3e02feb221
feat(m5): notifications & activity log foundation
...
- Expand NotificationRepository (unread list paginated, count, markRead
ownership-scoped); new ActivityLogRepository (create, findByProject
paginated) with deterministic created_at+id ordering
- NotificationService (notifyOnEvent, resolveTargets for 8 event types,
injectable SseBroadcaster for M8) + ActivityLogService (logActivity,
listByProject)
- NotificationEvent/SseEvent/SseBroadcaster types in lib/types
- APIs: GET /api/notifications, POST /api/notifications/:id/read,
GET /api/projects/:projectId/activity
- Screens: notifications list + MarkReadButton, NotificationBadge in
Header, project activity page + ProjectNav link
- Unit tests for both repositories and services (28 new)
2026-06-25 01:20:24 +02:00
3dc0318011
fix: post-M4 validation improvements
...
- Session: verify server-side iat expiry (not just cookie maxAge)
- Validate ProjectMemberRole on member add (reject arbitrary strings)
- Scope coverage threshold to Repository/Service layers (per guidelines)
- Add session expiry/fresh-token unit tests
2026-06-25 01:11:35 +02:00
9eb391ea8d
feat(m4): project & member management with tests and e2e
...
- ProjectRepository, ProjectMemberRepository, minimal NotificationRepository
- ProjectService: create/update/archive/delete project, add/remove member,
permission checks (isMember/admin), member-added notification, getDashboard
skeleton, getMyProjects, getMemberRole
- projectValidator, API services factory
- API routes: projects CRUD, members list/add/remove
- Screens: dashboard (project list + create form), project overview, members,
settings; layout (Header/Sidebar/ProjectNav) and project components
- Unit tests (Project/ProjectMember repositories, ProjectService),
integration project-member-permission, e2e project-management
2026-06-25 01:02:10 +02:00
21b9f03e9d
feat(m3): auth & user management with session, tests, and e2e
...
- Custom error classes (lib/errors.ts) and signed-cookie session
(lib/auth/session.ts, HMAC-SHA256, httpOnly+sameSite=lax)
- UserRepository + AuthService (bcrypt hashing, role/status checks,
register/login/logout/getCurrentUser/updateProfile)
- Auth helpers (getCurrentUser), user validator, API error handler
- API routes: register (auto-login), login, logout, me, PATCH users/me,
GET admin/migrations (admin-only guard)
- middleware.ts redirects unauthenticated page access to /login
- Screens: login (login/register toggle), profile, dashboard skeleton,
home redirect
- vitest: exclude e2e specs, setupFiles for SESSION_SECRET
- playwright: run migrate before dev server, set SESSION_SECRET
- Unit tests (UserRepository, AuthService, session), integration
auth-flow, e2e auth.spec (register/login/logout/protected/401)
2026-06-25 00:36:42 +02:00
9253164fd3
feat(m1): project foundation setup - Next.js 15, Tailwind, tooling, CI
...
- Configure Next.js 15 (App Router, Node.js runtime, serverExternalPackages for better-sqlite3/bcrypt)
- Add Tailwind CSS, PostCSS, tsconfig with @/* alias
- Create app structure (layout, page, globals.css)
- Create directory structure (lib, repositories, services, components, tests)
- Configure Vitest (alias, coverage), Playwright
- Add dependencies: next, react, better-sqlite3, bcrypt, react-markdown, etc.
- Add .env.example, CI workflow, next-env.d.ts
- Remove boilerplate src/example files
2026-06-24 23:47:27 +02:00
