P0 security hardening for Cloud Run deploy - #16
Open
sokanacollectiveCRM wants to merge 308 commits into
Open
Conversation
…n-getter User table information getter
Refactor christian
UPdate vercel config
Use getSupabaseAdmin() for upload/delete so client portal documents always hit Storage with the service role. Align bucket MIME types with common browser and phone variants (image/jpg, webp, heic/heif) and sync existing buckets via updateBucket. Update SQL migration and tests. Co-authored-by: Cursor <cursoragent@cursor.com>
- Map full request submission into Cloud SQL (city/state/zip, birth_location, provider_type, pronouns, contact prefs, pets, services_interested, service_support_details, intake_age_years, primary_language, children_expected). - Add migrations for referral columns, expanded primary insurance, and intake CRM fields. - RequestFormService: intake age/provider validation, payment label normalization, shared insurance validation (expandedInsuranceBilling). - referralSource constants; staff referral patch narrowing fix in clientController. - Tests for request submission DTO, flow, and repository param positions; billing and birth outcome test updates. PHI field set extended for new columns. - Docs: changelog, Cloud SQL schema notes, closed handoff; delete-phi-client-by-email script. Co-authored-by: Cursor <cursoragent@cursor.com>
Validate birth place, four CRM payment labels (reject Medicaid on public intake), age/provider_type, and secondary insurance; extend repository billing skips and tests. Co-authored-by: Cursor <cursoragent@cursor.com>
Map home_access, home_types, home_type_other, and people counts from request submission; validate counts and normalize checkbox arrays. Omit legacy home_type on INSERT where the column is absent. Add migration and tests aligned with Playwright e2e payloads. Co-authored-by: Cursor <cursoragent@cursor.com>
The admins branch was missing a NULL for languages_other_than_english, causing PostgreSQL to reject GET /clients/team/all in production. Co-authored-by: Cursor <cursoragent@cursor.com>
…safe-logging Secure backend production logging for SEC-01
Keep Cloud SQL socket connections working in production by not forcing TLS when CLOUD_SQL_SSLMODE=disable or host is /cloudsql/..., and fix the gcloud deploy flag plus the QB sync unit mock. Co-authored-by: Cursor <cursoragent@cursor.com>
fix(cloud-sql): honor SSL disable on Cloud Run unix sockets
Mount /contracts/templates with cache-busting, harden role checks, and list storage DOCX templates so Cloud Run no longer 404s the admin templates panel. Co-authored-by: Cursor <cursoragent@cursor.com>
…es-api Expose contract templates API for Contracts page
Protect auth, webhooks, and public intake; keep staff roles in Cloud SQL; add CI/Cloud Build test gates so a merge to main can deploy. Co-authored-by: Cursor <cursoragent@cursor.com>
sokanacollectiveCRM
requested review from
aanandp123,
amyzliao and
ethanpaneraa
as code owners
August 14, 2026 18:44
|
@jbony2888 is attempting to deploy a commit to the DISC NU's projects Team on Vercel. A member of the Team first needs to authorize it. |
Repo-wide prettier/eslint is not clean yet; the workflow was failing on thousands of legacy files. Scope the GitHub lint job to this change set so the P0 deploy PR can pass. Co-authored-by: Cursor <cursoragent@cursor.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
npm test+test:security-smokea GitHub Actions and Cloud Build gate before Cloud Run update onmain.Test plan
npm run build&&npm test -- --runInBand&&npm run test:security-smoke(46 suites / 375 tests)test-gatethen deploysokana-private-apiDo not merge until CI is green. Merging to
mainis what deploys.Made with Cursor