root d04901d296 security: fix 9 vulnerabilities + OrdersTable 14px font + colored status badges ... Security fixes: - Remove VITE_SUPABASE_SERVICE_ROLE_KEY from Docker build args - Add missing security.ts functions (verifyInternalRequest, requireSameOrigin, etc) - Store only OTP hash, remove plaintext otp_code - Fix CORS origin check: startsWith → exact match - Use atomic SQL check_rate_limit RPC instead of JS rate limiter - Mask PII in get_delivery_invitation_by_token single-order path - Add RequireAuth wrapper for protected routes - Revoke anon execute on confirm_delivery_choice_by_token - Add HSTS header to Caddyfile UI: - OrdersTable desktop: all cells text-sm (14px) - Status column: use colored Badge with tone from getOrderGroupStatusTone - Header row: text-sm (14px)		2026-06-19 12:14:19 +00:00
..
chatbot.ts	feat: add pickup (самовывоз) delivery type	2026-06-10 12:02:46 +00:00
delivery-invitations.test.ts	Harden auth and delivery endpoints	2026-05-13 18:59:30 +03:00
delivery-invitations.ts	feat: add pickup (самовывоз) delivery type	2026-06-10 12:02:46 +00:00
integration-events.ts	Harden auth and delivery endpoints	2026-05-13 18:59:30 +03:00
security.ts	security: fix 9 vulnerabilities + OrdersTable 14px font + colored status badges	2026-06-19 12:14:19 +00:00
workflow.test.ts	refactor: align delivery flow with 1c imports	2026-04-13 16:24:04 +03:00
workflow.ts	refactor: align delivery flow with 1c imports	2026-04-13 16:24:04 +03:00