dependabot[bot]
bd21fa74aa
chore(deps): bump boto3 ( #124 )
...
Build Lambda Layer / build (push) Waiting to run
Bumps the minor-and-patch group in /functions/slack_notifier with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.66
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.66 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.66
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 16:46:03 +00:00
dependabot[bot]
b7f7de3997
chore(deps): bump boto3 ( #123 )
...
Bumps the minor-and-patch group in /functions/email_report with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.66
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.66 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.66
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 16:44:36 +00:00
dependabot[bot]
710927d836
chore(deps): bump boto3 ( #126 )
...
Bumps the minor-and-patch group in /functions/admin_authorizer with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.66
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.66 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.66
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 12:43:00 -04:00
Adam Moussa
27d6bbeaca
Merge pull request #122 from Sea-Haven-Industries/feature/hcp-terraform-migration
...
Build Lambda Layer / build (push) Has been cancelled
feat(infra): migrate meal-order-manager to HCP Terraform (PLAT-70)
2026-08-07 20:00:52 -04:00
1f67543f16
fix(ci): satisfy PR policy and authorizer trust constraints
...
Move weekly-menu step expressions into env blocks, terraform-fmt SES
alignment, and pin API Gateway authorizer invoke role assume conditions.
2026-08-07 19:33:49 -04:00
3906ad1885
fix(infra): assert google-client-id SSM exists at plan time
...
Wire the google_client_id data source into a check so apply fails closed when the OOB parameter is missing.
2026-08-07 19:28:25 -04:00
1728f6e408
fix(iam): scope SES SendRawEmail to verified identities
...
Constrain the email-report role to the sender and domain identity ARNs so the policy is not unconstrained write.
2026-08-07 19:21:45 -04:00
40ea4ed898
feat(infra): migrate meal-order-manager to HCP Terraform
...
Freeze SAM CD and add greenfield Terraform for seahaven-prod so HCP is the sole stack deploy path.
2026-08-07 19:19:51 -04:00
Adam Moussa
b595744882
fix(form): refine meal description More/Less formatting (DEV-24) ( #121 )
...
Deploy / deploy (push) Has been cancelled
* fix(form): align More/Less spacing with meal card rhythm
* fix(form): lighten More/Less typography underline treatment
* fix(form): add More/Less focus-visible and coarse-pointer hit target
* fix(form): stop meal cards stretching on description expand
2026-08-07 22:04:45 +00:00
dependabot[bot]
357318ef28
chore(deps): bump boto3 ( #117 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group in /functions/close_form with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:29 -04:00
dependabot[bot]
883f03eb5b
chore(deps): bump actions/setup-node from 6.5.0 to 7.0.0 ( #116 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](249970729c...8207627860
2026-08-04 17:47:28 -04:00
dependabot[bot]
68382e60e7
chore(deps): bump boto3 ( #115 )
...
Bumps the minor-and-patch group in /functions/admin_authorizer with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:28 -04:00
dependabot[bot]
509c56e8d5
chore(deps): bump the minor-and-patch group with 2 updates ( #114 )
...
Bumps the minor-and-patch group with 2 updates: [playwright](https://github.com/microsoft/playwright-python ) and [boto3](https://github.com/boto/boto3 ).
Updates `playwright` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright-python/releases )
- [Commits](https://github.com/microsoft/playwright-python/compare/v1.61.0...v1.62.0 )
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: playwright
dependency-version: 1.62.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:28 -04:00
dependabot[bot]
a3c83f9d29
chore(deps): bump boto3 in /src/shared in the minor-and-patch group ( #113 )
...
Bumps the minor-and-patch group in /src/shared with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:27 -04:00
dependabot[bot]
24ca21feb0
chore(deps): bump boto3 ( #112 )
...
Bumps the minor-and-patch group in /functions/aggregate_orders with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:27 -04:00
dependabot[bot]
e9a93cf3e0
chore(deps): bump boto3 ( #111 )
...
Bumps the minor-and-patch group in /functions/slack_notifier with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:27 -04:00
dependabot[bot]
60de78aa9d
chore(deps): bump boto3 ( #110 )
...
Bumps the minor-and-patch group in /functions/submit_order with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:26 -04:00
dependabot[bot]
9958553df1
chore(deps): bump boto3 ( #109 )
...
Bumps the minor-and-patch group in /functions/email_report with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:26 -04:00
Adam Moussa
fa51fa85e7
ci(policy): pin callable-pr-policy to v1.0.6 ( #119 )
...
Deploy / deploy (push) Waiting to run
Refs: PLAT-65
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com>
2026-08-04 17:39:01 -04:00
Adam Moussa
164e903c94
ci: add org PR policy caller (PLAT-62) ( #108 )
...
Deploy / deploy (push) Waiting to run
* ci: add org PR policy caller
Refs: PLAT-62
* fix(ci): name PR policy workflow
Refs: PLAT-62
2026-08-04 15:57:37 +00:00
Adam Moussa
a69e6d0a7c
fix(form): restore description toggles after sign-in ( #107 )
...
