Дмитрий 6fe8235a82 feat(audit): hash-chain integrity validator — audit:verify-chains (hole #1) ...

Closes hole #1: log_hash written by trigger but never verified → tampering invisible.
audit:verify-chains (cron daily 04:00) recomputes SHA-256 chain for all 6 audit
tables via SQL on pgsql_supplier (prod-safe). Serialization reproduces trigger
exactly (ROW with log_hash=NULL::bytea). Break → incidents_log (high, dedup 24h)
+ AuditChainBreachMail to kdv1@bk.ru + non-zero exit. Tests 5/5, Console 19/19.

2026-05-23 10:27:55 +03:00

..

Admin

style+done(p2): pint formatting + P2 plan DONE marker

2026-05-22 18:53:11 +03:00

Api

feat(projects): RegionsBulkDialog — subject-level regions (89 RF subjects) #1426

2026-05-18 03:41:46 +03:00

Audit

fix(audit): incidents:watch-failures через pgsql_supplier (BYPASSRLS) + P2 на проде

2026-05-22 19:47:16 +03:00

Auth

style+fix(auth): pint formatting + nullsafe.neverNull fix + P1 plan DONE marker

2026-05-22 17:43:18 +03:00

Billing

fix(billing): runwayDays clamps negative balance to 0 + type-filter test (Task 2 review)

2026-05-16 07:24:34 +03:00

Console

feat(audit): hash-chain integrity validator — audit:verify-chains (hole #1)

2026-05-23 10:27:55 +03:00

Database

feat(supplier): supplier_manual_sync_queue table (Tier 3 queue)

2026-05-19 12:55:06 +03:00

Deals

style+fix(auth): pint formatting + nullsafe.neverNull fix + P1 plan DONE marker

2026-05-22 17:43:18 +03:00

Http/Webhook

style+done(p2): pint formatting + P2 plan DONE marker

2026-05-22 18:53:11 +03:00

Import

feat(deals): sweep 14->5 funnel slugs — controllers, mocks, stories, tests

2026-05-18 03:42:41 +03:00

Integration

fix(tests): sync 3 stale эпик-тестов + schema.sql header под Plans 1-3 (v8.26)

2026-05-20 19:23:13 +03:00

Jobs

fix(supplier): RouteSupplierLeadJob терминален при отсутствии лида (стоп retry-шторм)

2026-05-22 09:26:24 +03:00

Models

fix(tests): RefreshDatabase on LookupsTest + ProjectExtensionsTest — close quirk #62

2026-05-14 05:29:34 +03:00

Notifications

phase2(notifications-stage6): low_balance + zero_balance + topup + invoice email/inapp

2026-05-09 12:51:32 +03:00

Pd

style+fix(pd): pint formatting + nullsafe.neverNull fix + lifecycle test predicate

2026-05-22 16:50:21 +03:00

Plan4/Schema

fix(tests): sync 3 stale эпик-тестов + schema.sql header под Plans 1-3 (v8.26)

2026-05-20 19:23:13 +03:00

Plan5

feat(projects): П12-П15 (замечания #4-#7) — UX и фильтры на странице «Проекты»

2026-05-22 18:50:04 +03:00

Project

feat(supplier): group recompute + pause + source-change + root auto-link

2026-05-22 16:52:30 +03:00

Projects

style+done(p2): pint formatting + P2 plan DONE marker

2026-05-22 18:53:11 +03:00

Reports

fix(rls): close 4 dev↔prod RLS gaps in cron/jobs (hole #7 Phase B)

2026-05-23 10:16:46 +03:00

Rules

feat(rules): add Signal validators (Domain, Phone, SmsSender) with comprehensive datasets

2026-05-10 17:05:19 +03:00

Schedule

feat(supplier): retime supplier sync crons 20:30→18:00, 20:15→17:45

2026-05-19 12:55:09 +03:00

Security

style+done(p2): pint formatting + P2 plan DONE marker

2026-05-22 18:53:11 +03:00

Services

refactor(tests): consolidate linkProjectToSupplier helper to tests/Pest.php (Plan 2 review I-1/I-2)

2026-05-20 11:52:47 +03:00

Supplier

fix(projects): closable-chips на селекторах регионов — удаление по одному

2026-05-23 10:21:10 +03:00

AdminBillingActionsTest.php

fix(admin): G4 review — lockForUpdate on refund balance + self-contained tariff tests

2026-05-16 14:09:53 +03:00

AdminBillingIndexTest.php

phase2(admin-billing): GET /api/admin/billing + AdminBillingView API (этап 3/5)

2026-05-09 09:28:49 +03:00

AdminIncidentRknNotifyTest.php

feat(admin): G6 backend — incident РКН-notify endpoint

2026-05-16 14:09:53 +03:00

AdminIncidentShowTest.php

feat(admin): G5 backend — incident detail endpoint

2026-05-16 14:09:53 +03:00

AdminIncidentsIndexTest.php

fix(backend): tenant middleware на auth-routes + HasPasswordRules trait + test password (audit P0-01 + O-refactor-03 + P2-01)

2026-05-09 18:22:30 +03:00

AdminSystemSettingsTest.php

phase2(7-features): bulk-actions / new-deal / tenant-card / system-edit / webhook / smart-filters / impersonation-list

