Matt 449b9497ab fix(uat): batch — timeline overshoot, name-sync, reset-password, dashboard cleanup, queue/seed hygiene + alpha UAT findings doc ...

UAT findings landed across the last few Playwright + React Grab passes;
single grouped commit so the index doesn't fragment into 30 one-liners.

User & auth:
- `user-settings`: name now updates the avatar + topbar menu after save
  (was reading stale session).
- `me/password-reset`: 3 bugs (token validation, error response shape,
  redirect chain).
- Admin user permission-overrides route honours the same envelope as
  the rest of the admin surface.

Dashboard:
- Removed obsolete `revenue-breakdown-chart` + `dashboard-widgets-card`
  (replaced by the customisable widget grid).
- Strip `revenue_breakdown` from analytics route + use-analytics +
  service + integration test so nothing renders an empty card.
- Activity log timeline overshoot fix (`interest-timeline` +
  `entity-activity-feed`).
- Tightened tiles: active-deals, berth-heat-widget, pipeline-value, kpi-tile.
- `dev-mode-banner`: derive dismissed state synchronously instead of
  via an effect (set-state-in-effect lint rule).

Forms & lists (assorted polish):
- client / company / yacht / interest / reminder forms — validation +
  empty-state copy + tab transitions.
- companies/yachts list tweaks; berth recommender panel; qualification
  checklist; supplemental info request button.

Infra & misc:
- Queue workers (ai / email / notifications) — log shape +
  per-job timeout consistency.
- Auth / brochures / users schema small adjustments; seeds reflect
  permissions matrix changes.
- Scan shell + scanner manifest + AI admin page small fixes.
- `next.config.transpilePackages` adds `echarts`/`zrender`/`echarts-for-react`
  (recommended config from echarts-for-react inside Next).

Docs:
- `docs/superpowers/audits/alpha-uat-master.md` — single rolling
  cross-cutting UAT findings doc (per CLAUDE.md convention).
- `docs/BACKLOG.md`: dashboard stats cards (§I) + activity-log
  normalization (§J).
- 2026-05-18 audit log updated with this batch.
- `CLAUDE.md` — small manual UAT scaffold notes.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-20 15:56:11 +02:00

..

api

feat: warm-up deps — ts-reset, web-vitals, RHF devtool, query-broadcast

2026-05-12 18:16:18 +02:00

dedup

feat: warm-up deps — ts-reset, web-vitals, RHF devtool, query-broadcast

2026-05-12 18:16:18 +02:00

storage

feat: warm-up deps — ts-reset, web-vitals, RHF devtool, query-broadcast

2026-05-12 18:16:18 +02:00

addresses.test.ts

feat(addresses): full CRUD UI for client + company multi-address

2026-04-28 19:38:43 +02:00

ai-budget.test.ts

feat(ai): per-port token budgets + usage ledger for AI features

2026-04-28 19:53:09 +02:00

alerts-engine.test.ts

feat(reporting): money-math sweep — Step 1 PRE-DEPLOY-PLAN

2026-05-14 15:19:38 +02:00

alerts-tenant-isolation.test.ts

sec: gate super-admin invite minting, OCR settings, and alert mutations

2026-04-29 02:27:01 +02:00

analytics-service.test.ts

fix(uat): batch — timeline overshoot, name-sync, reset-password, dashboard cleanup, queue/seed hygiene + alpha UAT findings doc

2026-05-20 15:56:11 +02:00

audit-search.test.ts

feat(phase-b): ship analytics dashboard, alerts, scanner PWA, dedup, audit view

2026-04-28 17:21:55 +02:00

backfill-document-folders.test.ts

chore: prettier format pass on branch files

2026-05-11 13:01:47 +02:00

berth-pdf-versions.test.ts

feat(errors): platform-wide request ids + error codes + admin inspector

2026-05-05 14:12:59 +02:00

client-relationship-port-isolation.test.ts

fix(security): port-scope clientId/berthId/yachtId on interests + clientRelationships

2026-04-29 04:14:09 +02:00

crm-invite-super-admin-gate.test.ts

sec: gate super-admin invite minting, OCR settings, and alert mutations

2026-04-29 02:27:01 +02:00

crud-audit.test.ts

feat(pipeline): 9→7 stage refactor + v1.1 hardening wave

2026-05-14 03:39:21 +02:00

custom-fields.test.ts

test(audit-tier-5): webhook + cross-port test coverage

2026-05-05 20:53:34 +02:00

documenso-webhook-route.test.ts

fix(audit): comprehensive 2026-05-15 audit fix wave + Documenso v2 polish

2026-05-18 13:28:50 +02:00

document-folders-crud.test.ts

chore: prettier formatter drift across recent commits

2026-05-11 10:57:37 +02:00

document-folders-soft-delete.test.ts

chore: prettier formatter drift across recent commits

2026-05-11 10:57:37 +02:00

document-path-style-download.test.ts

chore: prettier formatter drift across recent commits

2026-05-11 10:57:37 +02:00

document-templates-eoi.test.ts

feat(interests): EOI/contract/reservation tabs + contact log + berth interest milestone + interest list overhaul