Deploy / deploy (push) Waiting to run
* fix(form): restore description toggles after sign-in
* fix(form): reset expanded descriptions on re-auth
2026-08-03 16:19:46 -04:00
Adam Moussa
139ea3b1d3
fix(deploy): allow recovery after update rollback ( #106 )
Deploy / deploy (push) Waiting to run
2026-08-03 18:43:16 +00:00
Adam Moussa
88399fe153
refactor(weekly-menu): isolate menu writes behind API ( #94 )
...
* feat(api): add IAM-authenticated menu publication
Keep weekly menu writes behind Lambda so the GitHub runtime role cannot access the shared DynamoDB table directly.
* refactor(workflow): publish weekly menus through API
Use SigV4 requests for settings and menu publication so the scheduled workflow no longer needs direct DynamoDB access.
* fix: address review comments
* style(python): apply Ruff formatting
2026-08-03 14:27:59 -04:00
Adam Moussa
7e73bd2bfe
test(form): stabilize mobile admin assertions ( #93 )
Deploy / deploy (push) Waiting to run
2026-08-03 14:21:10 -04:00
Adam Moussa
bcf255b17f
chore(form): add template JavaScript checks ( #92 )
...
* fix(auth): require Google authentication in cloud mode
Remove the public shared-key mechanism and fail closed on Google auth while adding submit-route throttling.
* chore(form): lint template JavaScript in CI
* docs(form): record frontend delivery decisions
* fix: resolve remaining merge conflicts
2026-08-03 14:15:25 -04:00
Adam Moussa
311eab35c0
fix(auth): require Google authentication in cloud mode ( #90 )
...
* fix(auth): require Google authentication in cloud mode
Remove the public shared-key mechanism and fail closed on Google auth while adding submit-route throttling.
* fix(auth): address review follow-ups
Fail closed on whitespace-only Google configuration and centralize shared authentication behavior.
* test(auth): use non-secret Google client fixture
Make the public test identifier explicit so secret scanning does not misclassify it as an API key.
* test(auth): avoid OAuth-shaped fixture
Use a format-neutral audience value so secret scanning can distinguish the fixture from a real client identifier.
* chore(security): suppress public OAuth fixture
Document the scanner false positive without suppressing any runtime credential flow.
2026-08-03 13:51:12 -04:00
dependabot[bot]
6968a0299b
chore(deps): bump the minor-and-patch group with 4 updates ( #96 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-08-03 13:39:41 -04:00
dependabot[bot]
a55c56f0ab
chore(deps): bump boto3 in /src/shared in the minor-and-patch group ( #104 )
...
Bumps the minor-and-patch group in /src/shared with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.56 to 1.43.60
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.56...1.43.60 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.60
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:39:40 -04:00
dependabot[bot]
182f612a18
chore(deps): bump boto3 in the minor-and-patch group ( #103 )
...
Bumps the minor-and-patch group with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.58 to 1.43.60
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.58...1.43.60 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.60
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:39:40 -04:00
dependabot[bot]
88373a34ff
chore(deps): bump boto3 ( #102 )
...
Bumps the minor-and-patch group in /functions/slack_notifier with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.56 to 1.43.60
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.56...1.43.60 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.60
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:39:40 -04:00
dependabot[bot]
d96424b11d
chore(deps): bump boto3 ( #101 )
...
Bumps the minor-and-patch group in /functions/email_report with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.56 to 1.43.60
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.56...1.43.60 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.60
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:39:39 -04:00
dependabot[bot]
468d68fa02
chore(deps): bump boto3 ( #100 )
...
Bumps the minor-and-patch group in /functions/close_form with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.56 to 1.43.60
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.56...1.43.60 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.60
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:34:16 -04:00
dependabot[bot]
16d7920ac6
chore(deps): bump boto3 ( #98 )
...
Bumps the minor-and-patch group in /functions/submit_order with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.56 to 1.43.60
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.56...1.43.60 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.60
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:33:05 -04:00
dependabot[bot]
4584b8fe50
chore(deps): bump boto3 ( #99 )
...
Bumps the minor-and-patch group in /functions/admin_authorizer with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.56 to 1.43.60
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.56...1.43.60 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.60
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:28:21 -04:00
dependabot[bot]
243dd7323f
chore(deps): bump boto3 ( #97 )
...
Bumps the minor-and-patch group in /functions/aggregate_orders with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.56 to 1.43.60
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.56...1.43.60 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.60
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:26:26 -04:00
Adam Moussa
adf175daef
feat(form): render admin orders as mobile cards ( #86 )
...
Deploy / deploy (push) Has been cancelled
* feat(form): render admin orders as mobile cards
* fix(form): address mobile admin review findings
* fix(tests): remove unused mobile fixture state
2026-07-31 10:15:43 -04:00
Adam Moussa
602b0c7fd0
fix(form): accessibility for qty, status, and descriptions ( #81 )
...
* fix(form): add status regions, live total, and a11y CSS
Dual alert/status slots for form and admin, aria-live on the sticky
total, success heading focus target, More/Less affordance styles, and
44px coarse-pointer chip padding.