2026-05-09 05:33:21 +03:00

AdminTenantShowTest.php

feat(deals): sweep 14->5 funnel slugs — controllers, mocks, stories, tests

2026-05-18 03:42:41 +03:00

AdminTenantsIndexTest.php

phase2(admin-tenants-mrr): mrr_rub в /api/admin/tenants (этап 7)

2026-05-09 10:08:12 +03:00

ApiKeyControllerTest.php

refactor(api): ApiKeyController index() excludes expired keys (review M1)

2026-05-15 22:06:14 +03:00

DashboardSummaryTest.php

fix(security): закрыть открытые эндпоинты + SSRF-гард webhook перед go-live

2026-05-21 19:15:05 +03:00

DealCreateTest.php

test(deals): drop obsolete ids-based export tests from DealCreateTest (superseded by DealExportTest)

2026-05-18 03:42:40 +03:00

DealDestroyTest.php

feat(api): J1 — auth:sanctum+tenant middleware на /api/deals*

2026-05-16 15:18:13 +03:00

DealExportTest.php

test(deals): drop obsolete ids-based export tests from DealCreateTest (superseded by DealExportTest)

2026-05-18 03:42:40 +03:00

DealIndexTest.php

feat(deals): sweep 14->5 funnel slugs — controllers, mocks, stories, tests

2026-05-18 03:42:41 +03:00

DealModelTest.php

phase1(webhook): Deal/WebhookDedupKey + ProcessWebhookJob (advisory lock) — CTO-17 addendum

2026-05-08 15:24:55 +03:00

DealRestoreTest.php

feat(api): J1 — auth:sanctum+tenant middleware на /api/deals*

2026-05-16 15:18:13 +03:00

DealShowTest.php

feat(deals/drawer): убрать «Менеджер», добавить «Тип» + «Источник» read-only

2026-05-18 15:24:57 +03:00

DealTransitionTest.php

feat(deals): sweep 14->5 funnel slugs — controllers, mocks, stories, tests

2026-05-18 03:42:41 +03:00

DealUpdateTest.php

feat(deals): sweep 14->5 funnel slugs — controllers, mocks, stories, tests

2026-05-18 03:42:41 +03:00

DemoSeederTest.php

fix(dev): A8 review — production-guard в DemoSeeder + точность README/теста (Sprint 5A)

2026-05-17 02:23:26 +03:00

EndpointAuthHardeningTest.php

fix(security): закрыть открытые эндпоинты + SSRF-гард webhook перед go-live

2026-05-21 19:15:05 +03:00

ExampleTest.php

phase1(scaffold): Laravel 11 + predis + .env под PG 16 + Memurai

2026-05-08 09:37:16 +03:00

ImpersonationTest.php

fix(impersonation): SaaS-admin запросы через pgsql_supplier (BYPASSRLS) — лечит RLS 42704 на проде

2026-05-22 08:40:16 +03:00

LeadStatusesFunnelTest.php

feat(deals): migration — remap deals.status + drop obsolete lead_statuses (14->5)

2026-05-18 03:42:41 +03:00

LeadStatusesIndexTest.php

fix(security): закрыть открытые эндпоинты + SSRF-гард webhook перед go-live

2026-05-21 19:15:05 +03:00

LookupsTest.php

fix(security): закрыть открытые эндпоинты + SSRF-гард webhook перед go-live

2026-05-21 19:15:05 +03:00

PartitionsCreateMonthsTest.php

phase2(2fa-setup): wizard init+confirm+disable+regenerate в SettingsView/SecurityTab

2026-05-09 04:03:02 +03:00

ProcessWebhookJobTest.php

fix(rls): close 4 dev↔prod RLS gaps in cron/jobs (hole #7 Phase B)

2026-05-23 10:16:46 +03:00

RedisCacheStoreIsolationTest.php

fix(tests): redis cache store -> array driver in test env (kill quirk 72)

2026-05-16 09:57:32 +03:00

ReminderControllerTest.php

phase2(reminders-backend): CRUD + cron-диспетчер + email/inapp (P0 этап 4)

2026-05-09 12:30:38 +03:00

RemindersDispatchDueTest.php

fix(rls): close 4 dev↔prod RLS gaps in cron/jobs (hole #7 Phase B)

2026-05-23 10:16:46 +03:00

RlsSmokeTest.php

phase1(rls-smoke): CTO-13 — Pest 4 RLS smoke-test (4/4 passed, 662 ms)

2026-05-08 14:00:43 +03:00

SaasAdminMiddlewareTest.php

feat(api): J2 — стаб-гейт EnsureSaasAdmin на /api/admin/*

2026-05-16 15:01:07 +03:00

SetTenantContextTest.php

phase1(eloquent): Tenant/User/Project models + SetTenantContext middleware

2026-05-08 14:29:50 +03:00

TenantModelsTest.php

phase1(eloquent): Tenant/User/Project models + SetTenantContext middleware

2026-05-08 14:29:50 +03:00

WebhookReceiveTest.php

fix(security): harden impersonation/webhook/tenant — audit A2/A3/B3/C2

2026-05-15 19:16:13 +03:00

WebhookSettingsControllerTest.php

fix(security): SSRF-гард на сохранении webhook target_url (защита будущей доставки)

2026-05-22 03:25:16 +03:00

WebhookSsrfGuardTest.php

fix(security): закрыть открытые эндпоинты + SSRF-гард webhook перед go-live

2026-05-21 19:15:05 +03:00