Hartmut e01074926e security: reject common/weak passwords on every set-password path (#31) ...

Adds a synchronous policy check that blocks (1) the curated >=12-char
common-password list (rockyou top, predictable seasonal, admin defaults),
(2) trivial patterns (single-char repeat, short-pattern repeat, keyboard
or numeric sequences), and (3) passwords containing the user's email
local-part or any name component. Wired into all five password-mutation
sites: first-admin setup, admin createUser/setUserPassword, invite
acceptance, and password-reset.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-18 14:09:38 +02:00

..

allocation

security: bound JSONB inputs + whitelist batchUpdateCustomFields keys (#48)

2026-04-17 08:44:11 +02:00

assistant-tools

security: sanitise Prisma error leaks in AI-tool helpers (#53)

2026-04-17 09:40:01 +02:00

allocation-conflict-procedures.ts

fix(types): flatten tRPC Zod schema types to resolve TS2589 inference depth errors

2026-04-10 15:28:12 +02:00

assistant-approvals.ts

refactor(api): modularize assistant router workflow

2026-03-31 10:30:28 +02:00

assistant-chat-loop.ts

refactor(api): extract assistant chat orchestration

2026-03-31 13:15:44 +02:00

assistant-chat-response.ts

refactor(api): extract assistant approval flow helpers

2026-03-31 12:16:20 +02:00

assistant-confirmation.ts

refactor(api): modularize assistant router workflow

2026-03-31 10:30:28 +02:00

assistant-insights.ts

feat(planning): ship holiday-aware planning and assistant upgrades

2026-03-28 22:49:28 +01:00

assistant-procedure-support.ts

security: await audit writes, add per-turn AssistantPrompt audit (#55)

2026-04-17 15:06:17 +02:00

assistant-system-prompt.ts

refactor(api): extract assistant chat orchestration

2026-03-31 22:44:54 +02:00

assistant-tool-policy.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

assistant-tool-registry.ts

feat(api): add audit helpers, tool registry, shared tool manifest types, and UI primitives

2026-04-09 21:14:26 +02:00

assistant-tool-results.ts

refactor(api): modularize assistant router workflow

2026-03-31 10:30:28 +02:00

assistant-tool-selection.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

assistant-tools.ts

security: block raw/tx escape hatches on read-only AI DB proxy (#47)

2026-04-17 08:38:05 +02:00

assistant.ts

refactor(api): extract assistant chat orchestration

2026-03-31 22:44:54 +02:00

audit-log-inputs.ts

security: bound Zod inputs, add SSE per-user cap and tRPC body limit (#51, PR #59)

2026-04-18 13:53:28 +02:00

audit-log-procedure-support.ts

refactor(api): extract audit log procedures

2026-03-31 21:11:19 +02:00

audit-log-support.ts

refactor(api): extract audit log router helpers

2026-03-31 12:09:24 +02:00

audit-log.ts

refactor(api): extract audit log procedures

2026-03-31 21:11:19 +02:00

auth.ts

security: reject common/weak passwords on every set-password path (#31)

2026-04-18 14:09:38 +02:00

blueprint-procedure-support.ts

fix(api): validate rolePresets with RolePresetsSchema before DB cast

2026-04-11 08:35:02 +02:00

blueprint-support.ts

fix(api): validate rolePresets with RolePresetsSchema before DB cast

2026-04-11 08:35:02 +02:00

blueprint-validation.ts

security: bound JSONB inputs + whitelist batchUpdateCustomFields keys (#48)

