Spaces:
Runtime error
Runtime error
Commit History
-
feat: HTML/CSS ZIP preview upload for templates (extract + iframe)
a4ed013
-
refactor: part 1 technical improvements - logging, response standards, caching, soft delete
- Add Pino logger with request logging (replaces morgan + console.log) - Add csrf package + GET /api/csrf-token endpoint - Add database connection pooling (DATABASE_POOL_SIZE=20) - Add soft delete (deletedAt) on User, Template, Conversation, Expense models - Create response helpers: success(), created(), paginated() - Standardize ALL 9 controllers + admin routes to use response helpers - Standardize error handler to { success: false, message, code } format - Create Skeleton loading components (Card, Table, Stats, List) - Add rollup-plugin-visualizer for bundle analysis - All console.log/warn/error replaced with logger05cee1f -
refactor: major security, performance, and API quality improvements
- Remove dangerous prisma db push --accept-data-loss (use migrate deploy with safe fallback) - Remove auto-seed on every startup (manual only via npm run db:seed) - Add compression middleware (50-80% response size reduction) - Harden JWT with jti, iss, aud claims - Secure file uploads: extension whitelist + enhanced MIME validation - Strengthen CORS with explicit whitelist instead of partial matching - Add Helmet: referrerPolicy, noSniff, xssFilter - Standardize API response structure: { success, message, data, meta } - Add API versioning: /api/v1 + /api backward compat - Add database indexes: composite indexes for users, templates, orders4a31b63
-
Initial commit
24727a3