Software Updates

add Katura High Jewelry page and footer link with all 24 translations

• Add /high-jewelry page with invitation-only high jewelry content
• Add highJewelry link at top of footer shop column
• Add full highJewelry namespace translations in all 24 locale files
• Copy citrine necklace image to public/images with clean filename

complete tenant data isolation audit — all 8 issues resolved

• Restructured where clause to use AND for combining tenant scope with search OR
• Scoped trailing 12-month revenue query to tenant_katura orders Issue #7: createAuditLog() now writes tenantId (defaults to TENANT_ZERO_ID)
• All 14 inline prisma.auditLog.create() calls now pass tenantId explicitly
• createAuditLogger() accepts tenantId param or reads x-tenant-id header
• logFileUpload/logFileDownload/logDataExport accept tenantId Issue #8: SQL backfill script for User.tenantId (staff + customers)

redesign investor page — light/elegant aesthetic matching /platform, rose gold typography

• Replaced dark navy (#030712) theme with clean white/stone-50 light backgrounds
• Switched all headings to font-serif for refined luxury feel
• Applied rose gold gradient text (from-stone-800 via-amber-700 to-stone-700) matching /platform
• Cards: white bg + stone-200 borders with hover shadows instead of frosted glass
• Buttons: solid stone-900 with elegant hover states
• Section labels: rose gold gradient uppercase tracking
• Removed 'Founder' from Rosser's title — now just 'Chief Technology Officer'
• Promoted Stella to 'Chief Marketing Officer' (from Director of Marketing)
• Updated all docs: LUXURY_BRAND_STRATEGY, BUILD-STATUS, KATURA_SAAS_PLATFORM_PLAN

revenue-based valuation estimator — auto-populates from actual order data

• Cap table API now queries TTM, current year, and prior year settled order revenue
• Uses same SETTLED_STATUSES + Shopify import filter as analytics overview
• ValuationEstimator auto-populates revenue from real orders on load
• Users can toggle between TTM / YTD / Prior Year revenue sources
• Editable for simulation — shows 'Actual' vs 'Simulated' badge
• Reset button to snap back to actual revenue after editing
• YoY growth badge when prior year data available
• Added RevenueData type to cap table types
• Disclaimer updates when using actual revenue data

remove all `any` types from tenant-prisma.ts

• Created AllModelsQueryArgs interface for $allModels extension callbacks
• Replaced 18 `: any` destructured params with typed AllModelsQueryArgs
• Added explicit `as Record<string, unknown>` casts for result/data access
• Zero `any` remaining in tenant-prisma.ts (core tenant isolation layer)
• All 39 existing tests pass unchanged

cap table — run migrations directly, remove fs.readFileSync from Vercel

• Ran all 5 cap table SQL migrations against Supabase directly
• 15 cap_* tables created with seeded data (October Skies Benediction LLC)
• Rewrote handleInitializeTables to check for existing tables instead of reading files
• Removed fs/path imports and outputFileTracingIncludes from next.config.ts
• handleReseed returns 501 with instructions for local execution

disable Command built-in filtering for server-side search

• The shadcn Command component has its own client-side filter that was
• racing with our server-side search. When results came back from the
• API, Command's internal filter couldn't match them because they
• weren't present when the filter string was first evaluated.
• Added shouldFilter={false} to both customer and product Command
• components so only our useEffect debounced API search controls
• what's shown.

update rexandkate wedding site hero text

• Changed the top line from 'Request the Pleasure of Your Company'
• to 'We Request the Pleasure of Your Company'

align order and payment status enums with schema

• CONFIRMED → PAID (schema uses PAID, not CONFIRMED)
• Added REFUNDED option
• PAID → SUCCEEDED (schema uses SUCCEEDED, not PAID)
• Added PROCESSING and PARTIALLY_REFUNDED options

correct import path for TENANT_ZERO_ID

add detailed logging to order creation flow

add missing tenantId to Order, OrderItem, Payment, and AuditLog creates

• prisma.order.create()
• nested items.create (OrderItem)
• nested payments.create (Payment)
• prisma.auditLog.create()

replace Create Order dialog with full page at /admin/orders/new

• Sticky header with back arrow, cancel, and create buttons
• 2-column layout: main content (2/3) + sticky sidebar (1/3)
• Left column: Customer, Products, Shipping/Billing Address, Notes
• Right sidebar: Order Summary with live totals, Status & Payment, Date
• Extracted reusable AddressForm component
• Mobile-responsive: single column with bottom submit button
• Expanded country list (30 countries)
• Added Cash payment method option
• 'Billing same as shipping' defaults to checked
• Old dialog component preserved for reference but no longer imported

include tenantId in ProductImage.create() during upload

• ProductImage.tenantId is required (NOT NULL). The upload route was
• omitting it, causing Prisma to reject the scalar productId and demand
• a relation connect instead. Now fetches tenantId from the parent
• Product and passes it through.

