null/BillTracker

Commit Graph

Author	SHA1	Message	Date
null	a6c9b6cb1c	refactor(server): migrate 8 leaf services + apiError to TypeScript (.cts) Batch of low-blast-radius modules: utils/apiError, and services statusRuntime, loginFingerprint, auditService, transactionMatchState, updateCheckService, advisoryFilterService, bankSyncConfigService. - types/http.d.ts: shared permissive Express-ish Req/Res/Next/Router types (@types/express isn't installed; handlers are dynamic) — for apiError's errorHandler now and the routes/middleware batches next. - Every require of a migrated module updated to the explicit .cts extension. - Confirmed + documented the Node rule: a .cts needs at least one `import` statement or type-stripping never activates (node --check fails on the first type token); import-less modules lead with an `import type`. Behavior-preserving. Verified: typecheck:server 0, check:server 0, suite 226/226. Co-Authored-By: Claude Opus 4.8 <[email protected]>	2026-07-06 10:47:16 -05:00
null	7503a54f81	v0.20.6: Audit logging for critical operations - New audit_log table (migration v0.45) with indexes - logAudit() service with try/catch safety (never crashes app) - Audit events: login.success, login.failure, logout, password.change, role.change, csrf.failure, profile.update, profile.settings.update - All events include ip_address and user_agent - No passwords, tokens, or session IDs logged - Hudson security audit: 7/7 PASS	2026-05-10 00:03:12 -05:00

Author

SHA1

Message

Date

null

a6c9b6cb1c

refactor(server): migrate 8 leaf services + apiError to TypeScript (.cts)

Batch of low-blast-radius modules: utils/apiError, and services statusRuntime,
loginFingerprint, auditService, transactionMatchState, updateCheckService,
advisoryFilterService, bankSyncConfigService.

- types/http.d.ts: shared permissive Express-ish Req/Res/Next/Router types
  (@types/express isn't installed; handlers are dynamic) — for apiError's
  errorHandler now and the routes/middleware batches next.
- Every require of a migrated module updated to the explicit .cts extension.
- Confirmed + documented the Node rule: a .cts needs at least one `import`
  statement or type-stripping never activates (node --check fails on the first
  type token); import-less modules lead with an `import type`.

Behavior-preserving. Verified: typecheck:server 0, check:server 0, suite 226/226.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-07-06 10:47:16 -05:00

null

7503a54f81

v0.20.6: Audit logging for critical operations

- New audit_log table (migration v0.45) with indexes
- logAudit() service with try/catch safety (never crashes app)
- Audit events: login.success, login.failure, logout, password.change, role.change, csrf.failure, profile.update, profile.settings.update
- All events include ip_address and user_agent
- No passwords, tokens, or session IDs logged
- Hudson security audit: 7/7 PASS

2026-05-10 00:03:12 -05:00

2 Commits