2026-04-17 08:44:11 +02:00

blueprint.ts

refactor(api): extract blueprint procedures

2026-03-31 20:15:19 +02:00

calculation-rule-procedure-support.ts

refactor(api): extract calculation rule procedures

2026-03-31 21:15:02 +02:00

calculation-rule-support.ts

refactor(api): extract calculation rule support

2026-03-31 14:00:22 +02:00

calculation-rules.ts

refactor(api): extract calculation rule procedures

2026-03-31 21:15:02 +02:00

chargeability-report-procedure-support.ts

perf(api): eliminate N+1 queries, add query guards and missing indexes

2026-04-09 08:35:13 +02:00

chargeability-report.ts

refactor(api): extract chargeability report procedures

2026-03-31 20:42:33 +02:00

client-procedure-support.ts

feat(db): add deletedAt audit timestamp to soft-deletable models

2026-04-09 20:03:38 +02:00

client-support.ts

refactor(api): extract client router support

2026-03-31 13:45:53 +02:00

client.ts

refactor(api): extract client procedures

2026-03-31 20:15:25 +02:00

comment-procedure-support.ts

security: implement tickets #28-#35 + architecture decision #30

2026-04-01 23:25:06 +02:00

comment-support.ts

refactor(api): extract comment router support

2026-03-31 14:28:07 +02:00

comment.ts

refactor(api): extract comment procedures

2026-03-31 19:16:57 +02:00

computation-graph-detail-support.ts

refactor(api): split computation graph detail formatting

2026-03-31 22:19:09 +02:00

computation-graph-detail.ts

refactor(api): split computation graph detail formatting

2026-03-31 22:19:09 +02:00

computation-graph-procedure-support.ts

refactor(api): extract computation graph procedures

2026-03-31 21:24:28 +02:00

computation-graph-project-estimate.ts

refactor(api): split project graph estimate assembly

2026-03-31 22:12:02 +02:00

computation-graph-project-snapshot.ts

refactor(api): extract project computation graph snapshot loading

2026-03-31 11:28:18 +02:00

computation-graph-project.ts

refactor(api): split project graph estimate assembly

2026-03-31 22:12:02 +02:00

computation-graph-resource-allocation.ts

refactor(api): split resource graph allocation assembly

2026-03-31 22:14:53 +02:00

computation-graph-resource-availability.ts

refactor(api): split resource graph availability

2026-03-31 22:01:29 +02:00

computation-graph-resource-budget.ts

refactor(api): modularize computation graph resource snapshot

2026-03-31 10:41:24 +02:00

computation-graph-resource-graph.ts

refactor(api): modularize computation graph resource snapshot

2026-03-31 10:41:24 +02:00

computation-graph-resource-snapshot.ts

refactor(api): split resource graph snapshot loading

2026-03-31 22:16:31 +02:00

computation-graph-resource.ts

refactor(api): split resource graph snapshot loading

2026-03-31 22:16:31 +02:00

computation-graph-shared.ts

refactor(api): extract computation graph project snapshot

2026-03-31 10:12:05 +02:00

computation-graph.ts

refactor(api): extract computation graph procedures

2026-03-31 21:24:28 +02:00

country-procedure-support.ts

refactor(api): extract country procedures

2026-03-31 20:25:11 +02:00

country-support.ts

refactor(api): extract country router support

2026-03-31 13:54:22 +02:00

country.ts

fix(types): flatten tRPC Zod schema types to resolve TS2589 inference depth errors

2026-04-10 15:28:12 +02:00

custom-field-filters.ts

chore: full technical rename planarchy → capakraken

2026-03-27 13:18:09 +01:00

dashboard-detail-support.ts

refactor(api): split dashboard detail shaping

2026-03-31 22:26:52 +02:00

dashboard-procedure-support.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

dashboard.ts

fix(types): flatten tRPC Zod schema types to resolve TS2589 inference depth errors

2026-04-10 15:28:12 +02:00

dispo-management-support.ts

refactor(api): extract dispo management support

2026-03-31 14:31:59 +02:00

dispo-management.ts

refactor(api): extract dispo management support

2026-03-31 14:31:59 +02:00

dispo-procedure-support.ts

security: workbook path allowlist + stronger image polyglot validation (#54)

