Introduce a CodeResolverService to classify user login codes, complete with detailed resolution logic and usability checks. Extend the sync system to handle conflicts via last-write-wins arbitration, with detailed conflict tracking for review. Update file permissions and runtime isolation in Docker to enhance security.
- Dockerfile no longer bakes in a Flutter web build (this repo has no
client/ dir); the web bundle is mounted at runtime instead.
- docker-compose.yml: web bundle mount path configurable via
WEB_CLIENT_BUILD_PATH, defaults to a sibling KC-APP checkout.
- README: point to the KC-APP client repo for clients.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
- New VerantwortlicheInvite model: LT-issued invites so a person can
register as Gemeinde Verantwortliche(r) for a specific Gemeinde,
skipping the self-registration approval step.
- Wahl/Workshop/Teilnehmer gain phase support (phasenAnzahl,
beschreibung), mirroring the WP plugin's multi-phase elections.
Teilnehmer unique constraint now scoped per phase.
- Auth: team login + guest auth adjustments, spec coverage.
- sync.service.ts: register VerantwortlicheInvite as a synced model.
- wahl.service.ts: submitTeilnehmer updated for the new phase-scoped
unique key.
- client: login/home screen rework, new theme.dart, FCM web tweaks.
- .gitignore: ignore .DS_Store.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
The Flutter SDK image is ~2.8 GB and filled Docker Desktop's VM disk
("read-only file system" while extracting a layer). Build the web bundle
on the host instead and COPY client/app/build/web into the 2-stage
(NestJS build -> slim runtime) image. .dockerignore keeps the bundle,
drops the platform scaffolding. README documents the host `flutter build
web` prerequisite.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
- Dockerfile: 3-stage — Flutter web build, NestJS build, slim node runtime.
Runtime copies dist + node_modules + prisma + the web bundle
(WEB_CLIENT_DIR=/app/web), runs `prisma migrate deploy` then `node
dist/main.js`. One container serves client + API on :3000.
- docker-compose.yml: postgres:16-alpine with a healthcheck + the api
service; config from backend/.env (Compose v2 strips quotes),
DATABASE_URL + GOOGLE_APPLICATION_CREDENTIALS overridden for the
container, serviceAccount.json bind-mounted read-only.
- .dockerignore keeps node_modules/build/secrets out of the context.
Not run here (no Docker on this box); the stack also runs natively against
the local Postgres.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
linus
