Started by timer777378885a48e4f902910fad004ab676b75d48e3466378885a48e4f902910fad004ab676b75d48e3466refs/remotes/origin/dev378885a48e4f902910fad004ab676b75d48e3466378885a48e4f902910fad004ab676b75d48e3466refs/remotes/origin/dev378885a48e4f902910fad004ab676b75d48e3466378885a48e4f902910fad004ab676b75d48e3466refs/remotes/origin/devhttps://github.com/younex1/erp-nuxt-frontend.githttps://jenkins.younex.de/job/build-logship-frontend/777/artifacthttps://jenkins.younex.de/job/build-logship-frontend/changeshttps://jenkins.younex.de/job/build-logship-frontend/777/https://jenkins.younex.de/job/build-logship-frontend/777/testReportfalse#7776266160620build-logship-frontend #777777falsefalse7775873SUCCESS1792886460764https://jenkins.younex.de/job/build-logship-frontend/777/app/components/AgGridServer.vueapp/pages/materials/products/index.vueapp/components/materials/ProductThumbnail.vueapp/pages/materials/products-v2/index.vuea8c0fc5da44e7a162e204825515022eba07c20fa1792846799000https://jenkins.younex.de/user/infoinfoinfo@younex.deProducts list: larger product thumbnails — ProductThumbnail takes a size via cellRendererParams (default 26 px unchanged elsewhere), picks the first Strapi format ≥ 2× the rendered size for sharp HiDPI output, rounded border + zoom-in cursor + hover enlarge, unscoped styles (AG Grid renderer); AgGridServer gets an optional rowHeight prop; /materials/products and /materials/products-v2 use 48 px thumbnails in a fixed 64 px column with 56 px rows 2026-10-24 14:59:59 +0200a8c0fc5da44e7a162e204825515022eba07c20faProducts list: larger product thumbnails — ProductThumbnail takes a size via cellRendererParams (default 26 px unchanged elsewhere), picks the first Strapi format ≥ 2× the rendered size for sharp HiDPI output, rounded border + zoom-in cursor + hover enlarge, unscoped styles (AG Grid renderer); AgGridServer gets an optional rowHeight prop; /materials/products and /materials/products-v2 use 48 px thumbnails in a fixed 64 px column with 56 px rowseditapp/pages/materials/products/index.vueeditapp/components/AgGridServer.vueeditapp/components/materials/ProductThumbnail.vueeditapp/pages/materials/products-v2/index.vueapp/components/AgGrid/SalesOrder/AgCustomAttachment.vueapp/components/AgGrid/SalesOrder/AgCustomTrackingNo.vue.claude/rules/sales/orders-grid.mdserver/api/orders/ag-grid/summary.post.tsapp/pages/sales/orders/index.vueapp/components/AgGridServer.vueapp/components/sales/OrderAction.vue1f060bd74c0e4b59ff13eceefb3cbc1a1ed1f1c21792849499000https://jenkins.younex.de/user/infoinfoinfo@younex.deSales orders grid: faster initial load and scroll blocks — summary endpoint enriches each 50-row block with one batched m_inout lookup (tracking no, shipment id/status, marketplace confirm log) and one batched Strapi attachments lookup (count + documentId), so the TrackingNo, Attachment and OrderAction cell renderers read row data instead of firing 3 requests per rendered row (105 on first paint, ~180 per two scroll steps); grid-ready latest-order-id now a 40 ms c_order top-1 query instead of an unfiltered summary call that summed all ~40k orders (2.5 s / 5 MB) on every page open; fees/revenue totals only on block 0 (AgGridServer sends withAggregates), $select on the view query (257 → 150 KB per block), debug log removed, organization auto-size once instead of every block, 150 ms block-load debounce; attachment files loaded on click only, per-row fallback kept when the Strapi batch is unavailable; voided check in the attachment tag now reads docStatusId; recipe .claude/rules/sales/orders-grid.md 2026-10-24 15:44:59 +02001f060bd74c0e4b59ff13eceefb3cbc1a1ed1f1c2Sales orders grid: faster initial load and scroll blocks — summary endpoint enriches each 50-row block with one batched m_inout lookup (tracking no, shipment id/status, marketplace confirm log) and one batched Strapi attachments lookup (count + documentId), so the TrackingNo, Attachment and OrderAction cell renderers read row data instead of firing 3 requests per rendered row (105 on first paint, ~180 per two scroll steps); grid-ready