9 Commits

Include renames

Author	SHA1	Message	Date
brammie15	0ca9f4d16a	feat: make server own tabs	2026-10-20 16:18:36 +02:00
brammie15	1e4438ec5a	feat: add stuff	2026-10-20 14:45:22 +02:00
brammie15	fb6d26a468	feat: better reminder tab	2026-10-20 10:39:06 +02:00
brammie15	fa38ac7617	fix: alot	2026-10-19 21:41:07 +02:00
brammie15	df90cf8a18	feat: add sitemap / robots.txt etc etc	2026-10-13 22:18:09 +02:00
brammie15	db06276a4f	feat: fix dutch translation	2026-10-10 23:11:08 +02:00
brammie15	b336580040	feat: add realtime	2026-10-08 04:11:44 +02:00
brammie15	e5580767a5	feat: fix alot of issues	2026-10-08 00:25:30 +02:00
brammie15	8b1e38cb4d	feat: reminders, Excel customer import and security hardening ... Features - Payment reminders via Resend (candidates, send, history, test email) - Bulk import of the customer list from Excel/CSV in the dashboard - Dashboard i18n (en/nl) with language selector Security - Enforce venue isolation on all /venues/:venueId routes - Require admin for planned-tab changes and pairing codes - Rate-limit login and device registration; opt-in TRUST_PROXY - Require JWT_SECRET in production; stop leaking internal errors - Escape customer names in reminder emails Sync and commands - Remove tabs the terminal no longer reports; validate nested sync payload - Return all pending commands on every sync (fixes missed-command race) - First command ack wins; atomic registration code claim - Reject commands for revoked devices, stale versions or duplicates - Remind only unpaid balances, with a 7-day cooldown Dashboard - Share a single token refresh across concurrent 401s (random logouts) - Keep the session alive for the refresh token lifetime Deployment - Replace `db push --accept-data-loss` with migrations (baselines legacy DBs) - Set NODE_ENV=production; pass Resend and TRUST_PROXY env in prod compose	2026-10-07 23:18:37 +02:00