Paul Nothaft c5c5a6b0c8 fix(webhooks): write delivery timestamps as ISO strings ...

Applies the repo's documented Jest+SQLite guidance (CLAUDE.md) to the webhook
delivery path, which was the last one still passing raw Date objects into
knex writes. Under jest those store as the literal string "[object Object]",
so next_retry_at came back NaN and the retry/backoff test could not assert on
it. Production (PG, and SQLite outside jest) was unaffected.

Convert the timestamp writes -- and the `next_retry_at <=` due comparison,
which has to stay type-consistent with them -- to .toISOString(), matching
the existing precedent in downloadJobService.js.

Refs testplan REPORT.md #22 (Part 1.2.01).

2026-09-01 16:29:03 +02:00

..

__tests__

feat(docker): all-in-one image (#1042) — my version of #1067 (#1068)

2026-08-18 22:15:49 +02:00

contract

fix(storage): write business documents under STORAGE_PATH, not the cwd (#1070)

2026-08-18 22:14:41 +02:00

invoice

feat(setup): configure the public address and SMTP in the wizard, not .env (#1104)

2026-08-21 12:54:14 +02:00

storage

fix(storage): add S3 client timeouts so a dropped connection can't wedge uploads (#1049)

2026-08-16 15:14:48 +02:00

trackers

fix(security): escape brand tokens, block tracker redirects, trim logo diagnostic (GHSA-j347, mw76, 29vm) (#961)

2026-08-02 21:17:17 +02:00

workflows

feat(gallery): reveal mode — hide gallery from guests until reveal (#838) (#856)

2026-07-22 20:59:59 +02:00

_backupPathsBoot.js

chore(migrations): renumber 108_add_backup_paths to 109 to avoid upstream collision

2026-06-01 00:31:08 +02:00

_billingRecipients.js

feat(crm): route billing docs to billing_email when set

2026-05-27 14:04:15 +02:00

_emailTemplateBoot.js

fix(crm): self-heal missing CRM email templates at boot + recover queue

2026-05-27 15:18:29 +02:00

_installFromBackupBoot.js

feat(restore): docker-logs visibility + ADMIN_CREDENTIALS.txt restore notice

2026-06-01 21:52:38 +02:00

_permissionsBoot.js

feat(permissions): granular permission gating + role editor & presets (#747, phase 1 of #743) (#1045)

2026-08-16 14:59:52 +02:00

_renderContext.js

feat(accounting): consolidate VAT/financial config into Settings → Accounting

2026-06-18 15:10:44 +02:00

_restoreSettingsBoot.js

fix(restore): default restore_allow_force=true + auto-upgrade existing installs

2026-05-31 21:35:48 +02:00

_workflowSeedBoot.js

fix(workflows): backfill existing invoices + anchor grace to due date when dunning is enabled (#750)

2026-07-06 21:57:23 +02:00

archiveService.js

feat(gallery): responsive grid thumbnails (#1095) (#1109)

2026-08-21 19:26:21 +02:00

backgroundProcessor.js

fix(upload): auto-throttle on low-memory hosts + correct documented RAM minimum (#628)

2026-06-17 23:04:30 +02:00

backupCoverageService.js

fix(storage): write business documents under STORAGE_PATH, not the cwd (#1070)

2026-08-18 22:14:41 +02:00

backupIntegrityService.js

fix(storage): write business documents under STORAGE_PATH, not the cwd (#1070)

2026-08-18 22:14:41 +02:00

backupManifest.js

fix(security): backup/restore hardening — public-dir DB dump, restore path allowlist, gunzip bound, manifest keying (#956)

2026-08-02 21:17:05 +02:00

backupService.js

fix(security): resolve DNS before vetting external hostnames (SSRF cluster) (#941)

2026-08-01 17:36:21 +02:00

businessProfileService.js

fix(crm): pass trx to logActivity inside transactions — audit rows silently lost on SQLite (#851)

2026-07-19 22:36:52 +02:00

chunkedUploadService.js

fix(admin): serve videos with their real MIME type in the admin photo view (#908) (#910)

2026-07-29 21:32:33 +02:00

combinedBillingService.js

feat(accounting): re-bill proof attachment, CRM panel & hours↔re-bills cross-add (#979)

