4 commits

Author	SHA1	Message	Date
Arthur Bassi	719a5b05fd	fix(work-orders): validate uploads before persist and store privately ... Board completion/media uploads now check domain state first, use server-controlled filenames with an allowlist, store under App_Data, and serve via authenticated download endpoints. Also harden WeekRolled log arguments against CodeQL log-injection findings.	2026-07-21 09:25:33 -03:00
Arthur Bassi	af84001bf1	feat(work-orders): add Phase 6 slide-over detail comments audit and media API	2026-07-13 13:13:00 -03:00
Arthur Bassi	d040832b87	feat(work-orders): isolate phase 2 inline edit with optimistic concurrency ... Deliver PATCH board field updates and drop phases 3-7 code from the branch while keeping phase 0/1 dependencies required to build and test.	2026-07-07 11:26:13 -03:00
Arthur Bassi	4f697f257a	wip: work orders phases 1-7 (isolated from phase 0 foundation)	2026-06-30 10:09:48 -03:00