feat(phase7): implement Phase 7 PRE-7 + 7.A — security foundation, break-glass, data incidents, provincial resources by Exc1D · Pull Request #77 · Exc1D/bantayog-alert

feat(shared-validators): add dataIncidentDocSchema, extend breakglassEventDocSchema and agencyDocSchema for Phase 7

claude

committed

feat(functions): add requireMfaAuth() guard with tests for Phase 7

claude

committed

feat(functions): add audit-stream.ts service with BigQuery streaming for Phase 7

claude

committed

feat(functions): add audit-export-batch and auditExportHealthCheck scheduled triggers for Phase 7

claude

committed

feat(functions): add resolvedToday + avgResponseTimeMinutes to analytics province summary for Phase 7

claude

committed

feat(admin-desktop): add bare-bones TOTP enrollment page at /totp-enroll for Phase 7

claude

committed

feat(scripts): add seed-break-glass-config.ts script for Phase 7 break-glass setup

claude

committed

test(functions): add edge-case tests for requireMfaAuth (null auth, missing firebase, non-string factor)

claude

committed

docs: update progress and learnings for Phase 7 PRE-7 completion

claude

committed

feat(functions): add initiateBreakGlass + deactivateBreakGlass callables with 11 tests for Phase 7.A

claude

committed

feat(functions): add sweepExpiredBreakGlassSessions scheduled trigger for Phase 7.A

claude

committed

feat(functions): add declareEmergency callable with 5 tests for Phase 7.A

claude

committed

feat(functions): add declareDataIncident + recordIncidentResponseEvent callables for Phase 7.A

claude

committed

feat(functions): add setRetentionExempt, approveErasureRequest, toggleMutualAidVisibility callables for Phase 7.A

claude

committed

feat(functions): add upsertProvincialResource + archiveProvincialResource callables for Phase 7.A

claude

committed

feat(rules): add Firestore read rules for data_incidents, provincial_resources, erasure_requests, system_health

claude

committed

feat(functions,admin-desktop): export all 7.A callables and add admin-desktop callable wrappers

claude

committed

fix: prettier formatting and add rule coverage tests for Phase 7 collections

claude

committed

fix(callables,rules): address all CodeRabbit/Sourcery review findings (13 fixes)

claude

committed

fix(callables): address review findings round 2 — schema alignment, error logging, input validation

claude

committed

fix(break-glass): add MFA requirement to deactivateBreakGlass for security consistency

claude

committed

fix(approve-erasure-request): safeParse with HttpsError + atomic transaction for review

claude

committed

fix(audit-export-health-check): guard against NaN from malformed BigQuery values

claude

committed

fix(provincial-resources): remove as-cast, add archive existence check, preserve archivedBy/archivedAt

claude

committed

fix(set-retention-exempt): use safeParse + HttpsError invalid-argument on validation failure

claude

committed

chore: update pnpm-lock.yaml for @tanstack/react-query dependency

claude

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(phase7): implement Phase 7 PRE-7 + 7.A — security foundation, break-glass, data incidents, provincial resources#77

feat(phase7): implement Phase 7 PRE-7 + 7.A — security foundation, break-glass, data incidents, provincial resources#77
Exc1D merged 26 commits intomainfrom
feature/phase7-a

Commits on Apr 27, 2026

feat(shared-validators): add dataIncidentDocSchema, extend breakglassEventDocSchema and agencyDocSchema for Phase 7

feat(functions): add requireMfaAuth() guard with tests for Phase 7

feat(functions): add audit-stream.ts service with BigQuery streaming for Phase 7

feat(functions): add audit-export-batch and auditExportHealthCheck scheduled triggers for Phase 7

feat(functions): add resolvedToday + avgResponseTimeMinutes to analytics province summary for Phase 7

feat(admin-desktop): add bare-bones TOTP enrollment page at /totp-enroll for Phase 7

feat(scripts): add seed-break-glass-config.ts script for Phase 7 break-glass setup

test(functions): add edge-case tests for requireMfaAuth (null auth, missing firebase, non-string factor)

docs: update progress and learnings for Phase 7 PRE-7 completion

feat(functions): add initiateBreakGlass + deactivateBreakGlass callables with 11 tests for Phase 7.A

feat(functions): add sweepExpiredBreakGlassSessions scheduled trigger for Phase 7.A

feat(functions): add declareEmergency callable with 5 tests for Phase 7.A

feat(functions): add declareDataIncident + recordIncidentResponseEvent callables for Phase 7.A

feat(functions): add setRetentionExempt, approveErasureRequest, toggleMutualAidVisibility callables for Phase 7.A

feat(functions): add upsertProvincialResource + archiveProvincialResource callables for Phase 7.A

feat(rules): add Firestore read rules for data_incidents, provincial_resources, erasure_requests, system_health

feat(functions,admin-desktop): export all 7.A callables and add admin-desktop callable wrappers

fix: prettier formatting and add rule coverage tests for Phase 7 collections

fix(callables,rules): address all CodeRabbit/Sourcery review findings (13 fixes)

fix(callables): address review findings round 2 — schema alignment, error logging, input validation

fix(break-glass): add MFA requirement to deactivateBreakGlass for security consistency

fix(approve-erasure-request): safeParse with HttpsError + atomic transaction for review

fix(audit-export-health-check): guard against NaN from malformed BigQuery values

fix(provincial-resources): remove as-cast, add archive existence check, preserve archivedBy/archivedAt

fix(set-retention-exempt): use safeParse + HttpsError invalid-argument on validation failure

chore: update pnpm-lock.yaml for @tanstack/react-query dependency