31d8ad1325
feat(m11): calendar + milestones with progress calc, tests, e2e
...
- CalendarRepository (event CRUD, range query, soft-delete, project isolation)
+ MilestoneRepository (CRUD, findToDosByMilestone) + ScheduleService
(aggregated getCalendarEvents = custom events+milestones+todos in range,
milestone CRUD, milestone_updated activity, progress auto-calc 0-100)
- APIs: calendar events GET/POST/PATCH/DELETE, milestones GET/POST/PATCH +
progress
- Screens: calendar list view + CalendarEventForm, milestones list with
progress bars + MilestoneForm, ProjectNav links
- Unit tests (CalendarRepository, MilestoneRepository, ScheduleService incl.
progress calc 0/33/100) + e2e calendar
2026-06-25 02:11:10 +02:00
60fef5c0c9
feat(m10): file sharing with upload, lightbox, permission, tests, e2e
...
- FileRepository (CRUD, soft-delete, pagination, project isolation) +
FileStorageService (local FS save data/uploads/<projectId>/<uuid>.<ext>,
MIME allowlist, filename sanitize, unique uuid name, member permission,
file_shared notification to other members, file_uploaded activity log,
SSE file.uploaded, uploader/admin delete + FS unlink)
- APIs: files list/upload(multipart), download (membership), delete
- Screens: files page + Uploader(multipart) + FileList(image Lightbox,
PDF link, delete), ProjectNav ファイル link
- Unit tests (FileRepository, FileStorageService) + e2e file-sharing
2026-06-25 02:02:39 +02:00
385b251cc7
feat(m9): todo/kanban with DnD, assignee notify, completion, tests, e2e
...
- TodoRepository (column CRUD, item CRUD, soft-delete, ordering, maxOrderIndex,
project isolation) + TodoService (lazy standard-column init, member/admin
permission, create/update/move/toggleComplete/delete, todo_assigned notify,
todo_created/updated/completed activity logs, SSE todo.updated)
- APIs: columns + items (GET/POST/PATCH/DELETE), toggleComplete + move
- KanbanBoard client (HTML5 drag&drop move, new task per column, complete),
todos page, ProjectNav ToDo link
- Unit tests (TodoRepository, TodoService) + e2e todo-kanban
2026-06-25 01:54:24 +02:00
ddad5ae78c
feat(m8): SSE hub + realtime chat with mentions, tests, e2e
...
- SseHub (project-scoped client mgmt + broadcast, implements SseBroadcaster)
with SSE-formatted payload; singleton getSseHub
- ChatRepository (message CRUD, soft-delete, search, pagination, project
isolation) + ChatService (membership permission, send/edit/delete,
@email mention -> mention notification, SSE broadcast of created/updated/deleted)
- SSE stream endpoint (ReadableStream + heartbeat + abort cleanup, membership)
- Chat message API routes (history/send/edit/delete)
- ChatWindow client (EventSource auto-reconnect, history fetch, realtime
append/update/delete), chat page, ProjectNav チャット link
- SseEvent type now carries ChatMessage for chat events
- Unit (SseHub, ChatRepository, ChatService) + integration chat-sse-broadcast
+ e2e chat-sse (two contexts realtime)
2026-06-25 01:45:34 +02:00
e45aea8e27
feat(m7): markdown notes with CRUD, preview, search, tests, e2e
...
- ProjectNoteRepository (CRUD, soft-delete, search title/body/tags,
pinned-first ordering, index usage) + NoteService (membership permission,
author/admin edit/delete, note_updated notification to other members,
note_created/note_updated activity logs, pin/tags)
- APIs: notes list/create/detail/edit/delete
- Screens: notes list + NoteForm, note detail + NoteEditor + MarkdownBody
preview, ProjectNav メモ link
- Unit tests (ProjectNoteRepository, NoteService) + e2e markdown-notes.spec
2026-06-25 01:36:10 +02:00
2017585f84
feat(m6): board with threads/comments, markdown, tests, e2e
...
- BoardRepository (thread/comment CRUD, soft-delete, search, pagination,
pinned-first ordering) + BoardService (membership permission,
author/admin edit/delete, comment->board_commented notification,
board_posted/comment_added activity logs, category validation)
- APIs: threads list/create/detail/edit/delete, comments create/edit/delete
- MarkdownBody (react-markdown + remark-gfm + rehype-sanitize),
ThreadForm, CommentForm, board list + thread detail screens, ProjectNav link
- Unit tests (BoardRepository, BoardService) + e2e board.spec
2026-06-25 01:28:08 +02:00
3e02feb221
feat(m5): notifications & activity log foundation
...
- Expand NotificationRepository (unread list paginated, count, markRead
ownership-scoped); new ActivityLogRepository (create, findByProject
paginated) with deterministic created_at+id ordering
- NotificationService (notifyOnEvent, resolveTargets for 8 event types,
injectable SseBroadcaster for M8) + ActivityLogService (logActivity,
listByProject)
- NotificationEvent/SseEvent/SseBroadcaster types in lib/types
- APIs: GET /api/notifications, POST /api/notifications/:id/read,
GET /api/projects/:projectId/activity
- Screens: notifications list + MarkReadButton, NotificationBadge in
Header, project activity page + ProjectNav link
- Unit tests for both repositories and services (28 new)
2026-06-25 01:20:24 +02:00
3dc0318011
fix: post-M4 validation improvements
...
- Session: verify server-side iat expiry (not just cookie maxAge)
- Validate ProjectMemberRole on member add (reject arbitrary strings)
- Scope coverage threshold to Repository/Service layers (per guidelines)
- Add session expiry/fresh-token unit tests
2026-06-25 01:11:35 +02:00
9eb391ea8d
feat(m4): project & member management with tests and e2e
...
- ProjectRepository, ProjectMemberRepository, minimal NotificationRepository
- ProjectService: create/update/archive/delete project, add/remove member,
permission checks (isMember/admin), member-added notification, getDashboard
skeleton, getMyProjects, getMemberRole
- projectValidator, API services factory
- API routes: projects CRUD, members list/add/remove
- Screens: dashboard (project list + create form), project overview, members,
settings; layout (Header/Sidebar/ProjectNav) and project components
- Unit tests (Project/ProjectMember repositories, ProjectService),
integration project-member-permission, e2e project-management
2026-06-25 01:02:10 +02:00
21b9f03e9d
feat(m3): auth & user management with session, tests, and e2e
...
- Custom error classes (lib/errors.ts) and signed-cookie session
(lib/auth/session.ts, HMAC-SHA256, httpOnly+sameSite=lax)
- UserRepository + AuthService (bcrypt hashing, role/status checks,
register/login/logout/getCurrentUser/updateProfile)
- Auth helpers (getCurrentUser), user validator, API error handler
- API routes: register (auto-login), login, logout, me, PATCH users/me,
GET admin/migrations (admin-only guard)
- middleware.ts redirects unauthenticated page access to /login
- Screens: login (login/register toggle), profile, dashboard skeleton,
home redirect
- vitest: exclude e2e specs, setupFiles for SESSION_SECRET
- playwright: run migrate before dev server, set SESSION_SECRET
- Unit tests (UserRepository, AuthService, session), integration
auth-flow, e2e auth.spec (register/login/logout/protected/401)
2026-06-25 00:36:42 +02:00
