Commit Graph

19 Commits

Author SHA1 Message Date
9158681001 fix batch: admin login rehash->password_hash mapping (500); geolocation timeout 20s + hide button on approval + 'location shared' notice; sms: link includes typed number (Alpine); location page = found-dog + map + finder number + tag details; nicer closed page; password visibility toggles; product photos; templates use x-text (no {{}} in Alpine) 2026-08-10 12:27:20 +10:00
b5db858ef8 fix: seed-admin emits $2y$ bcrypt prefix so Laravel admin login works (was $2a$ -> 500 'does not use the Bcrypt algorithm') 2026-08-10 12:00:03 +10:00
ae231c97f6 compat: /index.php?productid= legacy URL form redirects to /t/{code} (covers old printed QR URLs) 2026-08-10 11:51:58 +10:00
97cf0974a3 tag-lifecycle: owner close (status closed, gating + page) + move (copy details to new tag, close source) + legacy ?productid= redirect — verified with real tags 6 & 17 2026-08-10 11:36:11 +10:00
9d43403f6f renewal-unlock: orders.renews_at lazy expiry + owner unlock notices (ntfy/sms channels, exempt from metering) — verified 2026-08-10 10:10:50 +10:00
17150c405d ops: live SMS creds on .13; seed-admin cmd in make db-up (admin survives DB resets) 2026-08-10 10:07:29 +10:00
e1044f8c32 admin-insights-pages: dashboard customers+revenue (orders.amount), users->tags relation, pause customer (gates alerts), About/What-is-this/Contact pages 2026-08-10 09:19:14 +10:00
426c99296d auth: shared session cookie domain (SESSION_COOKIE_DOMAIN) so apex + www stay logged in 2026-08-08 15:23:40 +10:00
5487cee966 sms-metering-location-link: per-tag SMS credits (allocated/used, admin top-up), short URLs + owner location page (map embed + finder details) — 13/13 scenarios 2026-08-08 14:38:32 +10:00
d5919315fa photo-object-storage: MinIO on .13 (9010/9011), Go upload+serve /photos, admin S3 disk + Filament upload, migrated, deployed 2026-08-08 10:01:02 +10:00
3d242fdcaa scan-limits-gating: paid-order gating + per-tag daily cap + per-IP hourly rate (6/6 scenarios) — no gateway 2026-08-08 09:25:06 +10:00
0ee211d156 tuxedo notes: photo upload, username/email display + confirm-email, favicon; verified owner-only edit 2026-08-07 19:46:08 +10:00
aa023cf89e Phase 3: HTMX inline tag editing, swap animations, loading indicators, Alpine phone validation 2026-08-07 18:18:49 +10:00
61737825ea scan-alert-hardening: different-finder re-alert within 250m window + fingerprint 24h block (12/12 scenarios pass) 2026-08-07 17:29:47 +10:00
e3bcd2e6e0 tag-registry-product-link: seed 100 real preset IDs (seed-registry cmd), products/orders schema + tag linkage, fix case-sensitive tag-code bind 2026-08-07 16:56:50 +10:00
0dbf728f00 Fix transposed test number: +61 423 274 487 (61423274487) everywhere 2026-08-07 16:17:55 +10:00
d4679068ba scan-flow step 9: real SMS via SMSGlobal HTTP API (smshttp sender, proven live OK:0) + docs 2026-08-07 16:10:52 +10:00
c2fa04afd0 scan-flow: geolocation scan, location-aware SMS throttle (log sender), finder contact, sms_enabled toggle, branding — 19/19 phase-2 scenarios pass 2026-08-05 18:23:34 +10:00
133e375b6b frontend-foundation: GOAT front-end Phase 1 — auth, tag management, public tag page (22/22 spec scenarios pass) 2026-08-05 13:46:50 +10:00