jubnl 218f75d0f7 refactor(server): plan 4 — U6 gate-level id parsing for todo item ids ...

Rule 21's carry from 3e Task 8's review: TodoController.update/.remove
passed the raw :id route string all the way to TodoItemsRepository,
relying on SQLite's column-affinity CAST to match it instead of a typed
filter. Parse :id ONCE at the controller (toRowId, matching Task 8a's
TripAccessGuard/removeMember shape), 404 on a non-canonical id, and thread
the number down through TodoService.updateItem/deleteItem into
TodoItemsRepository.findInTrip/existsInTrip/update/deleteById, all
narrowed from number | string to number. todo.rpc.ts's num()-derived
todoId no longer needs its String() wrapper. tripId stays string | number
— a separate, already-accepted carry (23c292f2f). Two new e2e tests pin
the non-numeric-id 404 at the gate.

2026-09-24 06:46:09 +02:00

..

app-config

fix: the findings of the final 4.3.0 audit

2026-09-20 13:54:31 +02:00

db

refactor(server): plan 4 — U6 gate-level id parsing for todo item ids

2026-09-24 06:46:09 +02:00

demo

refactor(demo,backup): seed and reset through DemoRepository, live-connection backup statements through MaintenanceRepository, isDemoUserId through an injected DemoService

2026-09-24 02:04:32 +02:00

mcp

refactor(realtime, systemNotices, addons, airports, audit, categories, permissions, query-helpers, tags, transit, trip-membership): async DB-touching methods; transactions through UnitOfWork

2026-09-21 20:48:03 +02:00

middleware

feat(map): amap as map api provider and display template

2026-09-12 18:02:57 +02:00

nest

refactor(server): plan 4 — U6 gate-level id parsing for todo item ids

2026-09-24 06:46:09 +02:00

nest-mcp

fix(server): non-HTTP entrypoints run inside an ORM request context; permission loads fail closed on context errors

2026-09-22 13:25:17 +02:00

systemNotices

refactor(system-notices): notice dismissals through a Nest provider and repository

2026-09-23 21:30:44 +02:00

typings

feat(server): read visits and recorded routes from Dawarich

2026-09-12 23:36:49 +02:00

utils

fix(ssrf): connect over every address a name resolves to, IPv4 first

2026-09-20 13:54:31 +02:00

addons.ts

feat(documents): two-way sync with Paperless, Papra, Nextcloud, OpenCloud and Synology

2026-09-18 19:23:07 +02:00

bootstrap.ts

feat(server): pre-init photo route and WS handshake run in a request context; InviteTokensRepository

2026-09-22 18:48:24 +02:00

config.ts

fix(server): the second pass over this branch's own fixes

2026-08-23 11:59:12 +02:00

index.ts

fix(server): release sockets on shutdown so docker stop no longer ends in SIGKILL

2026-09-02 16:21:50 +02:00

mikro-orm.config.ts

fix(test): route MikroORM's dynamic imports through vitest from the setup file, not the ORM config

2026-09-21 10:35:16 +02:00

plugin-event-sink.ts

Fix/plugin audit findings (#2031)

2026-08-24 23:48:36 +02:00

plugin-mcp-tools.ts

refactor(plugins): async DB-touching methods; transactions through UnitOfWork

2026-09-22 00:00:53 +02:00

plugin-user-lifecycle.ts

refactor(plugins): async DB-touching methods; transactions through UnitOfWork

2026-09-22 00:00:53 +02:00

shutdown.ts

fix(packing,journey,server): address review findings on the three fixes

2026-09-02 16:21:50 +02:00

types.ts

refactor(reservations): reservations, endpoints and travelers through repositories

2026-09-23 14:58:36 +02:00

websocket.ts

Serve /ws from a Nest gateway with its own adapter

2026-08-10 21:46:47 +02:00