Software Updates

real ticketing system + admin queue + Shopify address backfill

• New SupportTicket + SupportTicketEvent models with reference (T-XXXXX), source enum (FORM/EMAIL/ADMIN_MANUAL/CHAT), status, priority, category, assignment, optional reporter linkage to existing User by email.
• /admin/support queue page: status counters, search, filters in URL, per-ticket row with reporter / message / page URL preview.
• /admin/support/[id] detail page: full message + metadata, complete event timeline, sidebar with status/priority/assignee/category controls, email reply form, internal notes.
• API routes:
• PATCH /api/admin/support/tickets/[id] (status/priority/assign/category with auto STATUS_CHANGED/RESOLVED/CLOSED/REOPENED events)
• POST /api/admin/support/tickets/[id]/reply (Brevo email reply with forced [T-XXXXX] subject prefix so customer replies re-attach; auto bumps NEW/OPEN -> WAITING; records REPLY_SENT)
• POST /api/admin/support/tickets/[id]/notes (internal NOTE event)
• /api/support/ticket now persists tickets first (system of record), then emails. Email and name are OPTIONAL — only message required (so 404 reporters aren’t forced to identify themselves).
• Inbound email webhook: when an email lands at support@katura1999.com, either appends REPLY_RECEIVED to the existing ticket on that thread (and reopens WAITING/RESOLVED) or auto-creates a new EMAIL-source ticket.
• Support form: message required + auto-attached page URL field; email/name marked optional; success message shows ticket reference.
• Admin nav: new 'Support Tickets' entry under Business Tools, with LifeBuoy icon + en/pt i18n keys.
• prisma/add-support-mailbox.sql now uses two-step ON CONFLICT (id) + ON CONFLICT (email), so reruns on partially-applied DBs no longer fail with 23505 on ea_service. Uses quoted "User" + composite conflict on email_mailbox_members.
• Idempotent migration with DO $$ enum guards, FKs to "User" and "SaasTenant", 8 indexes covering status / assignee / reporter / tenant / createdAt lookups.
• Reads customers_export.csv + orders_export_1.csv, matches by lowercase email, picks the canonical address per user in priority order: 1. native katura1999.com order shipping address (most recent) 2. Shopify customer-export default address 3. most recent Shopify order shipping address
• Creates the matching Address row, marks it default, and back-fills blank User denormalised columns (never overwrites curated values).
• Dry-run by default (--apply to commit, --email foo for spot fixes).
• Initial dry-run: 15 addresses to create, 7 User rows to back-fill, including Maggie Dickhaus (Florida -> 422 Harstvedt Road, 32459).

phone bug, support@ rename, K99 sitemap, in-page support form

• Fix Profile card showing dash for phone: split combined user.findUnique into two independent queries so a failure on the addresses sub-relation no longer blanks the entire profile (root cause of 'Phone: —' on /account while /account/settings showed it correctly).
• Add 'My Addresses' card on /account that previews the default address and links to a new /account/addresses standalone page.
• Add /account/addresses (client) page wrapping SavedAddressesSection with the 15-country list (US/CA/GB/AU/DE/FR/IT/ES/JP/NZ/BR/MX/HK/IL/AE).
• Stop /account/settings rendering the red 'Failed to load addresses' destructive banner: GET /api/account/addresses now returns { addresses: [], degraded: true, message } on Prisma failure instead of 500-ing, and SavedAddressesSection surfaces the message as a soft notice.
• Replace stats._sum.totalSpent?.toNumber() with Number(stats._sum.totalSpent || 0) so a Decimal-vs-number coercion edge case can no longer trip the boundary.
• New POST /api/support/ticket: validated payload, honeypot, rate-limited via existing 'contact' bucket (10/hr), delivers to support@katura1999.com via Brevo with the customer's email as Reply-To so support replies hit them directly. Returns ticket reference + brevoMessageId on success.
• New <SupportTicketForm/> component (no UI-lib dependencies so it renders inside crashed boundaries). Variants: 'compact' and 'disclosure'; theme light/dark.
• BrandErrorPage now renders the support form inline below the mailto button and tags submissions as 'admin-error' or 'client-error' depending on the error.tsx that wrapped it.
• /[locale]/not-found.tsx now embeds the support form so 404 traffic can tell us what they were looking for instead of bouncing.
• Rename every customer-facing tech@katura1999.com → support@katura1999.com: brand-error-page, admin/error, [locale]/error (comment), checkout/error, platform/(marketing)/cad/error.
• Add support@katura1999.com to the SHARED mailbox seed in prisma/upgrade-email-system.sql so it appears in /admin/email.
• Add prisma/add-support-mailbox.sql forward migration that idempotently inserts ea_support and grants rosser+stella OWNER/MEMBER access.
• Replace the broken @katura.com domain with @katura1999.com across 28 source files (wedding-emails, shipstation/notifications, marketing/validations, api/wholesale/apply, api/bespoke/inquiry, casting/marketplace-emails, intelligence user-agent, etc.). brevo.ts default sender also fixed (was silently routing every transactional email to a nonexistent inbox).
• Test fixtures and docs-content.tsx intentionally left untouched.
• Add src/app/platform/sitemap.ts: dedicated K99 sitemap served via the k99.katura1999.com/sitemap.xml route through the existing middleware rewrite. Emits 10 marketing/feature paths × en/es/pt with hreflang alternates so Search Console can finally index the platform.
• Add src/app/platform/robots.ts: blocks indexing on previews, allows on prod, lists the K99 sitemap, blocks /admin /api /login /signup.

