2 Commits

Author	SHA1	Message	Date
Scrubs McBarkley	c8884c6c30	fix(waitlist): address QA review comments - auth fixes and pgEnum type ... - Add 401 when DELETE /waitlist/:id has no session (auth bypass fix) - Add auth to PATCH /waitlist/:id (was zero auth) - Add RBAC guard for /waitlist/* routes - Fix migration to use proper ENUM type instead of TEXT - Add unit tests for auth scenarios Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-03-25 11:04:13 +00:00
Scrubs McBarkley	3bc920f36b	feat: add waitlist entries table and API routes (GRO-105) ... - Migration 0015: new waitlist_entries table with indexes - Schema update: add waitlistEntries table and waitlistStatusEnum - Staff API: GET /api/waitlist, GET /api/waitlist/:id - Portal API: POST /api/waitlist (via impersonation session), DELETE /api/waitlist/:id - Note: cancellation hook and email notification pending Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-03-25 11:04:13 +00:00