Commit Graph

94 Commits

Author SHA1 Message Date
pavlov346346-source
da406a0a2f ci: verify refreshed Timeweb PWA cache 2026-09-12 08:14:53 +03:00
pavlov346346-source
311aeefd75 ci: verify Timeweb pull deployment 2026-09-12 07:09:56 +03:00
pavlov346346-source
15dbbc71af fix: show Signature auth from first frame 2026-09-12 03:42:43 +03:00
pavlov346346-source
3682b908e9 fix: make Signature the native Caterium auth screen 2026-09-12 03:41:58 +03:00
pavlov346346-source
6b33f133e9 merge: sync Timeweb production before Signature login rollout 2026-09-11 19:20:11 +03:00
pavlov346346-source
ea9f60103a ci: keep Timeweb hosting deployment workflow 2026-09-11 19:19:51 +03:00
pavlov346346-source
f25232aaed feat: load Caterium Signature login screen 2026-09-11 19:19:12 +03:00
pavlov346346-source
0bf737d2ec feat: add Caterium Signature login design 2026-09-11 19:18:39 +03:00
pavlov346346-source
40470b15e6 Add safe Timeweb hosting deployment workflow 2026-09-11 16:54:22 +03:00
pavlov346346
88b7f55db4 Ops: add self-hosted Supabase stack for Timeweb Cloud migration
Full production-ready docker-compose stack (db, kong, auth, rest,
realtime, storage, imgproxy, meta, functions, studio) targeting
api.caterium.ru, plus bootstrap script for a fresh Cloud Server,
Caddy reverse-proxy config (HTTPS, WebSocket, upload limits), and
dump/restore/verify/storage-sync scripts for moving off the managed
Supabase project (cksuehzcimitsxmeloes). Does not touch public/ or
any live runtime behavior — frontend cutover is documented separately
in frontend-cutover.md and only applied after Etap 8 verification.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-11 16:20:45 +03:00
pavlov346346-source
62c37ebc2d chore: remove temporary Supabase proxy package 2026-09-11 16:07:13 +03:00
pavlov346346-source
50f3e1b249 chore: remove temporary Supabase proxy 2026-09-11 16:06:57 +03:00
pavlov346346-source
18ef6a2e45 feat: add restricted Supabase reverse proxy for Timeweb 2026-09-11 15:56:35 +03:00
pavlov346346-source
a206cfd1f1 feat: add Timeweb Supabase proxy package 2026-09-11 15:56:18 +03:00
pavlov346346-source
d73c90917f style: make order comment button compact 2026-09-11 15:28:09 +03:00
pavlov346346-source
a4a698f332 test: remove reminder requirements from order enhancements 2026-09-11 15:21:32 +03:00
pavlov346346-source
232222c7a7 fix: remove order reminders UI and notification logic 2026-09-11 15:21:13 +03:00
pavlov346346-source
a7e95db66b fix: show comment button under every order position 2026-09-11 14:55:46 +03:00
pavlov346346-source
bd0d9f2cbe ci: publish main to production immediately during active development 2026-09-11 14:55:20 +03:00
pavlov346346-source
1e648c90ac
Fix visible comments on order positions 2026-09-11 14:37:16 +03:00
pavlov346346-source
9bf75ccf11
Add order comments, reminders, search and delivery totals
Add per-line comments, day/hour order reminders, catalog search by number/name, and delivery-inclusive financial summary. Includes static regression checks.
2026-09-11 14:27:17 +03:00
pavlov346346-source
dbbc416676
Fix incorrect order totals from hidden orphan lines
* chore: add one-time order total repair

* fix: exclude hidden orphan lines from totals [order-total-fix]

