Full deployment history for this project.
chore: add auto approve+merge workflow
chore: bump package version
chore: normalize package metadata and bump version
Merge remote updates while preserving original product branding
Consolidate 2 open pull requests Merged consolidation of open PRs: #9, #7
Merge remote-tracking branch 'origin/pr-7' into codex/consolidate-open-prs-20260720-170943
Fix trace rollout deployment blocker
Add PlatPhorm trace header propagation
fix: support Vercel alias compliance status
fix: keep public routes available without auth config
fix: keep public platform routes unauthenticated
feat: standardize MCP and route compliance
Merge pull request #5 from mbarbine/sentinel-oauth-csrf-fix-18165746674339231602 🛡️ Sentinel: [CRITICAL] Fix OAuth CSRF vulnerability
Merge pull request #4 from mbarbine/sentinel-fix-ssrf-6109957195882198144 🛡️ Sentinel: [CRITICAL] Fix SSRF in image fetch operations
Merge branch 'main' into sentinel-fix-ssrf-6109957195882198144
Merge branch 'main' into sentinel-fix-ssrf-6109957195882198144
Merge branch 'main' into sentinel-fix-ssrf-6109957195882198144
🛡️ Sentinel: [CRITICAL] Fix SSRF vulnerability in fetch calls - Added strict URL validation for `downloadPhoto` in `lib/google-photos/client.ts` to enforce HTTPS and restrict domain to `*.googleusercontent.com` - Added strict URL validation for `uploadFromUrl` in `lib/storage/blob-storage.ts` to enforce HTTPS - Documented findings in `.jules/sentinel.md` Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>
🛡️ Sentinel: [CRITICAL] Fix IDOR in batch enhance endpoint Added a database check to verify that all photo IDs requested in the batch enhancement endpoint actually belong to the authenticated user. This prevents users from initiating enhancement jobs on photos they don't own. Added a learning entry to .jules/sentinel.md detailing the vulnerability and prevention strategy. Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>
Merge pull request #1 from mbarbine/vercel/react-server-components-cve-vu-1jsidn Fix React Server Components CVE vulnerabilities
Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
feat: finalize production setup for AI photo enrichment app Document setup guide and verify production readiness Co-authored-by: Michael Barbine <3211492+mbarbine@users.noreply.github.com>
fix: resolve auth redirect loop and enhance app robustness Fix middleware redirect loop and improve error handling, UX, and robustness. Co-authored-by: Michael Barbine <3211492+mbarbine@users.noreply.github.com>
fix: resolve auth loop & SQL idempotency Update SQL scripts for idempotency and fix middleware redirect loop. Co-authored-by: Michael Barbine <3211492+mbarbine@users.noreply.github.com>
fix: close missing brace in globals.css Correct CSS syntax error and separate base layer from theme block. Co-authored-by: Michael Barbine <3211492+mbarbine@users.noreply.github.com>
fix: update profiles table schema and trigger function Add missing columns and fix user registration trigger. Co-authored-by: Michael Barbine <3211492+mbarbine@users.noreply.github.com>
feat: enable Google Sign-In for authentication Add Google Sign-In to login and signup pages and update setup guide. Co-authored-by: Michael Barbine <3211492+mbarbine@users.noreply.github.com>
feat: add Google OAuth setup and documentation Update README and SETUP_GUIDE with OAuth credentials and redirect URIs. Co-authored-by: Michael Barbine <3211492+mbarbine@users.noreply.github.com>