malek/SpiceManagementSystem
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
112 Commits 1 Branch 0 Tags
main
Commit Graph
112 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Malek TellissiandClaude Sonnet 4.6 7da013044d Require piece_weight when unit is Stück, add explanatory helper text
Deploy / deploy (push) Successful in 16s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 03:11:12 +02:00
Malek TellissiandClaude Sonnet 4.6 0500cab160 Fix: admin/manager land on edit page, viewer on view page
Deploy / deploy (push) Successful in 16s
Details 
Filament checks view before edit for row URL. Added a shared
ViewRecord base that redirects to edit if canEdit() is true,
so admins and managers get the editable form directly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 03:05:05 +02:00
Malek TellissiandClaude Sonnet 4.6 9f42f730b8 Show Rohstoffe nav and delete action for sms-admin only
Deploy / deploy (push) Successful in 16s
Details 
Nav entry was fully hidden; now visible only to admins for management.
Delete action added to table rows (bulk delete was already there).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 03:02:34 +02:00
Malek TellissiandClaude Sonnet 4.6 d22353c222 Update README: OAuth security notes and nextcloud_id binding
Deploy / deploy (push) Successful in 10s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:54:41 +02:00
Malek TellissiandClaude Sonnet 4.6 4b99ffea15 Fix account-takeover: bind users to nextcloud_id, not email
Deploy / deploy (push) Successful in 16s
Details 
Matching users by email alone allows an attacker with a self-registered
Nextcloud account to hijack any Filament user. Now we look up by
nextcloud_id first; email is only used when creating a brand-new account,
and nextcloud_id is immediately written to the row so future logins
use the stable Nextcloud user ID.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:54:19 +02:00
Malek TellissiandClaude Sonnet 4.6 25d9330538 Update README: OAuth login, roles, Rohstofflieferungen, done items
Deploy / deploy (push) Successful in 11s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:46:54 +02:00
Malek TellissiandClaude Sonnet 4.6 1494273efd Add viewer access to records and restrict activity log
Deploy / deploy (push) Successful in 16s
Details 
- canView() + canViewAny() in EnforcesRoles: all SMS roles can view
- View pages for all 7 resources so viewers can open records read-only
- Custom ActivityResource restricts activity log to admin + manager only

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:44:00 +02:00
Malek TellissiandClaude Sonnet 4.6 596d66b366 Apply EnforcesRoles trait in ProductResource and ProductSaleResource
Deploy / deploy (push) Successful in 16s
Details 
Import was present but use statement inside class body was missing,
so role checks had no effect on these two resources.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:37:55 +02:00
Malek TellissiandClaude Sonnet 4.6 fc5d1a65ae Revert login auto-redirect, keep button-based login page
Deploy / deploy (push) Successful in 16s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:33:49 +02:00
Malek TellissiandClaude Sonnet 4.6 df637d1b4b Handle GET /dashboard/logout to prevent 500 on direct URL access
Deploy / deploy (push) Successful in 15s
Details 
Filament logout only accepts POST; redirect GET requests to dashboard.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:31:49 +02:00
Malek TellissiandClaude Sonnet 4.6 c3a3cabc2c Redirect /dashboard/login directly to Nextcloud OAuth via web route
Deploy / deploy (push) Successful in 16s
Details 
Overriding mount() conflicts with parent void return type; intercepting
the URL in routes/web.php (registered before Filament) is the clean fix.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:28:46 +02:00
Malek TellissiandClaude Sonnet 4.6 f53ea6a823 Fix login redirect: return redirect() instead of send()+exit
Deploy / deploy (push) Failing after 12s
Details 
send()+exit breaks in Livewire's mount() context; returning the
redirect response is the correct Livewire v3 approach.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:27:29 +02:00
Malek TellissiandClaude Sonnet 4.6 a8e7bdeb64 Redirect login page directly to Nextcloud OAuth
Deploy / deploy (push) Successful in 16s
Details 
Skip the intermediate login page entirely.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:25:27 +02:00
Malek TellissiandClaude Sonnet 4.6 b4e2023abd Increase vertical spacing between heading and login button
Deploy / deploy (push) Successful in 18s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:22:33 +02:00
Malek TellissiandClaude Sonnet 4.6 587501c1ad Restore missing HtmlString import in UserPanelProvider
Deploy / deploy (push) Successful in 16s
Details 
Accidentally removed when cleaning up login render hook; still needed
for the sidebar footer build-info hook.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:20:53 +02:00
Malek TellissiandClaude Sonnet 4.6 63fd2f920d Add spacing between heading and login button