* fix(form): wire a11y labels, status helper, and desc expand
Meal-scoped qty labels at card create time, aria-pressed filter chips,
dual-node showStatus replacing all alert() calls (confirm retained),
overflow-gated More/Less, and success-heading focus after submit.
* test(form): cover a11y labels, status region, and desc toggle
Structural checks for dual status nodes and no alert(); Playwright for
init-time qty labels, aria-pressed chips, overflow More/Less, and
failed-submit text landing in role=alert.
* fix: address review comments
2026-07-31 10:15:43 -04:00
Adam Moussa
83077f7aa9
test(form): cover sticky footer at narrow widths ( #85 )
...
* test(form): cover sticky footer at narrow widths
* fix(form): address review findings
* fix(form): guard stale admin edit responses
* test(form): stub admin lookup in browser tests
2026-07-31 10:15:42 -04:00
Adam Moussa
30fa7fe352
fix(form): wrap Google user bar at phone widths ( #84 )
...
* fix(form): wrap Google user bar at phone widths
Allow the signed-in Google identity and admin controls to wrap below 480px while preserving the desktop row, with generated-form Playwright coverage for phone widths.
* fix(form): preserve 480px user bar boundary
Keep the mobile layout below 480px and lock both sides of the breakpoint with browser coverage.
* style(tests): apply ruff formatting
* test(form): guarantee Playwright browser cleanup
* test(form): strengthen phone-width coverage
* fix: add @classmethod and use cls in tests/test_generate_form.py
Co-authored-by: seahaven-openswe[bot] <296972425+seahaven-openswe[bot]@users.noreply.github.com>
* fix(tests): restore class fixture discovery
---------
Co-authored-by: seahaven-openswe[bot] <296972425+seahaven-openswe[bot]@users.noreply.github.com>
2026-07-31 10:15:42 -04:00
Adam Moussa
216618a862
refactor(form): extract Jinja templates and lock form JS in CI ( #77 )
...
Deploy / deploy (push) Waiting to run
* refactor(form): extract Jinja templates and lock form JS in CI
Split the monolithic generate_form f-string into form.html.j2/css/js
plus admin.js, inject a single window.CONFIG blob, and add structural
plus Playwright coverage so qty delegation and clamp stay green in CI.
* Update src/server/generate_form.py
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* fix(form): isolate admin script bindings
* fix(form): address admin and form review findings
* fix(form): resolve remaining review nitpicks
* ci(workflow): restore required check context
Keep the reusable workflow caller job compatible with the organization-required ci / ci status check.
* fix(form): address remaining review findings
* fix: apply CodeRabbit auto-fixes
Fixed 1 file(s) based on 1 unresolved review comment.
Co-authored-by: CodeRabbit <noreply@coderabbit.ai>
---------
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: CodeRabbit <noreply@coderabbit.ai>
2026-07-30 19:19:51 -04:00
Adam Moussa
3fe6e74557
Merge pull request #75 from Sea-Haven-Industries/fix/form-mobile-layout
...
Deploy / deploy (push) Waiting to run
fix(form): improve mobile layout for order form and admin toolbar
2026-07-30 16:26:41 -04:00
043eea1443
fix(form): use single-column layout for meals without images on mobile
2026-07-30 11:18:21 -04:00
2a985c1940
fix(form): improve mobile layout for order form and admin toolbar
...
Stop phone-width sideways scroll from the admin toolbar, stack meal cards
and bump touch targets on coarse pointers, and respect safe-area insets.
2026-07-29 19:19:55 -04:00
Adam Moussa
452312b5e5
Merge pull request #73 from Sea-Haven-Industries/ci/weekly-menu-timeout
...
Deploy / deploy (push) Has been cancelled
ci(weekly-menu): add 30-minute job timeout
2026-07-29 11:54:35 -04:00
0446f31869
ci(weekly-menu): add 30-minute job timeout
2026-07-29 11:44:14 -04:00
Adam Moussa
f0b51a1fbf
Merge pull request #72 from Sea-Haven-Industries/fix/weekly-menu-pinned-deps
...
Deploy / deploy (push) Waiting to run
ci(weekly-menu): install pinned deps from requirements.txt
2026-07-28 19:42:22 -04:00
Adam Moussa
b79e650553
ci(weekly-menu): install pinned deps from requirements.txt
2026-07-28 19:36:12 -04:00
Adam Moussa
76bb858bcc
Merge pull request #70 from Sea-Haven-Industries/fix/weekly-menu-scoped-role
...
Deploy / deploy (push) Waiting to run
ci(weekly-menu): assume the scoped role, add concurrency guard, pin actions
2026-07-28 19:26:56 -04:00
Adam Moussa
3952ed88f4
ci(weekly-menu): assume the scoped role, add concurrency guard, pin actions
2026-07-28 19:25:02 -04:00
Adam Moussa
8272449ccf
ci(deps): pin org reusable workflows to v1.0.2 ( #69 )
...
Deploy / deploy (push) Waiting to run
* ci(deps): pin org reusable workflows to v1.0.2
* style(ci): normalize workflow block spacing
2026-07-28 18:15:00 -04:00
