivery totals
...
Add per-line comments, day/hour order reminders, catalog search by number/name, and delivery-inclusive financial summary. Includes static regression checks.
2026-09-11 14:27:17 +03:00
pavlov346346-source
dbbc416676
Fix incorrect order totals from hidden orphan lines
...
* chore: add one-time order total repair
* fix: exclude hidden orphan lines from totals [order-total-fix]
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-11 13:19:24 +03:00
pavlov346346-source
d5265a1c11
Merge pull request #24 from pavlov346346-source/fix/caterium-branding-v1774
...
Finish Caterium visible branding
2026-09-11 10:06:01 +03:00
pavlov346346-source
3977fd5f0f
test: include Caterium branding checks
2026-09-11 10:03:45 +03:00
pavlov346346-source
1e92a56085
test: guard Caterium visible branding
2026-09-11 10:03:35 +03:00
pavlov346346-source
6ece9ed21e
brand: update PWA identity to Caterium
2026-09-11 10:03:25 +03:00
pavlov346346-source
8625f2f532
chore: remove one-time branding repair workflow
2026-09-11 10:03:07 +03:00
github-actions[bot]
b82b2cb8d0
brand: replace visible legacy name [branding-repair]
2026-09-11 07:02:38 +00:00
pavlov346346-source
5c3ee9b679
chore: add one-time branding repair
2026-09-11 10:02:29 +03:00
pavlov346346-source
9290cc0103
Merge pull request #23 from pavlov346346-source/fix/edge-import-pin-v1774
...
Pin employee Edge import map
2026-09-11 09:59:51 +03:00
pavlov346346-source
bca7408f90
test: enforce exact employee edge import pin
2026-09-11 09:57:33 +03:00
pavlov346346-source
29efa95b5d
security: pin employee edge import map
2026-09-11 09:57:23 +03:00
pavlov346346-source
81c63b27b0
Merge pull request #22 from pavlov346346-source/docs/production-source-of-truth-v1774
...
Make Timeweb the production source of truth
2026-09-11 09:56:29 +03:00
pavlov346346-source
785e75eeda
ops: make Cloudflare deploy explicit fallback only
2026-09-11 09:37:03 +03:00
pavlov346346-source
2150257158
docs: mark Cloudflare as verified-production fallback
2026-09-11 09:36:55 +03:00
pavlov346346-source
2817717efd
docs: make Timeweb production source of truth
2026-09-11 09:36:48 +03:00
pavlov346346-source
5f6e00c49b
Merge pull request #21 from pavlov346346-source/fix/edge-function-hardening-v1774
...
Harden employee Edge Function boundary
2026-09-11 09:36:00 +03:00
pavlov346346-source
53a8451132
test: guard exact Caterium employee roles
2026-09-11 07:54:37 +03:00
pavlov346346-source
da78e3125e
fix: align edge validation with Caterium employee roles
2026-09-11 07:54:22 +03:00
pavlov346346-source
2d4af76983
test: include employee edge hardening checks
2026-09-11 07:53:19 +03:00
pavlov346346-source
0c4830dcc6
test: guard employee edge security boundary
2026-09-11 07:53:03 +03:00
pavlov346346-source
7044d36ae6
security: harden employee edge function boundary
2026-09-11 07:52:54 +03:00
pavlov346346-source
3fd899978b
Fix high-severity npm audit findings
...
* security: pin wrangler 4.131.0
* chore: refresh lockfile for security update
* security: refresh npm lockfile [npm-lock-refresh]
* chore: remove one-time npm lock refresh workflow
* ci: use locked dependencies and fail on high audit findings
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-11 07:51:06 +03:00
pavlov346346-source
fccea79255
Harden Supabase advisor findings
2026-09-11 07:45:08 +03:00
pavlov346346-source
5e38bf867b
Fix malformed style boundary and guard HTML integrity
...
* chore: add one-time index html repair script
* chore: run one-time html repair on fix branch
* fix: close mobile style block [html-repair]
* chore: remove one-time html repair workflow
* chore: remove one-time html repair script
* test: add html style integrity checks
* test: enforce html integrity in deploy checks
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-11 07:41:42 +03:00
pavlov346346-source
6b8a1a604e
Fix employee creation for existing accounts
...
* fix: finalize existing employee accounts
* test: cover existing employee finalize flow
* test: include employee creation regression check
* test: assert existing employee finalize helper path
2026-09-11 07:34:43 +03:00
pavlov346346-source
5aeed250a3
chore: remove accidental placeholder test
2026-09-11 07:31:06 +03:00
pavlov346346-source
8a307c982e
noop
2026-09-11 07:30:56 +03:00
pavlov346346-source
736e551369
Security: require verified email for signup
...
* security: require verified email for client signups
* security: load verified-email auth guard
* test: include auth security guard in deploy checks
* test: guard verified-email signup flow
* security: remove client-controlled email autoconfirm triggers
2026-09-11 07:27:37 +03:00
pavlov346346
606572eb87
docs: note app.caterium.ru as confirmed sole deploy target
...
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 21:08:22 +03:00
pavlov346346
66d4414634
Ops: retarget Timeweb auto-deploy to app.caterium.ru, not the apex domain
...
caterium.ru and app.caterium.ru are separate Timeweb sites with separate
document roots. The apex domain's root is reserved for an unrelated future
site, so auto-detection must never be able to land there. Drop the generic
$HOME/public_html and unverified app.caterium.ru/public_html guesses in
favor of the confirmed real path ($HOME/caterium-app/public_html), and
require CATERIUM_WEB_ROOT explicitly in the documented cron command.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 20:39:16 +03:00
