julian 19dff97c74 fix(web): permission-degrade the app shell for merchant-only users ...

A user whose role has only validation:create (the bar/lavazh validator) made
the shell misbehave: useLiveFeed() connected /api/ws unconditionally, the
server's report:read guard 403'd the upgrade, and the capped-backoff
reconnect hammered it forever — a 403 in the server log every few seconds.
Gate the socket on report:read (mirrors routes/ws.ts WATCH_PERMISSION) and
render StatusDot / ShiftButton / DeviceFooter only with their backing
permissions (report:read / shift:read / device:read), so a merchant's shell
is just the nav + their /validate screen, with zero doomed requests.

Claude-Session: https://claude.ai/code/session_01YYkpEsLmoQPaize5ec3oUm

2026-07-13 20:12:43 +02:00

.claude

chore: removed graphify

2026-06-18 11:03:45 +02:00

.gitea/workflows

ci(build-images): trigger on komodo/** too

2026-06-29 15:19:35 +02:00

apps

fix(web): permission-degrade the app shell for merchant-only users

2026-07-13 20:12:43 +02:00

deploy

Permanent WSL2 dev fix for multi-subnet source-address trap

2026-06-15 16:17:59 +02:00

komodo

bump(resources): update TAG to stage-28bd838 for deployment consistency

2026-07-13 20:11:27 +02:00

packages

feat(validations): merchant (bar/lavazh) ticket validations end-to-end

2026-07-13 19:49:58 +02:00

scripts

fix(deploy): booth.sh works in the flat /opt layout; .env TAG=dev default

2026-06-27 08:42:11 +02:00

wiki

fix(web): permission-degrade the app shell for merchant-only users

2026-07-13 20:12:43 +02:00

.dockerignore

feat(deploy): Docker images for server (API+SPA) and vision + branch-aware build pipeline

2026-06-23 15:07:52 +02:00

.env.example

fix(deploy): booth.sh works in the flat /opt layout; .env TAG=dev default

2026-06-27 08:42:11 +02:00

.gitignore

feat(desktop): Tauri v2 kiosk shell — maximized window, prod right-click block, auto-update + code-signing

2026-06-21 12:21:49 +02:00

Caddyfile

fix(deploy): server on host network so it sees the booth LAN / device VLAN

2026-06-27 12:48:27 +02:00

CLAUDE.md

docs(wiki): decide vision service packaging — apps/vision/ in the monorepo

2026-06-19 14:25:31 +02:00

docker-compose.dev.yml

feat(deploy): Docker images for server (API+SPA) and vision + branch-aware build pipeline

2026-06-23 15:07:52 +02:00

docker-compose.prod.yml

feat(logging): ~2-month container rotation, ISO timestamps, level names

2026-07-04 19:47:53 +02:00

docker-compose.yml

fix(compose): pass BACKUP_KEY through to the server container

2026-06-29 15:56:39 +02:00

i18n-review.md

fix(i18n): update placeholder text for park name in English and Albanian translations

2026-06-27 12:48:51 +02:00

package.json

feat(db): gated training/demo database reset CLI

2026-06-30 17:58:34 +02:00

pnpm-lock.yaml

feat(snapshot): re-encode captures + disk-pressure retention

2026-06-28 17:15:15 +02:00

pnpm-workspace.yaml

Initial scaffold: Turborepo monorepo + design wiki

2026-06-14 00:34:11 +02:00

test-post-camera-events.py

chore(debug): add test-post-camera-events.py — a dumb HTTP sink for camera pushes

2026-06-27 22:55:02 +02:00

tsconfig.base.json

Initial scaffold: Turborepo monorepo + design wiki

2026-06-14 00:34:11 +02:00

turbo.json

fix(ci): lint must depend on ^build (resolve workspace dep types)

2026-06-22 20:17:17 +02:00

S

Description

No description provided

22 MiB

Releases 10

v0.2.0 Latest

2026-09-07 12:34:33 +00:00

Languages

TypeScript 96.7%

JavaScript 3.1%

HTML 0.2%