investors + mining subdomains, Etsy migration foundation, dev porting plan

• Added investors subdomain to RESERVED_SUBDOMAINS + middleware rewrite block
• 301 redirect from katura1999.com/investors -> investors.katura1999.com
• Refreshed investor pitch: 'Three Compounding Moats' positioning
• New 'The Source' card linking to mining.katura1999.com
• New 'Developer Ecosystem' section linking to developers.katura1999.com
• Added Q3 2026 Minas trip + Q4 2026 marketplace milestones
• Swapped purple platform badge to navy for brand consistency
• src/lib/migrate/etsy/{types,parse,map,index}.ts: Edge-safe CSV parser, pure listing/variation/order mapper to K99 product/variant drafts, warnings model (duplicate SKUs, image fetches, currency mismatch).
• /migrate/etsy marketing page with concierge offer for 50+ listings
• docs/migrations/ETSY-TO-K99.md: architecture, mapping table, edge cases, rollback plan, roadmap.
• Added mining subdomain to middleware (RESERVED + rewrite + skip-intl)
• Marketing layout + page: 'Direct from the source. Patiently.' Vague-by-design positioning around Minas Gerais relationships. No named contacts. Founder-led Q3 2026 trip referenced. Sourcing principles: no cold mine visits, trust-but-verify, cutters first, buying discipline.
• docs/developer-platform/PORTING-FROM-SHOPIFY-AND-WORDPRESS.md: full mapping cheat sheets (App Bridge -> K99 SDK, OAuth scopes -> capabilities, WP hooks -> K99 events / blocks, etc.), porting bounty schedule ($500-$5k+), support model.
• /porting page on developers.katura1999.com surfacing the cheat sheets, bounty table, and CTA to /apply?context=porting
• Added Porting link to developers nav + footer

foundation for K99 App Marketplace + developer portal

• middleware: rewrite developers.katura1999.com/* → /developers/* (mirrors the k99 subdomain pattern; same security headers, kill-switch, api-admin block, and auth guard for /dashboard)
• 'developers' added to RESERVED_SUBDOMAINS
• /developers added to the skip-intl path list
• layout.tsx — brand-consistent header/footer with K99 mark
• page.tsx — landing page covering pillars, extension surfaces, security promise, build flow, and an early-access CTA
• platform/(marketing)/layout.tsx: 'Developers' link in the desktop nav and 'Developers & App Marketplace' in the footer Resources column
• platform/(marketing)/mobile-nav.tsx: Developers entry with external link support
• Threat model (T1–T10) with real-world precedent
• Seven non-negotiable architectural principles (sandbox, scopes, signed bundles, no remote code, full audit, kill-switch first, defence in depth)
• Surface map (storefront / admin / backend / data)
• Sandbox runtime spec (cross-origin iframe on apps.k99cdn.com, hardened CSP, postMessage bridge with scope brokering, no same-origin or eval ever)
• Capability scope grammar with sensitive-scope policy
• App lifecycle, automated + human review pipeline, kill-switch tiers
• Identity/payments model (Stripe Connect, 80/20 split)
• Database schema sketch (App, AppVersion, Developer, Install, CallLog)
• Phase 0–4 roadmap and open questions

correct broken signingKey reference in Mailgun inbound webhook

• verifyMailgunSignature was referencing undefined 'procee' instead of
• process.env.MAILGUN_WEBHOOK_SIGNING_KEY, causing a compile error that
• crashed the entire /api/webhooks/email/inbound endpoint on every request.
• Fixes inbound email receiving at /admin/email.

