f9c4d7edb2
Add shared notification models, records, and constants
2026-06-23 19:00:24 -07:00
b7372dec1f
Add MailKit package and notification option classes
2026-06-23 18:58:41 -07:00
47aec287aa
update mobile view for expense.
2026-06-23 13:49:38 -07:00
62592c29ae
Add audit logs.
ci-cd-vm / ci-cd (push) Successful in 4m2s
2026-06-23 12:13:47 -07:00
870eeec82a
Add role control
2026-06-23 07:19:08 -07:00
deff2264a6
Create HealthController.cs
ci-cd-vm / ci-cd (push) Failing after 1m41s
2026-06-22 17:57:20 -07:00
2b28d2079c
update for
ci-cd-vm / ci-cd (push) Failing after 2m44s
2026-06-22 17:52:40 -07:00
0924b1a980
Update docker
ci-cd-vm / ci-cd (push) Failing after 3m6s
2026-06-22 16:15:28 -07:00
ddced87dc6
Update
ci-cd-nas / build-push (push) Failing after 27s
ci-cd-nas / deploy (push) Has been skipped
2026-06-20 22:26:52 -07:00
7ab8e9703b
WIP
2026-06-20 21:06:24 -07:00
8061a60fe5
add quick add entry.
2026-06-20 20:42:06 -07:00
87425b3276
add attendance
2026-06-20 19:43:15 -07:00
2af169fa60
Fix null payee.
2026-06-20 18:05:22 -07:00
3558c67fd7
WIP
2026-06-20 17:51:33 -07:00
f55807fa7d
wip
2026-06-20 15:13:23 -07:00
769597d769
refactor finance.
2026-05-29 23:56:29 -07:00
95fa37ebdf
fix(expense): open category read to all authed users; statement lookups via FirstOrDefaultAsync
...
Final-review findings:
- ExpenseCategoriesController was finance-only at the class level, but the member
self-service reimbursement form reads the category list to populate its dropdown,
so members got 403 and could not submit. Open GET to any authenticated user;
keep group/subcategory writes finance-only (mirrors MinistriesController).
Verified live with a member-role account: reads 200, writes 403, self-submit 200.
- MonthlyStatementService Update/Finalize now use FirstOrDefaultAsync for
convention consistency with the rest of the service layer.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-05-29 19:14:18 -07:00
e1f99158aa
fix(expense): resolve current user id from 'sub' JWT claim
...
Live verification revealed the JWT carries the user id in the 'sub' claim
(NameClaimType=sub, MapInboundClaims=false), so ClaimTypes.NameIdentifier is
null at runtime. This caused ExpensesController.GetMine/GetById to throw
NullReferenceException (500) on the '!.Value', and made the services fall back
to 'system' — silently defeating the self-ownership guard. Resolve via
NameIdentifier (unit tests) then 'sub' (real tokens). Adds a regression test.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-05-29 19:08:21 -07:00
9933c180b7
feat(expense): add controllers + register services
...
Adds ExpenseCategoriesController, ExpensesController, MonthlyStatementsController
and registers IExpenseCategoryService, IExpenseService, IMonthlyStatementService in DI.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-29 18:37:25 -07:00
86d9879a6d
feat(expense): add MonthlyStatementService with server-side recompute + tests
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-29 18:34:39 -07:00
d9289008f6
feat(expense): add ExpenseService with state machine + receipt storage + tests
...
TDD: wrote 8 tests first (red), then implemented IExpenseService + ExpenseService
covering CRUD, Draft→PendingApproval→Approved→Paid state machine, soft-delete,
per-owner access guards, and receipt blob round-trip via IFileStorage.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-29 18:28:38 -07:00
015f689d9b
feat(expense): add ExpenseCategoryService + tests
...
TDD cycle: wrote 3 xUnit tests first (red), then implemented
IExpenseCategoryService + ExpenseCategoryService (green).
2026-05-29 18:24:07 -07:00
15cdfe6f92
feat(expense): add expense, category, and monthly-statement DTOs
2026-05-29 18:21:52 -07:00
e7bf07c2ad
feat(storage): add IFileStorage + local-disk implementation
...
Adds IFileStorage abstraction and LocalDiskFileStorage for receipt file storage with path-traversal protection, and registers it in DI. Includes 3 TDD-verified xUnit tests.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-29 18:18:28 -07:00
ac65c68e18
feat(expense): add AddExpenseModule EF migration
...
