60 commits

Author	SHA1	Message	Date
cschlaefke	220dfd195d	Merge pull request 'docs(auth): Spec für Anmelde-Einstieg und App Links (Issue #49)' (#55) from docs/49-mobil-login-spec into main ... Reviewed-on: #55	2026-11-04 00:29:41 +00:00
cschlaefke	66655b19a1	Merge pull request 'docs: Release-Checkliste (D1) mit checks.sql, Zugang, Auth/SMTP und Runner' (#54) from docs/d1-release-checkliste into main ... Reviewed-on: #54	2026-11-04 00:29:28 +00:00
cschlaefke	9a63985d74	Merge origin/feature/2b-katalog-zusammenfuehren into feature/2c-katalog-meldungen	2026-11-04 00:25:32 +01:00
cschlaefke	500763d5ca	docs(db): late references to merged source as known limitation, with test (KAT-05, 2b) ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-04 00:24:49 +01:00
cschlaefke	de830a7148	feat(db): store cleared editions count in game_reports.editions_cleared (KAT-05 2c, Spec-F6) Refs #2 ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-04 00:15:46 +01:00
cschlaefke	119267bb26	fix(db): check owner of provisional game in admin_resolve_report, harden report tests (KAT-05 2c review) Refs #2 ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 21:23:13 +01:00
cschlaefke	e665a71f13	feat(db): reports tests, runbook section 6 and docs for KAT-05 2c Refs #2 ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 21:07:19 +01:00
cschlaefke	ac5b5f2be2	Merge remote-tracking branch 'origin/feature/2b-katalog-zusammenfuehren' into feature/2c-katalog-meldungen	2026-11-03 21:05:02 +01:00
cschlaefke	147dd1870e	feat(db): game reports table, admin_resolve_report and visibility trigger (KAT-05 2c) Refs #2 ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 21:05:02 +01:00
cschlaefke	127f765d85	test(db): close surviving mutants in merge tests, extend runbook (KAT-05, 2b) ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 21:04:12 +01:00
cschlaefke	e3532210ea	docs(auth): mark E4 and mail-link rows superseded by spec 49 ... Refs #49 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 21:01:55 +01:00
cschlaefke	34bba3439b	docs(auth): address review findings on spec 49 ... Existing team KSX6GJY9C5 (C1), defer CODE_SIGN_ENTITLEMENTS until the team is confirmed, local mobile builds mandatory, email_change needs KTO-11, verified facts separated from spike assumptions, QUE-06 keyboard criterion, T2 depends on PR A, limited interception protection on Android < 12 (R13, F11), login CSRF accepted (R14), supersession of spec 1 E4 recorded as task W2. Refs #49 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 20:00:45 +00:00
cschlaefke	2c2546ab47	docs(db): runbook section merging, data model and spec notes (KAT-05, 2b) ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 20:49:42 +01:00
cschlaefke	ef1fddfb72	docs(auth): add spec for mobile sign-in entry and app links ... Spec for issue #49: sign-in prompt on the public home screen and Universal Links / App Links for /auth/confirm on iOS and Android, web fallback unchanged. Includes options, test strategy, task split and tasks only Chris can do (Apple/Google accounts, domain files, SITE_URL on prod). Refs #49 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 19:46:25 +00:00
cschlaefke	daeae999dd	feat(db): add admin_merge_games and repoint_game_references (KAT-05, 2b) ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 20:46:19 +01:00
cschlaefke	5e2c11b49f	docs: Review-Korrekturen an Release-Checkliste ... Refs #2 Refs #46 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 20:45:30 +01:00
cschlaefke	c43a4afd3d	docs: Release-Checkliste (D1) mit checks.sql, Zugang, Auth/SMTP und Runner ... Refs #2 Refs #46 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 20:37:54 +01:00
cschlaefke	a9a7990636	chore: merge main into feature/2a-game-cover ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 20:07:46 +01:00
cschlaefke	9952efa2fe	test(catalog): address review findings on PR 2a ... Replace tests that could not fail (manual_fields stability, no-op update), select runbook games by id, add grant matrix and forged-admin tests, assert vocabulary seeding and Deno checksum in CI, clarify the set local convention and API notes. Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 18:18:32 +01:00
cschlaefke	52cbd79fb4	feat(catalog): run checks.sql in CI and document seed loader result ... Adds the checks.sql smoke step, the verified CLI result for generated seed content and the created_at/updated_at note for the API. Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 16:40:55 +01:00
cschlaefke	24b27c3776	docs(catalog): add catalog runbook, data model and README updates ... Includes the checked CLI assumptions (sql_paths, begin/commit) and implementation notes in the spec. Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 15:38:28 +01:00
cschlaefke	f99c82b1e0	feat(catalog): address review of GameCover (labels, tests, spec notes) ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 15:26:38 +01:00
cschlaefke	79e06fbfe9	Merge pull request 'fix(ci): Fork-PR-Risiko für den docker-host-Runner dokumentieren (ADR-0003)' (#50) from fix/43-ci-fork-pr-guard into main ... Reviewed-on: #50	2026-11-03 14:15:18 +00:00
cschlaefke	b77146eabf	docs(catalog): mark design choices W1, W4, W6, W7, H1, H2, H7 as confirmed ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 14:07:21 +00:00
cschlaefke	6dd5854eab	docs(catalog): address re-review of KAT-05 spec and record clarification N15 ... Visibility is immutable, variant copying is derived from visibility, startbestand idempotency and vocabulary handling are defined, and the edition deviation from KAT-04 criterion 4 is recorded as N15. Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 14:02:17 +00:00
