4 Commits

Author	SHA1	Message	Date
Flea Flicker	8721f0b63c	dev → uat: GRO-2154 geocoding endpoints (Phase 1.3) (#171)	2026-06-08 12:06:43 +00:00
Flea Flicker	1f888ac716	security(audit): log owner-bypass reads in GET /pets/:id/profile-summary (GRO-2062) ... Adds a defense-in-depth audit row to impersonationAuditLogs when the staff-side owner-bypass path fires. Mirrors the failure-isolation pattern in src/middleware/portalAudit.ts: insert failures are logged and swallowed so a working read can never turn into a 500. - New writeOwnerBypassAudit helper called only when isOwner === true. - No DB migration; petId + actorStaffId go inside metadata jsonb. - resolveImpersonationClientId stays pure (no audit side effects). - Positive + negative tests + a cross-tenant regression test. - UAT_PLAYBOOK.md §3.19d: TC-API-3.19d documents the audit assertion. Parent tracking: GRO-2062 (Paperclip). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-02 04:10:58 +00:00
The Dogfather	a2b09ba502	fix(pets): port owner-bypass into deployed tree (GRO-2013) (#139)	2026-06-01 20:06:24 +00:00
Flea Flicker	fee62c895d	fix(api): GRO-2014 — profile-summary 500 → 404/401/JSON-500 (#137)	2026-06-01 18:16:29 +00:00