12 Commits

Author	SHA1	Message	Date
Flea Flicker	bedeb05a67	Promote uat → main (PROD): GRO-2359 OOBE portal-creation routing (api) (#214) ... GRO-2359: add POST /api/portal/clients-from-auth for OOBE (#214) Co-authored-by: Flea Flicker <22+gb_flea@noreply.git.farh.net> Co-committed-by: Flea Flicker <22+gb_flea@noreply.git.farh.net>	2026-06-12 16:47:30 +00:00
Flea Flicker	58305d7a89	uat→main (PROD): GRO-2342 portal waitlist service {id, name} (frozen @47e2021 + cherry-pick c737bfe) (#211) ... Merge pull request 'GRO-2342: portal/appointments — symmetric service {id, name} on both card paths' (#211) from release/main-GRO-2342-api into main GRO-2342: GET /portal/appointments populates service: {id, name} on the synthetic waitlist card (was {id} only) and on the appointment card (consistent shape). TC-API-8.20 in UAT_PLAYBOOK.md. Approved CTO. Squashed from release/main-GRO-2342-api @ c737bfe. Refs: GRO-2342, GRO-2344, GRO-2345, GRO-2346, PR #211. Co-authored-by: Flea Flicker <22+gb_flea@noreply.git.farh.net> Co-committed-by: Flea Flicker <22+gb_flea@noreply.git.farh.net>	2026-06-11 08:33:52 +00:00
Flea Flicker	47e2021cf4	Promote uat → main (PROD): GRO-2319 portal waitlist surfacing + seed (#207) ... Co-authored-by: Flea Flicker <22+gb_flea@noreply.git.farh.net> Co-committed-by: Flea Flicker <22+gb_flea@noreply.git.farh.net>	2026-06-10 08:58:26 +00:00
Flea Flicker	e9ad92de01	uat→main (PROD): GRO-2157 nav export + GRO-2225/2235 (frozen @4868f18) (#192) ... feat: nav export + conflict guard + UAT seed (GRO-2157, GRO-2225, GRO-2235) Squash-merges PR #192: uat→main PROD promotion. Freezes at validated SHA 4868f18 (UAT regression GRO-2261 11/11 PASS). Bundles: GRO-2157 (nav export), GRO-2225 (UAT seed), GRO-2235 (conflict guard). CTO-reviewed and approved (review #4542). Co-authored-by: Flea Flicker <22+gb_flea@noreply.git.farh.net> Co-committed-by: Flea Flicker <22+gb_flea@noreply.git.farh.net>	2026-06-09 01:23:06 +00:00
Flea Flicker	aabedc8152	fix(GRO-2234): bounded sliding expiration for SSO portal sessions (#183)	2026-06-08 18:55:43 +00:00
Flea Flicker	29c42e3130	fix(portal): validate waitlist preferredTime/preferredDate, return 400 on bad input (GRO-2211) (#179)	2026-06-08 17:19:39 +00:00
Flea Flicker	b842237425	fix(portal): GRO-2203 validate petId as UUID before PATCH lookup (500→404) (#177)	2026-06-08 17:03:44 +00:00
Flea Flicker	14d7889ec0	fix(portal): drop writable photoKey from PATCH /portal/pets — S3 key-hijack (GRO-2187/GRO-2198) (#172)	2026-06-08 12:39:02 +00:00
Flea Flicker	6be78cae35	fix(portal): implement PATCH /portal/pets/:petId + enrich GET (GRO-2187) (#165)	2026-06-08 08:18:13 +00:00
Flea Flicker	2e0d63f7f6	fix(gro-1866): address QA review failures — portalSession null-guard, ... email null-dereference guard, externalize DEMO_STAFF_ID 1. portal.ts:138 — add null guard for portalSession before accessing .id (TS18048: 'portalSession' is possibly 'undefined') 2. rbac.ts:130 — guard jwt.email before split() to prevent runtime throw 3. portal.ts:39,105 — externalize DEMO_STAFF_ID as env var (process.env.DEMO_STAFF_ID ?? "00000000-...") Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-28 19:50:14 +00:00
Flea Flicker	7e329ff72f	fix(gro-1866): add session-from-auth portal endpoint and role scope ... Adds POST /api/portal/session-from-auth which bridges a valid Better Auth customer session (from SSO login) to a portal impersonation session, so real SSO customers can access the client portal. The endpoint is registered before the validatePortalSession catch-all so it is not subject to that middleware. It validates the Better Auth session from request cookies, looks up the client by email, creates an active impersonation session, and returns { sessionId, clientId, clientName }. Also adds "role" to the genericOAuth scopes so Authentik propagates the role claim into Better Auth user objects (GRO-1862 root cause fix). Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-28 15:00:15 +00:00
Chris Farhood	abac9dfe6c	Extract groombook/api from monorepo with CI workflow ... - Add source code from apps/api - Add packages/db and packages/types workspace dependencies - Add GitHub Actions CI workflow (lint, typecheck, test, docker) - Generate pnpm-lock.yaml - Add .gitignore Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-11 01:26:56 +00:00