Software Updates

full AAA pro search rewrite + env impact brainstorm

• Single source of truth: /api/admin/nivoda/diamonds (Loupe360 folded in as a subservice — same supplier, same auth — per Yen feedback)
• Filter sidebar with collapsible cards: origin (natural/lab/any), shape, carat range, color from/to, clarity from/to, cut, certifying lab, price range, 360° / image required toggles
• Results grid: 1 → 4 cols responsive, autoplay loop 360° video on each card, hover lift, retail price computed live via pricing engine
• Sort: price/carat/color/clarity asc + desc
• Pagination: load-more with running count
• Detail drawer (right-side modal): full grading, measurements, cert link, pricing breakdown (supplier / retail / margin / margin %)
• Friendly error surfacing with hint text from the API
• Dark Katura admin theme, gold (#D4AF37) as accent
• Playfair Display for headings (matches TIMELESS ELEGANCE hero)
• 0.18em + 0.22em tracking on all label/uppercase text
• Tabular numerals everywhere — instant scan for carat/price/color
• No harsh shadows, tile hover lifts only 0.5px
• Quick wins: live tree counter, per-ring env receipt, certs strip refresh
• Story features: ring-journey timeline, lab-vs-mined widget, transparency PDF
• Big plays: buyback program, customer impact dashboard, partner map
• Experimental: stone provenance manifest, plant-a-tree per meeting

critical payment hang + guest visibility + CAD polish

• Parallelize quick-invoice route: markSent + email + Stripe checkout session now run via Promise.all instead of sequentially (was ~5–10s, now ~1–2s)
• Hard per-call timeouts (markSent 3s, email 4s, Stripe 10s) — no single slow dependency can hang the entire request anymore
• DB stripeHostedInvoiceUrl write is now fire-and-forget (off critical path)
• Invoice card: 15s safety timeout on embedded Stripe Checkout — if it does not render in 15s, show clear error + recovery (open Stripe in new tab)
• Better fallback when clientSecret is null (rare) — direct hosted-page link
• Friendlier loading copy: "Preparing secure payment…" with help text
• Host now re-broadcasts active displayAsset / displayDiamond / displayInvoice to any participant who joins AFTER the host already opened them.
• Root cause: LiveKit publishData is fire-and-forget — late joiners never received the original packet. This is why guests "could not see the 3D CAD render that was visible to the host." Now fires on ParticipantConnected with an 800ms settle delay.
• Surface real Nivoda error messages (carat range, auth, no-results) instead of opaque 500. Adds actionable "hint" field to API response.
• Log the failing filter set + upstream error for reproducibility.
• Search UI now reads `error` body on non-200 responses.
• Scene background changed from transparent dark to WHITE (matches client share interface)
• Auto-rotate ON by default (360° loop @ 1.4 rps) — pauses on user drag
• New header controls: Zoom Out / Zoom In / Play-Pause auto-rotate
• Zoom buttons use OrbitControls dollyIn/dollyOut (works on touch too)
• Restyled invoice number to match TIMELESS ELEGANCE hero typography: Playfair Display (font-display), uppercase, 0.18em tracking, light weight
• Type label now uses gold (#D4AF37) with wide letter-spacing
• Card icon swatch switched from emerald to gold
• Added hairline gold gradient divider beneath header (echoes hero ornament)
• Natural / Lab-Grown / Any origin toggle added to in-meeting Nivoda search
• Carat min/max inputs use no-spinner styling
• Added .no-spinner CSS utility to hide number-input up/down arrows
• Applied to invoice line-item price + deposit amount fields (per Yen)

translation same-lang block, invoice email send, CAD standalone files

• 1. Translation: remove block that prevented selecting same-language target.
• Users selecting English (when speaking English) want OTHER participants
• translated TO English. The skip logic at the translation layer already
• prevents no-op self-translation.
• 2. Invoice email: quick-invoice was only marking status=SENT in DB without
• actually sending the email. Now calls buildInitialInvoiceEmail + send
• when customerEmail is provided.
• 3. CAD display: add Source 3 — standalone CadFile records not linked to any
• JewelryProject via CadFileLink or JewelryProjectCadFile. Shows as
• "Design Files (Unlinked)" so all /admin/design uploads are accessible.

use Nivoda creds as Loupe360 fallback; restyle page to admin theme

new 3×2 mosaic layout + mobile carousel + revert headline

• Hero now spans 1 cell (same size as product tiles) instead of 2
• Total product tiles: 5 (was 10–16)
• Full-width single-product carousel (up to 8 products in pool)
• Auto-advances every 4 s (pauses on interaction, resumes after 8 s)
• Swipe left/right to navigate
• Tap-zone buttons on left/right 30% of image
• Animated dot indicator strip
• respects prefers-reduced-motion (pauses auto-advance)
• HeroTile rendered below the image as a clean text block with both CTAs (consultation primary, explore secondary)
• Reverted headline back to 'TIMELESS ELEGANCE' (kept all other CRO copy improvements from previous commit: new subtitle, description, established label, CTA labels)

remove duplicate MeetingDiamondCard declaration (build error) + add Diamond Lab page

