This repository has been archived on 2026-05-24. You can view files and clone it. You cannot open issues or pull requests or push a commit.

groombook-ci[bot] 1c82a75a88 feat(gro-203): add requireSuperUser() middleware + route guards ...

- Added requireSuperUser() middleware in apps/api/src/middleware/rbac.ts
  that checks staff.isSuperUser, returns 403 if false
- Wired into index.ts:
  - POST/PATCH/DELETE /api/staff/* → requireSuperUser() after requireRole("manager")
  - /api/admin/settings/* → requireSuperUser() after requireRole("manager")
- resolveStaffMiddleware: inject isSuperUser: true for AUTH_DISABLED dev mode

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-03-29 03:16:24 +00:00

..

meta

feat(gro-203): add requireSuperUser() middleware + route guards

2026-03-29 03:16:24 +00:00

0000_colossal_colossus.sql

feat: Docker self-hosting setup

2026-03-17 18:50:07 +00:00

0001_pet_health_alerts.sql

feat: add health alerts field and delete actions for pets and clients (#25)

2026-03-17 19:40:29 +00:00

0002_invoices.sql

feat: basic POS & invoicing (closes groombook/groombook#5) (#26)

2026-03-17 20:02:04 +00:00

0003_recurring_series.sql

feat: recurring appointments with cascading change propagation (#28)

2026-03-17 20:37:33 +00:00

0004_reminder_logs.sql

feat: automated appointment reminders via email (GRO-23) (#29)

2026-03-17 20:46:49 +00:00

0005_appointment_groups.sql

feat: multi-pet client group booking (closes #10) (#31)

2026-03-17 21:36:03 +00:00

0006_pet_profile_attributes.sql

feat: detailed pet profile attributes and grooming visit history (closes #13)

2026-03-17 21:46:40 +00:00

0007_tip_splitting.sql

feat: tip and payment splitting between staff roles (#34)

2026-03-17 22:03:46 +00:00

0008_business_settings.sql

feat: customizable business branding (name, logo, colors) (#63)

2026-03-19 11:07:07 +00:00

0009_client_soft_delete.sql

feat: client disable/deletion with soft-delete (#69)

2026-03-19 20:03:18 +00:00

0010_impersonation_sessions.sql

feat: deterministic seed, impersonation migration, test factories (GRO-110)

2026-03-21 19:34:52 +00:00

0011_impersonation_indexes.sql

feat(db): add indexes on impersonation tables (GitHub #95)

2026-03-21 23:28:09 +00:00

0012_pet_photo.sql

feat: pet photo upload via presigned S3 URLs (GH #93, GRO-123)

2026-03-22 00:07:48 +00:00

0013_appointment_confirmation.sql

feat: appointment confirmation and cancellation (GH #98, GRO-153)

2026-03-24 16:02:58 +00:00

0014_customer_notes.sql

feat: customer-facing appointment notes (GRO-106) (#109)

2026-03-26 08:24:21 +00:00

0015_waitlist.sql

fix(gro-38): prod/demo auth and API-based seed (#117)

2026-03-26 20:51:08 +00:00

0016_ical_token.sql

feat: iCal calendar feed (GRO-107)

2026-03-27 02:37:06 +00:00

0017_better_auth_tables.sql

feat(auth): replace OIDC/jose with Better-Auth (#136)

2026-03-28 03:50:45 +00:00

0018_backfill_staff_user_id.sql

feat(auth): replace OIDC/jose with Better-Auth (#136)

2026-03-28 03:50:45 +00:00

0019_concerned_sunfire.sql

feat(schema): add is_super_user to staff table (GRO-201)

2026-03-28 20:39:46 +00:00