Paul Nothaft ef8a52f02c fix(usage): introduce consented v4 without changing historical reports

2026-09-06 21:34:04 +02:00

..

__tests__

fix(photos): emit visibility and processing_status from the list mapper

2026-09-02 09:43:10 +02:00

adminEvents

fix: remove the fragmentation handling stranded by #1303

2026-09-05 23:41:17 +02:00

v1

fix: remove the fragmentation handling stranded by #1303

2026-09-05 23:41:17 +02:00

acceptInvite.js

feat: add multi-administrator support with RBAC and fix backup/restore for S3

2026-01-07 17:10:46 +01:00

admin.js

feat: implement comprehensive backup and restore system with S3 support

2025-07-24 16:57:08 +02:00

adminApiTokens.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

adminArchives.js

refactor(archives): use the shared LIKE escape helpers

2026-09-02 09:43:11 +02:00

adminAuth.js

feat(auth): make the admin "Remember me" checkbox actually do something (#1186) (#1195)

2026-08-26 21:13:23 +02:00

adminBackup.js

feat: expand opt-in capability coverage with versioned consent

2026-09-06 00:56:58 +02:00

adminBusinessProfile.js

feat(email): global signature footer from the business profile (#1264)

2026-09-04 14:24:02 +02:00

adminCalendar.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

adminCategories.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

adminCMS.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

adminContracts.js

feat(usage): add consented beta capabilities and gallery photo totals

2026-09-06 19:23:14 +02:00

adminCssTemplates.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

adminCustomers.js

feat(usage): add consented beta capabilities and gallery photo totals

2026-09-06 19:23:14 +02:00

adminDashboard.js

style(backend): clear the eslint backlog to zero

2026-09-01 16:46:34 +02:00

adminDatabaseBackup.js

fix(security): backup/restore hardening — public-dir DB dump, restore path allowlist, gunzip bound, manifest keying (#956)

2026-08-02 21:17:05 +02:00

adminDeals.js

fix(flags): close CRM/accounting feature-gating gaps from the audit

2026-06-16 13:12:26 +02:00

adminDev.js

feat(setup): configure the public address and SMTP in the wizard, not .env (#1104)

2026-08-21 12:54:14 +02:00

adminEmail.js

feat: expand opt-in capability coverage with versioned consent

2026-09-06 00:56:58 +02:00

adminEventRename.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

adminEventTypes.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

adminExpenses.js

style(backend): clear the eslint backlog to zero

2026-09-01 16:46:34 +02:00

adminExternalMedia.js

style(backend): clear the eslint backlog to zero

2026-09-01 16:46:34 +02:00

adminFeatureFlags.js

feat(crm): newsletter campaigns behind a newsletters flag (#1264)

2026-09-04 14:32:31 +02:00

adminFeedback.js

style(backend): clear the eslint backlog to zero

2026-09-01 16:46:34 +02:00

adminGuests.js

fix(guests): surface duplicate guest registrations, and stop making so many (#1210) (#1216)

2026-08-28 08:27:15 +02:00

adminImageSecurity.js

Merge pull request #1303 from PicPeak/fix/1300-remove-fragmentation

2026-09-05 23:37:14 +02:00

adminInvoices.js

feat(usage): add consented beta capabilities and gallery photo totals

2026-09-06 19:23:14 +02:00

adminLedger.js

style(backend): clear the eslint backlog to zero

2026-09-01 16:46:34 +02:00

adminNewsletters.js

feat(crm): newsletter campaigns behind a newsletters flag (#1264)

2026-09-04 14:32:31 +02:00

adminNotifications.js

style(backend): clear the eslint backlog to zero

2026-09-01 16:46:34 +02:00

adminPhotoDimensions.js

fix(images): fence the capture-date backfill on the file it read (#1201) (#1204)

2026-08-27 08:44:19 +02:00

adminPhotoExport.js

feat(usage): add consented beta capabilities and gallery photo totals

2026-09-06 19:23:14 +02:00

adminPhotos.js

feat(usage): add consented beta capabilities and gallery photo totals

2026-09-06 19:23:14 +02:00

adminProjects.js

fix(projects): stop the cockpit offering email controls the API rejects (#976)

