Lucas Berger 2f347cbd98 fix(10): guard shared-calendar designation against non-existent target (CR-01) ...

PUT /api/admin/calendars/:id/shared cleared the current shared calendar then
set the target in two non-transactional UPDATEs without checking the target
exists — a bad/stale id wiped the family shared lane and still returned ok.
Verify the target inside a transaction; return 404 when absent. Adds a
regression test (RED→GREEN).

2026-06-13 15:38:35 -04:00

..

auth

feat(10-02): add first-login-wins is_admin bootstrap in upsertUser (D-01)

2026-06-13 14:35:11 -04:00

broker

feat(10-03): implement credentialSync helper, adminRouter, and self-service /api/me/credential

2026-06-13 14:54:23 -04:00

db

chore(10-01): generate + apply v1.1 DB migration (0001_famous_mad_thinker)

2026-06-13 14:22:45 -04:00

lib

feat(10-02): implement requireAdmin DB-backed MiddlewareHandler

2026-06-13 14:32:04 -04:00

routes

fix(10): guard shared-calendar designation against non-existent target (CR-01)

2026-06-13 15:38:35 -04:00

index.ts

feat(10-03): implement credentialSync helper, adminRouter, and self-service /api/me/credential

2026-06-13 14:54:23 -04:00