latest-order-id now a 40 ms c_order top-1 query instead of an unfiltered summary call that summed all ~40k orders (2.5 s / 5 MB) on every page open; fees/revenue totals only on block 0 (AgGridServer sends withAggregates), $select on the view query (257 → 150 KB per block), debug log removed, organization auto-size once instead of every block, 150 ms block-load debounce; attachment files loaded on click only, per-row fallback kept when the Strapi batch is unavailable; voided check in the attachment tag now reads docStatusId; recipe .claude/rules/sales/orders-grid.mdeditapp/pages/sales/orders/index.vueeditapp/components/AgGridServer.vueadd.claude/rules/sales/orders-grid.mdeditapp/components/AgGrid/SalesOrder/AgCustomTrackingNo.vueeditserver/api/orders/ag-grid/summary.post.tseditapp/components/sales/OrderAction.vueeditapp/components/AgGrid/SalesOrder/AgCustomAttachment.vueserver/api/orders/ag-grid/so.post.tsserver/api/orders/ag-grid/notfulfilled-5days.post.tsserver/api/orders/ag-grid/notfulfilled-fastlane.post.tsserver/api/orders/ag-grid/notfulfilled.post.ts.claude/rules/sales/orders-grid.md1b0d7dc4c3d37799ace553363f21cc62d6d1fdfb1792849644000https://jenkins.younex.de/user/infoinfoinfo@younex.deRemove unused legacy orders ag-grid routes (so, notfulfilled, notfulfilled-5days, notfulfilled-fastlane) — no caller since the 2026-06-02 cleanup (page switched to ag-grid/summary), zero hits in 59 days of prod and dev web logs; they expanded c_orderline + m_inout child tables per block and copied the whole country table into every row 2026-10-24 15:47:24 +02001b0d7dc4c3d37799ace553363f21cc62d6d1fdfbRemove unused legacy orders ag-grid routes (so, notfulfilled, notfulfilled-5days, notfulfilled-fastlane) — no caller since the 2026-06-02 cleanup (page switched to ag-grid/summary), zero hits in 59 days of prod and dev web logs; they expanded c_orderline + m_inout child tables per block and copied the whole country table into every rowdeleteserver/api/orders/ag-grid/so.post.tsdeleteserver/api/orders/ag-grid/notfulfilled-5days.post.tsdeleteserver/api/orders/ag-grid/notfulfilled.post.tsdeleteserver/api/orders/ag-grid/notfulfilled-fastlane.post.tsedit.claude/rules/sales/orders-grid.mdserver/api/idempiere-auth/webauthn/register-verify.post.tsserver/api/admin/users/[id]/webauthn/index.get.tsserver/api/idempiere-auth/webauthn/login-verify.post.tsserver/api/idempiere-auth/webauthn/delete.delete.tsserver/api/admin/webauthn/keys.get.tsserver/api/idempiere-auth/webauthn/login-options.post.tsandroid/variables.gradleandroid/app/src/main/java/com/logship/mobile/WebAuthnPlugin.javaserver/utils/webauthnAdmin.tsapp/composables/useWebAuthn.tsnuxt.config.tsandroid/app/src/main/java/com/logship/mobile/MainActivity.javaserver/utils/webauthnReplayDb.ts.claude/rules/auth/webauthn-security-keys.mdapp/plugins/00.capacitor-api.client.tsapp/pages/users/security-keys/index.vueserver/utils/webauthnChallengeStore.tsserver/utils/adUserCredentials.tsapp/assets/langs/shared.jsapp/pages/signin.vueapp/pages/users/users/[id]/edit.vueserver/api/admin/users/[id]/webauthn/destroy.delete.ts.envserver/utils/webauthnHelper.tsapp/components/users/SecurityKeys.vuepublic/.well-known/assetlinks.jsonandroid/app/build.gradleserver/utils/webauthnIndex.tsserver/api/admin/users/[id]/webauthn/register-options.post.tsapp/composables/menu/admin/users.tsserver/api/admin/users/[id]/webauthn/register-verify.post.tsserver/api/idempiere-auth/webauthn/list.get.ts.env-prodaf490f06fc09c720e7b0d3acf48c0554990aa4b41792853248000https://jenkins.younex.de/user/infoinfoinfo@younex.deSecurity-key login: PIN-free YubiKey tap on web + native Android app, admin enrolment and central overview — enrolment now creates non-discoverable, cross-platform credentials with userVerification 'discouraged' (a YubiKey only holds discoverable credentials with a PIN set and Chrome/Windows then prompt for it on every login); login-options sends the credential IDs of all enrolled keys (webauthnIndex.ts: service-token ad_user index, 60 s cache, cap WEBAUTHN_GLOBAL_ALLOWLIST_MAX=150, username-first