rebrand Yen AI → K99AI, add Coming Soon roadmap, add fee strategy doc

ship K99↔Katura HQ marketplace MVP (Sprints 1-11)

• KaturaCastingOrder + KaturaCastingOrderEvent + KaturaCastingOrderAttachment + KaturaCastingOrderReview models (multi-file Prisma schema)
• K99 buyer flow: CAD upload → instant quote → Stripe Elements payment → live status tracking → review submission with public consent
• Katura HQ production queue: full quote breakdown w/ margin, status advance, shipping label purchase via EasyPost, internal notes vs buyer-visible events
• Vendor reply UI on Katura HQ for buyer reviews (shared validators)
• Stripe Connect Standard accounts for tenants (zero PII handling)
• Audit-logged onboarding state transitions via deriveConnectStatus
• Tenant self-service onboarding at /admin/settings/payouts (+ nav link)
• Admin refund button (full/partial, fee-reversal toggle, actor audit trail)
• Webhook handlers for charge.refunded with extracted+tested decision logic
• Public reviews API (cached 5min, only consented reviews, brand name only)
• Public marketing page at /casting-marketplace/reviews with histogram + hero stats + vendor reply display
• Buyer + Katura ops email notifications for refunds (full vs partial copy)
• TENANT_ZERO_ID sentinel boundary (Katura HQ vs K99 tenants)
• Idempotency keys on all Stripe mutations
• Connect onboarding gated on Privacy/ToS/Refund policies
• Per-route auth guards (requireKaturaAdmin / requireK99Admin)
• See docs/STRIPE_CONNECT_SECURITY.md
• marketplace-quote (18) — pricing/margin engine boundaries
• stripe-connect (18) — Connect status derivation
• tenant-payouts-guard (8) — self-service onboarding auth
• review-validation (20) — shared rating/body/reply validators
• webhook-refund (13) — Stripe charge.refunded decision logic
• Updated tenant-prisma drift sentinel: 184 → 198 models
• Fixed config brand-fields test (Katura → KATURA)

per-file download buttons + Download All on CAD share page

• Each file card in the sidebar now has its own 'Download' button (violet, bottom of card) gated by meta.allowDownload — so the NYC casting house can grab a single STL without selecting it first.
• Download All button in the section header appears whenever allowDownload is true and there are 2+ files. Downloads via fetch → createObjectURL (true file-save dialog, correct filename) with a 400 ms stagger between files so browsers don't block the chain. Falls back to window.open on network/CORS error. Shows a Loader2 spinner + 'Downloading…' label while in-progress.
• File names are humanised: '{projectNumber}-v{n}.{ext}' for direct uploads, '{libraryFileName}' for CAD library links.
• Toast confirms '3 files downloaded' on completion.

unbreak /account + brand-styled error boundaries

• /account was throwing 'Oops Something went wrong' because each of its 4 server-side Prisma queries (user, giftCard, weddingSite, weddingSiteAdmin) was awaited unguarded — any one failure (most likely a missing migration on prod for the wedding tables) bubbled to error.tsx.
• Wrap every query in try/catch with explicit console.error tagging ("[/account] <query> failed:") so we can grep Vercel logs and the page degrades gracefully (renders the bits that worked) instead of hard-failing.
• New shared component src/components/errors/brand-error-page.tsx:
• Playfair-Display 'OOPS' headline using font-display + 0.2em tracking, bracketed by gold gradient dividers.
• Three-button row: Try again / Return home / mailto:tech@katura1999.com with a pre-filled subject + body containing the page URL, error.digest reference, and error.message so customers can fire off a useful report in one click.
• Sentry.captureException on mount so client-only crashes (hydration / useEffect throws) reach the dashboard — server boundaries already report via instrumentation.ts → onRequestError.
• Tagged with the boundary name (locale-root, cart, checkout, products, shop, admin, cad) so we can filter in Sentry.
• Refactor all six error.tsx files to wrap BrandErrorPage with context-specific copy: [locale]/error.tsx → generic [locale]/cart/error.tsx → 'Your cart is taking a moment' [locale]/checkout/error.tsx → reassures payment NOT charged [locale]/products/error.tsx → 'every Katura piece is one of a kind' [locale]/shop/error.tsx → 'shop is taking a breath' admin/error.tsx → escalates to tech@ with louder ref platform/(marketing)/cad/error.tsx → 3D viewer specific copy

