5 Commits

Include renames

Author	SHA1	Message	Date
adminandClaude Sonnet 4.6	96eaeb7aef	feat(api): expose owner_notes in capa GET and PATCH ... Adds owner_notes to the GET select query and PATCH allowed fields list to enable reading and writing owner notes for CAPA actions. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-07-23 11:56:10 +08:00
adminandClaude Sonnet 4.6	0e479b648f	fix(auth,capa): restore auth callback, fix CAPA status update ... - auth callback: remove debug redirect, handle both code (PKCE) and token_hash+type (recovery/magic link) flows correctly - capa PATCH: use admin client to bypass RLS for status updates Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WMymkhHZiaYZtUeH9MEHZQ	2026-07-22 19:43:38 +08:00
admin	1879def32c	security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect	2026-07-12 20:36:28 +08:00
admin	c80091c8d6	security: CAPA privilege escalation, CSV injection, AI rate-limit, prompt injection guard, open redirect, timing-safe cron secret, server-only admin client, notifications RLS	2026-07-12 17:33:58 +08:00
adminandClaude Opus 4.8	1780586185	feat: CAPA board — kanban/table view, create CAPA from incident, status tracking ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FFDuBhMKvoWjrWT3ZnGmmr	2026-07-11 15:16:49 +08:00