2026-08-03 22:03:31 +02:00

contractBlocksService.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

contractEmailTemplates.js

…

contractService.js

refactor(backend): decompose invoiceService, contractService, adminEvents

2026-07-03 08:10:25 +02:00

crmEmailTemplates.js

feat(workflows): collections-handoff block after dunning exhausts

2026-06-23 12:37:50 +02:00

customerAccountsService.js

feat(events): publish without notifying, and send the gallery email later (#1235) (#1241)

2026-09-01 08:18:00 +02:00

customerHoursService.js

feat(accounting): re-bill proof attachment, CRM panel & hours↔re-bills cross-add (#979)

2026-08-03 22:03:31 +02:00

databaseBackup.js

feat(faces): consolidate look-alike clusters after a scan, and suggest the rest (#1107)

2026-08-22 21:39:15 +02:00

dealsService.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

downloadFilenameService.js

…

downloadJobCleanupService.js

feat(downloads): per-gallery download resolutions (#858) (#1022)

2026-08-11 09:46:46 +02:00

downloadJobService.js

feat(downloads): per-gallery download resolutions (#858) (#1022)

2026-08-11 09:46:46 +02:00

downloadRendition.js

feat(downloads): per-gallery download resolutions (#858) (#1022)

2026-08-11 09:46:46 +02:00

downloadZipService.js

feat(downloads): per-gallery download resolutions (#858) (#1022)

2026-08-11 09:46:46 +02:00

emailIntakeService.js

fix(security): bound inbound-mail resources, redact secrets from logs (GHSA-2qf9, pgmp, r794) (#959)

2026-08-02 21:17:11 +02:00

emailProcessor.js

feat(email): webhook transport as an alternative to SMTP (#1225) (#1231)

2026-08-29 11:10:32 +02:00

emailWebhookTransport.js

refactor(email): stop reading the webhook response body at all (#1225) (#1239)

2026-08-29 13:06:19 +02:00

environmentService.js

fix(update): target docker-compose.production.yml in dashboard update steps

2026-07-17 20:55:49 +02:00

eventReminderService.js

fix(reminders): wrap is_active/is_archived wheres in formatBoolean

2026-06-29 19:39:40 +02:00

eventReminderTemplates.js

feat(setup): event-types step in first-run wizard + un-hardcode event type deps (#800)

2026-07-15 21:30:23 +02:00

eventRenameService.js

feat(gallery): responsive grid thumbnails (#1095) (#1109)

2026-08-21 19:26:21 +02:00

eventService.js

feat(workflows): admin review gates before sends + migrate lifecycle/time triggers

2026-06-23 14:58:48 +02:00

eventTypeService.js

Merge pull request #803 from PicPeak/fix/event-type-hardcoded-deps

2026-07-15 23:02:35 +02:00

expenseCategoriesService.js

feat(accounting): inbound supplier-invoice capture + expense re-bill (backend)

2026-06-11 00:04:16 +02:00

expenseService.js

feat(accounting): re-bill proof attachment, CRM panel & hours↔re-bills cross-add (#979)

2026-08-03 22:03:31 +02:00

expirationChecker.js

fix(workflows): ship built-ins disabled for first beta + enabled-based mutex + admin sentinel

2026-06-23 23:35:56 +02:00

externalMediaService.js

fix(external-media): store external paths from the media root (#1163) (#1168)

2026-08-26 08:36:45 +02:00

externalPhotoDedupe.js

fix(external-media): one row per external file per event (#1162) (#1167)

2026-08-26 08:28:48 +02:00

externalRelpathFold.js

test(external): make the fold-collision guard test the real code (#745 follow-up) (#1234)

2026-08-29 12:15:31 +02:00

extractionService.js

feat(accounting): inbound supplier-invoice capture + expense re-bill (backend)

2026-06-11 00:04:16 +02:00

faceAutoCategories.js

feat(faces): People in this gallery — face recognition via an optional ML sidecar (#1074) (#1075)

2026-08-18 22:37:28 +02:00

faceClient.js

fix(faces): restore the :beta image tag and surface sidecar health (#1087)

2026-08-19 16:49:47 +02:00

faceClustering.js

feat(faces): make "not the same person" survive a re-scan (#1132) (#1145)