invoice fixes, subtitle latency, CAD filter, Loupe360 diamond integration

• Fix JSON parse crash in quick-invoice route (add try/catch around createInvoice/markSent)
• Replace single-line invoice with 5 default line items (CAD Design, Bench Work, Diamond, Casting, Deposit $500)
• Invoice card: side panel from right (no longer covers video)
• Reduce Deepgram endpointing 400ms → 200ms (host + guest)
• Reduce FINAL_MERGE_MS 600 → 300ms
• Reduce interim broadcast debounce 100ms → 50ms
• Expand 3D file filter from STL-only to: stl, obj, 3dm, 3mf, glb, gltf, step, iges
• Full rewrite: side panel from right, Loupe360 360° iframe viewer
• Katura-styled stat grid: grading / quality / measurements
• Color-coded grade badges
• New SharedDiamond fields: polish, symmetry, fluorescence, measurements, tablePercent, depthPercent
• New: /api/admin/loupe360/stones — server-side proxy with Bearer + session auth
• Add loupe360.com to frame-src CSP
• Nivoda GraphQL DIAMOND_FIELDS expanded (cut/polish/symmetry/measurements/table/depth)
• Loupe360 inventory tab in meeting tray: browse stones, select, confirm price, share to client
• shareDiamond() builds Loupe360 video URL from Nivoda ID
• All broadcast handlers updated (admin + guest room)

CRO overhaul — copy, CTA hierarchy, section order, K99 tone

• Headline: 'TIMELESS ELEGANCE' → 'DESIGNED FOR HER. MADE BY HAND.' (specific, emotionally loaded, differentiating — not luxury Mad Libs)
• Subtitle: 'Jewels of Distinction Since 1999' → 'Custom Fine Jewelry Since 1999' (says what we actually do)
• Description: generic artistry language → concrete promise about personal design and handcrafted-from-scratch work
• 'EST. 1999' → 'FAMILY-OWNED SINCE 1999' (carries more meaning)
• Primary CTA label: 'Discover the Collection' → 'Book a Private Consultation'
• Primary button now routes to /engagement/consultation (highest-value funnel) instead of /design-your-ring (self-serve builder with lower conversion)
• Primary = dark filled button; secondary = outline — visual weight now matches business intent
• Removed brand favicon from button (was just visual noise)
• Description text: was 'hidden sm:block' → now always visible Mobile visitors were getting zero copy below the headline — fixed
• Before: hero → categories → bespoke → arrivals → story → recommendations → press → education (3 cards)
• After: hero → bespoke → categories → arrivals → story → press → recommendations → education (3 buttons)
• Bespoke/consultation section is now the first thing visitors encounter after the hero. Previously it was buried third behind two product grids, meaning engagement-intent visitors had no obvious path to the funnel before bouncing.
• Press logos moved above recommendations: trust signals should prime visitors before browsing, not appear as page decoration below the fold
• Reduced from 3 equal large cards (fragment attention) to 3 compact pill-style buttons in a single row — keeps the page focused on transactions, not content browsing at the bottom
• 'Are You a Jewelry Business? E-commerce, CRM, marketing, payroll...' → 'Powered by K99 — The technology behind Katura is built in-house.'
• Previous copy introduced enterprise/SaaS register while consumer visitors are still in luxury jewelry mindset. New copy frames K99 as a proof point of Katura's sophistication, not a competing audience call-out.

restructure hero — press logos in hero, remove stat + not-a-stock-ring section

• Added ConsultationPressLogos export: compact inline row (no section wrapper) for embedding directly in the hero stat block
• Fixed mobile wrapping: flex-nowrap + shrink-0 on each logo so all 4 publications stay in a single row on every screen size
• Kept ConsultationPressStrip (full bordered section) as a named export for any future standalone use
• Removed 'CLIENTS IN 23+ COUNTRIES' stat (kept: FAMILY-OWNED SINCE 1999 · EVERY RING CAST FROM SCRATCH)
• Added <ConsultationPressLogos /> directly below the 2-stat strip, still inside the hero <section> — press credibility now appears immediately in the hero without requiring scroll
• Removed the 'NOT A STOCK RING. NOT A MALL-STORE EXPERIENCE.' section entirely (redundant with value points + FAQ)
• Removed standalone <ConsultationPressStrip /> that previously appeared after LoveStoriesCarousel (press is now in the hero)

3 root causes of consultation 500 error

• pickSalespersonForCountry() was called with bare await (no try/catch)
• Any DB timeout / Prisma error during region lookup propagated straight to the API route's generic catch → 500
• Fix: wrapped in try/catch; on failure logs a warning and proceeds with assigned = null (unassigned booking, admin can claim later)
• The Consultation row insert had no try/catch wrapper
• Any Prisma error (constraint, connection, schema mismatch) resulted in a silent 500 with no diagnostic detail in the logs
• Fix: wrapped in try/catch; throws CONSULTATION_CREATE_FAILED with the original Prisma error message attached so it appears in Vercel Function logs; API route catches this prefix and returns a clear client-facing message
• Also added missing attribution fields to the insert (offerVariant, landingPageVariant, utm*, metaFb*) — they were being received but silently dropped
• Old code: new Date('2026-05-19T14:00:00') — no tz suffix
• On Vercel (UTC runtime) this parsed as UTC, so '14:00 ET' was stored as 2:00 PM UTC = 10:00 AM ET (4 hours wrong)
• Fix: same ET→UTC Intl correction used by slots.ts; now '14:00' on the form is correctly stored as 6:00 PM UTC = 2:00 PM ET
• This also fixes the lead-time check which was comparing against the wrong UTC timestamp
• Added CONSULTATION_CREATE_FAILED handler → 500 with actionable message ('Please try again or email jewelryadvisor@katura1999.com')
• General catch now logs error.message for easier Vercel log triage

fix + feat(consultations): repair corrupted import, add press strip to all 5 pages

