app/apps/api at e3c5ebb337474dc2578b39228de8a4a98c448f72 - app

Archived

This repository has been archived on 2026-05-24. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

T

History

Flea Flicker e3c5ebb337 feat(staff): super user grant/revoke UI with last-user guardrail

Backend:
- GET /api/staff/me — returns current staff record (includes isSuperUser)
- PATCH /api/staff/:id — accepts optional isSuperUser boolean; only super users
  can change this field; last-super-user guardrail prevents revoking the only
  active super user
- PATCH /api/staff/:id (active=false) — guardrail prevents deactivating the
  last active super user
- DELETE /api/staff/:id — guardrail prevents deleting the last active super user

Frontend (Staff.tsx):
- Fetches current user via GET /api/staff/me to determine isSuperUser
- Shows ★ Super User badge for super user staff rows
- Super user sees "+ Grant" button on non-super-user rows
- Super user sees "Revoke" toggle on super-user rows (disabled if last one)
- Deactivate button disabled for the last active super user
- Error message displayed when backend guardrail triggers

GRO-206

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-03-29 11:52:51 +00:00

src

feat(staff): super user grant/revoke UI with last-user guardrail

2026-03-29 11:52:51 +00:00

Dockerfile

Fix Dockerfile layer order: copy dist before pnpm install (#45 )

2026-03-18 03:44:39 +00:00

eslint.config.js

feat: appointment scheduling, client/pet/service/staff CRUD UI

2026-03-17 18:45:28 +00:00

package.json

feat(auth): replace OIDC/jose with Better-Auth (#136 )