Repository navigation

feat(accounts): optional customer accounts with an auth email hook - #20

Merged

kris1027 merged 41 commits into

mainfrom

feat/customer-accounts

Oct 15, 2026

Merged

feat(accounts): optional customer accounts with an auth email hook#20
kris1027 merged 41 commits into
mainfrom
feat/customer-accounts

Commits on Oct 14, 2026
- docs(accounts): add spec 0012 customer accounts
  
  kris1027
  and
  claude
  committed
  e55c3f9
- feat(accounts): sign up through the Send Email Hook to the account page
  
  kris1027
  and
  claude
  committed
  0b3f746
- feat(accounts): sign in, sign out, cart merge and password reset
  
  kris1027
  and
  claude
  committed
  614761c
- feat(accounts): order history and the order page
  
  kris1027
  and
  claude
  committed
  4eedb2a
- feat(accounts): address book
  
  kris1027
  and
  claude
  committed
  97d6f01
- feat(accounts): signed in checkout and the account offer after a guest order
  
  kris1027
  and
  claude
  committed
  ddbae77
- feat(accounts): profile, change password and delete account
  
  kris1027
  and
  claude
  committed
  a4f5dad
- feat(accounts): Account or Guest on the admin order pages
  
  kris1027
  and
  claude
  committed
  6c5f52e
- feat(accounts): log redaction test, axe on every account page and the production runbook
  
  kris1027
  and
  claude
  committed
  2b4c7c0
- fix(accounts): log only safe codes when deleting an account fails
  
  kris1027
  and
  claude
  committed
  7b0bd37
- docs(accounts): verify steps and the scope code pointer
  
  kris1027
  and
  claude
  committed
  fb8c9c0
Commits on Oct 15, 2026
- docs(accounts): amend AC-15 with the source of the order's customer name
  
  kris1027
  and
  claude
  committed
  ebb3938
- feat(accounts): name the order after the profile or delivery name and fill a blank profile name
  
  kris1027
  and
  claude
  committed
  900fd2a
- fix(accounts): replace a planted sign up password when the email is confirmed
  
  kris1027
  and
  claude
  committed
  6146a05
- docs(accounts): fresh model review findings and tick Review it
  
  kris1027
  and
  claude
  committed
  a983e07
- docs(accounts): verify results and tick Verify it
  
  kris1027
  and
  claude
  committed
  3f11da2
- test(accounts): cover schemas, password check, session and tamper cases
  
  kris1027
  and
  claude
  committed
  585bfc6
- docs(accounts): tick Document it
  
  kris1027
  and
  claude
  committed
  e76919d
- chore(sync): reconcile docs
  
  kris1027
  and
  claude
  committed
  9138438
- docs(accounts): amend spec 0012 after review
  
  kris1027
  and
  claude
  committed
  797df62
- fix(accounts): keep account carts to their owner, count merged lines, guard the admin password on confirm
  
  kris1027
  and
  claude
  committed
  1b97338
- docs(accounts): tick the review follow ups and Build it
  
  kris1027
  and
  claude
  committed
  488d41e
- docs(accounts): mark customer accounts done and spec 0012 accepted
  
  kris1027
  and
  claude
  committed
  1d68c22
- chore(sync): reconcile docs
  
  kris1027
  and
  claude
  committed
  750282d
- chore(ci): ignore test fixtures in secret scanning
  
  kris1027
  and
  claude
  committed
  ff39f17
- refactor(accounts): parse the order page and number params with Zod
  
  kris1027
  and
  claude
  committed
  e2efbd6
- docs(env): note that CLI-only variables live in .env.example alone
  
  kris1027
  and
  claude
  committed
  46c24f1
- fix(accounts): refuse account delete for a user with a verified authenticator
  
  kris1027
  and
  claude
  committed
  b31fdd4
- refactor(accounts): share the password check error and carry the auth error name on the throw
  
  kris1027
  and
  claude
  committed
  f50d584
- refactor(accounts): read the settings page data through queries.ts
  
  kris1027
  and
  claude
  committed
  86c20e5
- refactor(checkout): move the signed in checkout steps out of createPendingOrder
  
  kris1027
  and
  claude
  committed
  85ac0ae
- refactor(orders): one order status wording and one max order number in src/lib/orders
  
  kris1027
  and
  claude
  committed
  a14c598
- refactor(emails): build the three auth emails from one AuthLinkEmail
  
  kris1027
  and
  claude
  committed
  37c8330
- refactor(accounts): keep EmailFormError beside the email schema
  
  kris1027
  and
  claude
  committed
  3d1dc68
- refactor(accounts): move the Send Email Hook handler into the account feature
  
  kris1027
  and
  claude
  committed
  199629d
- fix(accounts): refuse dot segments and a trailing slash in the sign in next path
  
  kris1027
  and
  claude
  committed
  5972f90
- fix(cart): read the session when the cookie cart expires before the add locks it
  
  kris1027
  and
  claude
  committed
  92faf13
- fix(accounts): log a malformed Send Email Hook payload as auth_email.bad_payload
  
  kris1027
  and
  claude
  committed
  bc3d67e
- docs(accounts): fix the stale sign up comment in config.toml and pin the AC-22 link's form
  
  kris1027
  and
  claude
  committed
  f1e6dc8
- test(accounts): e2e for the customer session boundaries the spec names
  
  kris1027
  and
  claude
  committed
  b299602
- test(accounts): assert the edited address on its card once the dialog closes
  
  kris1027
  and
  claude
  committed
  4ff4ee6

Commits

Commits on Oct 14, 2026

Commits on Oct 15, 2026