Commit graph

16 commits

Author SHA1 Message Date
Ochenstarik
b283736312 fix(sync): reject work session and timesheet mutations from devices
Предотвращение несанкционированного создания подтверждённых смен и начислений с устройств синхронизации. Команды upsert_work_session и upsert_timesheet_entry отклоняются сервером со статусом rejected и кодом COMMAND_NOT_SUPPORTED без записи в базу данных. Очистка интеграционного теста выполняется соединением мигратора, вставка в staff_employees согласована со схемой миграций.
2026-09-26 16:12:02 +07:00
b0243d5001 docs(audit): add second acceptance and third-round tasks
Some checks are pending
ci / verify (push) Waiting to run
Приёмка второго круга: Grok принят, у Codex форматирование
по-прежнему несёт исправление синхронизации Antigravity, у Antigravity
два интеграционных теста красные на реальной базе и две ветки
конфликтуют между собой. Задания третьего круга фиксируют, что именно
доделать и в каком порядке вливать, плюс перевод пилота с
арендатора-заглушки на настоящего.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-26 15:56:31 +07:00
f5ac179623 docs(audit): add 2026-09-26 audit, acceptance and executor tasks
Some checks are pending
ci / verify (push) Waiting to run
Executors could not see the audit: Grok reported that the owner's
AUDIT.md and evidence never reached it, so its scenarios could not be
mapped to the audit IDs. Keeping the audit, the acceptance report and
the task for each executor in the repository lets Codex, Antigravity
and Grok take work and report through git.

The live-check scripts are stored as .mjs.txt so the project linter,
which type-checks every .mjs file, does not break for everyone; the
maintained version of these checks is Grok's harness in tests/e2e.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-26 15:13:56 +07:00
Ochenstarik
5ee75177b9 feat(sync): add offline sync backend foundation
- Add PostgreSQL migrations with strict RLS policies (0011)
- Introduce SyncService for handling auth, token-based registration
- Add payload size and replay attack mitigations
- Provide HTTP fastify routes (pull, push, ack, device management)
- Validate openapi contracts and add comprehensive tests
2026-09-26 13:10:27 +07:00
Ochenstarik
3e2054480c fix(push): isolate employee data and preserve platform outbox
Some checks are pending
ci / verify (push) Waiting to run
2026-09-26 12:31:10 +07:00
Ochenstarik
9ea9a004ed feat(ui): align Staff portal with Krona library 2026-09-24 21:14:20 +07:00
Ochenstarik
88804a0eea feat(staff): add finance calendar and employee portal 2026-09-24 18:12:24 +07:00
Ochenstarik
df0da37d5c merge: integrate server portal and work sessions 2026-09-24 17:06:04 +07:00
Ochenstarik
39f0840087 Fix IPC framing, add global pipe name, and auto-reconnect tests 2026-09-24 16:49:07 +07:00
Ochenstarik
7ca8966084 docs(terminal): add API requirements, driver distribution policy, and SLK20R hardware report 2026-09-24 16:37:52 +07:00
Ochenstarik
32e3c6f7f7 feat: add manager employee and timesheet workflows 2026-09-24 16:32:30 +07:00
Ochenstarik
3464998168 feat: add secure attendance portal and payroll foundation
Some checks are pending
ci / verify (push) Waiting to run
2026-09-24 15:59:38 +07:00
Ochenstarik
d45bee960a fix: harden terminal recovery and deployment
Some checks are pending
ci / verify (push) Waiting to run
2026-09-18 11:10:28 +07:00
Ochenstarik
7c8e7fcaf1 fix: close terminal audit findings
Some checks are pending
ci / verify (push) Waiting to run
2026-09-18 01:34:36 +07:00
Ochenstarik
64ac5c0c66 fix: enforce tenant isolation and runtime contracts 2026-09-18 01:34:12 +07:00
Ochenstarik
10968eacf7 docs: define platform boundaries and contracts 2026-09-10 23:29:28 +07:00