• Previous session's replace_string_in_file call accidentally spliced form JSX into line 18, corrupting the CONSULTATION_LOVE_STORIES import path
• Repaired with exact Python string replacement; import now reads: import { CONSULTATION_LOVE_STORIES } from '@/components/engagement/consultation-love-stories' import { ConsultationHeroStrip } from '@/components/engagement/consultation-hero-strip'
• Also removed leftover 'expediteFeeCents' reference (variable was deleted in previous commit but the JSON key remained in the submit payload, causing a TS compile error)
• Created src/components/engagement/consultation-press-strip.tsx
• Mirrors the identical 'As Featured In' section from the home page
• Publications: JCK Magazine, Garden & Gun, Flower Magazine, Atlanta Magazine
• Each logo links to the corresponding press article
• Footer link: 'Read Our Press Coverage →' → /in-the-press
• Uses Next.js Image for optimised logo loading
• /engagement/consultation (evergreen) — page.tsx
• /engagement/consultation/upgrade-credit ─┐
• /engagement/consultation/diamond-studs │ all use offer-consultation-page.tsx
• /engagement/consultation/bridal-bundle │ (one change covers all four)
• /engagement/consultation/extra-carat │
• /engagement/consultation/777 ─┘
• Placed immediately after the Love Stories social proof carousel, before the booking form — maximum credibility at the point of highest conversion intent

dual-timezone slots, confirmed client email, form parity across all 5 pages

• Added userTimezone state, detected on mount via Intl.DateTimeFormat().resolvedOptions().timeZone
• Each slot button now shows two lines: Line 1: ET label e.g. '10:00 AM ET' (always shown) Line 2: User's local time e.g. '3:00 PM GMT+1' (only for non-ET timezones)
• Added formatLocalTime(utcMs, tz) helper — pure Intl, no external API needed
• Footer text updated: 'All times are Eastern Time (ET) — New York.' with '· Your local time shown below each slot.' for international visitors
• Slot buttons enlarged to min-h-[52px] flex-col to accommodate dual line
• Booked slots tooltip changed from 'Taken' to 'Already booked' for clarity
• Added utcMs: number to SlotInfo — UTC timestamp for every slot, lets the client convert to any timezone without any server round-trip
• Both slot files (page.tsx + offer-consultation-page.tsx) updated to consume utcMs
• Removed isPriority variable, PRIORITY badge span, amber slot styling
• Removed priority explainer panel (the amber 'Priority / expedited' warning)
• Removed expediteFeeCents calculation from offer-consultation-page.tsx submit
• SlotResponse type: removed priority field, added utcMs field
• All 4 offer pages (upgrade-credit, diamond-studs, bridal-bundle, extra-carat, 777) use offer-consultation-page.tsx — now updated with identical slot grid
• Evergreen page (page.tsx) updated with identical slot grid + same timezone logic
• Both files now have matching SlotResponse types
• 'When (Eastern Time — New York)' is now the primary time shown
• 'When (your local time)' shown as secondary row only when timezone differs from ET
• Removed reschedule/cancel URL links from email footer
• Added 'Need to reschedule or cancel?' block with: · Link to https://katura1999.com/register to manage appointment online · Direct email address jewelryadvisor@katura1999.com for personal assistance
• Simplified sign-off to 'The Katura Team'

real-booking overlay, simplified schedule, WhatsApp non-US only

• Removed fake-busy logic entirely — slots now show real availability only
• Removed fake-busy mask, priority slot system, and LCG seed code
• Weekday schedule: 10 AM – 5 PM ET hourly (8 slots, Mon–Fri)
• Saturday schedule: 11 AM – 4 PM ET hourly (6 slots)
• Sunday: fully closed (returns sundayClosed: true, empty slots array)
• Lead-time rule kept: slots within 2 hours of 'now' are greyed out
• Added fetchRealBookings() — queries Consultation table for same-day non-cancelled bookings, marks those time slots as busy: true / reason: 'booked'
• DB query wrapped in Promise.race() with a 3-second timeout; on DB timeout or error the function logs a warning and falls back to lead-time-only slots (form always loads, booking API re-validates)
• Switched runtime from 'edge' back to 'nodejs' (required for Prisma)
• Route is now async to await getSlotAvailability()
• Cache-Control reduced from s-maxage=60 to s-maxage=15 so newly booked slots disappear for the next visitor within 15 seconds
• Removed unused 'country' query parameter
• 'I'd also like reminders via WhatsApp' checkbox is now conditionally rendered only when formData.countryCode !== 'US'
• US customers see a clean form without the WhatsApp option
• International customers (GB, AU, AE, CA, BR, etc.) still see it
• preferWhatsApp field still submitted correctly when checkbox is hidden (defaults to false in formData state)

slots API — 5s DB timeout fallback + lower maxDuration to prevent FUNCTION_INVOCATION_TIMEOUT

conversion improvements — social proof strip, FAQ on evergreen, trust badge, better success page, urgency on sticky CTA