upload UX — show detailed errors, detect video files in image uploader

• Upload route: detect video MIME types and hint to use 'Product Video' section
• Client: show each server-reported error detail as a toast notification
• Remove diagnostic endpoint (upload-test) and debug script (check-product)
• Expanded allowed MIME types on client (avif, heic, heif, tiff, svg+xml)

upload route — trim productId, add raw SQL fallback, return details on 404

add productId logging to upload route

add upload diagnostic endpoint

remove test script

expand image upload to accept AVIF/HEIC + add maxDuration for Vercel

• Client-side allowlist expanded: AVIF, HEIC, HEIF, TIFF, SVG
• Added fallback: any image/* type accepted if not in explicit list
• HTML accept attribute updated to include new formats
• Added maxDuration=60 to upload route for Vercel serverless
• Better error messages include file type for diagnosis

product image upload — expand Supabase MIME types + better logging

• Updated Supabase bucket to also allow: image/avif, image/heic, image/heif, image/tiff, image/svg+xml
• Added file name, MIME type, and size logging on every upload attempt
• Error messages now include the MIME type for easier diagnosis

exclude 'Custom Rings' category from homepage and search

• Added EXCLUDE_CUSTOM_RINGS_CATEGORY and CUSTOM_RINGS_CATEGORY_SLUG constants to product-visibility.ts
• Applied category filter in getDynamicCollections (home-cache.ts)
• Applied to search API (categories + products)
• Custom rings category remains visible in admin

exclude custom ring orders from all public product listings

• Homepage dynamic collections (home-cache getDynamicCollections)
• Homepage new arrivals (home-cache getNewArrivals)
• Hero product collage (/api/products/collage)
• Collections listing page (/collections)
• Collection detail page (/collections/[id])
• Collection API (/api/collections/[slug])
• Creations/shop page (/creations)
• Category pages (category-page.tsx)
• Products API (/api/products)

Phase 5: Build tenantPrisma() client extension for 184 tenant-scoped models

• Rewrote src/lib/saas/tenant-prisma.ts from Phase 0 (4 SaaS models, manual per-model hooks) to Phase 5 (184 models, $allModels extension with runtime Set lookup)
• TENANT_SCOPED_MODELS: Set of 184 PascalCase model names covering all models with NOT NULL tenantId (156 core + 27 SaaS + 1 DesignFile)
• Covers all 16 Prisma operations: findMany, findFirst, findFirstOrThrow, findUnique, findUniqueOrThrow, create, createMany, createManyAndReturn, update, updateMany, upsert, delete, deleteMany, count, aggregate, groupBy
• findUnique/findUniqueOrThrow use post-fetch verification (can't inject tenantId into unique where clause)
• create/createMany strip tenant relation field to avoid Prisma conflicts
• upsert handles where + create + update sections, prevents tenantId mutation
• Throws on empty tenantId to prevent accidental global queries
• withTenant() preserved as deprecated alias for backward compatibility
• Exported: tenantPrisma, withTenant, isTenantScoped, TENANT_SCOPED_MODELS, TenantPrismaClient type
• checkLimit() now uses tenantPrisma for product counts (was TODO in Phase 0)
• Updated barrel export in src/lib/saas/index.ts
• 39 unit tests passing (registry correctness, hook behavior, cross-tenant guards)
• npx tsc --noEmit: zero source errors
• npx prisma validate: schemas valid

Phase 4: Make tenantId NOT NULL on 156 tenant-scoped models

• Updated 31 .prisma schema files: tenantId String? → String, SaasTenant? → SaasTenant
• Applied ALTER COLUMN SET NOT NULL to all 156 tables in production DB
• Used race-condition-safe strategy: SET DEFAULT → backfill NULLs → SET NOT NULL → DROP DEFAULT
• Caught and backfilled 2 straggler rows in ShipStationSyncLog during transaction
• 20 hybrid models intentionally left nullable (User, Article, GiftCard, etc.)
• Zero TypeScript compilation errors
• Prisma validate ✅ | Prisma generate ✅

Phase 3 complete — backfill 13,000 NULL tenantIds → tenant_katura

• Dry-run mode by default (--execute flag to run)
• Verifies tenant_katura exists before touching data
• Counts NULLs per table before executing
• Single SERIALIZABLE transaction — all-or-nothing
• Post-execution validation confirms zero NULLs remain
• 39 of 155 tables had NULL tenantIds
• 13,000 rows backfilled to 'tenant_katura'
• 117 tables were already clean (empty or pre-populated)
• Post-run validation: 0 NULLs remaining across all 155 tables

Phase 2 complete — classify all 252 models for tenant isolation

• 155 models → tenantId String (make required)
• 21 models → tenantId String? (keep nullable — hybrid/shared)
• 9 join tables → no tenantId (inherit from parents)
• 22 global models → no tenantId (platform/reference data)
• 11 user-scoped → no tenantId (scoped by userId/siteId)
• 34 SaaS models → already correctly configured
• Backfill SQL generated for all 155 tables (using tenant_katura)