cschlaefke	8c57e05458	docs(catalog): address review findings on KAT-05 spec ... Variants are no longer copied when repointing provisional entries, all PRs only reference #2, grants, idempotency, checks and merge rules are spelled out. Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:35:40 +00:00
cschlaefke	c0f832fd1d	docs(catalog): record approval and decisions F1-F9 in KAT-05 spec ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:15:52 +00:00
cschlaefke	074118db69	docs(catalog): note default privileges, studio role and schema test count ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:08:49 +00:00
cschlaefke	34eaab12e1	docs(catalog): add technical spec for KAT-05 catalog data ... Refs #2 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:02:24 +00:00
cschlaefke	6c4e2cc2e9	docs(ci): align auth-konfiguration guard wording with ADR-0003 ... Refs #43 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:59:02 +01:00
cschlaefke	25610c1ec9	docs(ci): correct guard rationale and unverified claims in ADR-0003 ... Refs #43 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:58:09 +01:00
cschlaefke	501310f43b	docs(ci): verify fork-PR approval logic and correct runner advice in ADR-0003 ... Refs #43 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:51:46 +01:00
cschlaefke	666ba64fcc	fix(ci): document fork-PR risk for docker-host runner and guard supabase-tests ... Add ADR-0003 with Forgejo 8.0.3 options and a step-by-step guide for runner/Forgejo settings, correct the misleading guard comments in ci.yml and apply the comfort guard to supabase-tests too. Refs #43 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:50:25 +01:00
cschlaefke	ffc30db2e5	fix(auth): address review findings for semantics split ... Refs #41 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:17:09 +01:00
cschlaefke	cda9417353	fix(auth): keep heading, text and button as separate semantics nodes in the wide card ... Card is a semantics container without explicitChildNodes, so on >= 600 dp (web/tablet) title, text and button folded into one node. AppFormScaffold now wraps the card content in Semantics(explicitChildNodes: true). Refs #41 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 13:07:01 +01:00
cschlaefke	3805c71225	fix(auth): address review findings for smtp-neutral handling ... Refs #37 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 12:24:25 +01:00
cschlaefke	de093b68ed	docs(auth): renumber SMTP risk to R17 (R16 was taken) ... Refs #37 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 12:03:11 +01:00
cschlaefke	7d094a6732	fix(auth): treat SMTP failures like success on enumeration-sensitive calls ... Refs #37 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 12:03:04 +01:00
cschlaefke	aa421b12b0	test(auth): address review findings for e2e ... Refs #38 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 10:55:27 +01:00
cschlaefke	23816377a5	ci(e2e): add Playwright e2e job on docker-host with throttle GoTrue and artifacts ... Refs #38 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 10:45:17 +01:00
cschlaefke	ec2d45c319	docs(auth): document E2E setup and SMTP outage spike result ... Refs #38 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 10:42:28 +01:00
cschlaefke	7c2f684098	fix(auth): address review findings for password reset ... Finish the recovery guard only after the password change, mark the change in the repository so a late userUpdated event is harmless, keep the form locked after success, carry from through the reset check-email page, share the password error texts and focus the continue button. Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:58:31 +01:00
cschlaefke	3b2995463e	docs(auth): document 01c deviations, reset mode route and AppBanner actionEnabled ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:50:42 +01:00
cschlaefke	87c0d7d1ec	feat(auth): add password reset (forgot password, recovery link, new password) ... ForgotPasswordScreen with neutral reaction (F12), CheckEmail reset mode on its own path, recovery link handling and ResetPasswordScreen with the recovery guard held until the user confirms the success message. Carries the from parameter between login, register and forgot password. Removes the route placeholders. Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:47:03 +01:00
cschlaefke	dd91c078e0	feat(auth): add login screen with unconfirmed-account resend and safe redirect ... KTO-01 Kriterien 5, 6 und 7 (01b): LoginController/State/Screen replace the /login placeholder. Generic failure text for wrong email and password, resend via ResendController (ResendOrigin.login), throttle and offline banners, autofill hints, double-submit guard, validated from redirect. Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 09:00:53 +01:00
cschlaefke	239d0e1ac2	fix(auth): address review findings for registration ... - expose legal links to screen readers on web - allow only http(s) legal URLs, prevent double submit - detect transport errors without runtimeType, keep extra in memory - ship third-party license text, document decisions Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 00:47:42 +01:00
cschlaefke	e632da2344	feat(auth): add registration, check-email and email-link screens ... Implements KTO-01 criteria 1-4, 10 and 11 (client part). Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 00:27:16 +01:00
cschlaefke	ec8b2ab4c1	feat(ui): add auth form components and screen layouts ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-03 00:03:11 +01:00
cschlaefke	3158abc344	docs(auth): use trim_ws in spec ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:58:11 +01:00
cschlaefke	9f36cd0c33	feat(db): reject U+200B in display names ... Refs #1 Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-02 23:51:56 +01:00