Live from GitHub · Refreshed continuously

Software Updates

Every change we ship to katura1999.com — features, fixes, security patches, the lot. Pulled straight from our private GitHub repository so you can see exactly what was built and when.

By the numbers

Lines of code

997,181

Web platform — TypeScript, React, Prisma, CSS

iOS

79,607

Swift + SwiftUI lines

Android

3,117

Kotlin + Jetpack Compose lines

All platforms

1,079,905

Web + iOS + Android combined (54.2× the King James Bible)

Characters written

42.68M

42,680,782 total characters

Updates pushed

2,265

exact commit count on main

Current version

v1.22.65

build 2265 · b9d76c9

Database models

423

across 47 schema files — most SaaS platforms have 20–50

API endpoints

1,074

individually routed — Stripe's public API has ~400

Translated strings

106,176

every string, in 24 languages

System permutations

10^323

2^1,074 endpoint combinations — more than atoms in the observable universe (10^80)

Project age

11mo 1d

since Dec 14, 2025

Pre-AI dev hours

36.0K hrs

1,079,905 lines ÷ 30 LOC/hr — equivalent to 17.3 years (senior engineer, no AI)

With-AI dev hours

9.0K hrs

4× AI productivity multiplier (2024–2026 studies) — equivalent to 1,125 days

Equivalent firm cost

$9,472,854

live ticker · Katura rate: $60 USD/hr

Hours estimated from source line count at 30 LOC/hr (industry benchmark for production-quality TypeScript/React without AI assistance), with a 4× multiplier for AI-assisted development per published 2024–2026 enterprise studies. Equivalent Firm Cost uses a $250/hr loaded billable rate reflecting a premium engineering firm building enterprise-grade SaaS — and ticks up live, because the project is still being actively built.