unblock CAD library link + materials input + surface upload errors

• /admin/projects/[id]?tab=cad: 'From library' now uses the lightweight POST /api/admin/cad/links endpoint (creates a polymorphic CadFileLink row) instead of the heavy /cad-files/from-library copy route. The project page already renders entries from the cadFileLink table, so no file copy is needed. Eliminates the silent failure when copying between Supabase 'cad' and 'uploads' buckets.
• POST /api/admin/jewelry-projects/[id]/cad-files: surface real Supabase storage and Prisma errors back to the admin instead of an opaque 'Failed to upload CAD file' (P2002 / P2003 mapped, RLS & bucket-not-found mapped).
• /admin/projects/[id] CadFilesTab: include HTTP status in error toasts and stop swallowing exceptions in the catch blocks.
• /admin/projects/new: replace the HTML 'hidden' attribute with the Tailwind 'hidden' class on the four animated step <section>s. The motion.section wrapper was not always forwarding the boolean attribute, leaving inactive sections visually hidden but still occupying the layer above the active step and intercepting clicks on Materials > Metal Preference (and other top-of-section inputs).

X/Twitter pixel + multi-platform link tracking + recommendations

• X (Twitter) Universal Website Tag injected (NEXT_PUBLIC_X_PIXEL_ID, gated to prod)
• New x-pixel.ts with isXTraffic() detection (twclid, x.com/t.co referrer, utm)
• New multi-pixel.ts aggregator fans events to Meta + X with shared event_id preserving Meta CAPI deduplication
• All 6 conversion call-sites migrated (cart, checkout, success, wishlist, PDP, signup)
• Lead event added on email-signup popup success (welcome-gift-popup)
• New /lib/marketing/channels.ts — single source of truth for ad platforms (Meta, FB, IG, X, Google, YouTube, Pinterest, TikTok, LinkedIn, Reddit, Snapchat, Email, Influencer, Podcast, QR, Other)
• Smart-link create dialog: free-text utm_source replaced with platform Select including operator notes per channel
• Bulk-generate dialog: dynamic channel checkboxes from MARKETING_CHANNELS
• Recommendations card on /admin/stella/marketing/links — top products by purchases*4 + addToCart*2 + wishlist*1.5 + clicks*0.5 (last 30d), filtered to channels without an existing link, one-click pre-seeds the create dialog
• Recommendations API at /api/admin/marketing/recommendations
• Traffic classifier extended with YouTube, Reddit, Threads, Snapchat, WhatsApp (referrer-channel.ts + 2 SQL CASE blocks + CHANNEL_COLORS + channelIcon)
• docs/marketing/X_TWITTER_STRATEGY.md — luxury-brand X playbook (audience, creative, bidding, KPIs, crisis playbook, 90-day rollout)

admin UI panel + Stripe webhook auto-mark-paid

• New <AdminInvoicePanel> on /admin/orders/[id]: send-invoice / mark-paid / check-received / cancel actions, status badge, reminder log, customer payment-method shown
• Admin GET endpoint added: /api/admin/invoices/[orderId]
• Stripe webhook checkout.session.completed now detects metadata.kind='order_invoice' and calls markInvoicePaid() — fires the payment-confirmed email automatically when card payment succeeds
• New shared markInvoicePaid() helper in invoice/service.ts (idempotent; used by both admin route and webhook)