Creates Ministries, ExpenseCategoryGroups, ExpenseSubCategories,
Expenses (with filtered Status index, MinistryId/ExpenseDate indexes,
Restrict FKs + SetNull on Member), and MonthlyStatements (unique
Year+Month index) tables. No existing tables modified.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-29 18:15:16 -07:00
cf929557fe
feat(expense): add Expense + MonthlyStatement entities and EF config
2026-05-29 18:11:56 -07:00
b3eb9d297a
feat(expense): add expense category entities + seed (11 groups / 38 subs)
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-29 18:08:12 -07:00
f6f06d841c
feat(ministry): add Ministry entity, seed (10), and read endpoint
2026-05-29 18:03:28 -07:00
a573179714
feat(giving): match giver member name in single-giving search (spec §4.2)
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-28 17:24:47 -07:00
b5a15dd9f2
feat(giving): add offering-sessions controller
2026-05-28 16:54:24 -07:00
86041c0d05
fix(giving): map duplicate-date race to 409 + return zelle/paypal refs in session detail
2026-05-28 16:53:24 -07:00
e04776460d
feat(giving): offering-session batch service with server-side totals + locking
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-28 16:47:19 -07:00
586551aec0
feat(giving): add givings controller
2026-05-28 16:43:06 -07:00
8ff93e3698
test(giving): cover anonymous member-id stripping and delete-lock guard
2026-05-28 16:42:18 -07:00
2b6f29e775
feat(giving): single-entry giving service with paging + lock guard
...
Adds GivingListItemDto, GivingDto, CreateGivingRequest, UpdateGivingRequest DTOs;
IGivingService interface; GivingService implementation with category/date filtering,
OfferingSession lock guard (Submitted/Reconciled), and DI registration in Program.cs.
Covered by 4 xUnit tests (TDD: red → green).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-28 16:38:32 -07:00
81efaedbc2
feat(giving): add giving-categories controller
2026-05-28 16:34:18 -07:00
cb15d30980
refactor(giving): drop unused accessor from category service + add deactivate-missing test
2026-05-28 16:33:27 -07:00
798dfa3fe0
feat(giving): giving-category service with CRUD + soft-disable
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-28 16:29:31 -07:00
8b52572fad
feat(giving): add EF migration for giving module
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-28 16:25:11 -07:00
577ae1aabe
refactor(giving): use AnyAsync in category seed (code-review minor)
2026-05-28 16:21:32 -07:00
e20964ae0d
feat(giving): seed default giving categories
2026-05-28 16:19:44 -07:00
999f8a80f9
feat(giving): add GivingCategory, OfferingSession, Giving entities + EF config
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-28 16:16:24 -07:00
a525c71baa
WIP
2026-05-28 15:25:31 -07:00
d79b1faa8f
fix 401 loop hell
2026-05-27 15:09:05 -07:00
e83fa4c2e9
fix: use RandomNumberGenerator for cryptographic temp password generation
...
Replaced `new Random()` with `RandomNumberGenerator.GetInt32()` and a
Fisher-Yates shuffle to ensure temp passwords are cryptographically secure.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-27 14:29:26 -07:00
8249b3fe3e
feat: add UsersController and register all services
...
Adds UsersController with CRUD endpoints (list, get, create, update,
deactivate, reset-password) restricted to super_admin role. Registers
IUserManagementService in Program.cs alongside existing services.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-27 14:10:46 -07:00
3ab0998793
feat: add UserManagementService with temp-password creation and deactivation
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-27 14:08:50 -07:00
0986233d9b
feat: add MembersController (CRUD + paged list)
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-27 14:03:23 -07:00
bfffdee2a8
feat: add MemberService with soft-delete and paged search
...
Implements IMemberService with Create/Read/Update/soft-Delete operations,
NickName/zh-name search, status and hasUser filtering, and full xUnit coverage
(11 tests). Uses separate user-lookup query for InMemory DB compatibility; detaches
entity after soft-delete so query-filter assertions work correctly in tests.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-27 14:00:59 -07:00
97743f6974
feat: add PagedResult, Member DTOs, and User DTOs
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-27 13:55:21 -07:00
Chris Chen