Deploy / deploy (push) Successful in 17s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:20:04 +02:00
Malek TellissiandClaude Sonnet 4.6 9ef73ca3f0 Replace login form with single Nextcloud OAuth button
Deploy / deploy (push) Successful in 17s
Details 
Removes email/password fields entirely; custom login page shows only
the blue "Mit Blue Spices Zanzibar Cloud anmelden" button.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:18:41 +02:00
Malek TellissiandClaude Sonnet 4.6 c3f4e37d7c Pass OAuth env vars into Docker container via docker-compose
Deploy / deploy (push) Successful in 16s
Details 
Variables were defined in .env but never forwarded to the app container,
so config/services.php could not read them.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:14:39 +02:00
Malek TellissiandClaude Sonnet 4.6 5ea7916a09 Fix EnforcesRolesInRelation method signatures to match RelationManager
Deploy / deploy (push) Successful in 10s
Details 
canEdit and canDelete must accept Model $record to match parent class.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:06:01 +02:00
Malek TellissiandClaude Sonnet 4.6 0c44bfa6d0 Implement role-based access control and revert hardcoded OAuth credentials
Deploy / deploy (push) Failing after 12s
Details 
- sms-admin: full access (create, edit, delete)
- sms-manager: create and edit only, no delete
- sms-viewer: read-only, all write buttons hidden
- Apply EnforcesRolesInRelation trait to BatchesRelationManager
- Revert Nextcloud OAuth credentials to env vars (OAUTH_CLOUDSPICESBLUE_*)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 02:03:46 +02:00
Malek Tellissi a50939bc38 temp: hardcode Nextcloud OAuth credentials for debugging
Deploy / deploy (push) Successful in 16s
Details
2026-09-13 01:56:05 +02:00
Malek TellissiandClaude Sonnet 4.6 d0eb03a583 Fix OAuth callback route to match Nextcloud redirect URI
Deploy / deploy (push) Successful in 15s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 01:53:26 +02:00
Malek TellissiandClaude Sonnet 4.6 2937004118 Roles via Nextcloud groups: sms-admin/manager/viewer + fix OAuth instance_uri
Deploy / deploy (push) Successful in 29s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 01:48:24 +02:00
Malek TellissiandClaude Sonnet 4.6 fc4579c47d Add Nextcloud OAuth 2.0 login via laravel/socialite
Deploy / deploy (push) Successful in 28s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 01:40:46 +02:00
Malek TellissiandClaude Sonnet 4.6 d87383672c Add piece_weight calibration: enter Stück + Gramm per delivery, average auto-calculated
Deploy / deploy (push) Successful in 17s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 01:26:17 +02:00
Malek TellissiandClaude Sonnet 4.6 38bcf60778 Rohstofflieferung: unit suffix, enter kg stored as grams
Deploy / deploy (push) Successful in 15s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 01:06:54 +02:00
Malek TellissiandClaude Sonnet 4.6 9501ff38d9 Redirect to list after creating Rohstofflieferung
Deploy / deploy (push) Successful in 16s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 01:04:09 +02:00
Malek TellissiandClaude Sonnet 4.6 a7094b6787 SpiceChart: remove fixed width and scroll, let bars scale naturally
Deploy / deploy (push) Successful in 15s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 01:01:01 +02:00
Malek TellissiandClaude Sonnet 4.6 22fb5ed09d Rohstoffe: inline creation in Lieferung form, hide nav entry, remove quantity column
Deploy / deploy (push) Successful in 17s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 01:00:07 +02:00
Malek TellissiandClaude Sonnet 4.6 a85afbc93a SpiceChart: dynamic width + horizontal scroll for many Rohstoffe
Deploy / deploy (push) Successful in 17s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 00:58:29 +02:00
Malek TellissiandClaude Sonnet 4.6 8f7af41513 Fix SpiceChart: encode URL array as JSON.parse() to avoid double quotes breaking x-data HTML attribute
Deploy / deploy (push) Successful in 16s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 00:52:07 +02:00
Malek TellissiandClaude Sonnet 4.6 118552d093 Fix SpiceChart: query spice IDs directly in extraJsOptions and guard formatter against null regex match
Deploy / deploy (push) Successful in 15s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 00:33:05 +02:00
Malek TellissiandClaude Sonnet 4.6 7d45e3027c Fix SpiceChart: use class property for spice IDs, build edit URLs via url()
Deploy / deploy (push) Successful in 15s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-13 00:14:30 +02:00
Malek TellissiandClaude Sonnet 4.6 092a78e306 Navigate to spice edit page on chart bar click
Deploy / deploy (push) Successful in 15s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 22:38:39 +02:00
Malek TellissiandClaude Sonnet 4.6 fb19e9a579 Introduce spice_stock_movements ledger for traceable stock changes
Deploy / deploy (push) Successful in 16s
Details 
Every delivery and batch now writes a signed movement entry instead of
directly incrementing/decrementing spice.quantity. The balance is always
the sum of all movements. Existing data is backfilled in the migration.