2026-04-17 15:26:29 +02:00

dispo-read.ts

refactor(api): extract dispo router support modules

2026-03-31 12:13:28 +02:00

dispo.ts

refactor(api): extract dispo procedures

2026-03-31 20:32:59 +02:00

effort-rule-procedure-support.ts

fix(api): wrap audit log writes inside their parent transactions

2026-04-09 16:40:10 +02:00

effort-rule-support.ts

refactor(api): extract effort rule support

2026-03-31 14:05:20 +02:00

effort-rule.ts

refactor(api): extract effort rule procedures

2026-03-31 19:59:36 +02:00

entitlement-procedure-support.ts

feat(application): extract entitlement use-cases from API router layer

2026-04-09 20:14:35 +02:00

entitlement.ts

refactor(api): extract entitlement procedures

2026-03-31 21:05:56 +02:00

estimate-commercial.ts

fix(api): wrap audit log writes inside their parent transactions

2026-04-09 16:40:10 +02:00

estimate-demand-lines.ts

perf(api): eliminate 3 N+1 query patterns

2026-04-11 22:59:45 +02:00

estimate-phasing.ts

refactor(api): extract estimate phasing procedures

2026-03-31 11:30:38 +02:00

estimate-procedure-support.ts

fix(api): wrap audit log writes inside their parent transactions

2026-04-09 16:40:10 +02:00

estimate-read.ts

refactor(api): extract estimate read procedures

2026-03-31 09:16:46 +02:00

estimate-version-workflow.ts

fix(api): wrap audit log writes inside their parent transactions

2026-04-09 16:40:10 +02:00

estimate.ts

refactor(api): extract estimate procedure support

2026-03-31 22:45:05 +02:00

experience-multiplier-procedure-support.ts

fix(api): wrap audit log writes inside their parent transactions

2026-04-09 16:40:10 +02:00

experience-multiplier-support.ts

refactor(api): extract experience multiplier support

2026-03-31 14:07:21 +02:00

experience-multiplier.ts

refactor(api): extract experience multiplier procedures

2026-03-31 20:02:15 +02:00

holiday-calendar-catalog-read.ts

refactor(api): extract holiday calendar support

2026-03-31 14:24:46 +02:00

holiday-calendar-procedure-support.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

holiday-calendar-resolution-read.ts

refactor(api): share owned resource read access

2026-04-01 07:35:34 +02:00

holiday-calendar-shared.ts

refactor(api): extract holiday calendar catalog reads

2026-03-31 09:05:18 +02:00

holiday-calendar-support.ts

refactor(api): extract holiday calendar support

2026-03-31 14:24:46 +02:00

holiday-calendar-write-support.ts

refactor(api): extract holiday calendar write support

2026-03-31 13:25:27 +02:00

holiday-calendar.ts

refactor(api): extract holiday calendar procedures

2026-03-31 20:25:17 +02:00

import-export-procedure-support.ts

security: bound Zod inputs, add SSE per-user cap and tRPC body limit (#51, PR #59)

2026-04-18 13:53:28 +02:00

import-export.ts

refactor(api): extract import export procedures

2026-03-31 20:36:46 +02:00

index.ts

Merge branch 'worktree-agent-a2939317'

2026-04-09 14:44:51 +02:00

insights-anomalies.ts

refactor(api): extract insights anomaly snapshot

2026-03-31 11:33:36 +02:00

insights-procedure-support.ts

refactor(insights): share workbook export and ai defaults

2026-03-31 22:53:53 +02:00

insights.ts

refactor(api): extract insights procedures

2026-03-31 20:31:55 +02:00

invite.ts

security: reject common/weak passwords on every set-password path (#31)

2026-04-18 14:09:38 +02:00

management-level-procedure-support.ts

refactor(api): extract management level procedures

2026-03-31 20:04:17 +02:00

management-level-support.ts

refactor(api): extract management level support

2026-03-31 13:52:24 +02:00

management-level.ts

refactor(api): extract management level procedures

2026-03-31 20:04:17 +02:00

notification-broadcast-procedure-support.ts

perf(api): eliminate N+1 queries, add query guards and missing indexes

2026-04-09 08:35:13 +02:00

notification-procedure-base.ts

security: bound Zod inputs, add SSE per-user cap and tRPC body limit (#51, PR #59)

2026-04-18 13:53:28 +02:00

notification-procedure-support.ts

refactor(api): split notification procedure support

2026-03-31 21:56:15 +02:00

notification-reminder-procedure-support.ts

refactor(api): split notification procedure support

2026-03-31 21:56:15 +02:00

notification-task-procedure-support.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

notification.ts

refactor(api): extract notification procedures

2026-03-31 20:50:14 +02:00

org-unit-procedure-support.ts

refactor(api): extract org unit procedures

2026-03-31 20:28:13 +02:00

org-unit-support.ts

refactor(api): extract org unit router support

2026-03-31 13:55:47 +02:00

org-unit.ts

refactor(api): extract org unit procedures

2026-03-31 20:28:13 +02:00

project-background-effects.ts

refactor(api): extract project router support

2026-03-31 13:25:20 +02:00

project-cost-read.ts

fix(types): flatten tRPC Zod schema types to resolve TS2589 inference depth errors

2026-04-10 15:28:12 +02:00

project-cover.ts

security: workbook path allowlist + stronger image polyglot validation (#54)