add extra-carat and 777 angel numbers consultation pages

consultation UX, CRM overhaul & booking pipeline improvements

• Replace 4 tall grid cards with compact horizontal divider list
• Each point: small filled circle icon (bg-stone-900) + title + text
• Offer-specific card uses amber-600 icon to visually distinguish it
• Cuts vertical space ~50% on mobile; reads cleanly as a feature list
• Applied to both page.tsx (evergreen) and offer-consultation-page.tsx (all offer variants: upgrade-credit, diamond-studs, bridal-bundle)
• When /api/consultation/slots returns an error (network timeout, DB issue, etc.) slotData stays null and slotsLoading becomes false — previously rendered nothing at all, so users saw 'Loading...' vanish into blank space
• Added null-state fallback: 'Couldn't load available times. Please refresh the page or email us to book directly.' with a mailto link
• Applied to both page.tsx and offer-consultation-page.tsx
• Added to PRIVATE & PRESSURE-FREE value card: 'Not sure of the ring size? We'll send you a free ring-sizer kit — finger gauges for direct measurement and a ring mandrel for sizing an existing ring.'
• Also added as 5th bullet in the 'Why Katura' checklist on offer variants
• Before: 'Consultation: John Smith' (generic, unhelpful)
• After: kind-aware titles:
• custom_engagement_ring → 'Engagement Ring Consultation with John Smith'
• engagement_ring_repair → 'Engagement Ring Repair Consultation with John Smith'
• custom_wedding_band → 'Wedding Band Consultation with John Smith'
• custom_jewelry → 'Custom Jewelry Consultation with John Smith'
• general / unknown → 'Jewelry Consultation with John Smith'
• Makes /admin/meetings list scannable at a glance
• Added getConsultations() fetching Consultation records (date, status, kind, budget, meeting link, offer variant, inspiration images, etc.)
• Added getCrmContacts() fetching CrmContact records (with deal counts)
• Both passed as new props to CrmPipelineClient
• New ConsultationRecord + CrmContactRecord TypeScript interfaces
• New props: consultations[], crmContacts[]
• New state: consultationSearch, contactSearch
• Default tab changed from 'pipeline' to 'consultations' (most actionable)
• Stats row: Total Booked / Upcoming / Completed / Cancelled
• Search by client name or email
• Each card shows:
• Client name with Upcoming/Past/Cancelled badge
• Consultation kind badge (Engagement Ring, Wedding Band, etc.)
• Virtual/In-Person badge with icon
• Offer variant badge (amber) when not 'none'
• Date, time, duration
• Email + phone (tappable mailto/tel links)
• Budget range, notes preview, inspiration image count
• Prep button → /admin/meetings/[id]/prep (new tab)
• Join button → /admin/meetings/[id] (new tab, amber)
• Stats: Total / Leads / Have Deals
• Search by name or email
• Each row: avatar initial, full name, status badge, deal count badge, email, phone, source, date added
• Replaced fixed 5-col grid with scrollable flex row
• Custom active state: amber bottom border + amber text
• Labels hidden on small screens (icon-only), shown sm+
• Count badges on each tab
• Tab order: Consultations → Contacts → Deals → Design Leads → Timepieces → Metals

conversion & SEO improvements

• Remove high-value threshold modal (all products use standard Add to Cart)
• Remove hardcoded 8% tax from cart/checkout (show 'Calculated at checkout')
• Add ring size helper text link for ring products
• Update Vercel Analytics import to @vercel/analytics/next
• Update GTM container to GTM-T2F2HTN8
• Add Google Site Verification meta tag
• Upgrade /shop/[id] redirect from 302 to 301 (permanentRedirect)

update GTM container to GTM-T2F2HTN8, add GSC site verification meta tag

add Google Search Console HTML verification file

hoist `prev` declaration before sibling-repo fallback block

• scripts/compute-repo-stats.ts (hoisted `prev` ~90 lines earlier, removed duplicate declaration)

reorder LOC row, iOS fallback, chars cumulative

• Row 1 reordered: Website → iOS → Android → All Platforms (was iOS/Android/Website/Total)
• Website card now uses 'Lines of code' label (websiteLines)
• 4th card renamed 'All platforms' showing totalLines with cross-platform hint
• Add iosLines/iosChars/androidLines/androidChars to prev type
• If clone returns 0 (Vercel build failure), fall back to previously-committed JSON values — same pattern already used for git stats (totalCommits etc.)
• Explicitly recompute totalLines/totalChars = website + ios + android after fallback resolution so Characters Written is always cross-platform cumulative
• Regenerated locally: ios=75,764 lines — now committed so Vercel fallback has a real value to preserve when the iOS clone fails

full team rollout, server-side emoji strip, reply note

• Add full Katura team recipients: Rosser (gmail + katura), Stella, Antar, Pedro, Lee — removes the YEN_DIGEST_APPROVED gate entirely
• Add stripEmoji() post-processor that cleans all Unicode emoji ranges from AI output regardless of prompt compliance (belt + suspenders)
• Update footer to explicitly name yen@katura1999.com as the reply address
• Remove ROSSER_EMAIL / APPROVED_TEAM constants — TEAM is the single source
• Comment header updated to reflect production state (no more Phase 1)

