5 Commits

Include renames

Author	SHA1	Message	Date
Hartmut	b41c1d2501	rename(phase 1): CapaKraken → Nexus across code, UI, docs, CI (#61) ... rename(phase 1): CapaKraken → Nexus across code, UI, docs, CI (#61) Co-authored-by: Hartmut Nörenberg <hn@hartmut-noerenberg.com> Co-committed-by: Hartmut Nörenberg <hn@hartmut-noerenberg.com>	2026-05-21 16:28:40 +02:00
HartmutandClaude Opus 4.7	019702c043	security: ReDoS hardening on blueprint field validator (#52) ... Admin-editable blueprint field patterns go through `new RegExp(pattern).test(userValue)` — a classic ReDoS sink if the admin account is compromised or the permission is ever delegated. A pattern like `^(a+)+$` against 30 'a's followed by '!' freezes the event loop for seconds per request. Three layers of defence: - Save-time: FieldValidationSchema.pattern now has `.max(200)` and a `.refine()` that rejects nested-quantifier shapes like `(x+)+`, `(?:x*)+`, `(x{2,})*`. - Runtime (engine/blueprint/validator.ts): - isSuspectRegexPattern() runs the same heuristic. If it fires, the field fails validation outright — regex is never compiled. - Input strings are sliced to 4096 chars before .test() so even a benign pattern against a 10 MB payload returns in < 50 ms. - RegExp compile failures are caught and treated as validation errors rather than crashing the request. Tests: 10 cases in packages/engine/src/__tests__/blueprint-validator-redos.test.ts, including the canonical `^(a+)+$` attack — completes in < 50 ms. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-17 09:33:42 +02:00
HartmutandClaude Sonnet 4.6	4a49ec4f05	fix(sanity): resolve 15 gaps from sanity check audit (G-01 through G-15) ... - G-01: ProjectWizard renders blueprint fieldDefs with DynamicFieldInput component - G-02: Blueprint rolePresets validated via RolePresetsSchema in wizard; API keeps loose schema - G-03: ProjectWizard step 2/3 validation (role, hoursPerDay, headcount required) - G-04: EstimateWizard validates baseCurrency and demand line cost rates - G-05: Project lifecycle transition guards with ALLOWED_TRANSITIONS map - G-06: Blueprint validator extended for minLength/maxLength/pattern and DATE range checks - G-07: assertBlueprintDynamicFields merges global blueprint fieldDefs into validation - G-08: (tracked — chapter managed dropdown; deferred to backend ticket) - G-09: JSDoc added to lcrCents/ucrCents clarifying LCR/UCR terminology - G-10: Dispo route redirect already in place — closed as done - G-11: packages/ui empty by design — closed as documented - G-12: @deprecated JSDoc added to CreateAllocationSchema and UpdateAllocationSchema - G-13: ProjectWizard review step enhanced with blueprint name, field values, skills, assignments - G-14: ProjectWizard handleSubmit collects per-item warnings instead of silent swallowing - G-15: Vacation cancel reverses usedDays entitlement for APPROVED ANNUAL/OTHER vacations Tests: all 1575 passing (1 pre-existing failure in insights-summary unrelated to these changes) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-06 00:11:12 +02:00
Hartmutandclaude-flow	cd78f72f33	chore: full technical rename planarchy → capakraken ... Complete rename of all technical identifiers across the codebase: Package names (11 packages): - @planarchy/* → @capakraken/* in all package.json, tsconfig, imports Import statements: 277 files, 548 occurrences replaced Database & Docker: - PostgreSQL user/db: planarchy → capakraken - Docker volumes: planarchy_pgdata → capakraken_pgdata - Connection strings updated in docker-compose, .env, CI CI/CD: - GitHub Actions workflow: all filter commands updated - Test database credentials updated Infrastructure: - Redis channel: planarchy:sse → capakraken:sse - Logger service name: planarchy-api → capakraken-api - Anonymization seed updated - Start/stop/restart scripts updated Test data: - Seed emails: @planarchy.dev → @capakraken.dev - E2E test credentials: all 11 spec files updated - Email defaults: @planarchy.app → @capakraken.app - localStorage keys: planarchy_* → capakraken_* Documentation: 30+ .md files updated Verification: - pnpm install: workspace resolution works - TypeScript: only pre-existing TS2589 (no new errors) - Engine: 310/310 tests pass - Staffing: 37/37 tests pass Co-Authored-By: claude-flow <ruv@ruv.net>	2026-03-27 13:18:09 +01:00
Hartmut	dd55d0e78b	chore(repo): initialize planarchy workspace	2026-03-14 14:31:09 +01:00