- Move cookie setting from cookies().set() to response.cookies.set() in
login/logout routes (Next.js 15 ambient cookie merge is unreliable)
- Generate random JWT_SECRET at module scope in auth.ts for dev mode so
every server start invalidates all prior sessions
- Replace blank page on auth failure with redirect to /login in dashboard layout
- Preserve ?redirect= param from middleware in login form
- Wrap login page in Suspense boundary for useSearchParams()
Fixes: double-login bug, session persistence across restarts, blank page on
session expiry
Database & Security:
- Dual password storage: bcrypt (auth) + pgcrypto AES-256 (recovery)
- SUPER_ADMIN master key recovery system (master_keys table)
- Row Level Security on customers, leads, opportunities, communications, tasks
- SALES_USER: own records only
- ADMIN: all records
- SUPER_ADMIN: all records (bypasses RLS)
- Immutable audit logs (DELETE/UPDATE blocked by triggers)
- New audit event types: BUG_CREATED, BUG_UPDATED, BUG_ASSIGNED,
BUG_RESOLVED, LOGIN, LOGOUT
- Database export logging (database_export_logs table)
- Backup logging with pg_dump script (scripts/backup.ps1)
- Fixed audit constraint to allow new action types
Authentication:
- Random JWT secret generated on every dev server start
(invalidates all prior sessions after restart)
- Session cookie is now session-only (no maxAge)
- setSessionContext() for RLS integration
Bug Reporting System:
- bug_reports table with RLS (insert by all, select/update by admin only)
- POST /api/bug-reports (any authenticated user)
- GET /api/bug-reports (admin/super_admin only)
- PATCH /api/bug-reports/:id (admin/super_admin only)
- POST /api/auth/recover (super_admin password recovery)
- Audit logging for all bug report actions
Other:
- Added 'dev' to UserRole type
- Bug report modal UI with severity selector
- Added bug report button to topbar
feat: implement conversations API with message retrieval and posting
feat: add avatar URL handling for users and update user role definitions
feat: create chat system tables in the database with initial seed data
fix: update user roles from "sales_user" to "sales" for consistency
chore: add middleware for system API route access
fixed fuckups on john's side, added a benchmark
Made Graphs actualy load from database and realtime data, graphs will update and percentages will be mathematically made, and made realtime
added chatcart edits, made graphs glow.
added in some little small home feeling fuctions
added in a slide show, in login with qoutes from creators because i want to leave a print on it saying we made this shit, we built it brick for brick
login page added qoutes some random, and made them shuffle from left to right one dissapears other come in
adding shape to the textbox for the qoutes
Fixed my chat fuckups when it comes to chats
JCBSComputer
caitlin
TroodonEnjoyer
Hannah_Bagga
Ace