jubnl 6965869dda test(server): plan 4 — at-rest encryption pins for AirTrail/doc-sync/webhook secrets (3h L3) ...

Task 8b-2 item 4: the three credential columns the 3h Task 7 review flagged
as having no at-rest pin — users.airtrail_api_key (AirtrailService#saveSettings),
document_connections.secrets (DocSyncConfigService's whole-secret-map
column), and trip_document_links.webhook_secret (createLink's per-binding
mint). Each test saves through the real service, reads the raw column via
better-sqlite3, asserts it is enc:v1:-prefixed ciphertext that never
contains the plaintext, and asserts the service's own decrypt path rounds
it back to the original value.

2026-09-24 07:05:32 +02:00

..

assets

fix(atlas): correct Guangdong Province name in region bundle

2026-09-08 16:36:47 +02:00

eslint-rules

chore(server): lint rule also refuses a Promise handed to expect() without resolves/rejects

2026-09-22 02:32:59 +02:00

public

v3.0.16 — bug fixes (#964)

2026-05-06 21:38:40 +02:00

scripts

fix(server): plan 4 — RULE12 paren-count scanner ignores string literals

2026-09-24 06:05:14 +02:00

src

refactor(server): plan 4 — U6 gate-level id parsing for todo item ids

2026-09-24 06:46:09 +02:00

tests

test(server): plan 4 — at-rest encryption pins for AirTrail/doc-sync/webhook secrets (3h L3)

2026-09-24 07:05:32 +02:00

.env.example

fix: the findings of the final 4.3.0 audit

2026-09-20 13:54:31 +02:00

.gitignore

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

.prettierrc

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

CLAUDE.md

chore(server): promise safety net and sweep tooling for the async migration

2026-09-21 19:01:38 +02:00

eslint.config.mjs

fix(server): plan 3i close-out — DemoModule imported where its service is consumed (e2e restored); admin addons list selects the provider relation; saveDemoBaseline awaited; backup tests on the maintenance repository

2026-09-24 02:58:37 +02:00

package.json

fix(db): no NaN class-field initialisers; entity generator --check gate in CI; parity normaliser keeps literal case

2026-09-22 11:42:48 +02:00

reset-admin.js

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

tsconfig.build.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

tsconfig.json

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

tsconfig.scripts.json

chore(db): entity --check reports stray files; class-field census is a ratchet; migrate-encryption typechecked

2026-09-22 11:57:50 +02:00

tsconfig.tests.json

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

vitest.config.ts

chore(db): entity --check reports stray files; class-field census is a ratchet; migrate-encryption typechecked

2026-09-22 11:57:50 +02:00