admin c80091c8d6 security: CAPA privilege escalation, CSV injection, AI rate-limit, prompt injection guard, open redirect, timing-safe cron secret, server-only admin client, notifications RLS

2026-07-12 17:33:58 +08:00

..

(auth)/login

feat: add login page and auth callback route

2026-07-09 22:18:21 +08:00

(protected)

feat: sticky incident header with top-positioned action buttons (fix #5)

2026-07-12 16:44:42 +08:00

api

security: CAPA privilege escalation, CSV injection, AI rate-limit, prompt injection guard, open redirect, timing-safe cron secret, server-only admin client, notifications RLS

2026-07-12 17:33:58 +08:00

report

feat: PWA offline capture — IndexedDB queue, service worker cache, auto-sync on reconnect

2026-07-11 19:07:35 +08:00

favicon.ico

chore: scaffold Next.js 15 + Supabase clients + vitest

2026-07-09 21:33:59 +08:00

globals.css

chore: scaffold Next.js 15 + Supabase clients + vitest

2026-07-09 21:33:59 +08:00

layout.tsx

feat: i18n — EN/MS/ZH translations with cookie-based locale switching, report form translated

2026-07-11 19:01:44 +08:00

page.tsx

feat: Phase 1 foundation - incident components, storage, and migrations

2026-07-10 10:48:56 +08:00