Leon SerfatyandClaude Fable 5
97e1d4c60b
Storage - Migrate document/media storage from local disk to DigitalOcean Spaces (S3); lib/storage.ts now streams via the S3 SDK; SPACES_* env vars required. - Add scripts/migrate-storage-to-spaces.ts (idempotent, one-time). Security hardening (all report findings) - DB pool fails closed in production when the CA cert is missing (no more silent unverified TLS); warns in dev. - trustProxy: 1 (was true) so X-Forwarded-For can't be spoofed to evade rate limits. - Login lockout keyed by (email, ip) so an attacker can't lock out a victim. - Superadmin auto-grant now requires a verified email. - CSRF tokens HMAC-signed; exact-path exemptions; logout no longer exempt. - Upload content-sniffing (magic bytes) rejects spoofed MIME types. - create-admin.ts reads creds from env/argv; seed-demo.ts guarded behind ALLOW_SEED. Production-blocker fixes - SPA deep-link/refresh no longer 500s (decorateReply fix); index.html served no-cache. - Invoice numbering is transaction-safe (per-firm advisory lock + max sequence), eliminating concurrent collisions and delete-reuse — no schema change. - Checkout guards against double-billing a firm already on a paid plan. - Fix render-loop in CreateInvoiceDrawer / ManualEntryDrawer (unstable effect deps). Honesty / trust - Remove fabricated testimonials, stats, strikethrough "was" prices, contact SLA, and the login-panel stats; replace with non-fabricated copy. - Fix cookie-policy consent-key mismatch. (Legal pages still need lawyer review.) Quality - Add Vitest unit tests (file-signature, password hashing) and GitHub Actions CI. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
29 lines
754 B
JSON
29 lines
754 B
JSON
{
|
|
"name": "elegalsoftware",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"workspaces": [
|
|
"apps/*",
|
|
"packages/*"
|
|
],
|
|
"engines": {
|
|
"node": ">=20.0.0"
|
|
},
|
|
"scripts": {
|
|
"dev": "npm run dev --workspaces --if-present",
|
|
"dev:web": "npm run dev -w apps/web",
|
|
"dev:api": "npm run dev -w apps/api",
|
|
"build": "npm run build -w apps/web",
|
|
"build:check": "npm run build && npm run typecheck",
|
|
"start": "node server.cjs",
|
|
"db:generate": "npm run generate -w packages/db",
|
|
"db:migrate": "npm run migrate -w packages/db",
|
|
"typecheck": "npm run typecheck --workspaces --if-present",
|
|
"test": "npm run test --workspaces --if-present"
|
|
},
|
|
"devDependencies": {
|
|
"typescript": "^5.6.3"
|
|
}
|
|
}
|