5 commits

Author	SHA1	Message	Date
Francisco Solla	019cd456cc	feat: S9+ (#771) — integridade de consentimento e alinhamento das ações públicas ... - Consent.beforeDelete bloqueia delete com referências (APIError 409 composto por coleção), fim do 23502 cru no admin (contagens com overrideAccess). - submitWhatsapp/submitPetitionSignature delegam o ciclo de transação ao dono withPayloadTransaction (rollback no commit-falho, AggregateError, after-commit), preservando os contratos { ok: true } / { ok: true, signatureNumber }. - contactStateSchema exportado + contactCitySchema/contactCityFieldSchema consolidados; as 4 fichas usam os exports únicos (fim das cópias inline do predicate value in CitiesByState). withMutableConsentFixture purga consent via raw SQL para bypassar o hook no harness de teste. Co-Authored-By: opencode <noreply@opencode.ai>	2026-08-25 00:13:47 -03:00
Francisco Ignácio Fontoura Solla	473c82d09d	Lock down CMS/PII collection access and leader routes ... - users/signature/subscription/consent: all operations Payload-admin-only (Payload's default allowed ANY authenticated user, incl. campaign JWTs via /api — privilege escalation + PII exposure) - post/tag/media/petition: public read kept, writes admin-only, readVersions admin-only on drafted collections - leader lockdown: staff gates on /campanha/demandas* and /campanha/planos*; removed the dead leader branch of the demand detail page - fix createLeaderSupporter: scope now asserted via the leader's engaged leadership municipalities (canReadMunicipality always denied leaders) - candidate alignment: supporter area, invite creation, and escalated demand decisions now treat candidate as unrestricted staff consistently - tests: collectionAccessLockdown.int.spec pins the lockdown; leased-consent helpers generalized (supporter keys); fixtures purge deletes residue invites before leaderships; stale leader-phone tests updated to the lockdown model; 'sem Praça' copy renamed to 'sem município'	2026-07-23 22:25:18 -03:00
Francisco Ignácio Fontoura Solla	bcac665cb5	Ship /campanha nuclei MVP with RBAC, invites, and vote estimates. ... Adds electoral nuclei, leaderships, updates, and WhatsApp invite flows behind campaign auth, plus the consolidated schema migration that Vercel applies on deploy.	2026-07-18 15:01:56 -03:00
Francisco Solla	046f8a539f	fix type isssues	2026-03-15 17:41:24 -03:00
Francisco Ignácio Fontoura Solla	14961c5fea	feat: overhaul petition UX, add contact/signature data model, and refresh shadcn theming ... - redesign petition page layout with responsive hero, content section, and form card () - refactor frontend theming setup: - add with in frontend layout - migrate/clean global style tokens and base styles in - adjust header/social visuals for theme-aware rendering (, , , , ) - expand petition form with additional fields and new UI primitives (native select, textarea, button, state/city flow) (, , , ) - add new Payload collections and wire them into config: , , (, , , , ) - update petition collection admin grouping and project config (, , ) - add supporting dependency/lockfile updates and workspace tooling tweaks (, , , )	2026-02-22 20:02:51 -03:00