4 commits

Author	SHA1	Message	Date
Graham McIntire	3a408a8dc1	Security hardening + performance fixes across codebase ... CRITICAL: - Membership: remove :role/:org_id/:user_id from mass-assignment cast; use explicit create_changeset/4 and role_update_changeset/2 - GraphQL member resolver: add authorize_invite/3 checking admin/owner role and role hierarchy - REST invitations controller: add auth check for invite creation HIGH: - ApiToken: remove :organization_id/:user_id from cast; use explicit create_changeset/4 MEDIUM: - Move 8 LiveView Ecto queries into context modules (Admin, Alerts, Coverages, OnCall, Snmp) - Replace Process.put/Process.get with socket assigns for unresolved_alert_count (user_auth + layouts + 50 templates) - Add batch get_utilization_for_interfaces/1 to eliminate N+1 capacity queries in device show - Replace Process.sleep with Process.monitor/assert_receive or Process.send_after in 5 test files LOW: - Add handle_params/3 to UserResetPasswordLive, UserRegistrationLive, StatusPageLive - Remove redundant Repo.preload calls; add preloads to list_site_devices/1 - Fix @impl annotations and credo nesting warnings	2026-06-21 17:40:50 -05:00
Graham McIntire	e09b306f9c	Fix maintenance window form crash on mount ... The form template iterated over changeset error tuples directly (e.g. changeset.errors[:name] returns a tuple, not a list), causing Protocol.UndefinedError for Enumerable on Tuple. Rewrote form to use to_form/2 and <.input> components per LiveView conventions. Errors are now handled properly by the input component.	2026-02-16 16:04:59 -06:00
Graham McIntie	0f9fac76d9	Add maintenance windows LiveView UI ... - Index page with All/Active/Upcoming/Past filter tabs - Show page with active banner, edit/delete actions - Form page with scope picker (org-wide/site/device), datetime fields - Nav link added to desktop and mobile nav	2026-02-16 10:26:10 -06:00
Graham McIntie	2735c1a032	Add onboarding flow for new organizations	2026-02-16 10:14:45 -06:00