Matt f4fb7aae84 fix(audit): H1 (webhook redirect SSRF), H6 (berth-status case), H7 (residential notes URL) ...

H1: webhook delivery fetch now uses redirect:'manual' and refuses to read
or expose a redirected (un-revalidated) response, closing the SSRF read
primitive. H6: dashboard report queries matched title-case 'Sold'/'Under
offer' that never match the lowercase canonical, silently reporting 0 sold
/ understated occupancy — now lowercase. H7: NotesList maps the entityType
discriminator to its REST path (residential_* -> residential/clients|
interests) instead of interpolating the raw underscore, which 404'd every
residential notes request.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-02 12:03:35 +02:00

..

reports

feat(reports): financial hasData existence flag (service + route)

2026-06-02 10:13:42 +02:00

active-interest.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

ai-budget.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

alert-engine.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

alert-rules.ts

fix(tenancies-audit): resolve findings from 7-agent system-wide rename audit

2026-05-25 16:03:14 +02:00

alerts.service.ts

feat(audit): extend AuditAction enum + audit logging on alerts + expense dedup

2026-05-06 14:57:24 +02:00

analytics.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

audit-search.service.ts

feat(search): full-platform search overhaul + view tracking + notes bucket

2026-05-07 20:58:34 +02:00

audit.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

backup.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

berth-heat.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

berth-import.ts

fix(audit): post-review hardening across phases 0-7

2026-05-05 04:07:03 +02:00

berth-pdf-parser.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

berth-pdf.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

berth-recommender.service.ts

feat(uat-p4): inheritance polish - yacht dims, occupancy chip, map-flip flag

2026-05-26 21:48:19 +02:00

berth-rules-engine.ts

fix(audit): criticals C1 (currency-scoped deposit gate), C2 (outcome-aware berth rule), C4 (/q/ allowlist)

2026-06-02 11:54:36 +02:00

berth-tenancies.service.ts

fix(tenancies): unblock first-tenancy chicken-and-egg in webhook

2026-05-26 18:48:15 +02:00

berths.service.ts

feat(berths): ship Waiting List + Maintenance Log tabs

2026-06-01 21:55:04 +02:00

bootstrap.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

brochures.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

client-archive-dossier.service.ts

feat(tenancies-p2): rename berth_reservations → berth_tenancies (schema + perms + UI)

2026-05-25 15:09:35 +02:00

client-archive.service.ts

feat(tenancies-p2): rename berth_reservations → berth_tenancies (schema + perms + UI)

2026-05-25 15:09:35 +02:00

client-hard-delete.service.ts

feat(tenancies-p2): rename berth_reservations → berth_tenancies (schema + perms + UI)

2026-05-25 15:09:35 +02:00

client-merge.service.ts

fix(tenancies-audit): resolve findings from 7-agent system-wide rename audit

2026-05-25 16:03:14 +02:00

client-restore.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

clients.service.ts

feat(launch-readiness-batch): UAT drains, navigation refactor, launch infra, trackers

2026-05-27 22:42:37 +02:00

companies.service.ts

feat(launch-readiness-batch): UAT drains, navigation refactor, launch infra, trackers

2026-05-27 22:42:37 +02:00

company-memberships.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

crm-invite.service.ts

fix(audit): comprehensive 2026-05-15 audit fix wave + Documenso v2 polish

2026-05-18 13:28:50 +02:00

currency.ts

feat: warm-up deps — ts-reset, web-vitals, RHF devtool, query-broadcast

2026-05-12 18:16:18 +02:00

custom-document-upload.service.ts

feat(documenso-audit-phase-1): persist documensoId early + preflight + state machine + reconciliation + tests

2026-05-26 21:09:50 +02:00

custom-fields.service.ts

fix(audit): comprehensive 2026-05-15 audit fix wave + Documenso v2 polish

2026-05-18 13:28:50 +02:00

dashboard-report-data.service.ts

fix(audit): H1 (webhook redirect SSRF), H6 (berth-status case), H7 (residential notes URL)