branded invoice system with check + electronic payment flows

• OrderInvoice + OrderInvoiceReminder models (idempotent SQL migration)
• 9 unique branded emails: initial + 7 daily polite/luxurious follow-ups + auto-cancel
• Three customer payment paths:
• Stripe card (creates Checkout Session against existing order total)
• Pay by check (reveals 14113 Laurel Haven address + payable-to 'October Skies Benediction LLC DBA KATURA 1999', auth + own-order gated)
• Other electronic (Venmo/Zelle/Wise/wire) -- pauses 48h, sends 'please allow us 24-48 hours to confirm' email
• Customer order detail page mounts InvoicePaymentPanel above items
• Daily cron at 14:00 UTC (9am EST) processes due reminders
• Admin actions: create, mark-paid, check-received, cancel
• Reminders auto-pause 7 days for checks, 48h for electronic
• Auto-cancels order on day 8 with final polite notification

saved-addresses CRUD with labels + set-default

• New API: GET/POST /api/account/addresses, PATCH/DELETE /api/account/addresses/[id]
• First address auto-becomes default + labelled 'Primary'
• Setting an address as default mirrors fields back to User denormalized cols (so Stripe checkout pre-fill stays accurate)
• Deleting the default promotes the oldest remaining address
• Cannot un-default the last/only default (silently keeps it)
• New <SavedAddressesSection> client component: list / add / edit / delete / set-default with label suggestions ('Primary', 'Lake House', 'Daughter\'s Apartment', etc.)
• Mounted in /account/settings under the legacy Default Address card

welcome splash everywhere, navy trust icons, hero replay, backfill script

• Extract WelcomeSplash into reusable client component (src/components/account/welcome-splash.tsx)
• Mount on /account so client logins/registrations get the same Welcome Rosser animation employees see on /admin
• Login + register + reset-password (employee invite) now clear the relevant session flag on success so the splash fires for the new session
• Trust bar icons: amber → footer navy (#0B1527) on a very light tint circle
• Hero collage product tile: imperatively replay video on hover so autoplay tiles can be re-triggered without page refresh
• New backfill script scripts/backfills/backfill-default-addresses.ts: for every paying user with no Address rows, create Primary + extras from past order shippingAddress (deduped by line1+postalCode); fills user denormalized fields if blank. Idempotent. --apply flag required to write.

address auto-save, profile enrichment, compact gift card, tracker fix

• Order tracker line now spans first→last circle centers (math: 100/N/2% inset)
• Address model: add optional 'label' field (e.g. 'Lake House', 'Primary')
• New helper saveShippingAddressForUser: on first order fills user denormalized fields + creates default 'Primary' Address; subsequent unique addresses saved as additional rows (dedupes by line1+postalCode case-insensitive)
• Stripe webhook calls helper non-blocking after order update
• /account Profile card now shows phone + saved addresses with labels + edit link to settings
• /account Gift Cards section shrunk to compact 1-line summary with collapsible breakdown; redeem control kept inline
• Remove gift emoji from Dates & Perks card description

lock-in decisions for orders/projects/tracking work

Art tab: IG-style gallery + lightbox + multi-upload + paste; Stones: collapsible cert dump; carrier-detect util; OrderTimelineEvent model

orders/projects reconciliation + tracking plan

Admin orders: remove Delete button; require typed order # to cancel

Stone video upload/viewer, fast order search (?lite=1), stone spotlight dialog (video + cert + CAD)

Remove Rhodium from metal price displays — plating only, not castable

Project per-section chat (admin tabs + share-link guests)

• New JewelryProjectComment model: threaded (1 level), per-section (CAD/CASTING/LABOR/GENERAL), soft-delete, admin/guest authorship, attachments JSON (images + docs ≤10MB, ≤4 per comment).
• New ProjectShareCommentMode enum on JewelryProjectShareLink: NONE / ANONYMOUS / REQUIRE_NAME / REQUIRE_EMAIL.
• Admin API: list / create / edit / soft-delete comments per project.
• Share API: list / create with commentMode enforcement.
• Upload API: dual-auth (admin session OR ?token=share), Supabase Storage at order-attachments/project-comments/<projectId>/.
• ProjectChat React component: thread, reply, edit, soft-delete, drag-drop file attach, image thumbs + doc cards, guest identity persisted per share token, 20s focused polling.
• Wired into CAD/Casting/Labor admin tabs and share page.
• ShareProjectDialog: comment-mode <select>, badge in link summary.