2026-04-17 15:26:29 +02:00

project-identifier-read.ts

refactor(api): extract project identifier read procedures

2026-03-31 08:54:52 +02:00

project-lifecycle.ts

fix(api): wrap audit log writes inside their parent transactions

2026-04-09 16:40:10 +02:00

project-mutations.ts

fix(types): flatten tRPC Zod schema types to resolve TS2589 inference depth errors

2026-04-10 15:28:12 +02:00

project-planning-read-model.ts

chore: full technical rename planarchy → capakraken

2026-03-27 13:18:09 +01:00

project-procedure-support.ts

refactor(api): extract project procedures

2026-03-31 21:28:56 +02:00

project-read-shared.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

project-shoring-ratio.ts

refactor(api): extract project router support

2026-03-31 13:25:20 +02:00

project.ts

fix(types): flatten tRPC Zod schema types to resolve TS2589 inference depth errors

2026-04-10 15:28:12 +02:00

rate-card-match-support.ts

refactor(api): extract rate card match support

2026-03-31 14:33:38 +02:00

rate-card-procedure-support.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

rate-card-read.ts

refactor(api): extract rate card match support

2026-03-31 14:33:38 +02:00

rate-card-write-support.ts

refactor(api): share rate card support shapes

2026-03-31 14:30:29 +02:00

rate-card.ts

refactor(api): extract rate card procedures

2026-03-31 19:56:14 +02:00

report-blueprint-catalog.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

report-blueprints-support.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

report-columns.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

report-explainability.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

report-query-config.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

report-query-engine.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

report-query-utils.ts

refactor(api): finalize report query utility split

2026-03-31 10:09:02 +02:00

report-resource-month-query.ts

refactor(api): split report query execution

2026-03-31 21:59:10 +02:00

report-template-procedure-support.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

report.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

resource-ai-summary.ts

refactor(api): split resource mutation concerns

2026-03-31 08:34:38 +02:00

resource-analytics.ts

perf(api): eliminate N+1 queries, add query guards and missing indexes

2026-04-09 08:35:13 +02:00

resource-capacity-read.ts

perf(api): eliminate N+1 queries, add query guards and missing indexes

2026-04-09 08:35:13 +02:00

resource-capacity-shared.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

resource-identifier-read.ts

refactor(api): split resource read models

2026-04-01 07:38:03 +02:00

resource-insights.ts

refactor(api): extract resource insight procedures

2026-03-31 08:05:45 +02:00

resource-marketplace-read.ts

perf(api): eliminate N+1 queries, add query guards and missing indexes

2026-04-09 08:35:13 +02:00

resource-mutations.ts

security: bound Zod inputs, add SSE per-user cap and tRPC body limit (#51, PR #59)

2026-04-18 13:53:28 +02:00

resource-owned-read-access.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

resource-read-models.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

resource-read-shared.ts

Merge branch 'worktree-agent-aed43cff'

2026-04-09 19:31:50 +02:00

resource-read.ts

refactor(api): extract resource read procedures

2026-03-31 07:57:39 +02:00

resource-skill-import.ts

security: bound Zod inputs, add SSE per-user cap and tRPC body limit (#51, PR #59)

2026-04-18 13:53:28 +02:00

resource-summary-read-procedure-support.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

resource-summary-read.ts

fix(types): flatten tRPC Zod schema types to resolve TS2589 inference depth errors