fallback via needsUserName) and login-verify resolves the user by credential ID (userHandle only as legacy fallback), bumps counter + lastUsedAt; challenge token also returned in the body for cookie-less clients with a better-sqlite3 replay ledger (data/webauthn-replay.db); multiple accepted origins via WEBAUTHN_EXTRA_ORIGINS (Android android:apk-key-hash of the debug-keystore cert, assetlinks.json under public/.well-known); native app: WebAuthnPlugin.java on androidx.credentials (Credential Manager → Play services FIDO over NFC/USB), useWebAuthn routes create/get through it, login-verify delegates to app-auth/login for X-Logship-App requests and the app fetch plugin feeds that response into the session store (+ biometric unlock enrolment after a key login); tenant admins enrol/revoke keys for employees on the user edit page (admin/users/[id]/webauthn/*, isAdminRole gate, password capture with the service token) and on the new overview /users/security-keys (admin/webauthn/keys: all keys, last used, enrolled by, revoke, enrol for a picked employee; menu Users → Security Keys); sign-in page: key button first on devices that used a key before, clear cancel / not-enrolled / throttled messages, per-IP throttle on login-options; de/en/es texts reworded from passkey to security key; recipe .claude/rules/auth/webauthn-security-keys.md 2026-10-24 16:47:28 +0200af490f06fc09c720e7b0d3acf48c0554990aa4b4Security-key login: PIN-free YubiKey tap on web + native Android app, admin enrolment and central overview — enrolment now creates non-discoverable, cross-platform credentials with userVerification 'discouraged' (a YubiKey only holds discoverable credentials with a PIN set and Chrome/Windows then prompt for it on every login); login-options sends the credential IDs of all enrolled keys (webauthnIndex.ts: service-token ad_user index, 60 s cache, cap WEBAUTHN_GLOBAL_ALLOWLIST_MAX=150, username-first fallback via needsUserName) and login-verify resolves the user by credential ID (userHandle only as legacy fallback), bumps counter + lastUsedAt; challenge token also returned in the body for cookie-less clients with a better-sqlite3 replay ledger (data/webauthn-replay.db); multiple accepted origins via WEBAUTHN_EXTRA_ORIGINS (Android android:apk-key-hash of the debug-keystore cert, assetlinks.json under public/.well-known); native app: WebAuthnPlugin.java on androidx.credentials (Credential Manager → Play services FIDO over NFC/USB), useWebAuthn routes create/get through it, login-verify delegates to app-auth/login for X-Logship-App requests and the app fetch plugin feeds that response into the session store (+ biometric unlock enrolment after a key login); tenant admins enrol/revoke keys for employees on the user edit page (admin/users/[id]/webauthn/*, isAdminRole gate, password capture with the service token) and on the new overview /users/security-keys (admin/webauthn/keys: all keys, last used, enrolled by, revoke, enrol for a picked employee; menu Users → Security Keys); sign-in page: key button first on devices that used a key before, clear cancel / not-enrolled / throttled messages, per-IP throttle on login-options; de/en/es texts reworded from passkey to security key; recipe .claude/rules/auth/webauthn-security-keys.mdeditandroid/app/src/main/java/com/logship/mobile/MainActivity.javaeditapp/pages/users/users/[id]/edit.vueaddserver/api/admin/users/[id]/webauthn/register-verify.post.tsaddandroid/app/src/main/java/com/logship/mobile/WebAuthnPlugin.javaeditnuxt.config.tsaddserver/api/admin/users/[id]/webauthn/destroy.delete.tseditandroid/app/build.gradleeditandroid/variables.gradleeditserver/api/idempiere-auth/webauthn/login-options.post.tseditserver/utils/adUserCredentials.tsaddserver/utils/webauthnIndex.tseditapp/assets/langs/shared.jsaddserver/utils/webauthnAdmin.tseditapp/composables/menu/admin/users.tsaddserver/api/admin/users/[id]/webauthn/register-options.post.tseditserver/utils/webauthnChallengeStore.tsadd.claude/rules/auth/webauthn-security-keys.mdeditserver/api/idempiere-auth/webauthn/register