Lucas BergerandClaude Sonnet 4.6 c8894adc3f feat(12-03): upsertUser first-login-claims branch (D-08) ...

- Add isNull import from drizzle-orm; add appConfig to schema imports
- After identity lookup, read app_config.setup_complete per call (D-10 freshness)
- When setup_complete='true' and unclaimed user exists (isNull(oidcIss) AND claimed=false):
  claim it via db.update() — binds oidcIss/oidcSub, sets claimed=true, preserves is_admin
- shouldBeAdmin gated: flagRow?.value !== 'true' AND admin COUNT === 0 (T-12-11)
- No email keying in claim branch — isNull(oidcIss) AND claimed=false only (D-10/T-12-12)
- 399 tests pass; typecheck clean

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-15 14:14:48 -04:00

..

auth

feat(12-03): upsertUser first-login-claims branch (D-08)

2026-06-15 14:14:48 -04:00

broker

refactor(18): IN-03 memoize household timezone per outbox drain cycle

2026-06-15 07:43:01 -04:00

db

feat(12-01): schema nullable oidc identity + claimed marker + 0002 migration

2026-06-15 13:38:46 -04:00

lib

test(12-02): isSetupLocked() real impl + RED-first setup route tests

2026-06-15 13:53:53 -04:00

routes

feat(12-02): implement setup router — all 7 pre-auth routes + guard-first pattern

2026-06-15 13:58:51 -04:00

index.ts

feat(12-02): OIDC boot env-OR-app_config fallback + pre-auth mount verification

2026-06-15 14:03:15 -04:00