Matt 82049eea92 deps: bump Tier-A patches + react-day-picker 10 + esbuild 0.28 ...

Successfully bumped:
- bullmq 5.76.6 → 5.76.8
- @tanstack/react-query 5.100.9 → 5.100.10
- @tanstack/react-query-devtools 5.100.9 → 5.100.10
- better-auth 1.6.9 → 1.6.10
- @playwright/test 1.59.1 → 1.60.0
- libphonenumber-js 1.12.43 → 1.13.1
- tailwind-merge 3.5.0 → 3.6.0
- vitest 4.1.5 → 4.1.6
- @vitest/coverage-v8 4.1.5 → 4.1.6
- lint-staged 17.0.3 → 17.0.4
- esbuild 0.27.7 → 0.28.0
- react-grab 0.1.33 → 0.1.34
- react-day-picker 9.14.0 → 10.0.0

react-day-picker 10 verified safe: probed v10 release notes against
src/components/ui/calendar.tsx — we use only v9-canonical APIs that
v10 preserves. Removed the `table` className entry from the wrapper
(v10 dropped it since the renderer is now CSS-grid, not table-based).

Tried + rolled back:
- @hookform/resolvers 3 → 5: stricter input/output inference broke
  every form using <{schema}, any, {schema}> implicit shape. Needs
  per-form refactor; parked.

Verified clean: pnpm audit (prod + dev) = 0 vulnerabilities;
pnpm exec tsc --noEmit clean; vitest 1293/1293 pass.

Remaining outdated (deliberately deferred — see docs/AUDIT-2026-05-12.md §34):
- next/eslint-config-next 15 → 16 (2-4 wk wait)
- zod 3 → 4 (couple with @hookform/resolvers 5; codemod-needed)
- tailwindcss 3 → 4 (focused-afternoon project)
- @types/node ^20.19 stays pinned to match runtime (audit decision)
- archiver 7 stays (no @types/archiver@8 published)
- eslint 9 stays (locked to eslint-config-next 15)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-12 17:33:24 +02:00

..

ai-budget.service.ts

fix(audit): non-Documenso backlog sweep — port-binding, NULLS NOT DISTINCT, custom merge tokens, company docs

2026-05-08 02:20:27 +02:00

alert-engine.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

alert-rules.ts

feat(admin+search): user-mgmt polish, role labels, search keyword index

2026-05-12 16:14:12 +02:00

alerts.service.ts

feat(audit): extend AuditAction enum + audit logging on alerts + expense dedup

2026-05-06 14:57:24 +02:00

analytics.service.ts

perf(analytics): collapse 30-day occupancy timeline into single GROUP BY query

2026-05-11 15:40:44 +02:00

audit-search.service.ts

feat(search): full-platform search overhaul + view tracking + notes bucket

2026-05-07 20:58:34 +02:00

audit.service.ts

Add user settings, audit log, berth CRUD, and missing endpoints

2026-04-08 19:45:56 -04:00

backup.service.ts

feat: autonomous backlog push — admin UX overhaul + storage parity + residential parity + Documenso Phase 1

2026-05-07 21:02:12 +02:00

berth-import.ts

fix(audit): post-review hardening across phases 0-7

2026-05-05 04:07:03 +02:00

berth-pdf-parser.ts

fix(audit-tier-2): error-surface hygiene — toastError + CodedError sweep

2026-05-05 20:18:05 +02:00

berth-pdf.service.ts

fix(audit): backlog sweep — partial archived indexes, custom-fields per-entity gate, polish

2026-05-07 21:45:42 +02:00

berth-recommender.service.ts

fix(audit): backlog sweep — partial archived indexes, custom-fields per-entity gate, polish