-verify.post.tseditserver/utils/webauthnHelper.tseditserver/api/idempiere-auth/webauthn/list.get.tseditserver/api/idempiere-auth/webauthn/login-verify.post.tsaddapp/pages/users/security-keys/index.vueeditapp/plugins/00.capacitor-api.client.tseditserver/api/idempiere-auth/webauthn/delete.delete.tseditapp/components/users/SecurityKeys.vueaddserver/utils/webauthnReplayDb.tseditapp/pages/signin.vueedit.enveditapp/composables/useWebAuthn.tsaddpublic/.well-known/assetlinks.jsonaddserver/api/admin/webauthn/keys.get.tsaddserver/api/admin/users/[id]/webauthn/index.get.tsedit.env-prodserver/utils/webauthnHelper.ts94aa23a270d70300b2a4046f5e9c8c2009220e161792854035000https://jenkins.younex.de/user/infoinfoinfo@younex.deSecurity-key login: allow-list always advertises usb + nfc for roaming keys — Android Credential Manager only arms NFC when 'nfc' is hinted, and keys enrolled over USB on a desktop recorded ['usb'] only, so a tap on the phone opened the YubiKey's NDEF page instead of the FIDO ceremony 2026-10-24 17:00:35 +020094aa23a270d70300b2a4046f5e9c8c2009220e16Security-key login: allow-list always advertises usb + nfc for roaming keys — Android Credential Manager only arms NFC when 'nfc' is hinted, and keys enrolled over USB on a desktop recorded ['usb'] only, so a tap on the phone opened the YubiKey's NDEF page instead of the FIDO ceremonyeditserver/utils/webauthnHelper.ts.claude/rules/auth/webauthn-security-keys.mdapp/pages/signin.vue31ec1be9cb1a119633e43662b6c36de51ba551731792854221000https://jenkins.younex.de/user/infoinfoinfo@younex.deSecurity-key login: show the Credential Manager reason behind 'Key not recognised' in the native app (asset-link / provider failures looked like a missed tap); recipe: ISPConfig nginx denies dot paths — /.well-known/assetlinks.json proxy exception added by hand on the app/dev-app vhosts, verification URL, Play-services cache note 2026-10-24 17:03:41 +020031ec1be9cb1a119633e43662b6c36de51ba55173Security-key login: show the Credential Manager reason behind 'Key not recognised' in the native app (asset-link / provider failures looked like a missed tap); recipe: ISPConfig nginx denies dot paths — /.well-known/assetlinks.json proxy exception added by hand on the app/dev-app vhosts, verification URL, Play-services cache noteedit.claude/rules/auth/webauthn-security-keys.mdeditapp/pages/signin.vueapp/pages/signin.vueandroid/app/src/main/AndroidManifest.xmlandroid/app/build.gradle.claude/rules/auth/webauthn-security-keys.mdandroid/variables.gradleandroid/app/src/main/java/com/logship/mobile/WebAuthnPlugin.javaapp/composables/useWebAuthn.tsapp/assets/langs/shared.jsc3ced8b1687b420a7491420a0c67db0716aa30451792859305000https://jenkins.younex.de/user/infoinfoinfo@younex.deSecurity-key login in the native app: own in-app YubiKey ceremony instead of the Android Credential Manager sheet — WebAuthnPlugin.java now runs CTAP2 getAssertion/makeCredential itself on YubiKit 3.1.0 (NFC reader mode with skipNdefCheck + USB discovery, own "hold the key to the phone" AlertDialog, raw Ctap2Session so a PIN-protected key is never asked for its PIN, allow-lists longer than maxCredentialCountInList probed in silent up=false chunks, connection loss keeps the dialog open for the next tap); the assertion signs for the web origin (public.apiBase = WEBAUTHN_ORIGIN) so no Play services, no asset links and no apk-key-hash origin are involved any more (mode 'system' keeps the Credential Manager path as fallback); NFC permission + optional nfc/usb-host features in the manifest; useWebAuthn passes origin, localized dialog texts and exposes cancelNative/capabilities, sign-in page cancels an open dialog on unmount; mobile web sign-in (≤768 px, not iOS, not in the app) shows an Android APK download card with the public manifest's version; de/en/es texts; recipe updated 2026-10-24 18:28:25 +0200c3ced8b1687b420a7491420a0c67db0716aa3045Security-key login in the native app: own in-app YubiKey ceremony instead of the Android Credential Manager sheet — WebAuthnPlugin.java now runs CTAP2 getAssertion/makeCredential