2026-08-23 22:10:28 +02:00

facePeopleService.js

feat(faces): let the photographer choose which photo represents a person (#1119)

2026-08-21 19:26:52 +02:00

faceProcessor.js

feat(faces): make "not the same person" survive a re-scan (#1132) (#1145)

2026-08-23 22:10:28 +02:00

faceQueue.js

feat(faces): consolidate look-alike clusters after a scan, and suggest the rest (#1107)

2026-08-22 21:39:15 +02:00

faceSettings.js

feat(faces): People in this gallery — face recognition via an optional ML sidecar (#1074) (#1075)

2026-08-18 22:37:28 +02:00

feedbackDefaults.js

feat(gallery): colour labels for client proofing, and one global default per feedback type (#1044) (#1137)

2026-08-23 11:15:01 +02:00

feedbackModeration.js

fix(feedback): align word-filter severity vocabulary with the admin UI

2026-09-01 16:23:22 +02:00

feedbackService.js

fix(feedback): name the camera original in the exports, not just the stored file (#1224) (#1228)

2026-08-29 11:09:59 +02:00

fileWatcher.js

fix(watcher): stop re-importing a photo whose file was replaced (#1226) (#1237)

2026-08-29 12:22:50 +02:00

fontsService.js

…

galleryOgService.js

feat(setup): configure the public address and SMTP in the wizard, not .env (#1104)

2026-08-21 12:54:14 +02:00

galleryShortUrlService.js

feat(gallery): branded URL shortener — /s/<slug> with OG injection (#699)

2026-06-30 16:30:13 +02:00

guestRecoveryService.js

feat(email): webhook transport as an alternative to SMTP (#1225) (#1231)

2026-08-29 11:10:32 +02:00

imageProcessor.js

feat(api): Lightroom round-trip — read proofing marks, put finished edits back (#745) (#1165)

2026-08-28 15:45:56 +02:00

invoiceSchedulerService.js

fix(workflows): defer quote.accepted/declined emit until the 15-min response window locks

2026-06-28 14:30:26 +02:00

invoiceService.js

refactor(backend): decompose invoiceService, contractService, adminEvents

2026-07-03 08:10:25 +02:00

ledgerService.js

fix(accounting): PR #622 blockers — CSV formula injection + IMAP double-ingest race

2026-06-16 18:21:02 +02:00

localStorageUsage.js

fix(admin): make "Storage used" report storage used (#1164) (#1170)

2026-08-26 08:53:39 +02:00

maintenanceJobState.js

fix(images): backfill orientation for libraries that predate the fix (#1199)

2026-08-26 21:01:51 +02:00

markMerge.js

feat(api): Lightroom round-trip — read proofing marks, put finished edits back (#745) (#1165)

2026-08-28 15:45:56 +02:00

mfaService.js

feat(auth): admin TOTP MFA — enrollment, login challenge, recovery, CLI reset

2026-07-03 11:33:38 +02:00

oidcService.js

fix(auth): issuer-tag the oversize SSO logout marker (#798) (#1010)

2026-08-10 09:14:56 +02:00

pdf-i18n.js

feat(invoices): optional sub-cent rounding reconciliation ("Rundung" row)

2026-06-28 15:53:44 +02:00

pdfService.js

fix(storage): write business documents under STORAGE_PATH, not the cwd (#1070)

2026-08-18 22:14:41 +02:00

pdfStampService.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

photoAdminMarksService.js

fix(gallery): guest filters respect show_feedback_to_guests, and marks survive a mid-write clear (#1147)

2026-08-23 22:07:50 +02:00

photoExportService.js

fix(export): name the camera master in photo exports, not the delivered render (#1229) (#1230)

2026-08-29 11:10:05 +02:00

photoProcessor.js

fix(images): respect EXIF orientation in thumbnails, heroes and previews (#1194)

2026-08-26 20:55:54 +02:00

photoReplacementService.js

feat(api): Lightroom round-trip — read proofing marks, put finished edits back (#745) (#1165)

2026-08-28 15:45:56 +02:00

photoResolver.js

fix(external-media): store external paths from the media root (#1163) (#1168)

2026-08-26 08:36:45 +02:00

photoService.js

feat(faces): People in this gallery — face recognition via an optional ML sidecar (#1074) (#1075)