revert workerThreads true — DOMException crash in worker context

9AM EST schedule, no emojis, full commit body, gpt-4.5-preview

• cron schedule 0 9 → 0 14 UTC = 9AM EST / 10AM EDT
• Switch model gpt-4o → gpt-4.5-preview for highest detail output
• Remove all emojis from section headers and prompt
• Send full commit message body to AI (not just subject line) for technical depth: file names, function names, numbers, rationale
• 2 sentences per item: technical what + plain-English why it matters
• Skip trivial commits (version bumps, whitespace)
• max_tokens 1800 → 2400, temperature 0.72 → 0.65

show per-platform LOC (iOS/Android/Website) + cumulative totals

• compute-repo-stats: shallow-clone katura-ios + katura-android into /tmp, walk with same rules, add to cumulative totalLines/totalChars
• live-stats: Row 1 now shows iOS / Android / Website / Total Lines of Code Characters Written and Pre-AI/With-AI hours use combined LOC from all 3 repos
• page.tsx: pass websiteLines, iosLines, androidLines props

add IndexNow key file for Bing ownership verification

rose gold hue shift to peach-salmon; build: cpus 2→4 + workerThreads

• All three karats were too dark/orange-brown under calmed env settings
• Shift hue toward pink-salmon (the 'rose' in rose gold), lighter base values: 18K #C87060 → #D4907E (peach-salmon) 14K #B85E4A → #C8826E 10K #A44C38 → #BC7468 (still copper-warm but rosy, not spray paint)
• Roughness 10K 0.20 → 0.18, metalness 0.93 → 0.92 across all rose golds
• cpus: 2 → 4 (use all 4 Vercel build container vCPUs)
• workerThreads: false → true (safe with 7168MB NODE_OPTIONS heap)

product indexing cron, sitemap resubmission, wholesale email retry queue

• gsc-monitor: parameterise auth scope; add resubmitSitemap() using webmasters write scope
• cron/gsc-monitor: call resubmitSitemap() on every Monday run; surface result in response
• cron/index-products: new daily 06:00 UTC cron — bulk submits all ACTIVE products to IndexNow (batch, no quota) + Google Indexing API (10/batch, 200/day limit); pings sitemap to both Google and Bing. Fixes 'Discovered - currently not indexed' GSC issue. Supports ?mode=recent (default, last 8 days) and ?mode=all (backfill, 200 products/run)
• cron/wholesale-email-retry: new daily 09:00 UTC cron — retries failed confirmation + internal notification emails up to 3× with structured tracking columns; dead-letters after 3 failures and fires sendInternalAlert(severity='error')
• wholesale/apply: stamp confirmationEmailSentAt / internalEmailSentAt on success; use new emailRetryCount/emailLastError columns instead of freetext notes hack; restore missing try{} block; pass db to logFailedEmail
• prisma/schema/wholesale: add 4 tracking columns to WholesaleLead
• scripts/db-migrations: add-wholesale-email-tracking.sql migration
• vercel.json: add /api/cron/index-products and /api/cron/wholesale-email-retry

Cineon tone mapping + recalibrate all metal colors

• Switch ACESFilmicToneMapping → CineonToneMapping (ACES was shifting saturated yellows to chartreuse green in highlights)
• toneMappingExposure 1.8 → 1.3, environmentIntensity 2.5 → 1.5, envMapIntensity 2.8 → 1.5 (combined ~7× env was bleaching rose gold)
• Recalibrate all gold base colors to amber spectrum: 24K #C8880A, 18K #BD8008, 14K #B07408, 10K #A06808
• Recalibrate rose golds to deep coppery-pink: 18K #C87060, 14K #B85E4A, 10K #A44C38
• Calm hemisphere (0.65→0.45), bottom fill (1.2→0.5), ambient (0.4→0.25)
• Update stale comment (environmentIntensity 2.5 → 1.5)

lessons 101-200 — features, commerce ops, and immediate improvement recommendations

weekly dev digest cron — Yen emails the team every Monday with a GPT-4o breakdown of all GitHub commits

• Uses GITHUB_TOKEN env var if set (raises rate limit 60→5000/hr) 3. Sends commit list to GPT-4o with Yen's persona prompt
• Groups commits by type: New Features / Improvements / Bug Fixes / Infrastructure / Security / Design / AI / Dependencies
• Punchy tone, 1-sentence bullets, focused on what matters 4. Builds branded HTML email and sends via Brevo from yen@katura1999.com
• YEN_DIGEST_APPROVED env var not set → sends ONLY to rosserembrasil@gmail.com
• Set YEN_DIGEST_APPROVED=true in Vercel env + add team list to APPROVED_TEAM array to enable full distribution after Rosser approves the format
• CRON_SECRET protected (same pattern as all other cron routes)
• Recipient list is hardcoded in source — no external/user-controlled emails
• Full team distribution requires a code change to add addresses
• No inbound parsing, no untrusted email addresses reach the AI
• Dark header bar (#1a1a1a) with 'Katura Intelligence / Weekly Dev Digest'
• Commit count + date badge
• AI-written digest body (Georgia serif, clean inline styles)
• Yen signature: circular logo + name/title/email + personal note 'You're welcome to reply... I'm available 24/7/365'
• Reply-To: yen@katura1999.com (Yen email responder handles replies)
• Footer: small legal note + commit count

