5 Commits

Include renames

Author	SHA1	Message	Date
Alexandalexpolo1	0a8a3b2c54	security: add rotating refresh sessions (#47) ... Co-authored-by: alexpolo1 <[email protected]>	2026-10-07 22:40:05 +02:00
3 people	f37adae2cb	feat: deliver auditable Smart Pakke quote flow and free site geometry (#31) ... * feat: move login credentials to a DB-backed users table with an admin management page Replaces the hardcoded AUTH_USERNAME/AUTH_PASSWORD login check with a new auth_accounts table (bcrypt-hashed passwords, admin/user roles). Adds admin-only /api/users CRUD routes and a "Brugere" admin page in the frontend for managing logins without redeploying. Removes the unused, unmounted duplicate login route in src/routes/auth.js. * docs: add architecture codemaps with diagrams for the whole system Adds codemaps/architecture.md, backend.md, frontend.md, and data.md — Mermaid-diagrammed design documentation verified against the live codebase and database rather than assumed from CLAUDE.md. Covers the unified-server.js request flow (mounted routers + ~183 inline routes), 68 backend services grouped by domain, the frontend's state-driven view-switch (no React Router in practice despite BrowserRouter being present), and the full 122-table DB schema with the auth_accounts vs unrelated users table naming trap flagged explicitly. Links added from the root README. Co-Authored-By: Claude Sonnet 5 <[email protected]> * feat: ship canonical roof quote workflow * fix: keep migration dry-run idempotent * [verified] feat: complete Smart Pakker management * [verified] fix: ignore blank task dependencies * [verified] fix: align package duplication with schema * [verified] fix: enforce Discord status limits * [verified] fix: link Smart Pakke materials safely * [verified] fix: harden material link review * [verified] feat: improve material matching * fix: scope pitch validation to roof packages * fix: support canonical snapshots on production schema * [verified] fix: hide internal package metadata from PDF * [verified] feat: deliver sales-ready customer PDF * [verified] feat: ship sales-ready PDF with AI overview * [verified] fix: authenticate project list requests * [verified] fix: refresh project-list authentication * [verified] fix: open existing project details * [verified] fix: keep roof components searchable in builder * [verified] fix: expose all Smart Package categories * [verified] fix: authenticate project creation * [verified] feat: make Smart Pakker the universal project flow * [verified] feat: preview Smart Package contents * [verified] test: keep generic release isolated from downpipe work * feat: add first-class Smart Pakke rentals * [verified] feat: add gutter and downpipe smart packages * [verified] fix: prepare six-house gutter quote flow * [verified] fix: open generic quotes without roof geometry * [verified] fix: review generic quotes with authenticated APIs * [verified] fix: calculate generic Smart Package quotes * [verified] fix: return generic calculation breakdown * feat: checkpoint generic signed snapshot validation with red-green tests * feat: complete fail-closed generic quote approval and customer PDF flow * feat: use generic signed snapshot in final review * feat: redesign generic quote final review * fix: harden generic review summaries * feat: add auditable six-house package basis * [verified] feat: finish auditable Smart Pakke UI * [verified] fix: bind auditable quantity and price bases * [verified] fix: keep six-house basis across package versions * [verified] fix: complete smart package discovery management * [verified] fix: simplify composition and generic scope * [verified] test: keep explicit roof contracts fail closed * [verified] fix: harden generic quote snapshots * fix: make generic quote delivery customer safe * [verified] fix: secure package catalog reads * [verified] fix: close workspace provenance blockers * fix: harden customer document language boundary * [verified] fix: secure smart package internal reads * fix: version package child mutations atomically * feat: add generic customer quote text flow * [verified] fix: allow manual customer numbers * [verified] fix: expose optional roof geometry * [verified] fix: rebase hydrated packages after geometry edits * [verified] feat: add free editable site area map * [verified] fix: harden map recovery and geocoding gate * fix: bind map quantities to authoritative geometry * fix: release geocoder lock before dispatch * fix: separate roof and site geometry provenance * fix: revoke stale admin authorization * fix: migrate task geometry basis * fix: make backend CI dependency-complete * ci: seed isolated e2e login account * fix: allow clean database bootstrap * fix: skip indexes for optional tables * test: use canonical mansard geometry in e2e * [verified] fix(auth): enforce live operator boundary * fix: fail close Ordrestyring offer transport * fix(frontend): authenticate customer project requests * fix: align canonical roof type contract * [verified] fix: reconcile legacy package labor safely * [verified] fix: audit site geometry deletion * docs: add PR 31 reviewer guide * docs: synchronize Obsidian vault * docs: sync integrated reviewer guide to Obsidian * ci: seed isolated auth account explicitly * fix: close offer bootstrap and service readiness gaps * fix: authenticate protected package callers * fix: provision initial admin and disable generic send * [verified] fix: close final quote release blockers * [verified] fix: seed gutter packages before deployment --------- Co-authored-by: alexpolo1 <[email protected]> Co-authored-by: Claude Sonnet 5 <[email protected]>	2026-09-26 22:39:18 +02:00
alexpolo1andClaude Sonnet 5	4c4092099e	fix: don't fail deploy jobs when diagnostic artifact upload hits quota ... The prod deploy just failed at Unit Tests even though all 226 tests passed - the job died on `Upload coverage report` hitting the GitHub Actions artifact storage quota. ci.yml already treats artifact uploads as best-effort for this exact reason (comment: "Artifact upload must never fail the job (storage quota can be full)"), but deploy-prod.yml and deploy-test.yml were missing the same continue-on-error on their diagnostic report/screenshot/coverage uploads. Leaves the actual deployable build artifact uploads (deploy-package-*) blocking, since a failed deploy really should stop there. Co-Authored-By: Claude Sonnet 5 <[email protected]>	2026-08-20 13:49:32 +02:00
alexpolo1	fe4f11fe32	ci: survive artifact quota, update actions, clean lint warnings ... The last CI run failed only because GitHub artifact storage quota was exhausted: backend tests and frontend build were green but their upload-artifact steps failed the jobs. - Mark all artifact uploads continue-on-error and cut retention to 3 days (deploy workflows kept artifacts up to 30 days, which is what filled the quota) - E2E job builds the frontend itself instead of downloading the frontend-build artifact, so it no longer depends on artifact storage - Bump actions/checkout v4->v7, setup-node v4->v6, upload-artifact v4->v7, download-artifact v4->v8 (Node 20 runtime deprecation) and CI Node 18 (EOL) -> 22 to match production - Fix all frontend lint warnings: remove unused imports/state and the dead Stepper-based form UI in SmartPackageForm (renderStepContent, parseAndAddMaterialsFromDescription were unreferenced), disable exhaustive-deps where the effect is intentionally scoped	2026-07-08 13:05:28 +02:00
Claude	1ed77551a0	feat: Add comprehensive CI/CD pipelines and fix lint errors ... CI/CD Pipelines: - ci.yml: Enhanced with lint, unit tests, E2E tests, security scan - deploy-test.yml: Test environment deployment workflow - deploy-prod.yml: Production deployment with backup, rollback, smoke tests Test Fixes: - supportTickets.test.js: Fix field names (topic_id, priority_id) Lint Fixes: - CalendarGrid.js: Mark unused employeeTypeFilter - CustomerSearch.js: Mark unused setTaskType - EnhancedGeometry.js: Mark unused variables - InlineSmartPackage.js: Add eslint-disable for unused handlers - ProjectFlow.js: Remove unused imports and handlers - WhosFreeWidget.js: Add eslint-disable for useEffect - BackupImport.js: Remove unused TextField import	2026-01-25 10:47:16 +00:00