Skip to content

feat: Crove Post Core - Supabase Multi-Schema DB, DOS ID SSO, and CI/CD - #1

Merged
JOY (JOY) merged 21 commits into
mainfrom
dev
Aug 23, 2026
Merged

feat: Crove Post Core - Supabase Multi-Schema DB, DOS ID SSO, and CI/CD#1
JOY (JOY) merged 21 commits into
mainfrom
dev

Conversation

@JOY

@JOY JOY (JOY) commented Aug 22, 2026

Copy link
Copy Markdown

Summary

  • Supabase Integration: DirectUrl connection pooling support for schema \post.
  • DOS ID SSO & Auth: Unified DOS ID login/registration, removal of obsolete wallet provider, official DOS logo SVG asset.
  • CI/CD Workflows: Auto-deploy container on \dev\ push, release-only on \main, upstream sync PR automation.

Test plan

  • Verified \prisma db push\ synchronizes all 41 Postiz models into Supabase schema \post.
  • Verified runtime connectivity and API health on GCP VM \crove-server.
  • Verified Cloudflare SSO Worker OAuth bridge flow.

Note

High Risk
Touches authentication, OAuth token handling, HMAC webhooks that create/delete orgs and users, and CI deploy pipelines. Wrangler config also embeds OAuth client secrets.

Overview
White-labels Postiz as Crove with runtime BRAND_* env config (logos, colors, titles, emails) instead of hardcoded Postiz/Gitroom names. A branding-guard CI job and docs support that.

Adds a Cloudflare Worker SSO bridge (apps/crove-sso) that fronts DOS/Supabase OAuth with PKCE, single-use codes, and Durable Object state. Login/register prefer generic OAuth (“DOS ID”) when enabled; OAuth userinfo now carries name/picture/orgs and can provision extra orgs. New POST /webhooks/dos-org-sync HMAC-syncs org create/update/delete and membership. OAuth gains POST /oauth/revoke.

CI publishes crove-app images to GHCR, deploys the SSO worker, and auto-syncs upstream Postiz. Also adds a Crove marketing site (apps/web) and design/roadmap docs.

Reviewed by Cursor Bugbot for commit 2a2c46b. Bugbot is set up for automated code reviews on this repo. Configure here.

JOY (JOY) and others added 17 commits August 14, 2026 03:08
…nt workflows

- Add apps/web: Next.js 16 landing page with dark/light mode and purple branding

- Update apps/crove-sso: Cloudflare Worker OAuth 2.1 PKCE bridge for DOS ID

- Add runtime branding engine, validation guards, and synchronization workflows

- Add PowerShell automation scripts for testing, building, and deployment

Co-authored-by: Cursor <cursoragent@cursor.com>
… mode and VI/EN i18n

- Upgrade landing page visual design to clean, modern Linear/Raycast aesthetic with purple brand accents

- Add full bilingual (Vietnamese/English) i18n support with language toggle

- Refactor Hero, Channels, Features Bento Grid, Studio Preview, Pricing, FAQ and Footer

- Add language switcher to auth layout

Co-authored-by: Cursor <cursoragent@cursor.com>
…tainer deployment

- Add Dockerfile for standalone @crove/web Next.js landing page

- Add docker-compose.beta.yaml and docker-compose.prod.yaml with Cloudflare Tunnel integration

- Add GitHub Actions CI/CD workflows for SSO Worker and multi-arch container builds

- Add automated PowerShell deployment scripts for Beta & Production

- Add documentation for Beta environment architecture and CI/CD workflows

Co-authored-by: Cursor <cursoragent@cursor.com>
…yment scripts

Co-authored-by: Cursor <cursoragent@cursor.com>
Shift marketing from a scheduler comparison to a unified OS for founders, and capture the design system in DESIGN.md.

Co-authored-by: Cursor <cursoragent@cursor.com>
Add directUrl support to schema.prisma for session pooler migrations while using transaction pooler for runtime.

Co-authored-by: Cursor <cursoragent@cursor.com>
Remove external Solana wallet provider in favor of embedded DOS ID smart wallet and add official DOS logo SVG asset.
Set GitHub Actions to auto-build beta container on dev branch commits and restrict production builds to published releases.

Co-authored-by: Cursor <cursoragent@cursor.com>
…h forms

Enforce unified DOS ID login/registration, remove local email/password forms when SSO is active, and update Cloudflare SSO configuration.
Compare origin/main against upstream/main correctly to trigger automated PR creation when new upstream commits arrive.
@cursor

cursor Bot commented Aug 22, 2026

Copy link
Copy Markdown

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_184d8cbe-a1b5-4816-8dbe-c59b706822a9)

Co-authored-by: Cursor <cursoragent@cursor.com>
@cursor

cursor Bot commented Aug 22, 2026

Copy link
Copy Markdown

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_f4343c38-4540-4b60-a8f6-f37b3ccff6d2)

@JOY JOY (JOY) added the bug Something isn't working label Aug 22, 2026
@github-project-automation github-project-automation Bot moved this to Backlog in Crove Aug 22, 2026
Co-authored-by: Cursor <cursoragent@cursor.com>
@cursor

cursor Bot commented Aug 22, 2026

Copy link
Copy Markdown

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_9fa231d7-a12c-4998-a7a5-febb780985bc)

- Support DOSClaw one-touch OAuth token generation and revocation
- Enhance OIDC provider user profile and multi-org JIT provisioning
- Implement HMAC-verified webhook endpoint for DOS organization sync

Co-authored-by: Cursor <cursoragent@cursor.com>
@cursor

cursor Bot commented Aug 22, 2026

Copy link
Copy Markdown

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_2bd3b3f8-bd57-4891-a0a2-514bdfd921a5)

…frpdpg Supabase project

Update UPSTREAM_AUTHORIZE_URL, UPSTREAM_TOKEN_URL, and UPSTREAM_USERINFO_URL for beta to use the correct Beta Supabase project ref.

Co-authored-by: Cursor <cursoragent@cursor.com>
@cursor

cursor Bot commented Aug 23, 2026

Copy link
Copy Markdown

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_bd102468-1fe2-4d0d-980d-e83b0ed29293)

@JOY
JOY (JOY) merged commit 93bb7a5 into main Aug 23, 2026
8 of 14 checks passed
@github-project-automation github-project-automation Bot moved this from Backlog to Done in Crove Aug 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant