4 Commits

Author	SHA1	Message	Date
TroodonEnjoyer	bc83af8e00	Started PostgreSQL — data directory was uninitialized, ran initdb, set password, switched to md5 auth, all 24 migrations applied. ... Hardened db.ts — added statement_timeout: 30000, idle_in_transaction_session_timeout: 10000, created transaction() helper (BEGIN/COMMIT/ROLLBACK). Multi-step API routes wrapped in transactions — Events POST, Conversations POST use atomic blocks. Fixed leads pagination — status filter pushed into SQL WHERE (no client-side filtering after LIMIT/OFFSET), added SELECT COUNT(*) for total. Rewrote dashboard — SQL aggregations (COUNT + GROUP BY + date_trunc) replace loading all leads into memory. Optimized conversations GET — merged duplicate correlated subqueries into single LEFT JOIN LATERAL. Created migration 021_performance_indexes.sql — 8 missing indexes + set_session_user_context() function caching current_user_hierarchy_level() as session variable (avoids per-query RLS join). Fixed build error — duplicate const other in conversations route. Also fixed a TypeScript never error in dashboard breakdown map. Verified — npx tsc --noEmit clean, npm test (13 pass, 7 integration skip gracefully), npx next build succeeds.	2026-07-06 13:36:48 +02:00
Ace	ff56cea4b8	feat: add Facebook account tracking and management ... - Introduced new migration for `facebook_accounts` and `facebook_scrape_logs` tables. - Updated the scraping logic to handle Facebook accounts, including success and failure tracking. - Implemented API endpoints for managing Facebook accounts and their scrape logs. - Enhanced user permissions to restrict access to Facebook account management to admins and super admins. - Added a dialog component for displaying and managing Facebook accounts in the UI. - Updated lead fetching logic to include user role checks for assignment and access.	2026-06-23 14:18:18 +02:00
Ace	1adc4806fa	Files Changed ... Security Fixes File Change .env.local Placeholder JWT secret (rotate to random value: openssl rand -base64 64) src/middleware.ts Removed /api/auth/me bypass; API routes return JSON 401 (not 302 redirect) src/lib/auth.ts sameSite: "lax" → "strict" (create + destroy cookie); SVG name chars are pre-computed (no injection) src/lib/avatar.ts Added sanitizeName() — strips non-alphanumeric/safe chars, max 50 chars src/app/api/users/route.ts POST restricted to super_admin; validates role against whitelist ["sales","admin","super_admin","dev"]; validates active defaults to true src/app/api/users/[id]/route.ts DELETE restricted to super_admin; blocks self-deletion src/app/api/leads/[id]/route.ts GET: non-admin users filtered by assigned_to; PATCH: ownership check + score validated 0-100 range src/app/api/leads/route.ts DELETE: ownership + admin check; GET: ownership filter for non-admin users src/app/api/conversations/[id]/messages/route.ts GET/POST: verify user is a conversation_participant before access rust-ai/src/main.rs CORS: AllowOrigin::list(["localhost:3006", "127.0.0.1:3006"]) (was Any) Performance Fixes File Change src/app/api/leads/route.ts Added limit (default 50), offset query params; ownership filter in SQL src/app/api/users/route.ts Added limit (default 50), offset query params src/app/api/conversations/route.ts Added LIMIT 50 src/app/api/leads/[id]/notes/route.ts Added limit (default 50), offset query params src/app/api/conversations/[id]/messages/route.ts Added limit (default 100), offset, before query params src/app/(dashboard)/chats/page.tsx Pruned to 5 cached conversations; useMemo wraps messages/conversation/filteredConversations; otherParticipant moved outside component; added 10MB file size limit; recordingChunksRef cleared on discard src/app/(dashboard)/leads/[id]/page.tsx Optimistic status update rolls back on fetch failure database/migrations/003_chat.sql Added composite index idx_messages_conversation_created on (conversation_id, created_at DESC) Code Quality Fixes File Change src/lib/ai.ts Removed dead getInstructions()/updateInstructions() (called nonexistent /ai/instructions) src/lib/auth.ts bcrypt.hash(password, 12) — kept (acceptable, OWASP-recommended) src/app/login/page.tsx "Forgot password?" button now shows alert to contact admin (was no-op) src/components/users/user-form-dialog.tsx Password min 6 → 8 chars 26 silent catch {} blocks across 16 files (see below) Added console.warn("...") context messages	2026-06-23 09:45:30 +02:00
Ace	adbcc4b9af	feat: add system monitor component and API for performance metrics ... feat: implement conversations API with message retrieval and posting feat: add avatar URL handling for users and update user role definitions feat: create chat system tables in the database with initial seed data fix: update user roles from "sales_user" to "sales" for consistency chore: add middleware for system API route access fixed fuckups on john's side, added a benchmark Made Graphs actualy load from database and realtime data, graphs will update and percentages will be mathematically made, and made realtime added chatcart edits, made graphs glow. added in some little small home feeling fuctions added in a slide show, in login with qoutes from creators because i want to leave a print on it saying we made this shit, we built it brick for brick login page added qoutes some random, and made them shuffle from left to right one dissapears other come in adding shape to the textbox for the qoutes Fixed my chat fuckups when it comes to chats	2026-06-18 22:48:03 +02:00