2026-08-03 14:48:50 +02:00

adminQuotes.js

feat(usage): add consented beta capabilities and gallery photo totals

2026-09-06 19:23:14 +02:00

adminRestore.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

adminRoles.js

feat(permissions): granular permission gating + role editor & presets (#747, phase 1 of #743) (#1045)

2026-08-16 14:59:52 +02:00

adminSettings.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

adminShortUrls.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

adminSystem.js

fix(email): show a queue nobody is working instead of reporting all-clear

2026-09-02 13:49:22 +02:00

adminSystemHealth.js

fix(email): wire the settings status card, and cap-aware truncation

2026-09-02 15:32:35 +02:00

adminTaxReport.js

feat(accounting): scope the tax-report export to income-only or cost-only

2026-06-16 18:51:11 +02:00

adminThumbnails.js

fix(thumbnails): regenerate external photos instead of dropping their tiers (#1129)

2026-08-22 21:37:49 +02:00

adminTransfers.js

feat(transfers): add PicTransfer — cross-event file transfers (#998)

2026-08-09 13:40:03 +02:00

adminUsage.js

fix(usage): introduce consented v4 without changing historical reports

2026-09-06 21:34:04 +02:00

adminUsers.js

fix(dates): normalize SQLite epoch timestamps at remaining API surfaces (#485 follow-up) (#857)

2026-07-22 21:07:32 +02:00

adminVatCodes.js

feat(permissions): granular permission gating + role editor & presets (#747, phase 1 of #743) (#1045)

2026-08-16 14:59:52 +02:00

adminWebhooks.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

adminWhatsapp.js

feat: expand opt-in capability coverage with versioned consent

2026-09-06 00:56:58 +02:00

adminWorkflows.js

fix(workflows): scope dunning backfill to its own flow via targetWorkflowId

2026-07-07 10:33:01 +02:00

analyticsTrackerProxy.js

docs(analytics): state the tracker proxy's trust model

2026-09-02 09:43:11 +02:00

auth.js

feat: add opt-in product usage and feedback integration (#1110)

2026-09-05 12:59:06 +02:00

customer.js

feat(crm): newsletter campaigns behind a newsletters flag (#1264)

2026-09-04 14:32:31 +02:00

customerAuth.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

gallery.js

fix: remove the image-fragmentation surface

2026-09-05 12:11:40 +02:00

galleryFeedback.js

fix(feedback): make the "block" severity tier actually reject

2026-09-02 09:30:49 +02:00

galleryGuests.js

fix(guests): drop a stored identity when a spent invite names someone else

2026-09-02 10:22:55 +02:00

protectedImages.js

fix: remove the image-fragmentation surface

2026-09-05 12:11:40 +02:00

publicCMS.js

refactor(backend): standardize error responses, logging, pagination

2026-07-03 07:49:45 +02:00

publicContracts.js

fix(branding): theme-aware logo on customer-facing public pages

2026-06-03 16:48:54 +02:00

publicFonts.js

feat(branding): self-hosted webfonts with filesystem scanner

2026-05-04 19:15:47 +02:00

publicNewsletter.js

feat(crm): newsletter campaigns behind a newsletters flag (#1264)

2026-09-04 14:32:31 +02:00

publicPaymentCheck.js

fix(branding): theme-aware logo on customer-facing public pages

2026-06-03 16:48:54 +02:00

publicQuotes.js

fix(types): resolve the TypeScript build:check backlog

2026-09-01 17:09:24 +02:00

publicSettings.js

feat(gallery): colour labels for client proofing, and one global default per feedback type (#1044) (#1137)

2026-08-23 11:15:01 +02:00

publicTransfer.js

feat(transfers): add PicTransfer — cross-event file transfers (#998)

2026-08-09 13:40:03 +02:00

publicTransferUpload.js

feat(transfers): add PicTransfer — cross-event file transfers (#998)

2026-08-09 13:40:03 +02:00

publicWorkflowApprovals.js

style(backend): clear the eslint backlog to zero

2026-09-01 16:46:34 +02:00

secureImages.js

fix: remove the image-fragmentation surface

2026-09-05 12:11:40 +02:00

setup.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00