This repository has been archived on 2026-05-24. You can view files and clone it. You cannot open issues or pull requests or push a commit.

groombook-ci[bot] 06c840ff0e fix(api): replace lte() with inArray() in portal queries — data leak ...

CRITICAL data leak: portal queries used lte(id, maxId) to fetch related
entities, which returned ALL records with ID ≤ maxId — leaking other clients'
pets, staff, and invoice line items.

Fixed all three occurrences:
- pets: lte(pets.id, maxId) → inArray(pets.id, petIds)
- staff: lte(staff.id, maxId) → inArray(staff.id, staffIds)
- invoiceLineItems: lte(invoiceId, maxId) → inArray(invoiceId, invoiceIds)

Also added inArray to @groombook/db re-exports from drizzle-orm.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-03-29 03:16:24 +00:00

..

src

fix(api): replace lte() with inArray() in portal queries — data leak

2026-03-29 03:16:24 +00:00

Dockerfile

Fix Dockerfile layer order: copy dist before pnpm install (#45)

2026-03-18 03:44:39 +00:00

eslint.config.js

feat: appointment scheduling, client/pet/service/staff CRUD UI

2026-03-17 18:45:28 +00:00

package.json

feat(auth): replace OIDC/jose with Better-Auth (#136)

2026-03-28 03:50:45 +00:00

tsconfig.json

Bootstrap monorepo: Hono API, React PWA, Drizzle DB, CI/CD

2026-03-17 16:11:04 +00:00

vitest.config.ts

feat: deterministic seed, impersonation migration, test factories (GRO-110)

2026-03-21 19:34:52 +00:00