v1.2.0

What's new

User accounts

• Google OAuth sign-in (popup flow)
• JWT-based auth for portfolio, collection tracking, card grading
• Portfolio CRUD: add, edit, delete cards with purchase prices

Set browser + collection tracking

• Browse 238 sets with logos, era groups, card count breakdown
• Collection progress bar, owned/missing filters, gold checkmarks
• Rarity filtering (SAR, IR, UR, HR, SR, AR, RR, ACE, CR)

Price trend signal

• "Best time to buy" badge: direction (falling/rising/stable), 7d/30d changes
• Per-source breakdown with best source callout
• Human-readable summary ("Down 8% this week on magi")

Card view enrichment

• TCGdex identity (name, image, set, rarity) for all 29K cards
• Cards from set browser show info instead of empty search page

AI grading upload

• Signed GCS upload URLs for direct browser-to-cloud image upload
• Existing /api/grade pipeline processes uploaded images

Multi-region

• Cloud Run in asia-south1 + us-central1
• Global LB auto geo-routes to nearest region
• Zero incremental cost at idle

Security

• Custom Wolfi base image (apko, 9 smoke tests, 0 CVEs)
• Sigstore cosign keyless signing + SLSA provenance attestation
• Binary Authorization enforced on both Cloud Run services
• CodeQL SAST, SBOM/Grype scanning, npm audit, lockfile-lint, gitleaks
• Dependabot (weekly npm + Actions), Socket.dev supply chain analysis
• Request analytics middleware (tier/path/latency to Firestore, 30d TTL)
• Pre-commit hook: blocks .env, secrets, large files

Infrastructure

• Terraform split into 8 files by resource type
• Consolidated CI: single ci.yml (unit, smoke, codeql, scan, audit, secrets)
• Deploy by image digest with matrix strategy (both regions)
• Kaniko v1.23.2 pinned, --reproducible builds

Downloads

• casecomp-extension-v1.2.0.zip — Chrome extension (load unpacked)
• casecomp-api-spec-v1.2.0.json — OpenAPI 3.0.3 spec

Verify

# Verify container signature
cosign verify \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-identity-regexp="github.com/Pyronewbic/casecomp" \
  gcr.io/casecomp-495718/casecomp-api:latest

# Verify SLSA provenance
cosign verify-attestation \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-identity-regexp="github.com/Pyronewbic/casecomp" \
  --type slsaprovenance \
  gcr.io/casecomp-495718/casecomp-api:latest

v1.1.0

What's new

Card search & autocomplete

• Search 29K cards by name (EN + JP) with card preview thumbnails
• Card-centric view: Raw and Graded tabs with grading ROI comparison
• Cross-source arbitrage per format (raw prices vs slab prices)

Portfolio tracker

• Add cards, track value, ROI, gainers/losers
• Value history chart, CSV export, grading opportunities
• Email notifications via Resend when alerts trigger

AI grading v2

• Full PSA rubric (grades 5-10) with perspective correction for tilted photos
• Corner crop preprocessing via sharp (8 magnified crops per card)
• High-res eBay images (s-l1600)

Performance

• Fast multi-source search (~200ms with caching)
• Server startup: 8s → <1s (cached card database)
• PSA lookups: 5s → 50ms for known misses
• Seller feedback filtering (scam accounts removed automatically)

Filters

• Format (Raw/Slab), multi-select source, condition, slab provider/grade
• Korean/Chinese listings filtered for JP card searches
• Digital codes, mystery packs, playsets auto-removed

Infrastructure

• Public sitemap endpoint for SEO
• Resend email integration with 6h dedup
• 290 tests (128 unit + 88 API + 74 smoke)

Downloads

• casecomp-extension-v1.1.0.zip — Chrome extension (load unpacked)
• casecomp-api-spec-v1.1.0.json — OpenAPI 3.0.3 spec

v1.0.0-beta.1

First public beta.

Download

casecomp-extension-v1.0.0-beta.1.zip — Chrome extension for queue auto-join and drop intelligence.

Install

1. Download the zip and extract it
2. Open chrome://extensions in Chrome, Edge, Brave, Arc, or Opera
3. Enable Developer mode
4. Click Load unpacked → select the extracted extension/ folder

Extension Features

• Queue auto-join: Pokemon Center, Walmart, Costco, Target
• Auto add-to-cart after queue clearance
• News monitoring: Discord, X, Reddit
• Dashboard with KPI tracking and live queue feed
• Product listing monitor for restocks

API & Dashboard

• Web dashboard: api.casecomp.xyz
• Landing page: casecomp.xyz
• API docs: api.casecomp.xyz/docs