4 Commits

Author	SHA1	Message	Date
caitlin	cc56fe6286	Merge branch 'main' of https://git.coastit.co.za/caitlin/CRM_ENVR	2026-06-23 10:01:52 +02:00
caitlin	491ff52b90	Fixed notifications, It shows when you get get a ... message and from who	2026-06-23 09:59:53 +02:00
Ace	1adc4806fa	Files Changed ... Security Fixes File Change .env.local Placeholder JWT secret (rotate to random value: openssl rand -base64 64) src/middleware.ts Removed /api/auth/me bypass; API routes return JSON 401 (not 302 redirect) src/lib/auth.ts sameSite: "lax" → "strict" (create + destroy cookie); SVG name chars are pre-computed (no injection) src/lib/avatar.ts Added sanitizeName() — strips non-alphanumeric/safe chars, max 50 chars src/app/api/users/route.ts POST restricted to super_admin; validates role against whitelist ["sales","admin","super_admin","dev"]; validates active defaults to true src/app/api/users/[id]/route.ts DELETE restricted to super_admin; blocks self-deletion src/app/api/leads/[id]/route.ts GET: non-admin users filtered by assigned_to; PATCH: ownership check + score validated 0-100 range src/app/api/leads/route.ts DELETE: ownership + admin check; GET: ownership filter for non-admin users src/app/api/conversations/[id]/messages/route.ts GET/POST: verify user is a conversation_participant before access rust-ai/src/main.rs CORS: AllowOrigin::list(["localhost:3006", "127.0.0.1:3006"]) (was Any) Performance Fixes File Change src/app/api/leads/route.ts Added limit (default 50), offset query params; ownership filter in SQL src/app/api/users/route.ts Added limit (default 50), offset query params src/app/api/conversations/route.ts Added LIMIT 50 src/app/api/leads/[id]/notes/route.ts Added limit (default 50), offset query params src/app/api/conversations/[id]/messages/route.ts Added limit (default 100), offset, before query params src/app/(dashboard)/chats/page.tsx Pruned to 5 cached conversations; useMemo wraps messages/conversation/filteredConversations; otherParticipant moved outside component; added 10MB file size limit; recordingChunksRef cleared on discard src/app/(dashboard)/leads/[id]/page.tsx Optimistic status update rolls back on fetch failure database/migrations/003_chat.sql Added composite index idx_messages_conversation_created on (conversation_id, created_at DESC) Code Quality Fixes File Change src/lib/ai.ts Removed dead getInstructions()/updateInstructions() (called nonexistent /ai/instructions) src/lib/auth.ts bcrypt.hash(password, 12) — kept (acceptable, OWASP-recommended) src/app/login/page.tsx "Forgot password?" button now shows alert to contact admin (was no-op) src/components/users/user-form-dialog.tsx Password min 6 → 8 chars 26 silent catch {} blocks across 16 files (see below) Added console.warn("...") context messages	2026-06-23 09:45:30 +02:00
Ace	adbcc4b9af	feat: add system monitor component and API for performance metrics ... feat: implement conversations API with message retrieval and posting feat: add avatar URL handling for users and update user role definitions feat: create chat system tables in the database with initial seed data fix: update user roles from "sales_user" to "sales" for consistency chore: add middleware for system API route access fixed fuckups on john's side, added a benchmark Made Graphs actualy load from database and realtime data, graphs will update and percentages will be mathematically made, and made realtime added chatcart edits, made graphs glow. added in some little small home feeling fuctions added in a slide show, in login with qoutes from creators because i want to leave a print on it saying we made this shit, we built it brick for brick login page added qoutes some random, and made them shuffle from left to right one dissapears other come in adding shape to the textbox for the qoutes Fixed my chat fuckups when it comes to chats	2026-06-18 22:48:03 +02:00