Rohstoff edit page shows the full movement history (Lagerbewegungen tab).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 22:34:10 +02:00
Malek TellissiandClaude Sonnet 4.6 7545aed494 Fix delivery deletion: allow negative stock instead of clamping to 0
Deploy / deploy (push) Successful in 16s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 21:50:58 +02:00
Malek TellissiandClaude Sonnet 4.6 88224f887c Show git commit hash as build number in sidebar footer
Deploy / deploy (push) Successful in 16s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 21:49:42 +02:00
Malek TellissiandClaude Sonnet 4.6 70eb5170d1 Allow deleting spice deliveries even with insufficient stock; warn instead of block
Deploy / deploy (push) Successful in 15s
Details 
Shows a warning in the confirmation dialog when stock would go below zero.
Deletion proceeds and sets stock to 0 rather than blocking the action.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 21:46:47 +02:00
Malek TellissiandClaude Sonnet 4.6 a4f3254ebd Add address, phone, email, website fields to suppliers
Deploy / deploy (push) Successful in 16s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 21:38:53 +02:00
Malek TellissiandClaude Sonnet 4.6 c5b0a43928 Show recipe version and date in product list instead of recipe name
Deploy / deploy (push) Successful in 16s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 21:30:15 +02:00
Malek TellissiandClaude Sonnet 4.6 e9ea8770e5 Make Produkte a flat nav item, remove Produkte navigation group
Deploy / deploy (push) Successful in 15s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 21:28:16 +02:00
Malek TellissiandClaude Sonnet 4.6 42748bbe20 Fix deploy: clear PHP source dirs before SCP so deleted files don't persist
Deploy / deploy (push) Successful in 16s
Details 
SCP only adds/overwrites files, never deletes. Clearing app/, routes/,
config/, database/, resources/, bootstrap/ before copy ensures the server
always reflects the current git state exactly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 21:25:41 +02:00
Malek TellissiandClaude Sonnet 4.6 ae579892bc Add optimize:clear before cache rebuild in entrypoint to prevent stale cache
Deploy / deploy (push) Successful in 14s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 21:22:12 +02:00
Malek TellissiandClaude Sonnet 4.6 7dfd01c11a Remove standalone RecipeResource — recipes managed via product page
Deploy / deploy (push) Successful in 9s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 21:17:38 +02:00
Malek TellissiandClaude Sonnet 4.6 a104924add Remove accidentally committed article_number migration (was rejected)
Deploy / deploy (push) Successful in 9s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 21:17:05 +02:00
Malek TellissiandClaude Sonnet 4.6 352f2a0aac Remove standalone BatchResource — chargen managed via product relation manager
Deploy / deploy (push) Successful in 14s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 21:16:52 +02:00
Malek TellissiandClaude Sonnet 4.6 1290ab934e Update README: document lot_number format, add suppliers table to schema
Deploy / deploy (push) Successful in 10s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 20:59:09 +02:00
Malek TellissiandClaude Sonnet 4.6 b90c00cf34 Fix lot_suffix input: switch to live(onBlur) to prevent typing interference
Deploy / deploy (push) Successful in 14s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 20:40:00 +02:00
Malek TellissiandClaude Sonnet 4.6 5c034ec895 Add lot_prefix to products; compose LOT number from prefix + date suffix
Deploy / deploy (push) Successful in 14s
Details 
Products now have a configurable lot_prefix (e.g. "112"). In the batch form
the prefix is shown read-only next to the suffix input (JJMMTT), and the full
lot_number (e.g. "112-260912") is composed automatically and stored.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 20:35:37 +02:00
Malek TellissiandClaude Sonnet 4.6 e9734c2590 Preserve existing origin entries when switching recipe version
Deploy / deploy (push) Successful in 14s
Details 
When the recipe is changed in a batch form, keep origin data for spices
that exist in both the old and new recipe. Only add empty rows for
spices that are new to the selected recipe version.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-09-12 20:20:07 +02:00