2026-05-07 21:45:42 +02:00

berth-reservations.service.ts

fix(audit-tier-4): tenant-isolation defense-in-depth

2026-05-05 20:48:13 +02:00

berth-rules-engine.ts

refactor(interests): migrate callers to interest_berths junction + drop berth_id

2026-05-05 02:41:52 +02:00

berths.service.ts

feat: round 2 — stage prompts, berth header, EOI inline edit, measurement units

2026-05-12 15:28:22 +02:00

brochures.service.ts

fix(security): brochures.service UPDATE/DELETE WHERE includes portId

2026-05-06 14:58:47 +02:00

client-archive-dossier.service.ts

fix(audit): reliability HIGHs — smart-restore re-link, TOCTOU lock, bulk wrong-interest, ext-EOI tx, bulk idempotency

2026-05-06 22:11:00 +02:00

client-archive.service.ts

fix(audit): reliability HIGHs — smart-restore re-link, TOCTOU lock, bulk wrong-interest, ext-EOI tx, bulk idempotency

2026-05-06 22:11:00 +02:00

client-hard-delete.service.ts

fix(folders): logging, files-rescue, hard-delete wiring, audit logs

2026-05-11 13:57:42 +02:00

client-merge.service.ts

fix(audit-tier-4): tenant-isolation defense-in-depth

2026-05-05 20:48:13 +02:00

client-restore.service.ts

fix(audit): reliability HIGHs — smart-restore re-link, TOCTOU lock, bulk wrong-interest, ext-EOI tx, bulk idempotency

2026-05-06 22:11:00 +02:00

clients.service.ts

fix(folders): logging, files-rescue, hard-delete wiring, audit logs

2026-05-11 13:57:42 +02:00

companies.service.ts

feat(ui): broad consistency sweep — sources, dates, comboboxes, milestones

2026-05-12 14:50:58 +02:00

company-memberships.service.ts

fix(audit-tier-4): tenant-isolation defense-in-depth

2026-05-05 20:48:13 +02:00

crm-invite.service.ts

feat(branding): wire per-port branding through every transactional email + auth shell (R2-H15)

2026-05-07 00:00:45 +02:00

currency.ts

fix(audit-tier-2): error-surface hygiene — toastError + CodedError sweep

2026-05-05 20:18:05 +02:00

custom-fields.service.ts

fix(audit-tier-2): error-surface hygiene — toastError + CodedError sweep

2026-05-05 20:18:05 +02:00

dashboard.service.ts

audit: Tier 2/3/4 batch — reports math, portal copy, authz escalation guard

2026-05-12 17:13:04 +02:00

documenso-client.ts

feat(documenso): full v2 endpoint coverage + sequential signing + redirectUrl

2026-05-11 14:38:45 +02:00

documenso-payload.ts

feat(documenso): full v2 endpoint coverage + sequential signing + redirectUrl

2026-05-11 14:38:45 +02:00

documenso-webhook.ts

fix(audit-verification): regressions found in post-Tier-6 review

2026-05-05 21:19:39 +02:00

document-folders.service.ts

deps: bump Tier-A patches + react-day-picker 10 + esbuild 0.28

2026-05-12 17:33:24 +02:00

document-import.ts

feat(documents): importer for organized S3/filesystem buckets

2026-05-10 16:53:51 +02:00

document-reminders.ts

fix(audit-verification): regressions found in post-Tier-6 review

2026-05-05 21:19:39 +02:00

document-sends.service.ts

fix(audit): non-Documenso backlog sweep — port-binding, NULLS NOT DISTINCT, custom merge tokens, company docs

2026-05-08 02:20:27 +02:00

document-signing-emails.service.ts

feat: autonomous backlog push — admin UX overhaul + storage parity + residential parity + Documenso Phase 1

