Francisco Ignácio Fontoura Solla 763f64080a Deliver B40: biometric login for /campanha. ... WebAuthn platform passkeys: opt-in enrollment after a password login, a password-less sign-in that mints the same 14-day campaign-token, and revocation from the profile. The session is minted through Payload's public pieces (checkLoginPermission, addSessionToUser, getFieldsToSign, jwtSign) inside a transaction with an advisory lock, so a passkey login neither bypasses a lockout nor evicts the account's other sessions. The rpID is derived from NEXT_PUBLIC_SITE_URL and resolves to null when the request host disagrees, so previews never offer a ceremony the browser would refuse.		2026-07-28 10:59:23 -03:00
..
design-refs	Version UX Pilot design refs and map them to roadmap plans	2026-07-18 16:36:09 -03:00
plans	Deliver B40: biometric login for /campanha.	2026-07-28 10:59:23 -03:00
research	Register campaign intelligence discovery and E8–E15 roadmap program.	2026-07-22 00:04:50 -03:00
ARCHITECTURE.md	B17: column picker on the seven CampaignTable list surfaces.	2026-07-28 08:25:16 -03:00
IMPROVE-APP-PLAN.md	Document coordenador geral interview and register A10 plus WhatsApp D3–D5.	2026-07-23 12:24:53 -03:00
IMPROVE-CODE-QUALITY-PLAN.md	Pass 2: formatacao da revisao (prettier em tabelas md + ordenacao de imports; SQL da migration inalterado) e remocao de duplicata stray do CampaignListEmptyState no path antigo	2026-07-25 16:53:51 -03:00
roadmap.md	Deliver B40: biometric login for /campanha.	2026-07-28 10:59:23 -03:00
TECH-DEBT.md	B17: column picker on the seven CampaignTable list surfaces.	2026-07-28 08:25:16 -03:00
TESTING.md	Tooling: pnpm db:doctor + preflight no guard-dev-db (remedios nomeados, deteccao de volume compartilhado pos-corrupcao WAL), madge check:cycles e prettier no CI/pre-push, guard rails de data migration no skill, notas de processo (knip --fix, pipes) e gate atualizado nos docs/rules	2026-07-25 18:02:02 -03:00