4 Commits

Include renames

Author	SHA1	Message	Date
adminandClaude Sonnet 4.6	0e479b648f	fix(auth,capa): restore auth callback, fix CAPA status update ... - auth callback: remove debug redirect, handle both code (PKCE) and token_hash+type (recovery/magic link) flows correctly - capa PATCH: use admin client to bypass RLS for status updates Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WMymkhHZiaYZtUeH9MEHZQ	2026-07-22 19:43:38 +08:00
admin	1879def32c	security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect	2026-07-12 20:36:28 +08:00
admin	c80091c8d6	security: CAPA privilege escalation, CSV injection, AI rate-limit, prompt injection guard, open redirect, timing-safe cron secret, server-only admin client, notifications RLS	2026-07-12 17:33:58 +08:00
adminandClaude Opus 4.8	1780586185	feat: CAPA board — kanban/table view, create CAPA from incident, status tracking ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FFDuBhMKvoWjrWT3ZnGmmr	2026-07-11 15:16:49 +08:00