2026-05-07 21:02:12 +02:00

document-templates.service.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

document-templates.ts

feat(documenso): full v2 endpoint coverage + sequential signing + redirectUrl

2026-05-11 14:38:45 +02:00

documents.service.ts

feat(documenso): full v2 endpoint coverage + sequential signing + redirectUrl

2026-05-11 14:38:45 +02:00

email-accounts.service.ts

fix(audit-tier-2): error-surface hygiene — toastError + CodedError sweep

2026-05-05 20:18:05 +02:00

email-compose.service.ts

fix(regressions): client-bundle ioredis + Drizzle ANY() array bindings

2026-05-06 14:56:59 +02:00

email-draft.service.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

email-threads.service.ts

fix(audit-tier-2): error-surface hygiene — toastError + CodedError sweep

2026-05-05 20:18:05 +02:00

entity-activity.service.ts

feat(interests): EOI/contract/reservation tabs + contact log + berth interest milestone + interest list overhaul

2026-05-07 20:59:28 +02:00

entity-tags.helper.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

eoi-context.ts

feat: round 2 — stage prompts, berth header, EOI inline edit, measurement units

2026-05-12 15:28:22 +02:00

error-events.service.ts

audit: Tier 1/3/6/7 batch — PII redaction, mobile safe-area, perf, build hardening

2026-05-12 17:18:35 +02:00

expense-dedup.service.ts

feat(audit): extend AuditAction enum + audit logging on alerts + expense dedup

2026-05-06 14:57:24 +02:00

expense-export.ts

feat(expenses): streaming expense-PDF export + receipt-less expense flag + audit-3 fixes

2026-05-05 04:38:32 +02:00

expense-ocr.service.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

expense-pdf.service.ts

feat(currency): sweep remaining concat call sites to formatCurrency

2026-05-09 18:35:34 +02:00

expenses.ts

fix(audit-tier-2): error-surface hygiene — toastError + CodedError sweep

2026-05-05 20:18:05 +02:00

external-eoi.service.ts

fix(audit): reliability HIGHs — smart-restore re-link, TOCTOU lock, bulk wrong-interest, ext-EOI tx, bulk idempotency

2026-05-06 22:11:00 +02:00

files.ts

fix(documents): idempotency, perf, contract pipeline, observability

2026-05-11 13:56:46 +02:00

form-templates.service.ts

fix(audit-tier-4): tenant-isolation defense-in-depth

2026-05-05 20:48:13 +02:00

gdpr-bundle-builder.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

gdpr-export.service.ts

fix(audit-tier-2): error-surface hygiene — toastError + CodedError sweep

2026-05-05 20:18:05 +02:00

inquiry-notifications.service.ts

fix(audit): wire 6 missing email subject overrides (R2-H14)

2026-05-06 22:26:41 +02:00

interest-berths.service.ts

fix(sales): wire missing berth-rule triggers + portal company-billed invoices

2026-05-11 13:53:10 +02:00

interest-contact-log.service.ts

feat(interests): EOI/contract/reservation tabs + contact log + berth interest milestone + interest list overhaul

2026-05-07 20:59:28 +02:00

interest-scoring.service.ts

perf(audit-tier-3): bulk-fetch the five hot N+1 loops

2026-05-05 20:41:23 +02:00

interests.service.ts

audit: 33-agent comprehensive audit + critical fixes

2026-05-12 16:52:35 +02:00

invoices.ts

fix(sales): wire missing berth-rule triggers + portal company-billed invoices

2026-05-11 13:53:10 +02:00

next-in-line-notify.service.ts

audit: 33-agent comprehensive audit + critical fixes

2026-05-12 16:52:35 +02:00

notes.service.ts

feat(notes): aggregate-on-read for yachts, companies, residential clients

2026-05-09 18:36:05 +02:00

notification-digest.service.ts

feat(branding): wire per-port branding through every transactional email + auth shell (R2-H15)

2026-05-07 00:00:45 +02:00

notifications.service.ts

fix(audit-tier-4): tenant-isolation defense-in-depth

2026-05-05 20:48:13 +02:00

ocr-config.service.ts

fix(audit): non-Documenso backlog sweep — port-binding, NULLS NOT DISTINCT, custom merge tokens, company docs