2026-04-10 15:28:12 +02:00

resource.ts

refactor(api): split resource mutation concerns

2026-03-31 08:34:38 +02:00

role-procedure-support.ts

feat(db): add deletedAt audit timestamp to soft-deletable models

2026-04-09 20:03:38 +02:00

role-support.ts

refactor(api): extract role router support

2026-03-31 13:40:55 +02:00

role.ts

refactor(api): extract role read procedures

2026-03-31 21:22:44 +02:00

scenario-apply.ts

fix(api): wrap critical mutations in transactions and fix TOCTOU race conditions

2026-04-09 08:34:59 +02:00

scenario-baseline.ts

refactor(api): extract scenario router helpers

2026-03-31 11:03:50 +02:00

scenario-procedure-support.ts

fix(merge): resolve post-merge type errors from batch-1 agents

2026-04-09 14:38:32 +02:00

scenario-shared.ts

refactor(api): extract scenario router helpers

2026-03-31 11:03:50 +02:00

scenario-simulation.ts

refactor(api): extract scenario router helpers

2026-03-31 11:03:50 +02:00

scenario.ts

refactor(api): extract scenario procedures

2026-03-31 19:18:56 +02:00

settings-procedure-support.ts

refactor(api): extract settings procedures

2026-03-31 19:46:50 +02:00

settings-support.ts

fix(security): harden input validation schemas and fix SSR sanitize bypass

2026-04-09 21:38:16 +02:00

settings.ts

feat(api): add SSE subscriber isolation, token pruning and E2E rate-limit guard

2026-04-09 08:35:39 +02:00

staffing-best-project-resource.ts

refactor(api): share staffing capacity summaries

2026-03-31 22:45:00 +02:00

staffing-capacity-read.ts

fix(types): flatten tRPC Zod schema types to resolve TS2589 inference depth errors

2026-04-10 15:28:12 +02:00

staffing-capacity-summary.ts

refactor(api): share staffing capacity summaries

2026-03-31 22:45:00 +02:00

staffing-shared.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

staffing-suggestions-read.ts

security: bound Zod inputs, add SSE per-user cap and tRPC body limit (#51, PR #59)

2026-04-18 13:53:28 +02:00

staffing.ts

refactor(api): extract staffing suggestions read procedures

2026-03-31 11:26:45 +02:00

system-role-config-procedure-support.ts

fix(api): harden optional audit and session fields

2026-03-31 22:54:33 +02:00

system-role-config-support.ts

refactor(api): extract system role config support

2026-03-31 14:00:26 +02:00

system-role-config.ts

fix(types): flatten tRPC Zod schema types to resolve TS2589 inference depth errors

2026-04-10 15:28:12 +02:00

timeline-allocation-assignment-procedure-support.ts

refactor(api): extract timeline allocation assignment procedures

2026-03-31 18:08:19 +02:00

timeline-allocation-batch-shift-support.ts

refactor(api): extract timeline batch shift support

2026-03-31 17:57:28 +02:00

timeline-allocation-fragment-support.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

timeline-allocation-inline-support.ts

refactor(api): extract timeline allocation update support

2026-03-31 17:59:16 +02:00

timeline-allocation-mutation-schema-support.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

timeline-allocation-mutation-support.ts

refactor(api): trim timeline allocation date support

2026-03-31 18:00:23 +02:00

timeline-allocation-mutations.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

timeline-allocation-procedure-support.ts

refactor(api): extract timeline allocation assignment procedures

2026-03-31 18:08:19 +02:00

timeline-allocation-quick-assign-support.ts

refactor(api): extract timeline quick assign support

2026-03-31 17:55:52 +02:00

timeline-allocation-router-support.ts

feat(platform): checkpoint current implementation state

2026-04-01 07:42:03 +02:00

timeline-allocation-shift-support.ts

refactor(api): extract timeline batch shift support

2026-03-31 17:57:28 +02:00

timeline-allocation-update-support.ts

refactor(api): extract timeline allocation update support

2026-03-31 17:59:16 +02:00

timeline-cost-load-support.ts

refactor(api): extract timeline cost load support

2026-03-31 17:53:59 +02:00

timeline-cost-support.ts

refactor(api): extract timeline cost load support

2026-03-31 17:53:59 +02:00

timeline-entry-procedure-support.ts

refactor(api): extract timeline entry procedure support

2026-03-31 18:18:52 +02:00

timeline-entry-query-support.ts

refactor(api): extract timeline entry query support

2026-03-31 15:46:17 +02:00

timeline-entry-read.ts

refactor(api): split timeline read schemas

2026-03-31 18:56:01 +02:00

timeline-entry-response-support.ts

refactor(api): extract timeline entry response support

2026-03-31 17:30:04 +02:00

timeline-filter-support.ts

refactor(api): extract timeline filter support

2026-03-31 15:54:56 +02:00

timeline-holiday-load-support.ts

perf(api): eliminate 3 N+1 query patterns

2026-04-11 22:59:45 +02:00

timeline-holiday-procedure-support.ts

refactor(api): extract timeline holiday procedures

2026-03-31 18:53:20 +02:00

timeline-holiday-read.ts

refactor(api): split timeline read schemas

2026-03-31 18:56:01 +02:00

timeline-holiday-support.ts

refactor(api): extract timeline holiday support

2026-03-31 15:18:43 +02:00

timeline-mutations.ts

fix(types): flatten tRPC Zod schema types to resolve TS2589 inference depth errors