Top 100 lessons from Katura for future projects

• 100 lessons across: DB/Prisma/PgBouncer, Next.js, Security, API design,
• SaaS multi-tenancy, Auth, Supabase Storage, Email, Cron jobs, Monitoring,
• SEO, TypeScript, Cost optimization, Stripe, Three.js, React UX, DX, Architecture.

eliminate black renders, add surface finishes, add white gold karat grades

• Added FINISH_PRESETS constant (polished/satin/brushed/matte)
• Each finish is a roughness multiplier applied on top of the metal's base roughness — zero latency, no texture maps needed polished: ×1.0 (mirror polish, existing behavior) satin: ×3.5 (soft sheen, broader highlights) brushed: ×5.5 (directional matte approximation) matte: ×8.0 (fully diffuse, velvety)
• Added finish state + Select dropdown to STLViewerCanvas toolbar
• Added finish state + Select dropdown to STLAssemblyViewer toolbar
• Threaded finish prop through STLModel, AssemblyModel, AssemblyPart
• 18K White Gold: #F8F6F2, roughness 0.10 (thick rhodium plating → pure white)
• 14K White Gold: #F0EBE0, roughness 0.12 (thinner plating, slight cream cast)
• 10K White Gold: #E6DDCA, roughness 0.14 (more yellow base visible at edges)
• Legacy 'white-gold' key → hidden, maps to 18K for backward compat
• Yellow gold: richer, more saturated base colors per karat
• Rose gold: slightly more vivid pink tones
• All golds + silver: metalness 0.92/0.95 (was 1.0) to allow diffuse warmth

Google Search Console weekly monitor

• Fetches GSC Search Analytics for the current 7-day window (skips last 2 days due to GSC data lag — uses 'final' state only)
• Compares vs. the prior 7-day window: flags pages with >40% click drop that have >50 impressions (filters out noise from low-traffic pages)
• Fetches all sitemaps and flags any with crawl errors
• Posts a Slack digest ONLY when issues are found (no noise on healthy weeks)
• Returns full JSON report in Vercel function logs for manual review

serialize all Promise.all() Prisma queries to prevent P2024 pool timeout crashes

• Added withFallback import from db-resilience
• getTenantProductSummary: 5 concurrent counts → 5 sequential withFallback calls
• getTenantProducts: Promise.all([findMany, count]) → sequential withFallback calls
• getTenantOrderSummary: 6 concurrent queries → 6 sequential withFallback calls
• getTenantOrders: Promise.all([findMany, count]) → sequential withFallback calls
• getTenantCustomerSummary: 3 concurrent queries → 3 sequential withFallback calls
• getTenantCustomers: Promise.all([findMany, count]) → sequential withFallback calls
• getTenantCustomer: Promise.all([findUnique, findMany, aggregate]) → sequential withFallback calls
• getTenantDashboardData: Promise.all across 5 sub-functions → sequential withFallback (top-level dashboard now degrades gracefully per section)
• Added withFallback import
• First Promise.all (meetings, participants, transcripts, minutes): → 4 sequential withFallback calls
• Second Promise.all (chatCount, transcriptBounds, translationCache): → 3 sequential .catch() queries
• Promise.all([meetingRows, minutesRows]) → 2 sequential calls
• Single-item Promise.all([minutesRows]) → direct (×2 occurrences)
• Promise.all(links.map(...)) → sequential for-loop with per-entity try/catch (prevents N concurrent lookups spiking the pool when a project has many links)

expand metal presets with karat grades, remove brass, tune colors for hyper-realistic jewelry rendering

• stl-viewer.tsx: Rewrote METAL_PRESETS with expanded options:
• Yellow Gold: 24K, 18K, 14K, 10K (each with proper color saturation per karat)
• Rose Gold: 18K, 14K, 10K (copper tones deepen with lower karat)
• Added: 950 Platinum, Palladium (separate from generic Platinum)
• Updated: 925 Sterling Silver (warmer tone vs platinum)
• Removed: Polished Brass (not a Katura material)
• Legacy keys (yellow-gold, rose-gold, platinum, silver) kept hidden for backward compat
• Default metal: yellow-gold → 18k-yellow-gold (both viewers)
• Enhanced color science comments with karat-grade explanations
• share-project-dialog.tsx: Updated default metal option list to match
• Removed brass option
• Added karat-graded metals to dropdown
• Changed form defaults: yellow-gold → 18k-yellow-gold (2 places)

enable tenant-scoped queries on 10 blocked pages

• services ServiceRequest.tenantId → findMany
• custom-orders BespokeInquiry.tenantId → findMany
• crm CrmDeal + CrmPipelineStage → findMany (both)
• engagement EngagementLead.tenantId → findMany + _count.designs
• wholesale WholesaleLead + WholesaleAccount + WholesaleSetting → sequential findMany
• tasks Task.tenantId → replaces ownerUserId OR-scope; fixes Promise.all → sequential
• audit AuditLog.tenantId → replaces ownerUserId filter; fixes Promise.all → sequential
• team User.tenantId → replaces owner-only lookup
• payroll PayrollRun.tenantId → findMany with stats aggregation
• payroll/runs PayrollRun.tenantId → findMany
• payroll/runs back-link was pointing to /admin/payroll → /platform/admin/payroll
• payroll quick-links were pointing to /admin/payroll/* → /platform/admin/payroll/*
• All stale SECURITY docblock comments removed
• scripts/db-migrations/fix-777-ring-slug.sql (Step 1 SELECT to find slug, Step 2 UPDATE to fix it)

