HIPAA-13E: Restrict service-hours writes to assigned doula or admin - #18
Open
sokanacollectiveCRM wants to merge 324 commits into
Open
HIPAA-13E: Restrict service-hours writes to assigned doula or admin#18sokanacollectiveCRM wants to merge 324 commits into
sokanacollectiveCRM wants to merge 324 commits into
Conversation
UPdate vercel config
…safe-logging Secure backend production logging for SEC-01
Keep Cloud SQL socket connections working in production by not forcing TLS when CLOUD_SQL_SSLMODE=disable or host is /cloudsql/..., and fix the gcloud deploy flag plus the QB sync unit mock. Co-authored-by: Cursor <cursoragent@cursor.com>
fix(cloud-sql): honor SSL disable on Cloud Run unix sockets
Mount /contracts/templates with cache-busting, harden role checks, and list storage DOCX templates so Cloud Run no longer 404s the admin templates panel. Co-authored-by: Cursor <cursoragent@cursor.com>
…es-api Expose contract templates API for Contracts page
Protect auth, webhooks, and public intake; keep staff roles in Cloud SQL; add CI/Cloud Build test gates so a merge to main can deploy. Co-authored-by: Cursor <cursoragent@cursor.com>
Repo-wide prettier/eslint is not clean yet; the workflow was failing on thousands of legacy files. Scope the GitHub lint job to this change set so the P0 deploy PR can pass. Co-authored-by: Cursor <cursoragent@cursor.com>
…dening P0 security hardening for Cloud Run deploy
Phones still need the frontend header-token fallback; this only helps browsers that honor CHIPS.
…rify Fix mobile login session cookies
Persist home intake fields on operational updates, merge them in GET/PUT responses, expand PHI field aliases, and fall back to Cloud SQL when the PHI broker is unreachable in primary mode. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
…me-type Fix client profile saves for home type and PHI broker fallback
* Merge full intake profile fields on client GET and PUT responses. Map missing phi_clients columns, extend operational updates, and return services, contact, health, and demographics fields so the Lead Profile form reads and persists saved values. Co-authored-by: Cursor <cursoragent@cursor.com> * Add intake_age_years to User entity for profile field mapping. Co-authored-by: Cursor <cursoragent@cursor.com> * Fix Prettier formatting in User entity for CI lint. Co-authored-by: Cursor <cursoragent@cursor.com> --------- Co-authored-by: Jerry Bony <info@techluminateacademy.com> Co-authored-by: Cursor <cursoragent@cursor.com>
HIPAA-13A: admin-only /clients/fetchCSV with full phi_clients columns, deny audit logs, and tests. Also always mount /api/payment-methods so Payment Schedule card-on-file works when FEATURE_QUICKBOOKS is false. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
…payment-methods-mount HIPAA-13A CSV admin-only + always mount payment-methods
Gate PUT /clients/:id/birth-outcomes with canAccessSensitive, reject birth-outcome keys on generic client update, and stop exposing free-text birth_outcomes in API responses. Co-authored-by: Cursor <cursoragent@cursor.com>
Record Cloud Run revision IDs and build metadata after live deploy verification. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
…payment-methods-mount INV-12: Enforce birth-outcomes assignment and retire legacy narrative
Closes INV-09 IDOR on POST /users/:id/addhours by enforcing role, assignment, and IDOR guards with negative authorization tests. Co-authored-by: Cursor <cursoragent@cursor.com>
sokanacollectiveCRM
requested review from
aanandp123,
amyzliao and
ethanpaneraa
as code owners
August 23, 2026 19:50
|
@jbony2888 is attempting to deploy a commit to the DISC NU's projects Team on Vercel. A member of the Team first needs to authorize it. |
Record PR #80 / revision 00040-n2d verification, board INV-09 closure, and optional prod re-check script. Co-authored-by: Cursor <cursoragent@cursor.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
POST /users/:id/addhoursby enforcing role (admin|doula), approved account status, active assignment (canAccessSensitive), and IDOR guards on path/bodydoula_id.addHoursAuthorization.test.ts.docs/HIPAA_13E_SERVICE_HOURS_IDOR_STATUS.md.Test plan
npm test -- addHoursAuthorization.test.ts— 11/11 passnpm test— 51 suites / 413 tests passMade with Cursor