2026-04-10 15:28:12 +02:00

timeline-project-conflict-support.ts

refactor(api): extract timeline project conflict support

2026-03-31 15:52:31 +02:00

timeline-project-context-procedure-support.ts

refactor(api): extract timeline project context procedures

2026-03-31 18:48:48 +02:00

timeline-project-context-response-support.ts

refactor(api): extract timeline entry response support

2026-03-31 17:30:04 +02:00

timeline-project-context-support.ts

refactor(api): extract timeline project context response support

2026-03-31 17:26:42 +02:00

timeline-project-load-support.ts

refactor(api): extract timeline project load support

2026-03-31 17:32:43 +02:00

timeline-project-procedure-support.ts

refactor(api): align timeline project read routing

2026-03-31 18:49:51 +02:00

timeline-project-query-support.ts

refactor(api): extract timeline project query and read helpers

2026-03-31 16:01:35 +02:00

timeline-project-read-support.ts

refactor(api): extract timeline project query and read helpers

2026-03-31 16:01:35 +02:00

timeline-project-read.ts

refactor(api): split timeline read schemas

2026-03-31 18:56:01 +02:00

timeline-read-schema-support.ts

security: bound Zod inputs, add SSE per-user cap and tRPC body limit (#51, PR #59)

2026-04-18 13:53:28 +02:00

timeline-read-shared.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

timeline-read.ts

refactor(api): split timeline read router by concern

2026-03-31 07:45:15 +02:00

timeline-shift-mutation-support.ts

refactor(api): extract timeline shift mutation helpers

2026-03-31 15:50:17 +02:00

timeline-shift-planning.ts

chore: full technical rename planarchy → capakraken

2026-03-27 13:18:09 +01:00

timeline-shift-procedure-support.ts

refactor(api): extract timeline shift procedure support

2026-03-31 17:50:36 +02:00

timeline-shift-router-support.ts

refactor(api): extract timeline shift mutation routing

2026-03-31 18:15:38 +02:00

timeline-shift-support.ts

refactor(api): extract timeline shift procedure support

2026-03-31 17:50:36 +02:00

timeline.ts

refactor(api): extract timeline shift mutation routing

2026-03-31 18:15:38 +02:00

user-procedure-support.ts

security: reject common/weak passwords on every set-password path (#31)

2026-04-18 14:09:38 +02:00

user-self-service-procedure-support.ts

security: MFA backup codes — issue on enable, redeem at login, regenerate on demand (#43)

2026-04-17 18:47:18 +02:00

user.ts

security: MFA backup codes — issue on enable, redeem at login, regenerate on demand (#43)

2026-04-17 18:47:18 +02:00

utilization-category-procedure-support.ts

perf(api): eliminate 3 N+1 query patterns

2026-04-11 22:59:45 +02:00

utilization-category-support.ts

refactor(api): extract utilization category support

2026-03-31 13:49:10 +02:00

utilization-category.ts

refactor(api): extract utilization category procedures

2026-03-31 21:09:13 +02:00

vacation-chargeability.ts

refactor(api): extract vacation chargeability helpers

2026-03-31 11:08:58 +02:00

vacation-create-support.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

vacation-management-procedures.ts

fix(types): replace structural DB types with Pick<PrismaClient> and remove Prisma boundary as any casts

2026-04-10 15:09:16 +02:00

vacation-management-support.ts

feat(timeline): add pulse animation for in-flight drag mutations

2026-04-09 13:28:46 +02:00

vacation-public-holidays.ts

perf(api): eliminate N+1 queries, add query guards and missing indexes

2026-04-09 08:35:13 +02:00

vacation-read-support.ts

feat(api): explain holiday-aware vacation deductions

2026-03-31 22:42:00 +02:00

vacation-read.ts

refactor(api): share owned resource read access

2026-04-01 07:35:34 +02:00

vacation-side-effects.ts

refactor(api): extract vacation side effects

2026-03-31 11:02:40 +02:00

vacation.ts

fix(types): flatten tRPC Zod schema types to resolve TS2589 inference depth errors

2026-04-10 15:28:12 +02:00

webhook-procedure-support.ts

security: close audit findings #19–#23 and harden Docker setup (#24)

2026-04-01 18:19:21 +02:00

webhook-support.ts

security: bound Zod inputs, add SSE per-user cap and tRPC body limit (#51, PR #59)

2026-04-18 13:53:28 +02:00

webhook.ts

refactor(api): extract webhook procedures

2026-03-31 21:18:29 +02:00