Commit history

2,265 updates pushed

Showing page 10 of 40 · 451–500 of 2,000 fetched

Friday, September 4, 2026
1 update pushed
Updateanalytics,team11:27 AM · ZRosserMcIntosh
unbreak /admin/analytics; make failed email sends honest
- Analytics: the layout renders 8 KPI cards but the fast /kpis endpoint that
- populates the header only ever returned 7 — `consultations` was missing, so
- `k.consultations.current` threw on every render. Being a layout, it took down
- every page under /admin/analytics, not just the overview. TypeScript missed it
- because the payload is typed Partial<ConversionsData>, and Partial only makes
- the top level optional. /kpis now returns consultations, and the header treats
- each metric as optional so future drift degrades one card instead of the hub.
- Team: an admin could edit a member's email in the dialog and see "updated"
- while PUT /api/admin/users/[id] silently dropped the field — a typo in an
- invite locked the person out permanently. Managers/owners can now correct it,
- audited as email_change, revoking outstanding tokens for both addresses.
- Email failures: sendBrevoEmail RESOLVES with { success: false }; the reset
- route awaited it in a try/catch and reported "reset link emailed" for sends
- Brevo had refused — every one of them since the authorised-IP list went on.
- It now returns the provider's reason plus the link, the admin UI offers that
- link for hand delivery, and reset tokens last 24h instead of 1h so a link
- sent over WhatsApp is still good when it is read.
a8681a0View on GitHub →
Wednesday, September 2, 2026
2 updates pushed
Updatemeetings,invoices,prospecting10:52 PM · ZRosserMcIntosh
morphing captions, guest roster, Brevo outage visibility
- Translated captions render word-by-word with stable keys; revisions cross-fade in place instead of erasing and retyping. Incremental translator no longer shrinks/duplicates at chunk seams; finalized lines are pre-seeded from the live caption (admin + guest rooms).
- Guest join stores the invite email on the participant; Virgil gets a participant roster in context and resolves first names to invited addresses before asking. Send-email failures surface the provider's reason (Brevo 401 IP allowlist) instead of a bare HTTP 500.
- Single invoice currency; line-item inputs show the matching symbol. Removed the client-only USD->BRL overwrite (its rate fetch was CSP blocked and always fell back to 5.75); replaced with a reference-only converter via /api/exchange-rates.
- "Pay now" or "Email me a reminder in 1/3/7 days" on the public invoice page and email; sent by the existing daily invoice-reminders cron. Hand-applied migration adds three nullable SalesInvoice columns; reads tolerate the columns being absent until it is applied.
- Approve/Send action no longer rendered twice in the Virgil panel.
- Brevo auth/IP-allowlist errors are classified as a system outage: the prospect stays queued, the tick stops, a red banner shows the outage, and an internal alert fires after two consecutive failures.
- Unsubscribe, hard bounce and spam complaint now suppress the prospect and cancel queued follow-ups; suppression is checked before every send.
- Inbox-poll heartbeat shown in the page header; opens/clicks recorded per prospect behind PROSPECTING_TRACK_OPENS.
- Dry-run-by-default scripts: reset-401-failures, backfill-suppressions.
1f16c8aView on GitHub →
Monday, August 31, 2026
2 updates pushed
Featuresignatures8:08 PM · ZRosserMcIntosh
QR intake for identity-safe agreements, in 24 languages
- The intake form's words moved out of two-language maps hardcoded in intake-form.tsx and intake.ts and into messages/*.json under Signing.intake, the same catalog the rest of the signing surface already used. Translated into all 24 locales; the completeness test now covers them.
- Stored intakefields labels no longer win over the catalog. A persisted label is frozen in the language it was typed in, so the admin was saving Portuguese labels that every scanner saw regardless of their language. IntakeFieldSpec .label is now an optional operator OVERRIDE, and the admin persists structure only — key, order, type, requiredness.
- formatSignedAt asks Intl for the time-zone name instead of printing a hardcoded "horário de Brasília", which was right in one language of 24.
- Enabled for the bilateral NDA (/sign/nda), contractor W-9 (/sign/w9), and employee W-4 (/sign/w4), alongside the existing image release.
- Deliberately NOT enabled for custom-order-deposit, engagement-ring-order, lab-grown-diamond-order, wholesale-agreement, growth-services-retainer, natural-stone-release, bench-jeweler and casting-house. The intake form asks for every placeholder that is not an operator constant, and on those the remaining placeholders are prices, deposit percentages and payment terms — a QR link would let the customer set their own deposit and sign it.
- The NDA drops {effective_date} (nobody is there to type it, and a counterparty dating their own NDA can backdate it) and fixes {purpose} as a constant, since a counterparty writing their own purpose narrows the confidentiality obligation they are signing.
- Intake now always collects an email, even when the wording never prints one. The completion email, the signer's copy, and the duplicate-submission guard all read signeremail, and deriving fields purely from placeholders left it null for most templates — the signer walked away with nothing.
Friday, August 28, 2026
6 updates pushed
Perf10:32 PM · ZRosserMcIntosh
run functions in pdx1, next to the Supabase us-west-2 database
- Every function was executing in gru1 (project default) while Postgres
- lives in Oregon: a single SELECT 1 cost ~0.5 s, POST /api/cart (~14
- sequential queries) ~7.6 s, /api/products 3.5 s, /api/search 2 s.