3 production issues — customers crash, orders slow, entity search UX

• 250ms debounce → hits /api/admin/entity-search
• Results grouped with colour-coded type pill (order/project/meeting/customer)
• Click to select → confirmation row shows entity details
• 'Link' button disabled until selection is confirmed
• Notes field preserved
• ILIKE search across orders, projects, meetings, customers, invoices
• 5 results per type, newest-first
• Auth-gated (OWNER/MANAGER/EMPLOYEE)

Customer 360 Timeline

• Orders: placed, paid (with paidVia), shipped, delivered, cancelled, refunded — with real shipment dates
• Meetings: attended (by email match in MeetingParticipant), plus a separate event when Yen minutes are generated
• Projects: linked via EntityLink table
• Engagement leads: ring inquiry submissions with budget range
• Reviews: star rating + excerpt
• Colour-coded dot + icon per event type (11 distinct types)
• Relative timestamps ('3d ago') with full date on hover
• Clickable titles link directly to the relevant detail page
• 'Show N more events' collapse after first 15 entries
• Graceful skeleton loading + error/retry states

convert parallel Promise.all DB queries to sequential awaits

• analytics/kpis: 14 parallel count/aggregate queries → 14 sequential awaits Impact: KPI dashboard header no longer risks P2024; 5-min in-memory cache absorbs the sequential overhead so cache-hit latency is unchanged.
• shipstation (health action): 3 parallel counts → 3 sequential awaits
• shipstation (overview): 3 parallel queries → 3 sequential awaits
• email/diagnostics (stats block): 4 parallel counts → 4 sequential awaits

collapse 14-query Promise.all into single findUnique — fix P2024

• src/app/api/admin/jewelry-projects/[id]/route.ts

resolve project redirect + glitched STL renders + UptimeRobot MCP docs

• Only redirect on HTTP 404 (project genuinely not found)
• On 500/other errors: show a toast error instead of redirecting
• This surfaces the real P2022 DB error to the developer instead of hiding it
• src/app/admin/projects/[id]/page.tsx (fetchProject catch block)
• Admin-auth protected (requireKaturaAdmin)
• Accepts any Supabase storage public URL
• Returns a 1-hour signed URL using service role key (bypasses RLS)
• Cached private 50min (URL valid 60min)
• Token-auth (share link validation, no login required)
• Same signed URL generation — works for public share + client view pages
• Detects any URL containing /storage/v1/object/
• Resolves it through the appropriate signed URL endpoint
• Shows loading overlay while resolving (prevents loading HTML garbage)
• Falls back to original URL on error (non-fatal)
• When set, uses /api/share/.../cad-url instead of /api/admin/...
• Both STLViewerCanvas instances on share page updated with shareToken
• src/app/api/admin/storage/signed-url/route.ts (NEW)
• src/app/api/share/projects/[token]/cad-url/route.ts (NEW)
• src/components/admin/stl-viewer.tsx (useSignedStorageUrl hook + shareToken prop)
• src/app/share/projects/[token]/page.tsx (shareToken prop on both viewers)
• docs/mcp/UPTIMEROBOT_MCP.md (full guide + available tools + Katura monitors)
• docs/mcp/uptimerobot-mcp.example.json (copy-paste MCP config)

docs/copilot: add comprehensive commit message standards + global instructions

• File: .copilot-instructions.md (10K)
• Scope: Katura project only
• 9 major sections with detailed examples
• Anti-patterns guide, special cases (security, hotfixes, sessions)
• Verification checklist included
• COPILOT_GLOBAL_INSTRUCTIONS.yaml (12K) — ready to copy-paste into VSCode global prompts
• COPILOT_SETUP_INSTRUCTIONS.md — step-by-step setup guide
• COPILOT_SETUP_QUICK_REF.md — quick reference card
• GLOBAL_COPILOT_INSTRUCTIONS_TEMPLATE.md — alternative template
• COPILOT_FILES_SUMMARY.txt — overview
• README_COPILOT_SETUP.md — complete index
• docs/performance/PERFORMANCE_INFRA_SETUP.md — 4-layer perf setup
• prisma/migrations/add_marketing_click_index.sql — index for smart-links aggregates
• prisma/migrations/add_order_stats_materialized_view.sql — pre-computed order stats
• src/app/api/cron/refresh-stats/route.ts — materialized view refresh cron
• 8 new Copilot instruction/reference files
• 1 performance docs guide
• 2 SQL migration files
• 1 cron route for stats refresh
• package.json (edge-config:seed script)
• src/lib/env.ts (UPTIMEROBOT_API_KEY schema)
• vercel.json (refresh-stats cron added)

security/infra: harden cron auth, prisma migrate, ISR tuning, UptimeRobot — May 18 Session

