Repository navigation

feat(intake): upload a request and enqueue processing atomically - #32

Merged

Fluory merged 26 commits into

mainfrom

claude/feat-intake-upload-5

Sep 23, 2026

Commits on Sep 22, 2026

chore(deps): add better-auth 1.7.5 and the drizzle adapter
claude
committed
21da04a
chore: merge claude/chore-app-skeleton-3
claude
committed
cb5f334
feat(identity): company roles and authorize() (test-first), organization access control
claude
committed
1cf8f2f

Commits on Sep 23, 2026

feat(db): auth schema (Better Auth) and app.requests with tenant policy
claude
committed
e4d28d2
feat(db): migration for auth tables and app.requests
claude
committed
c67654e
wip(identity,tenancy): withTenant, auth wiring and integration tests
claude
committed
0364a58
feat(identity,tenancy): invite-only Better Auth, withTenant, forced RLS with integration proofs
claude
committed
0958d25
feat(app): auth route, login/sign-up/invite pages, demo seed
claude
committed
4992b90
chore: merge claude/chore-app-skeleton-3
claude
committed
799551e
docs: data model with classification, architecture map and changelog for #4
claude
committed
6a3490a
chore: merge claude/chore-app-skeleton-3
claude
committed
5dfea7d
chore(deps): add pg-boss 12.33.6
claude
committed
fce4d6e
feat(db,jobs): documents and audit_events tables, intake columns, pg-boss queues
claude
committed
10623ec
feat(db): migration 0003 intake
claude
committed
e0afd29
feat(intake): upload validation, fingerprint, atomic submit, upload and download routes
claude
committed
40d3c8f
test(intake): atomic submit with injected failure, duplicates, append-only audit, composite FK
claude
committed
81ee674
fix(identity): address the fresh security review of PR #31
claude
committed
a8a2808
chore: merge claude/feat-identity-tenancy-4
claude
committed
20aeb0f
test(intake): upload/download routes – tenant 404, anonymous 401, type rejection
claude
committed
c75a955
feat(app): requests list, upload form, request detail with downloads; docs for #5
claude
committed
bff8c68
fix(config): explicit APP_ENV; only local may use the committed auth secret
claude
committed
02715e0
chore: merge claude/feat-identity-tenancy-4
claude
committed
c0da064
wip(intake): review fixes – pg-boss into src/db, body bounds, OOXML check, lock, streaming
claude
committed
66ab13c
fix(intake): address the fresh security review of PR #32
claude
committed
2a0b891
test: rate-limit assertion matches Better Auth's expanded IPv6 key
claude
committed
a162aa9
refactor(db): pg-boss pool factory in its own file, covered by the no-db-connection rule
claude
committed
d805a9a

Navigation Menu

Repository navigation

feat(intake): upload a request and enqueue processing atomically - #32

feat(intake): upload a request and enqueue processing atomically#32
Fluory merged 26 commits into
mainfrom
claude/feat-intake-upload-5

Commits on Sep 22, 2026

chore(deps): add better-auth 1.7.5 and the drizzle adapter

chore: merge claude/chore-app-skeleton-3

feat(identity): company roles and authorize() (test-first), organization access control

Commits on Sep 23, 2026

feat(db): auth schema (Better Auth) and app.requests with tenant policy

feat(db): migration for auth tables and app.requests

wip(identity,tenancy): withTenant, auth wiring and integration tests

feat(identity,tenancy): invite-only Better Auth, withTenant, forced RLS with integration proofs

feat(app): auth route, login/sign-up/invite pages, demo seed

chore: merge claude/chore-app-skeleton-3

docs: data model with classification, architecture map and changelog for #4

chore: merge claude/chore-app-skeleton-3

chore(deps): add pg-boss 12.33.6

feat(db,jobs): documents and audit_events tables, intake columns, pg-boss queues

feat(db): migration 0003 intake

feat(intake): upload validation, fingerprint, atomic submit, upload and download routes

test(intake): atomic submit with injected failure, duplicates, append-only audit, composite FK

fix(identity): address the fresh security review of PR #31

chore: merge claude/feat-identity-tenancy-4

test(intake): upload/download routes – tenant 404, anonymous 401, type rejection

feat(app): requests list, upload form, request detail with downloads; docs for #5

fix(config): explicit APP_ENV; only local may use the committed auth secret

chore: merge claude/feat-identity-tenancy-4

wip(intake): review fixes – pg-boss into src/db, body bounds, OOXML check, lock, streaming

fix(intake): address the fresh security review of PR #32

test: rate-limit assertion matches Better Auth's expanded IPv6 key

refactor(db): pg-boss pool factory in its own file, covered by the no-db-connection rule