2026-05-08 02:20:27 +02:00

ocr-providers.ts

fix(audit-tier-2): error-surface hygiene — toastError + CodedError sweep

2026-05-05 20:18:05 +02:00

port-config.ts

feat(ui): broad consistency sweep — sources, dates, comboboxes, milestones

2026-05-12 14:50:58 +02:00

portal-auth.service.ts

feat(portal): route-level gate when client_portal_enabled is off

2026-05-11 14:47:46 +02:00

portal.service.ts

fix(sales): wire missing berth-rule triggers + portal company-billed invoices

2026-05-11 13:53:10 +02:00

ports.service.ts

docs(documents): clarify ensureSystemRoots safety invariants

2026-05-11 11:10:47 +02:00

public-berths.ts

feat(public-berths): expose booleans, metric variants, timestamps

2026-05-09 04:16:42 +02:00

receipt-scanner.ts

chore: prettier format pass on branch files

2026-05-11 13:01:47 +02:00

recently-viewed.service.ts

feat(search): full-platform search overhaul + view tracking + notes bucket

2026-05-07 20:58:34 +02:00

recommendations.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

record-export.ts

refactor(interests): migrate callers to interest_berths junction + drop berth_id

2026-05-05 02:41:52 +02:00

reminders.service.ts

perf(audit-tier-3): bulk-fetch the five hot N+1 loops

2026-05-05 20:41:23 +02:00

report-generators.ts

audit: Tier 2/3/4 batch — reports math, portal copy, authz escalation guard

2026-05-12 17:13:04 +02:00

reports.service.ts

fix(audit-tier-4): tenant-isolation defense-in-depth

2026-05-05 20:48:13 +02:00

reservation-agreement-context.ts

chore(i18n): drop legacy free-text country/nationality columns

2026-04-28 19:00:57 +02:00

residential-stages.service.ts

fix(audit): non-Documenso backlog sweep — port-binding, NULLS NOT DISTINCT, custom merge tokens, company docs

2026-05-08 02:20:27 +02:00

residential.service.ts

fix(audit-tier-4): tenant-isolation defense-in-depth

2026-05-05 20:48:13 +02:00

roles.service.ts

refactor(services): centralize AuditMeta + transactional setEntityTags helper

2026-04-29 01:58:42 +02:00

sales-email-config.service.ts

fix(audit-tier-2): error-surface hygiene — toastError + CodedError sweep

2026-05-05 20:18:05 +02:00

saved-views.service.ts

chore: prettier format pass on branch files

2026-05-11 13:01:47 +02:00

search-nav-catalog.ts

audit: 33-agent comprehensive audit + critical fixes

2026-05-12 16:52:35 +02:00

search.service.ts

audit: Tier 2/3/4 batch — reports math, portal copy, authz escalation guard

2026-05-12 17:13:04 +02:00

settings.service.ts

fix(audit): non-Documenso backlog sweep — port-binding, NULLS NOT DISTINCT, custom merge tokens, company docs

2026-05-08 02:20:27 +02:00

storage.ts

chore: prettier format pass on branch files

2026-05-11 13:01:47 +02:00

system-monitoring.service.ts

feat: autonomous backlog push — admin UX overhaul + storage parity + residential parity + Documenso Phase 1

2026-05-07 21:02:12 +02:00

tags.service.ts

refactor(services): centralize AuditMeta + transactional setEntityTags helper

2026-04-29 01:58:42 +02:00

umami.service.ts

fix(audit-integrations): SMTP/PG/Socket.IO timeouts, prompt injection, secret-at-rest

2026-05-05 21:31:50 +02:00

users.service.ts

audit: 33-agent comprehensive audit + critical fixes

2026-05-12 16:52:35 +02:00

webhook-dispatch.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

webhook-event-map.ts

fix(audit-2): integration regressions + data-integrity from second-pass review

2026-05-05 04:20:38 +02:00

webhooks.service.ts

feat(audit): wider coverage — sensitive views, cron, jobs, portal abuse

2026-05-06 20:44:38 +02:00

yachts.service.ts

fix(folders): logging, files-rescue, hard-delete wiring, audit logs

2026-05-11 13:57:42 +02:00