• consultation-reminders (vercel.json: added ?secret=${CRON_SECRET})
• support-escalation (vercel.json: added ?secret=${CRON_SECRET})
• meeting-cleanup (vercel.json: added ?secret=${CRON_SECRET})
• calendar-reminders (NEW secret in vercel.json)
• blog-publish (NEW secret in vercel.json)
• openclaw-reclaim (NEW secret in vercel.json)
• email/snooze GET endpoint (NEW secret check)
• src/lib/cron-auth.ts already existed (Bearer token, query param, x-cron-secret)
• Routes now import + call `requireCronAuth(request)` at top of GET
• Removed hand-rolled authorization logic from each route
• vercel.json cron definitions updated to pass ?secret=${CRON_SECRET} in path
• Medium severity fixed: Cron routes now require CRON_SECRET (set in Vercel)
• Reduces attack surface for internal job triggers
• Consistent auth pattern across all cron endpoints
• ShipEngine handles authentication at the API platform level (API key)
• Webhook URL embeddings (Basic Auth credentials) are no longer necessary
• Simplifies config and reduces env var sprawl
• src/app/api/webhooks/shipstation/route.ts: `verifyWebhookAuth()` now returns `{ valid: true }`
• Removed ~30 lines of Basic Auth header + query param checks
• Removed mentions of SHIPSTATION_WEBHOOK_SECRET from env checks
• Removes Medium severity: Webhook no longer checks a non-enforced secret
• Webhooks still logged and validated at ShipEngine layer
• One fewer env var to configure
• Ran `prisma migrate resolve --applied` on all 10 numbered migrations (20260121_add_source_column through 20260516_add_saas_operator_models)
• Removed empty 20260511024649_fix_entry_exit_page_types/ folder (no migration.sql)
• All pending migrations now show as applied in `_prisma_migrations` table
• pnpm db:status → prisma migrate status
• pnpm db:migrate → prisma migrate dev (create new migration interactively)
• pnpm db:deploy → prisma migrate deploy (production deployment; auto-runs on Vercel build)
• Updated docs/database/MIGRATIONS.md with quick-start guide
• Added prisma/schema/_base.prisma references to directUrl (DATABASE_URL_UNPOOLED)
• Noted: Every schema change must have a migration file in same commit
• P2022 errors (column does not exist) now preventable via migrations
• Schema drift detection built-in
• All 10 existing migrations tracked as baseline
• Ready for daily use (previously manual .sql files only)
• src/app/[locale]/creations/page.tsx: revalidate 60s → 1800s (30 min)
• src/app/[locale]/collections/[id]/page.tsx: revalidate 300s → 1800s (30 min)
• With `revalidate = 60`, ISR revalidation fires 60× per hour
• Under load, 3+ concurrent cold-start requests can exhaust PgBouncer's connection_limit=1 on the pooler, queuing all 3 behind each other
• Each hits 8000ms timeout → all 3 fail with P2024 → Vercel retries → cascade
• Increasing revalidate to 1800s reduces revalidation attempts by 30× (from 60/hr to 2/hr)
• Stale data window (30 min) is acceptable for product catalog
• Eliminates P2024 connection pool stampedes on creations/collections pages
• Users see data max 30 minutes stale during traffic spikes
• Matches revalidation strategy used on /jewel-vox (already at 3600s)
• scripts/setup-uptimerobot.ts: Automated UptimeRobot monitor creation
• package.json: new 'monitoring:setup' script
• Automated monitor setup (no manual clicking on UptimeRobot dashboard)
• Default email alerts to account email
• Public status page option available (manual: https://uptimerobot.com/dashboard)
• Detects outages ~2 min after they occur (vs 5+ hours manual discovery)
• Marks 7.77ct Platinum solitaire as priceOnRequest = true
• Prevents display of numeric price, shows 'Price on Request' instead
• Already run in Supabase SQL Editor
• Status: DONE
• scripts/db-resolve-existing-migrations.sh: Already ran successfully (baseline all 10 migrations)
• src/app/api/cron/{consultation-reminders,support-escalation,meeting-cleanup, calendar-reminders,blog-publish,openclaw-reclaim}/route.ts (requireCronAuth)
• src/app/api/admin/email/snooze/route.ts (requireCronAuth on GET)
• src/app/api/webhooks/shipstation/route.ts (removed secret checks)
• vercel.json (added ?secret= to 3 cron paths)
• package.json (db:migrate, db:deploy, db:status, monitoring:setup scripts)
• docs/database/MIGRATIONS.md (updated with workflow)
• scripts/db-resolve-existing-migrations.sh (one-time baseline script)
• scripts/setup-uptimerobot.ts (monitor automation)
• prisma/migrations/fix_777ct_price_on_request.sql (product price fix)
• src/app/[locale]/creations/page.tsx (ISR: 60s → 1800s)
• src/app/[locale]/collections/[id]/page.tsx (ISR: 300s → 1800s)
• scripts/seed-edge-config.ts (new)
• src/lib/cache.ts (new)
• src/lib/edge-config.ts (new)
• Various engagement/consultation components (refactored)
• pnpm-lock.yaml (dependency updates)
• Run: UPTIMEROBOT_API_KEY=ur_xxxx pnpm monitoring:setup
• Check: https://dashboard.uptimerobot.com/monitors
• /api/health should be checked every 2 minutes
• /creations and /collections ISR revalidation will be less frequent (~2 per 30 min)
• Expect stale data to clear within 30 min of updates
• Create at: https://uptimerobot.com/dashboard → Status Pages
• Link to it on website footer (shows system status 24/7)
• docs/sessions/SESSION_2026_05_18.md (parent session summary)
• docs/database/MIGRATIONS.md (workflow guide)
• src/lib/cron-auth.ts (requireCronAuth implementation)
• prisma.config.ts (Prisma configuration with directUrl support)