2026-05-07 20:59:28 +02:00

document-templates-generate-and-sign.test.ts

fix(audit): comprehensive 2026-05-15 audit fix wave + Documenso v2 polish

2026-05-18 13:28:50 +02:00

documents-completion-auto-deposit.test.ts

fix(documents): tighten owner resolution + cover company/yacht paths

2026-05-11 11:48:44 +02:00

documents-expired-webhook.test.ts

test(audit-tier-5): webhook + cross-port test coverage

2026-05-05 20:53:34 +02:00

documents-hub-eoi-queue.test.ts

fix(documents): idempotency, perf, contract pipeline, observability

2026-05-11 13:56:46 +02:00

documents-list-folder-filter.test.ts

feat(documents): hide completed workflows from folder views

2026-05-11 12:14:51 +02:00

email-draft-job-isolation.test.ts

sec: lock down 5 cross-tenant IDORs uncovered in second-pass review

2026-04-29 02:48:43 +02:00

expense-dedup.test.ts

fix(audit-tier-2): error-surface hygiene — toastError + CodedError sweep

2026-05-05 20:18:05 +02:00

factories-smoke.test.ts

feat(factories): add makeMembership, makeReservation, makeOwnershipTransfer

2026-04-24 13:19:54 +02:00

files-folder-aggregation.test.ts

fix(documents): tighten cross-port test + refine paths + signing-details coverage

2026-05-11 12:13:27 +02:00

gdpr-export.test.ts

test: update GDPR export test for dashed jobId — companion to F3

2026-05-14 22:50:51 +02:00

health-and-ready.test.ts

feat: warm-up deps — ts-reset, web-vitals, RHF devtool, query-broadcast

2026-05-12 18:16:18 +02:00

interests-port-fk-isolation.test.ts

feat(pipeline): 9→7 stage refactor + v1.1 hardening wave

2026-05-14 03:39:21 +02:00

interests-yacht.test.ts

fix(audit): A1/A2/A4/A6/A8/A9/A16/A17/A19/A20 from 2026-05-15 sweep

2026-05-15 01:12:20 +02:00

invoices-billing-entity.test.ts

chore(i18n): drop legacy free-text country/nationality columns

2026-04-28 19:00:57 +02:00

maintenance-cleanup.test.ts

chore(hardening): maintenance jobs, defense-in-depth, redis-backed public rate limit

2026-04-29 01:52:41 +02:00

notification-lifecycle.test.ts

chore(cleanup): Phase 1 — gap closure across audit, alerts, soft-delete, perms

2026-04-28 18:48:22 +02:00

ocr-config.test.ts

feat(ocr): Tesseract.js as default scanner, AI as opt-in per port

2026-04-28 19:46:29 +02:00

ownership-transfer.test.ts

chore(deps): bump next 15.2.9→15.5.18 + drizzle-orm 0.38.4→0.45.2 (Phase 1b/c)

2026-05-08 16:34:01 +02:00

permission-matrix.test.ts

feat(permissions): add yacht, company, membership, reservation keys

2026-04-24 12:30:06 +02:00

pipeline-transitions.test.ts

feat(pipeline): 9→7 stage refactor + v1.1 hardening wave

2026-05-14 03:39:21 +02:00

port-scoping.test.ts

feat(pipeline): 9→7 stage refactor + v1.1 hardening wave

2026-05-14 03:39:21 +02:00

portal-auth.test.ts

fix(audit-wave-11): auth-flow hardening (auth-flow-auditor)

2026-05-13 12:52:17 +02:00

public-interest-trio.test.ts

feat: warm-up deps — ts-reset, web-vitals, RHF devtool, query-broadcast

2026-05-12 18:16:18 +02:00

public-residential-inquiry.test.ts

sec: gate super-admin invite minting, OCR settings, and alert mutations

2026-04-29 02:27:01 +02:00

rate-limit.test.ts

feat(rate-limit): per-user limiters for OCR, AI, and exports

2026-04-28 19:56:01 +02:00

recommendations-yacht-dims.test.ts

feat(recommendations): read yacht dimensions from yachts table

2026-04-24 15:51:17 +02:00

reservation-exclusivity.test.ts

feat(reservations): service + validators + exclusivity tests

2026-04-24 12:15:22 +02:00

schema-constraints.test.ts

chore(deps): bump next 15.2.9→15.5.18 + drizzle-orm 0.38.4→0.45.2 (Phase 1b/c)

2026-05-08 16:34:01 +02:00

webhook-delivery.test.ts

chore(cleanup): Phase 1 — gap closure across audit, alerts, soft-delete, perms

2026-04-28 18:48:22 +02:00