itself on YubiKit 3.1.0 (NFC reader mode with skipNdefCheck + USB discovery, own "hold the key to the phone" AlertDialog, raw Ctap2Session so a PIN-protected key is never asked for its PIN, allow-lists longer than maxCredentialCountInList probed in silent up=false chunks, connection loss keeps the dialog open for the next tap); the assertion signs for the web origin (public.apiBase = WEBAUTHN_ORIGIN) so no Play services, no asset links and no apk-key-hash origin are involved any more (mode 'system' keeps the Credential Manager path as fallback); NFC permission + optional nfc/usb-host features in the manifest; useWebAuthn passes origin, localized dialog texts and exposes cancelNative/capabilities, sign-in page cancels an open dialog on unmount; mobile web sign-in (≤768 px, not iOS, not in the app) shows an Android APK download card with the public manifest's version; de/en/es texts; recipe updatededitandroid/app/src/main/java/com/logship/mobile/WebAuthnPlugin.javaedit.claude/rules/auth/webauthn-security-keys.mdeditapp/pages/signin.vueeditandroid/app/src/main/AndroidManifest.xmleditandroid/app/build.gradleeditapp/composables/useWebAuthn.tseditandroid/variables.gradleeditapp/assets/langs/shared.jsapp/composables/useWebAuthn.tsandroid/app/src/main/java/com/logship/mobile/WebAuthnPlugin.java8c5b5df7a2a21edbe63c6414c5a30f67e4fc67871792861176000https://jenkins.younex.de/user/infoinfoinfo@younex.deSecurity-key login (native app): never hide the key button — the YubiKit manager is created lazily (a throwing Plugin.load() makes Capacitor drop the whole plugin and the sign-in page silently lost the button), isAvailable() always resolves and reports nfc/usb/yubikit flags plus the init error text, the composable treats a rejected availability call as "plugin unavailable" and surfaces that reason on tap instead of hiding the button, dialog.show() guarded 2026-10-24 18:59:36 +02008c5b5df7a2a21edbe63c6414c5a30f67e4fc6787Security-key login (native app): never hide the key button — the YubiKit manager is created lazily (a throwing Plugin.load() makes Capacitor drop the whole plugin and the sign-in page silently lost the button), isAvailable() always resolves and reports nfc/usb/yubikit flags plus the init error text, the composable treats a rejected availability call as "plugin unavailable" and surfaces that reason on tap instead of hiding the button, dialog.show() guardededitapp/composables/useWebAuthn.tseditandroid/app/src/main/java/com/logship/mobile/WebAuthnPlugin.javaapp/pages/signin.vueserver/api/mobile/app-download.get.tse63b9d8bf517b17933a3beb7e4eef53d802751981792861753000https://jenkins.younex.de/user/infoinfoinfo@younex.deSign-in Android download card: point at the CURRENT build in the ERP release channel — new public GET /api/mobile/app-download returns version + a 24 h signed download URL (data/mobile-releases via mobileReleases.ts), legacy www.logyou.de manifest only as fallback; the old public web root still served the September build 1.0.45, so the card would have handed out a stale APK 2026-10-24 19:09:13 +0200e63b9d8bf517b17933a3beb7e4eef53d80275198Sign-in Android download card: point at the CURRENT build in the ERP release channel — new public GET /api/mobile/app-download returns version + a 24 h signed download URL (data/mobile-releases via mobileReleases.ts), legacy www.logyou.de manifest only as fallback; the old public web root still served the September build 1.0.45, so the card would have handed out a stale APKeditapp/pages/signin.vueaddserver/api/mobile/app-download.get.tsandroid/update-files/version.jsonandroid/app/build.gradle378885a48e4f902910fad004ab676b75d48e34661792861879000https://jenkins.younex.de/user/infoinfoinfo@younex.derelease app 1.0.67 (code 68): in-app YubiKey security-key ceremony, Android download card 2026-10-24 19:11:19 +0200378885a48e4f902910fad004ab676b75d48e3466release app 1.0.67 (code 68): in-app YubiKey security-key ceremony, Android download cardeditandroid/update-files/version.jsoneditandroid/app/build.gradlegithttps://jenkins.younex.de/user/infoinfoinfo