checkout для push-событий был fetch-depth: 2, но github.event.before
при пуше пачки коммитов лежит глубже HEAD~1 — git diff падал с
'bad object'. Теперь fetch-depth: 0 + fallback на полный пайплайн,
если before-SHA недоступен (переписанная история).
- .turbo в actions/cache (пересборки shared/db переиспользуются между прогонами)
- typecheck в web/api джобах, lint бэкенда в api-джобе
- убран пустой turbo test --filter=web (в web нет тестов)
- timeout-minutes на все джобы
- Dockerfile: USER node + --chown; прекомпрессия статики gzip+brotli на этапе
сборки (Traefik не сжимает); compose: chown 1000:1000 data в инструкции
- pnpm catalog: один typescript 6.0.3 и vitest 4.1.10 на весь монорепо
- задача turbo typecheck; tsc вынесен из build web (блокировал vite build)
- eslint-конфиги для api/db/shared (бэкенд не линтился)
- turbo test больше не зависит от ^build (тесты идут по исходникам)
- react-day-picker перенесён из web в ui (потребитель calendar.tsx)
- из web удалены неиспользуемые motion/@dnd-kit×4/react-virtual/date-fns
Фиксированный ключ (OIDC_RSA_PRIVATE_KEY) вместо generateKeyPair
на каждое построение приложения: фаза тестов 9.9с → 1.6с (×6).
Локальные копии buildTestApp/adminToken в 4 файлах заменены на helpers.ts
- jose v6 не экспортирует KeyLike → CryptoKey
- SimpleWebAuthn v13 требует Uint8Array<ArrayBuffer>
- targetType 'credential' в AUDIT_TARGET_TYPES (писался в аудит passkey-ов)
- target-app: начальные значения host/path/search никогда не читались
- демо-блоки blocks/ (sheet-9, solution-users-1/6, settings-5, auth-18) —
не импортировались; auth-logo перенесён в components/auth-logo.tsx
- варианты грида data-grid-table-dnd/-dnd-rows/-virtual и ui/svgs — не импортировались
- убраны исключения blocks из tsconfig и eslint
- AGENTS.md: добавить apps/api/db/shared в описание стека
- кэш importJWK: не импортировать RSA-ключ на каждый /oauth/userinfo
- Cache-Control для /.well-known/openid-configuration и jwks.json
- индекс refresh_sessions(token_hash) — было full scan на каждом authorize/logout
- GET /admin/users: 3 SELECT на пользователя → батч-запросы (N+1)
- revokeAllSessionsForUser: цикл UPDATE → один UPDATE
- preCompressed статики (файлы готовит Dockerfile)
- Updated app-switcher tests to include verification for the newly integrated CDN app.
- Added assertions to check the presence and authentication mode of the CDN app in the response.
Co-authored-by: Cursor <[email protected]>
- Updated environment configurations to include CDN Manager in the RETURN_TO_ALLOWLIST.
- Enhanced target app resolution to recognize CDN-related hosts.
- Added CDN Manager to the application switcher and updated relevant documentation.
- Included tests to verify the correct mapping of CDN hosts.
Co-authored-by: Cursor <[email protected]>
- Updated targetAppFromReturnTo function to handle OIDC authorization unwrap and added search parameter processing.
- Integrated target app resolution into the OIDC route for improved audit logging of SSO handoffs.
- Added a test case to verify the logging of the target app during the authorization process.
- Updated documentation to reflect changes in audit logging for the Technitium DNS application.
Co-authored-by: Cursor <[email protected]>
- Introduced the CreateOidcClientSheet component for OIDC client creation.
- Updated the index export to include the new component.
- Modified the OIDC admin route to import and utilize the new CreateOidcClientSheet.
Co-authored-by: Cursor <[email protected]>
- Added new OIDC configuration options in `.env.example`.
- Expanded documentation in `AGENTS.md` to include OIDC endpoints and admin UI.
- Updated ReUI skill version and component count from 17 to 20 across various documentation files.
- Enhanced `README.md` and other related files to reflect the new component structure and usage guidelines.
Co-authored-by: Cursor <[email protected]>
Добавлен POST /api/v1/ingest/audit, фильтры source_app/user_id, last_login_at; таблица пользователей по solution-users-1 с журналом в Sheet.
Co-authored-by: Cursor <[email protected]>
Добавлен audit log (solution-users-6) с retention N дней и hourly purge; таблица пользователей приведена к DNA solution-users-1 (Filters, avatar, sorting).
Co-authored-by: Cursor <[email protected]>
- Introduced a new endpoint '/api/v1/directory/users' to retrieve a filtered list of active users.
- Implemented query handling to allow searching by email, name, or ID.
- Limited the response to the first 50 matching users for performance optimization.
- Removed unused permission and app retrieval logic from the login process.
- Introduced a new endpoint for reissuing access tokens to handle role changes and account switches.
- Updated JWT payload handling to improve clarity and maintainability.
- Enhanced the readJwtPayload function for better decoding of JWT claims.
- Added NavUser component to the SidebarFooter for user information display.
- Refactored SiteHeader by removing unused imports and components related to user account management.
- Updated breadcrumbs logic to include a new path for admin apps.
- Adjusted SidebarMenuItem formatting for improved readability.
- Added support for optional tenant IDs in JWT claims for user permissions.
- Updated auth routes to include tenant information in the JWT payload.
- Enhanced app switcher configuration to handle tenant IDs without exposing them publicly.
- Improved documentation for EvoBGP tenant ID integration and its usage in JWT.
- Updated auth, admin, and auth-guards routes to utilize normalizePermissionKeys for permissions.
- Enhanced permission mapping to ensure legacy keys are correctly transformed to current catalog keys.
- Improved overall permission validation and user access management across the application.
- Added useEffect to reset admin state when the sheet is closed.
- Updated SheetContent to include a close button and improved styling.
- Enhanced form structure with better accessibility and user experience.
- Integrated error display using Alert component for form submission feedback.
Denozordec