- Route-level preferredRegion exports (translate routes, iad1) still win.
287e479View on GitHub →
Featuremarketing10:05 PM · ZRosserMcIntosh
Meta signal health, GA4 read side, email UTMs, internal-traffic guard
- Meta Marketing API client + /admin/marketing/signals page and API (dataset quality, audience sync); scripts meta:signals, meta:audiences
- GA4 Data API client + pnpm ga:report; setup docs for both
- src/lib/marketing/utm: withUtm / addUtmToEmailHtml / toUtmCampaign, applied to campaign tests, system-email previews/tests, welcome gift, abandoned cart, wedding, credit, gift-card and winback emails; /go short links forward incoming UTMs
- layout: GTM / gtag / Meta / X pixels and PageViewTracker never load on internal routes (server + inline early-return guard)
- .env.example: GA4 + Meta Marketing vars; drop the unused AIza key
Thursday, August 27, 2026
1 update pushed
Refactorprospecting12:03 AM · ZRosserMcIntosh
split the console into tabs, badge the standard
- The board stacked six things on one page: autopilot, the build standard, a
- 7-day send schedule, the revenue goal, the AI cost panel, and the prospect
- list. The list is the only one touched daily, and it sat below several
- screens of machinery that gets adjusted weekly at most.
- Four tabs now, with the mode banner deliberately left ABOVE them — whether
- the board is live or in test mode must never be one click away:
- Pipeline the book (default — the only surface used daily)
- Autopilot the runner + everything the cron will send in 7 days
- Standard which generation made each lead's artifacts
- Numbers the goal, and what the AI is costing
- Nothing was deleted or rewritten; the existing blocks are wrapped in tab
- panels. The per-prospect tabs inside the list (prospect-tabs.tsx) are
- untouched — those bucket by next action and are a different axis.
- StandardPanel now reports its rollup upward so the Standard tab carries a
- count of what is below the current bar, and carries nothing when the answer
- is zero. It stays mounted (hidden) rather than being unmounted with its tab,
- so the badge is accurate on page load instead of only after you visit the
- tab it exists to send you to.
- On removing the re-analyze / process-again buttons: they already disappear
- on their own. Every one is guarded — the urgent block on
- wouldSendBelowStandard > 0, the defect table on byIssue.length > 0, the lead
- list on prospects.length > 0 — and a clean book renders "Every lead in play
- is at the current standard" instead. They are visible right now because the
- book is not clean (167 with no deck, 12 needing fresh research).
- Worth keeping them for the same reason: OUTREACH_GENERATION is 4 and the
- ladder has already moved 1 → 2 → 3 → 4, with generation.ts explicitly
Wednesday, August 26, 2026
6 updates pushed
Featureprospecting8:36 PM · ZRosserMcIntosh
named offer URLs + a full-record page per jeweler
- Apostrophes are stripped, not separated. "Grissom's" -> "grissoms", not "grissom-s", which looks broken on the one word that is theirs.
- Ligatures and stroked letters are mapped before NFD, which does not decompose them: "ætla" was becoming "tla". A URL carrying the wrong name is worse than one carrying none. Names that yield nothing usable (e.g. purely non-Latin) keep slug NULL and resolve by token — correct, not a gap.
62b2969View on GitHub →
Refactorvirgil5:18 PM · ZRosserMcIntosh
rename the assistant Yen -> Virgil in user-facing text
- Code: cartRecoveryEnabled, autoReplyEnabled, applePayEnabled, TaskPriorityEnum, ActivityEntry, byEntity and friends all contain the substring "yEn".
- Copy: Hungarian "ingyenes" (free, x20), Turkish "yeni" (new, x7), Spanish "incluyendo", French "moyenne" all contain "yen".
- Money: "Japanese Yen" in currency/config.ts and exchange-rates.ts is the JPY label and is deliberately left alone.
Tuesday, August 25, 2026
32 updates pushed
Featurebrand7:01 PM · ZRosserMcIntosh
one real mark, three colourways, and the surfaces that were typing it
- An agent swept the whole app for places rendering the wordmark as literal text
- instead of the logo. It found 37 across six areas, and one thing worth stating
- plainly: lib/signatures/branding.tsx already had a component that does this
- correctly, resolving the branding row with the real asset — but its only
- importer is the ADMIN preview page. The correct component shipped to us, and
- every public signer got the text stand-in.
- THE MISSING PIECE WAS AN ASSET, NOT A DECISION
- Several of these were deliberate workarounds. The prospecting deck covers even
- say so: "White wordmark for the dark cover — the navy logo.png is unreadable on
- navy." That was true. There was no white logo.
- There are now three colourways, generated from the source alpha so the
- letterform antialiasing is identical across all of them and only the ink
- differs: navy, black, white. Real files rather than CSS filters, because a PDF
- has no CSS — web and print now render the identical mark. Verified by
- compositing each on its intended ground and looking at it.
- FIXED HERE
- · the QR intake page — the first screen a walk-in sees after scanning
- · the signing page header and the post-signature screen
- · the expired/voided/completed status screen
- · the sign.katura1999.com landing header and footer
- · present mode, in white on its near-black ground
- · all three prospecting PDF covers — these are sales collateral
- Also removed three dead public routes under /s/[token] (complete, expired,
- unavailable). Nothing in the repo links to them, the live flow renders those
- states inline from the localized page, and they carried English-only copy and
- stale wordmarks — three more things to keep in step for no traffic.