2026-06-02 12:03:35 +02:00

dashboard-report-widgets.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

dashboard.service.ts

feat(tenancies-p2): rename berth_reservations → berth_tenancies (schema + perms + UI)

2026-05-25 15:09:35 +02:00

deal-health.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

documenso-client.ts

feat(documenso): rejection reason + poll fallback + rollback hardening + recipient UX

2026-05-26 20:06:12 +02:00

documenso-payload.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

documenso-signers.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

documenso-template-sync.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

documenso-webhook.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

document-field-detector.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

document-folders.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

document-import.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

document-reminders.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

document-sends.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

document-signing-emails.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

document-templates.service.ts

feat(document-templates): delete TipTap-to-pdfme bridge

2026-05-12 21:11:23 +02:00

document-templates.ts

feat(eoi-generate): Include-yacht toggle to omit Section 3 when yacht is a placeholder

2026-05-25 13:11:19 +02:00

documents.service.ts

feat(documenso): rejection reason + poll fallback + rollback hardening + recipient UX

2026-05-26 20:06:12 +02:00

email-accounts.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

email-compose.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

email-draft.service.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

email-routing.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

email-threads.service.ts

fix(audit-tier-2): error-surface hygiene — toastError + CodedError sweep

2026-05-05 20:18:05 +02:00

entity-activity.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

entity-tags.helper.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

eoi-context.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

eoi-overrides.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

error-events.service.ts

feat(launch-readiness-batch): UAT drains, navigation refactor, launch infra, trackers

2026-05-27 22:42:37 +02:00

expense-dedup.service.ts

feat(audit): extend AuditAction enum + audit logging on alerts + expense dedup

2026-05-06 14:57:24 +02:00

expense-export.tsx

fix(audit-wave-9): PDF correctness + brand asset hardening (pdf-auditor)

2026-05-13 12:07:57 +02:00

expense-ocr.service.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

expense-pdf.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

expenses-module.service.ts

feat(launch-readiness-batch): UAT drains, navigation refactor, launch infra, trackers

2026-05-27 22:42:37 +02:00

expenses.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

external-eoi.service.ts

fix(signing): route paper-signed reservation/contract uploads to the right doc type

2026-06-01 21:28:04 +02:00

external-signing.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

files.ts

feat(uat-p5): long-tail polish - tag chips, notes counts, hub context, tenancies toggle

2026-05-26 21:57:20 +02:00

form-templates.service.ts

fix(audit-tier-4): tenant-isolation defense-in-depth

2026-05-05 20:48:13 +02:00

gdpr-bundle-builder.ts

fix(tenancies-audit): resolve findings from 7-agent system-wide rename audit

2026-05-25 16:03:14 +02:00

gdpr-export.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

image-normalize.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

inquiry-notifications.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

interest-berths.service.ts

feat(uat-b1): ship Wave A-E of Bucket 1 audit findings

2026-05-25 03:40:37 +02:00

interest-contact-log.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

interest-scoring.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

interests.service.ts

fix(audit): criticals C1 (currency-scoped deposit gate), C2 (outcome-aware berth rule), C4 (/q/ allowlist)

2026-06-02 11:54:36 +02:00

invoices-module.service.ts

feat(launch-readiness-batch): UAT drains, navigation refactor, launch infra, trackers

2026-05-27 22:42:37 +02:00

invoices.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

list-report-data.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

logo.service.ts

feat(branding): port logo upload pipeline for internal PDFs

2026-05-12 20:51:49 +02:00

next-in-line-notify.service.ts

feat(berths): ship Waiting List + Maintenance Log tabs

2026-06-01 21:55:04 +02:00

notes.service.ts

feat(launch-readiness-batch): UAT drains, navigation refactor, launch infra, trackers

2026-05-27 22:42:37 +02:00

notification-digest.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

notifications.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

ocr-config.service.ts

fix(audit-wave-10): types-auditor fixes — Tx type, BerthDetailData, parseBody, toAuditJson

2026-05-13 12:27:08 +02:00

ocr-providers.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

onboarding.service.ts

feat(uat-b1): ship Wave A-E of Bucket 1 audit findings

2026-05-25 03:40:37 +02:00

payments.service.ts

fix(audit): criticals C1 (currency-scoped deposit gate), C2 (outcome-aware berth rule), C4 (/q/ allowlist)

