132 Commits

Author	SHA1	Message	Date
DanielS	13f647409f	fix(sync): query customers by vowels to avoid crash	2026-07-15 23:50:13 +02:00
DanielS	5d3eed874c	feat(sync): add customer synchronization from lic server	2026-07-15 22:48:10 +02:00
DanielS	e2d92a031f	feat(licserver): add partner customers proxy API	2026-07-15 16:14:31 +02:00
DanielS	6b9023c871	feat(wizard): connect license lookup panel to real lic server api endpoint	2026-07-15 01:01:01 +02:00
DanielS	d5593900fb	feat(cron): add automated sync endpoint and vercel cron configuration for partners	2026-07-15 00:30:13 +02:00
DanielS	3fb80e6404	feat(admin): add manual partner import from lic server	2026-07-15 00:07:31 +02:00
DanielS	7119383139	fix(security): harden licserver config access controls ... - Add auth guard to getLicServerConfig() - unauthenticated callers now receive null config instead of DB values - Remove non-existent 'superadmin' role from saveLicServerConfig() check (only 'admin' exists per project schema) - New migration: restrict settings table WRITE to admins only (previously any authenticated user could overwrite licserver_api_key)	2026-07-14 17:35:12 +02:00
DanielS	fa93e060c2	feat(admin): LicServer config manageable via admin settings UI ... - Migration: add licserver_base_url/api_key cols to settings table - New: lib/actions/licserver-config.ts (read/write/test server actions) - Updated: proxy routes read config from DB with env-var fallback - Updated: admin/einstellungen adds LicServer card with URL + API key input, show/hide toggle, Save and Connection Test buttons	2026-07-14 17:30:37 +02:00
DanielS	be4e9204a3	feat(licserver): add partner API proxy routes and types ... - New: lib/types/licserver.ts (PartnerDto, paged result, problem) - New: app/api/licserver/partners/route.ts (GET search/list) - New: app/api/licserver/partners/[id]/route.ts (GET by UUID) - Updated: .env.example with LICSERVER_BASE_URL + LICSERVER_API_KEY Auth-guarded via Supabase session. API key is server-side only. Upstream: http://192.168.178.174:9980 (internal container network)	2026-07-14 17:24:00 +02:00
DanielS	43e6a92663	feat: implement category flags, drop global tables, fix sidebar sticky layout	2026-07-10 15:27:55 +02:00
DanielS	4da386f693	fix(build): move buildEmailItemsSection to email-templates.ts to fix Turbopack build failure	2026-07-10 10:00:49 +02:00
DanielS	ec1ad4d444	fix(checkout): use full email template with PDF attachment for checkout confirmations	2026-07-10 09:45:21 +02:00
DanielS	27fe6c6eef	feat(admin): move allow_update_discount option to product level	2026-07-10 09:15:34 +02:00
DanielS	bc6487bba4	feat(email): include order item configurations in confirmation email	2026-07-10 08:57:52 +02:00
DanielS	d8b7076e7e	feat(admin): add allow_update_discount option to category dialog	2026-07-10 08:55:53 +02:00
DanielS	cd3fba2113	fix: add device_name to OrderItem type definition	2026-07-10 00:23:37 +02:00
DanielS	a3c5a66d3f	feat: check category eligibility for update discount in frontend and backend	2026-07-10 00:18:23 +02:00
DanielS	ae4a8429c7	fix: rewrite auth middleware to prevent global login lock for partners and admins	2026-07-09 23:16:22 +02:00
DanielS	a93fb975c0	docs: finalize request terminology updates and clean up license transforms	2026-07-09 22:58:35 +02:00
DanielS	21c4aa859e	fix: rename invoice terminology to request and quotation confirmation across pdf and mail services	2026-07-09 22:58:29 +02:00
DanielS	992e726406	test: add unit tests for frontend top-down auto-reset and backend split logic	2026-07-09 21:56:13 +02:00