3D viewer: brighter PBR lighting + richer gold colours (esp. rose)

Volume readout: 1/100,000 cm³ precision across casting panel + metal prices panel

Share page: pause/play 3D rotation + live metal prices keyed to CAD volume

natural aspect ratio + lightbox for non-hero product images

Smart links: fix /go/ 404 from i18n rewrite + Meta default + larger dialog; rebrand financing widget

• CreateLinkDialog: sm:max-w-lg → sm:max-w-2xl so the entire form is visible without horizontal clipping (was cutting off UTM source field in the modal screenshot)
• Default UTM source: 'facebook' → 'meta' in both the dialog and the POST /api/admin/marketing/smart-links default. Meta is the umbrella that covers FB + IG ads — operators can still override per-link
• FinancingDisplay rebranded: 'or as low as $X/mo with Affirm' → 'or finance from $X/month'. Removes the partner name from above the fold to preserve the luxury brand feel; customer still sees Affirm/Klarna/Afterpay branded options inside Stripe's Payment Element when they actually choose how to pay

Marketing hub: popup→email capture, smart-link picker, KPI perf, AbortError fix

• Fix 'operation was aborted' error on /admin/stella/marketing/links by filtering AbortError + decoupling shared inflight fetch from per-render signals
• Add lightweight /api/admin/analytics/kpis endpoint (~14 simple counts) so the marketing dashboard header KPIs render in <300ms instead of waiting on the 21-query conversions endpoint; layout fast-paths through it then upgrades to the full payload when ready
• Rewrite welcome-gift popup: inline email capture, no account required, no $500 minimum. Copy: 'Join our email list / Get a $100 gift card just for signing up'
• New POST /api/email-signup/welcome-gift — issues GiftCard by email (idempotent per address), records MarketingEvent, syncs to Brevo Newsletter list, sends gift code email
• Smart Links create dialog: replace destination URL textbox with a product/collection search picker (uses /api/admin/products/search and /api/admin/collections); auto-derives destinationUrl + auto-fills link name
• Add 'Email Subscribers' customer segment (driven by MarketingEvent.type = EMAIL_SIGNUP_WELCOME_GIFT) so popup signups flow into the existing segments → Brevo export pipeline
• New strategy doc: docs/marketing/marketing-hub-ia-and-segments-review.md proposing a unified /admin/marketing IA (Acquisition / Engagement / Audience / Analytics / Settings) with phased rollout plan

smart links + Meta CAPI hardening + dashboard perf

• New MarketingSmartLink + MarketingSmartLinkClick Prisma models
• Public redirect at /go/[slug] with server-side _fbc cookie injection (rescues Meta attribution when client pixel is blocked by Safari ITP / iOS Private Relay / ad-blockers)
• Server-side ViewContent CAPI fire on every click
• Bulk-generate endpoint: auto-creates fb-/ig-/g-/tt- variants for every published product + collection in one POST
• Admin UI: KPIs, list, filter, archive, per-link analytics with daily chart, top countries, recent clicks, and CAPI fire rate
• NEW /api/tracking/add-to-cart route + cart-context wires it up in parallel with client pixel using shared eventId (was missing entirely)
• NEW /api/tracking/initiate-checkout route + checkout page wires it up with shared eventId (was missing entirely)
• Stripe webhook Purchase fires now include eventId (deterministic pur-${orderNumber}), fbp, fbc, clientIpAddress, clientUserAgent, plus city/state/zip/country for higher Match Quality
• create-payment-intent + checkout/route persist fbp/fbc/IP/UA in Stripe metadata at session/intent creation time
• Success page uses deterministic pur-${orderNumber} eventId so client + CAPI fully deduplicate
• Layout no longer blocks children on the 1138-line conversions endpoint
• Module-level fetch cache + in-flight dedup (no re-fetch on tab nav)
• KPI cards render skeleton placeholders immediately
• Sub-pages render MarketingSkeleton when data is null and loading
• All sub-routes prefetched on layout mount (instant tab switching)
• conversions endpoint: 15-min in-memory TTL (was 3 min) + Cache-Control: private, s-maxage=300, stale-while-revalidate=1800

paid ads growth plan — k test → M profit roadmap