2026-06-02 11:54:36 +02:00

port-config.ts

feat(uat-p5): activity-feed module, signing-order tri-state, webhook health card

2026-05-26 22:05:14 +02:00

portal-auth.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

portal.service.ts

feat(tenancies-p2): rename berth_reservations → berth_tenancies (schema + perms + UI)

2026-05-25 15:09:35 +02:00

ports.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

public-berths.ts

feat(tenancies-p4): public-map status flip via active permanent tenancy

2026-05-25 15:17:06 +02:00

public-interest.service.ts

feat(audit-session): legacy-stage canonicalization + multi-berth label sweep + PDF/UI polish

2026-05-24 20:41:27 +02:00

qualification.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

recently-viewed.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

recommendations.ts

chore(style): codebase em-dash sweep + minor layout polish

2026-05-04 22:57:01 +02:00

record-export.tsx

fix(audit-wave-9): PDF correctness + brand asset hardening (pdf-auditor)

2026-05-13 12:07:57 +02:00

reminders.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

report-generators.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

report-math.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

report-render.service.ts

feat(reports-overhaul): sales + operational + custom reports, templates, schedules, exports

2026-05-27 22:41:53 +02:00

report-runs.service.ts

feat(reports-p2): CRUD layer for report_runs + report_schedules

2026-05-25 14:26:18 +02:00

report-schedules.service.ts

feat(reports-p2): CRUD layer for report_runs + report_schedules

2026-05-25 14:26:18 +02:00

report-templates.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

reports.service.tsx

fix(audit-wave-9): PDF correctness + brand asset hardening (pdf-auditor)

2026-05-13 12:07:57 +02:00

reservation-agreement-context.ts

feat(tenancies-p2): rename berth_reservations → berth_tenancies (schema + perms + UI)

2026-05-25 15:09:35 +02:00

residential-module.service.ts

feat(residential-toggle): port-level module gate for Residential

2026-05-31 18:49:16 +02:00

residential-stages.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

residential.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

roles.service.ts

refactor(services): centralize AuditMeta + transactional setEntityTags helper

2026-04-29 01:58:42 +02:00

sales-email-config.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

saved-views.service.ts

chore: prettier format pass on branch files

2026-05-11 13:01:47 +02:00

search-nav-catalog.ts

chore(launch-prep): hide unfinished report/import surfaces, defer big builds

2026-06-01 16:39:51 +02:00

search.service.ts

feat(residential-toggle): port-level module gate for Residential

2026-05-31 18:49:16 +02:00

settings.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

signing-automation.service.ts

feat(automate-signing): one-click invitation kickoff + auto cascade + completion broadcast

2026-05-26 21:29:05 +02:00

storage.ts

fix(audit-wave-11): asset hygiene + datetime correctness

2026-05-13 12:58:58 +02:00

supplemental-forms.service.ts

feat(launch-readiness-batch): UAT drains, navigation refactor, launch infra, trackers

2026-05-27 22:42:37 +02:00

system-monitoring.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

tags.service.ts

refactor(services): centralize AuditMeta + transactional setEntityTags helper

2026-04-29 01:58:42 +02:00

tenancies-module.service.ts

feat(launch-readiness-batch): UAT drains, navigation refactor, launch infra, trackers

2026-05-27 22:42:37 +02:00

tenancy-reports.service.ts

feat(tenancies-p7): 4 module-gated dashboard widgets

2026-05-25 15:34:43 +02:00

tracked-links.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

umami.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

users.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

webhook-dispatch.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

webhook-event-map.ts

feat(tenancies-p2): rename berth_reservations → berth_tenancies (schema + perms + UI)

2026-05-25 15:09:35 +02:00

webhooks.service.ts

chore(autonomous-session): consolidate uncommitted work from prior session

2026-05-23 00:52:59 +02:00

yachts.service.ts

feat(launch-readiness-batch): UAT drains, navigation refactor, launch infra, trackers

2026-05-27 22:42:37 +02:00