DanielS	60e64c689d	feat: implement wizard top-down state management and auto-reset	2026-07-09 21:49:53 +02:00
DanielS	6b35917a06	feat(category): add resets_others option	2026-07-09 17:27:16 +02:00
DanielS	567d1f226b	feat(admin): add product dependencies and clean up labels ... - Add addProductDependency and removeProductDependency actions - Create DependencyPopover and integrate in live editor UI - Render green requirements and red exclusions badges - Remove technical parentheses from category checkbox labels	2026-07-09 16:12:57 +02:00
DanielS	915d3b1b2f	Revert "feat: support product quantity and separate steps" ... This reverts commit 4ef21ea144.	2026-07-09 15:19:38 +02:00
DanielS	4ef21ea144	feat: support product quantity and separate steps	2026-07-09 15:10:21 +02:00
DanielS	071e669b71	feat(categories): add branch visibility selection	2026-07-09 14:26:56 +02:00
DanielS	07c7d8c656	feat(categories): allow disabling preselection	2026-07-09 14:10:25 +02:00
DanielS	bffaca1d63	feat(orders): add rejected status to order schema and admin table views	2026-07-08 10:13:21 +02:00
DanielS	cc7445e4c5	feat(multiselect): support multi-select categories and free items limits in category config and order wizard	2026-07-07 16:56:24 +02:00
DanielS	98c030cd82	fix(end-customers): allow admin to create end customers without company_id	2026-07-07 12:32:11 +02:00
DanielS	8e91b3e810	fix(email): remove duplicate pdf download button	2026-07-07 10:30:34 +02:00
DanielS	0ec1319753	style(mail): humanize email templates and remove corporate boilerplates	2026-07-07 00:39:06 +02:00
DanielS	2246bdf2be	refactor(shop): extract wizard validation and email templates into helpers	2026-07-06 23:15:11 +02:00
DanielS	2d44dd4c58	security: fix 6 critical RLS vulns, SHA-256 hash, DSGVO [GELÖSCHT], completed status	2026-07-06 22:39:05 +02:00
DanielS	a64b6790c6	feat: Add partner account settings page under /account-kunden	2026-07-04 21:06:46 +02:00
DanielS	060aa97ce5	fix: PDF headers with filename, email download button via protected route	2026-07-04 17:50:02 +02:00
DanielS	80abbfe566	security: replace public PDF URLs with authenticated API route, private bucket	2026-07-04 17:43:33 +02:00
DanielS	28f2285a0e	security: fix private storage buckets, api access, and admin RLS bypasses	2026-07-04 17:36:51 +02:00
DanielS	5bad959b13	fix: change default internal rewrite and server resolution host to kong	2026-07-04 17:19:09 +02:00
DanielS	f82f08ffd0	fix: resolve internal kong url to configurable public supabase url	2026-07-04 17:15:09 +02:00
DanielS	9c50ea8368	fix: resolve internal supabase-kong urls to external domain	2026-07-04 16:38:27 +02:00
DanielS	305af64fd6	feat: assign orders to companies directly and support admin reassignment	2026-07-04 16:08:31 +02:00
DanielS	32c2842dbd	feat: enable company-wide order viewing and editing	2026-07-04 15:41:48 +02:00
DanielS	149eae59c9	feat: restrict order creation to users assigned to a company	2026-07-04 15:33:44 +02:00
DanielS	5f65f890ee	feat: link end customers directly to companies	2026-07-04 15:17:04 +02:00
DanielS	4c6fde326b	refactor(order): change order prefix from BE to AE for Anfragenummer	2026-07-03 14:58:43 +02:00
DanielS	23be8bcb52	refactor(wording): change 'Angebot' to 'Anfrage' in client views and order emails	2026-07-03 14:55:56 +02:00
DanielS	5c28fbdea5	feat(wizard): support OR logic for requirements (at least one dependency satisfies requirements)	2026-07-03 14:21:15 +02:00
DanielS	90ec351d96	fix(db-tools): resolve REINDEX transaction error by executing directly via pg client, and dynamically support all database tables in integrity dashboard	2026-07-03 14:01:27 +02:00