Matt 16ef609e1b audit: Tier 1/3/4/5/7 batch — SSE, gates, dedup, URL escape, FK constraints ...

Tier 1.6: S3Backend.put now sets ServerSideEncryption=AES256 — closes
the cleartext-at-rest gap for signed contracts, GDPR exports, pg_dumps.

Tier 3.7: New safeUrl() helper in lib/email/shell.ts. Scheme allow-list
(http/https/mailto/tel/relative only — javascript:/data:/vbscript:/file:
rewritten to about:blank) + HTML-attribute escape. Retrofitted across
all 7 transactional templates (crm-invite, portal-auth, document-signing,
notification-digest, residential-inquiry, admin-email-change).

Tier 4.2: /api/v1/alerts GET now gated on admin.view_audit_log.

Tier 4.3: Documenso webhook handler emits captureErrorEvent on catch.
Admin/errors no longer silent on webhook crashes.

Tier 4.6: Inquiry-funnel email dedup is now case-insensitive
(LOWER(value)) and stores normalized email on insert. Capital-letter
resubmissions no longer spawn duplicate client+yacht+interest rows.

Tier 5.6 + data-model H1: migration 0056 adds FK
user_permission_overrides.user_id → user(id) cascade, same for
user_port_roles.userId, plus partial unique index on
user_email_changes pending rows.

Tier 7.6: @types/node bumped from ^25 to ^20.19.0 — matches the runtime.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-12 17:09:14 +02:00

.gitea/workflows

Remove deploy job from CI - build and push only

2026-03-26 12:19:36 +01:00

.husky

Fix Docker build and production server infrastructure

2026-04-08 15:31:33 -04:00

assets

feat(portal): replace magic-link with email/password + admin-initiated activation

2026-04-26 15:34:02 +02:00

competing-plans/blessed

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

docker/postgres

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

docs

audit: Tier 1/3/4/5/7 batch — SSE, gates, dedup, URL escape, FK constraints

2026-05-12 17:09:14 +02:00

nginx

fix(security): tier-0 audit blockers (next CVE, role gate, perm traps, key validation, rate limits)

2026-05-05 18:33:13 +02:00

public

fix(ux): popover collision padding, PWA manifest, webhook toasts, portal toast, dashboard error boundary, GDPR poll backoff, empty-state CTA

2026-05-06 14:59:27 +02:00

scripts

fix(folders): logging, files-rescue, hard-delete wiring, audit logs

2026-05-11 13:57:42 +02:00

src

audit: Tier 1/3/4/5/7 batch — SSE, gates, dedup, URL escape, FK constraints

2026-05-12 17:09:14 +02:00

tests

feat: round 2 — stage prompts, berth header, EOI inline edit, measurement units

2026-05-12 15:28:22 +02:00

.env.example

chore(env): document DOCUMENSO/MINIO vars + fix InMemoryBackend test stub

2026-05-11 14:04:28 +02:00

.gitattributes

chore: add .gitattributes to normalize line endings to LF

2026-04-22 02:02:46 +02:00

.gitignore

feat(ui): broad consistency sweep — sources, dates, comboboxes, milestones

2026-05-12 14:50:58 +02:00

.lintstagedrc.json

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

.prettierrc

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

01-CONSOLIDATED-SYSTEM-SPEC.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

02-FEATURE-INVENTORY.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

03-ARCHITECTURE-DECISIONS.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

04-ARCHITECTURE-COMPARISON.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

05-FINAL-ARCHITECTURE-DECISIONS.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

06-MASTER-FEATURE-SPEC.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

07-DATABASE-SCHEMA.md

docs: reflect data-model refactor in CLAUDE.md + DB schema overview

2026-04-26 14:14:34 +02:00

08-API-ENDPOINT-CATALOG.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

09-BUSINESS-RULES.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

10-AUTH-AND-PERMISSIONS.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

11-REALTIME-AND-BACKGROUND-JOBS.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

12-IMPLEMENTATION-SEQUENCE.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

13-UI-PAGE-MAP.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

14-TECHNICAL-DECISIONS.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

15-DESIGN-TOKENS.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

CLAUDE.md

feat(documenso): full v2 endpoint coverage + sequential signing + redirectUrl

2026-05-11 14:38:45 +02:00

components.json

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

design-system-preview.html

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

docker-compose.dev.yml

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

docker-compose.prod.yml

fix(audit-tier-1): timeouts, lifecycle, per-port Documenso, FK constraints

2026-05-05 19:52:58 +02:00

docker-compose.yml

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

Dockerfile

fix(audit-tier-6): validation, perms, ops/infra, per-port webhook secret

2026-05-05 21:03:31 +02:00

Dockerfile.dev

fix(audit-tier-6): validation, perms, ops/infra, per-port webhook secret

2026-05-05 21:03:31 +02:00

Dockerfile.worker

fix(build): make prepare tolerant of missing husky + bump deps (Phase 1a)

2026-05-08 16:15:34 +02:00

drizzle.config.ts

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

eslint.config.mjs

chore(dev): enable Turbopack and lift typedRoutes out of experimental

2026-05-09 04:09:56 +02:00

mockup-A-sidebar-dark.html

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

mockup-B-light-theme.html

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

mockup-C-bold-modern.html

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

next-env.d.ts

chore(dev): enable Turbopack and lift typedRoutes out of experimental

2026-05-09 04:09:56 +02:00

next.config.ts

feat(ui): broad consistency sweep — sources, dates, comboboxes, milestones

2026-05-12 14:50:58 +02:00

NOCODB-MIGRATION-MAPPING.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

package.json

audit: Tier 1/3/4/5/7 batch — SSE, gates, dedup, URL escape, FK constraints

2026-05-12 17:09:14 +02:00

playwright.config.ts

fix(test): raise mobile-audit timeout to 30min for 4-viewport runs

2026-04-29 15:15:26 +02:00

pnpm-lock.yaml

audit: Tier 1/3/4/5/7 batch — SSE, gates, dedup, URL escape, FK constraints

2026-05-12 17:09:14 +02:00

postcss.config.mjs

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

PROGRESS.md

docs: update PROGRESS.md with 2026-03-26 → 2026-04-22 changelog

2026-04-22 02:37:43 +02:00

SECURITY-GUIDELINES.md

Initial commit: Port Nimara CRM (Layers 0-4)

2026-03-26 11:52:51 +01:00

tailwind.config.ts

feat(mobile): add safe-area spacing utilities (pt-safe-top, pb-safe-bottom, etc.)

2026-04-29 13:56:53 +02:00

tsconfig.json

feat(platform): residential module + admin UI + reliability fixes

2026-04-27 21:54:32 +02:00

tsconfig.server.json

Fix Docker build and production server infrastructure

2026-04-08 15:31:33 -04:00

vitest.config.ts

test(infra): vitest globalSetup teardown purges test-port-* leaks

2026-04-28 13:28:15 +02:00

Description

No description provided

25 MiB

Languages

TypeScript 98.7%

HTML 1%

CSS 0.1%

Shell 0.1%