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-11 13:19:24 +03:00
pavlov346346-source
d5265a1c11
Merge pull request #24 from pavlov346346-source/fix/caterium-branding-v1774
Finish Caterium visible branding
2026-09-11 10:06:01 +03:00
pavlov346346-source
3977fd5f0f test: include Caterium branding checks 2026-09-11 10:03:45 +03:00
pavlov346346-source
1e92a56085 test: guard Caterium visible branding 2026-09-11 10:03:35 +03:00
pavlov346346-source
6ece9ed21e brand: update PWA identity to Caterium 2026-09-11 10:03:25 +03:00
pavlov346346-source
8625f2f532 chore: remove one-time branding repair workflow 2026-09-11 10:03:07 +03:00
github-actions[bot]
b82b2cb8d0 brand: replace visible legacy name [branding-repair] 2026-09-11 07:02:38 +00:00
pavlov346346-source
5c3ee9b679 chore: add one-time branding repair 2026-09-11 10:02:29 +03:00
pavlov346346-source
9290cc0103
Merge pull request #23 from pavlov346346-source/fix/edge-import-pin-v1774
Pin employee Edge import map
2026-09-11 09:59:51 +03:00
pavlov346346-source
bca7408f90 test: enforce exact employee edge import pin 2026-09-11 09:57:33 +03:00
pavlov346346-source
29efa95b5d security: pin employee edge import map 2026-09-11 09:57:23 +03:00
pavlov346346-source
81c63b27b0
Merge pull request #22 from pavlov346346-source/docs/production-source-of-truth-v1774
Make Timeweb the production source of truth
2026-09-11 09:56:29 +03:00
pavlov346346-source
785e75eeda ops: make Cloudflare deploy explicit fallback only 2026-09-11 09:37:03 +03:00
pavlov346346-source
2150257158 docs: mark Cloudflare as verified-production fallback 2026-09-11 09:36:55 +03:00
pavlov346346-source
2817717efd docs: make Timeweb production source of truth 2026-09-11 09:36:48 +03:00
pavlov346346-source
5f6e00c49b
Merge pull request #21 from pavlov346346-source/fix/edge-function-hardening-v1774
Harden employee Edge Function boundary
2026-09-11 09:36:00 +03:00
pavlov346346-source
53a8451132 test: guard exact Caterium employee roles 2026-09-11 07:54:37 +03:00
pavlov346346-source
da78e3125e fix: align edge validation with Caterium employee roles 2026-09-11 07:54:22 +03:00
pavlov346346-source
2d4af76983 test: include employee edge hardening checks 2026-09-11 07:53:19 +03:00
pavlov346346-source
0c4830dcc6 test: guard employee edge security boundary 2026-09-11 07:53:03 +03:00
pavlov346346-source
7044d36ae6 security: harden employee edge function boundary 2026-09-11 07:52:54 +03:00
pavlov346346-source
3fd899978b
Fix high-severity npm audit findings
* security: pin wrangler 4.131.0

* chore: refresh lockfile for security update

* security: refresh npm lockfile [npm-lock-refresh]

* chore: remove one-time npm lock refresh workflow

* ci: use locked dependencies and fail on high audit findings

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-11 07:51:06 +03:00
pavlov346346-source
fccea79255
Harden Supabase advisor findings 2026-09-11 07:45:08 +03:00
pavlov346346-source
5e38bf867b
Fix malformed style boundary and guard HTML integrity
* chore: add one-time index html repair script

* chore: run one-time html repair on fix branch

* fix: close mobile style block [html-repair]

* chore: remove one-time html repair workflow

* chore: remove one-time html repair script

* test: add html style integrity checks

* test: enforce html integrity in deploy checks

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-09-11 07:41:42 +03:00
pavlov346346-source
6b8a1a604e
Fix employee creation for existing accounts
* fix: finalize existing employee accounts

* test: cover existing employee finalize flow

* test: include employee creation regression check

* test: assert existing employee finalize helper path
2026-09-11 07:34:43 +03:00
pavlov346346-source
5aeed250a3 chore: remove accidental placeholder test 2026-09-11 07:31:06 +03:00
pavlov346346-source
8a307c982e noop 2026-09-11 07:30:56 +03:00
pavlov346346-source
736e551369
Security: require verified email for signup
* security: require verified email for client signups

* security: load verified-email auth guard

* test: include auth security guard in deploy checks

* test: guard verified-email signup flow

* security: remove client-controlled email autoconfirm triggers
2026-09-11 07:27:37 +03:00
pavlov346346
606572eb87 docs: note app.caterium.ru as confirmed sole deploy target
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 21:08:22 +03:00