Conversation
…nt workflows - Add apps/web: Next.js 16 landing page with dark/light mode and purple branding - Update apps/crove-sso: Cloudflare Worker OAuth 2.1 PKCE bridge for DOS ID - Add runtime branding engine, validation guards, and synchronization workflows - Add PowerShell automation scripts for testing, building, and deployment Co-authored-by: Cursor <cursoragent@cursor.com>
… mode and VI/EN i18n - Upgrade landing page visual design to clean, modern Linear/Raycast aesthetic with purple brand accents - Add full bilingual (Vietnamese/English) i18n support with language toggle - Refactor Hero, Channels, Features Bento Grid, Studio Preview, Pricing, FAQ and Footer - Add language switcher to auth layout Co-authored-by: Cursor <cursoragent@cursor.com>
…tainer deployment - Add Dockerfile for standalone @crove/web Next.js landing page - Add docker-compose.beta.yaml and docker-compose.prod.yaml with Cloudflare Tunnel integration - Add GitHub Actions CI/CD workflows for SSO Worker and multi-arch container builds - Add automated PowerShell deployment scripts for Beta & Production - Add documentation for Beta environment architecture and CI/CD workflows Co-authored-by: Cursor <cursoragent@cursor.com>
…yment scripts Co-authored-by: Cursor <cursoragent@cursor.com>
Shift marketing from a scheduler comparison to a unified OS for founders, and capture the design system in DESIGN.md. Co-authored-by: Cursor <cursoragent@cursor.com>
Add directUrl support to schema.prisma for session pooler migrations while using transaction pooler for runtime. Co-authored-by: Cursor <cursoragent@cursor.com>
Remove external Solana wallet provider in favor of embedded DOS ID smart wallet and add official DOS logo SVG asset.
Set GitHub Actions to auto-build beta container on dev branch commits and restrict production builds to published releases. Co-authored-by: Cursor <cursoragent@cursor.com>
…h forms Enforce unified DOS ID login/registration, remove local email/password forms when SSO is active, and update Cloudflare SSO configuration.
Compare origin/main against upstream/main correctly to trigger automated PR creation when new upstream commits arrive.
Bugbot couldn't run - usage limit reachedBugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit. A user or team admin can review and increase usage limits in the Cursor dashboard. (requestId: serverGenReqId_184d8cbe-a1b5-4816-8dbe-c59b706822a9) |
Co-authored-by: Cursor <cursoragent@cursor.com>
Bugbot couldn't run - usage limit reachedBugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit. A user or team admin can review and increase usage limits in the Cursor dashboard. (requestId: serverGenReqId_f4343c38-4540-4b60-a8f6-f37b3ccff6d2) |
Co-authored-by: Cursor <cursoragent@cursor.com>
Bugbot couldn't run - usage limit reachedBugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit. A user or team admin can review and increase usage limits in the Cursor dashboard. (requestId: serverGenReqId_9fa231d7-a12c-4998-a7a5-febb780985bc) |
- Support DOSClaw one-touch OAuth token generation and revocation - Enhance OIDC provider user profile and multi-org JIT provisioning - Implement HMAC-verified webhook endpoint for DOS organization sync Co-authored-by: Cursor <cursoragent@cursor.com>
Bugbot couldn't run - usage limit reachedBugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit. A user or team admin can review and increase usage limits in the Cursor dashboard. (requestId: serverGenReqId_2bd3b3f8-bd57-4891-a0a2-514bdfd921a5) |
…frpdpg Supabase project Update UPSTREAM_AUTHORIZE_URL, UPSTREAM_TOKEN_URL, and UPSTREAM_USERINFO_URL for beta to use the correct Beta Supabase project ref. Co-authored-by: Cursor <cursoragent@cursor.com>
Bugbot couldn't run - usage limit reachedBugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit. A user or team admin can review and increase usage limits in the Cursor dashboard. (requestId: serverGenReqId_bd102468-1fe2-4d0d-980d-e83b0ed29293) |
Summary
Test plan
Note
High Risk
Touches authentication, OAuth token handling, HMAC webhooks that create/delete orgs and users, and CI deploy pipelines. Wrangler config also embeds OAuth client secrets.
Overview
White-labels Postiz as Crove with runtime
BRAND_*env config (logos, colors, titles, emails) instead of hardcoded Postiz/Gitroom names. A branding-guard CI job and docs support that.Adds a Cloudflare Worker SSO bridge (
apps/crove-sso) that fronts DOS/Supabase OAuth with PKCE, single-use codes, and Durable Object state. Login/register prefer generic OAuth (“DOS ID”) when enabled; OAuth userinfo now carries name/picture/orgs and can provision extra orgs. NewPOST /webhooks/dos-org-syncHMAC-syncs org create/update/delete and membership. OAuth gainsPOST /oauth/revoke.CI publishes
crove-appimages to GHCR, deploys the SSO worker, and auto-syncs upstream Postiz. Also adds a Crove marketing site (apps/web) and design/roadmap docs.Reviewed by Cursor Bugbot for commit 2a2c46b. Bugbot is set up for automated code reviews on this repo. Configure here.