Page 10 of 40

← Newer Older →

Want to see the source?

github.com/ZRosserMcIntosh/katura

Featureadmin3:01 PM · ZRosserMcIntosh

store test console, shared email shell, and email gallery

Two new pages under /admin/under-development, plus the email design system
behind them.
── Store Test Console ──────────────────────────────────────────────────
/admin/under-development/test-console
Test-fires any store email or operational function against an operator-supplied
address. Every email test takes its recipient from the request and never from a
lookup, so no code path here can reach a customer inbox.
It reports FIDELITY per test, which is the point of building it rather than
reusing the existing one. The pre-existing /api/admin/marketing/system-emails/test
sends hand-written HTML that duplicates the real templates — passing it proves
only that Brevo can deliver a string, and cannot catch a broken template, a bad
merge variable, or a sender that was never wired at all. A console that hides
that distinction manufactures false confidence, which is worse than no console.
live -> invokes the real production sender (abandoned-cart, employee-invite)
template -> stand-in; proves Brevo delivery ONLY
missing -> catalogued in the admin email list, implemented nowhere
Four emails are marked missing after repo audit: welcome-series-1,
welcome-series-2, anniversary-email, and review-request. review-request is the
acquisition half of the review system — display, moderation, aggregate ratings
and verified-purchase logic all exist, but nothing ever asks a customer for a
review.
Read-only function checks cover cart-recovery readiness, a cart-recovery dry run,
Brevo connectivity, and Meta pixel/CAPI configuration. One non-read-only action,
Cart Recovery — Enable, is gated behind a to_regclass check and REFUSES unless
CartAbandonment exists. That refusal is the reason the action exists; it must not
be softened into a warning.
Scoped to OWNER/MANAGER at both page and API. requireKaturaAdmin() defaults to
including EMPLOYEE, which is too broad for a surface that sends real mail and
mints real, redeemable discount codes.
── Email design system ─────────────────────────────────────────────────
src/lib/email/layout.ts
renderKaturaEmail() plus productRow/detailTable/calloutBlock/paragraph helpers
and EMAIL_COLORS/EMAIL_FONTS tokens, built from the reference template supplied
by the owner. Previously every email hand-rolled its own HTML, so consistency
meant whoever wrote it last.
Email-client constraints encoded deliberately: table layout (Outlook has no
flexbox), inline critical styles (Gmail strips <style>), color-scheme light-only
so dark mode does not invert jewelry photography, VML + anchor dual CTA, hidden
preheader, and esc() on all interpolation since customer names and product titles
are untrusted. The trust bar reads 30-DAY RETURNS to match the canonical policy
in docs/marketing/RETURN_POLICY.md. Unsubscribe/preferences links are opt-in per
email so transactional and security sends correctly omit them.
── Email Gallery ───────────────────────────────────────────────────────
/admin/under-development/email-gallery
Fifteen reference renders with a desktop/mobile toggle, each in a sandboxed
iframe via the existing buildSandboxedEmailDocument so email HTML cannot execute
script or beacon out from inside the admin. These are design specs, not proof of
production output — individual senders are not yet migrated to the shell, and the
test registry remains the record of real send fidelity.
Also adds tsconfig.cart-recovery-check.json: a full-repo tsc OOMs at 4GB on this
machine, so route edits are verified against a scoped config, matching the
existing tsconfig.*-check precedent.

4270e32View on GitHub →

Software Updates

By the numbers

2,265 updates pushed

Friday, September 4, 2026

unbreak /admin/analytics; make failed email sends honest

Wednesday, September 2, 2026

morphing captions, guest roster, Brevo outage visibility

Monday, August 31, 2026

QR intake for identity-safe agreements, in 24 languages

Friday, August 28, 2026

run functions in pdx1, next to the Supabase us-west-2 database

Meta signal health, GA4 read side, email UTMs, internal-traffic guard

Thursday, August 27, 2026

split the console into tabs, badge the standard

Wednesday, August 26, 2026

named offer URLs + a full-record page per jeweler

rename the assistant Yen -> Virgil in user-facing text

Tuesday, August 25, 2026

one real mark, three colourways, and the surfaces that were typing it

stop hiding test meetings; remove bulk-delete UI

Katura bilateral NDA template + SERP metadata sweep

STT survives socket drops; remote captions persist once

product:retailer_item_id OG tag uses the Prisma id, not the SKU

add internal-traffic module that meta-pixel.ts imports

fire conversion events for all visitors; add productID to product JSON-LD

Safari page-translation crash, share-link copy, one support hotkey

close 13 unauthenticated admin handlers and two SQL injections

the goal panel was overstating recurring effort ~20x

stop losing buyers at the last mile

a signed PDF that looks signed — real mark, script signature, seal

drop the duplicate Address updated-at trigger

every host scheduled since 13 Aug was a guest to the engine

pin templates, and a present mode for holding the phone up

a Katura shell, and a wordmark that survives dark mode

the whole signing experience in 24 languages

the signed PDF never rendered — Playfair has no italic

drift check green — pooler endpoint, and production dispatch is no longer the default

clear the migration backlog — 13 unrecorded down to zero

migrations never applied themselves — make the drift loud instead of silent

stamp which generation wrote each lead, and grade the book against today's standard

the send calendar was hiding most of what it sends

diagnose why outbound isn't working, with a sample-size gate in front

rebuild the signing domain and put signed copies behind an account

self-serve signing from a QR code

record the built workspace tree and the two API limits hit

bulk-regenerate decks blocked by a failed fact-check

manual per-category export of minutes into ClickUp

stop the auditor rejecting the email's own sender voice

conversion integrity audit and ClickUp integration plan

store test console, shared email shell, and email gallery

fail closed, and add the CartAbandonment table it needs

deduplicate gift-balance purchases in Conversions API

credit placements were charged and never issued

gift-cards: one continuous placement flow — no scroll, no second click

gift-cards: make the Private Credit Event actually able to take money

gift-cards: non-refundable credit, $9,999 ceiling, guest placement

gift-cards: the Katura Private Credit Event + credit certificate email

plain-English findings, $8.4k goal panel, variant C, scoring page, 9 autopilots

separate B2B jewelers from the D2C audience

follow-up sequence, A/B + follow-up calendars, analytics build-out