adminandClaude Sonnet 4.6 8fe036bc1a fix: P2 API hardening — unbounded SELECTs, export audit log, header injection, empty-key guard ...

- export: add .limit(10000), sanitize filename, write_audit_log on every export
- stats: add .limit(10000) to aggregation query
- settings POST: reject empty string values to prevent silent key deletion

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CPf5Rc8QPx6V8KLEEgfKEQ

2026-07-12 21:25:35 +08:00

..

(auth)/login

feat: add login page and auth callback route

2026-07-09 22:18:21 +08:00

(protected)

feat: sticky incident header with top-positioned action buttons (fix #5)

2026-07-12 16:44:42 +08:00

api

fix: P2 API hardening — unbounded SELECTs, export audit log, header injection, empty-key guard

2026-07-12 21:25:35 +08:00

report

feat: PWA offline capture — IndexedDB queue, service worker cache, auto-sync on reconnect

2026-07-11 19:07:35 +08:00

favicon.ico

chore: scaffold Next.js 15 + Supabase clients + vitest

2026-07-09 21:33:59 +08:00

globals.css

chore: scaffold Next.js 15 + Supabase clients + vitest

2026-07-09 21:33:59 +08:00

layout.tsx

feat: i18n — EN/MS/ZH translations with cookie-based locale switching, report form translated

2026-07-11 19:01:44 +08:00

page.tsx

feat: Phase 1 foundation - incident components, storage, and migrations

2026-07-10 10:48:56 +08:00