2026-08-18 22:37:28 +02:00

picpeakExportService.js

fix(admin): move the maintenance sweeps' run state into the database (#1181) (#1184)

2026-08-26 08:45:41 +02:00

picpeakImportService.js

fix(external-media): store external paths from the media root (#1163) (#1168)

2026-08-26 08:36:45 +02:00

projectService.js

fix(security): vet the destination project when linking a deal (#991)

2026-08-04 16:36:12 +02:00

publicSiteService.js

fix(security): escape brand tokens, block tracker redirects, trim logo diagnostic (GHSA-j347, mw76, 29vm) (#961)

2026-08-02 21:17:17 +02:00

quoteService.js

fix(storage): write business documents under STORAGE_PATH, not the cwd (#1070)

2026-08-18 22:14:41 +02:00

rasterizeService.js

fix(accounting): PR #622 concerns — flag-cache, customer master gate, VAT-unconfigured, helpers, page cap

2026-06-16 18:33:47 +02:00

rateLimitService.js

…

recaptcha.js

refactor(backend): standardize error responses, logging, pagination

2026-07-03 07:49:45 +02:00

restoreService.js

fix(external-media): store external paths from the media root (#1163) (#1168)

2026-08-26 08:36:45 +02:00

revealScheduler.js

feat(gallery): reveal mode — hide gallery from guests until reveal (#838) (#856)

2026-07-22 20:59:59 +02:00

robotsTxtService.js

…

s3AutoImporter.js

fix(images): respect EXIF orientation in thumbnails, heroes and previews (#1194)

2026-08-26 20:55:54 +02:00

secureImageService.js

fix(security): block guest access to hidden/client-only photos across bulk + secure routes (#939)

2026-08-01 17:36:15 +02:00

settingsService.js

…

setupService.js

fix(setup): put the setup token where a NAS user can find it (#1218) (#1219)

2026-08-28 08:08:54 +02:00

shareLinkService.js

fix(security): unauth share_token leak (HIGH) + restore path-traversal, logo file-read, branding path keys (#946)

2026-08-02 08:37:48 +02:00

taxReportService.js

fix(accounting): tax-report storno totals + hours-line date on Postgres

2026-06-18 18:40:22 +02:00

transferCleanupService.js

feat(transfers): add PicTransfer — cross-event file transfers (#998)

2026-08-09 13:40:03 +02:00

transferService.js

feat(setup): configure the public address and SMTP in the wizard, not .env (#1104)

2026-08-21 12:54:14 +02:00

updateCheckService.js

feat(admin): surface the registry move through the update check (#993)

2026-08-04 16:36:50 +02:00

updateNotificationService.js

feat(email): webhook transport as an alternative to SMTP (#1225) (#1231)

2026-08-29 11:10:32 +02:00

uploadSettings.js

Merge remote-tracking branch 'origin/main' into feat/guest-upload-dng-raw

2026-07-18 20:52:08 +02:00

userManagementService.js

feat(setup): configure the public address and SMTP in the wizard, not .env (#1104)

2026-08-21 12:54:14 +02:00

videoProcessor.js

…

watermarkGeneratorService.js

fix(uploads): prevent cross-photo contamination from filename collisions and non-atomic writes (#931) (#933)

2026-08-01 12:29:12 +02:00

watermarkService.js

fix(images): respect EXIF orientation in thumbnails, heroes and previews (#1194)

2026-08-26 20:55:54 +02:00

webhookDeliveryWorker.js

fix(webhooks): write delivery timestamps as ISO strings

2026-09-01 16:29:03 +02:00

webhookService.js

fix(webhooks): write delivery timestamps as ISO strings

2026-09-01 16:29:03 +02:00

whatsappProcessor.js

feat(whatsapp): admin-selectable template parameters + reorder (#647 follow-up)

2026-06-21 20:51:20 +02:00

whatsappService.js

feat(whatsapp): WhatsApp Business API notification channel (#640 part D)

2026-06-18 22:57:22 +02:00

workerManager.js

…

xmpGenerator.js

feat(api): Lightroom round-trip — read proofing marks, put finished edits back (#745) (#1165)

2026-08-28 15:45:56 +02:00