2025-04-05 - 2026-04-05
Overview
3 releases published by 1 user
Tag
v0.0.3
Tag
v0.0.2
Tag
v0.0.1
3 pull requests merged by 2 users
Merged
#50 DX audit and fix (PHP)
Merged
#39 docs: discovery scan — Feb 2026 (closes #3)
Merged
#4 docs(phase-0): environment assessment, architecture review, and findings
33 pull requests proposed by 1 user
Proposed
#51 perf: add composite index on user_workspace(workspace_id, role)
Proposed
#52 security: fix O(n) timing attack in findByToken
Proposed
#53 fix: atomic usage recording to prevent race conditions
Proposed
#54 fix: cascade delete namespaces when workspace is removed
Proposed
#55 fix: cascade delete child features when parent is removed
Proposed
#56 fix: add FK constraint on usage_alert_history.feature_code
Proposed
#57 fix: remove hardcoded hub.host.uk.com domain from controllers
Proposed
#58 fix: validate invitation token format before database lookup
Proposed
#59 fix: complete stub implementations in UserStatsService
Proposed
#60 refactor: add return type hints to Workspace model scope methods
Proposed
#61 perf: fix N+1 query in NamespaceService::groupedForUser
Proposed
#62 refactor: wire WorkspaceScope into BelongsToWorkspace trait
Proposed
#63 refactor: guard external relationships in User model
Proposed
#64 refactor: create EntitlementException hierarchy with subtypes
Proposed
#65 refactor: standardise error response format across API controllers
Proposed
#66 test: add tests for WorkspaceTeamService
Proposed
#67 test: add edge case tests for TotpService
Proposed
#68 feat: add soft deletes to WorkspaceInvitation model
Proposed
#69 perf: lazy-load Workspace relationships to reduce N+1 queries
Proposed
#70 feat: invitation resend, WorkspaceMemberRole enum, configurable expiry
Proposed
#71 test: add tests for EntitlementWebhookService
Proposed
#72 chore: add PHPStan/Larastan to dev dependencies
Proposed
#73 chore: pin lthn/php dependency to stable version
Proposed
#74 docs: fix incorrect namespace in README.md usage examples
Proposed
#75 test: add mutation testing with Infection PHP
Proposed
#76 docs: add OpenAPI/Swagger documentation for all API endpoints
Proposed
#77 feat: add workspace activity audit log
Proposed
#78 feat: add bulk workspace invitation support
Proposed
#79 feat: add artisan command for manual package provisioning
Proposed
#80 test: add tests for NamespaceService
Proposed
#81 chore: add IDE helper annotations to Eloquent models
Proposed
#82 feat: add workspace ownership transfer
Proposed
#83 test: add tests for WorkspaceController API endpoints
3 issues closed from 1 user
Closed
#2 phase 0: environment assessment + test baseline
Closed
#3 discovery: scan php-tenant and create improvement issues
Closed
#1 audit: review workspace and tenant isolation on dev branch
46 issues created by 3 users
Opened
#1 audit: review workspace and tenant isolation on dev branch
Opened
#2 phase 0: environment assessment + test baseline
Opened
#3 discovery: scan php-tenant and create improvement issues
Opened
#5 refactor: clarify WorkspaceScope vs BelongsToWorkspace architecture
Opened
#6 refactor: consolidate User model external relationships
Opened
#7 fix: remove hardcoded domain hub.host.uk.com from EntitlementApiController
Opened
#8 fix: remove hardcoded domain hub.host.uk.com from WorkspaceController
Opened
#9 security: WorkspaceInvitation::findByToken has O(n) timing attack surface
Opened
#10 fix: namespaces.workspace_id should cascade on workspace delete
Opened
#11 perf: add composite index on user_workspace(workspace_id, role)
Opened
#12 fix: feature_code in usage_alert_history not constrained to entitlement_features
Opened
#13 fix: complete stub implementations in UserStatsService
Opened
#14 perf: fix N+1 query in NamespaceService::groupedForUser
Opened
#15 test: add tests for WorkspaceTeamService
Opened
#16 test: add tests for EntitlementWebhookService
Opened
#17 test: add edge case tests for TotpService
Opened
#18 refactor: add return type hints to all Workspace model relationships
Opened
#19 refactor: create EntitlementException hierarchy with subtypes
Opened
#20 refactor: standardise error response format across API controllers
Opened
#21 perf: lazy-load Workspace model relationships to reduce N+1 queries
Opened
#22 feat: add soft deletes to WorkspaceInvitation model
Opened
#23 feat: add workspace invitation resend functionality
Opened
#24 refactor: create WorkspaceMemberRole enum for type safety
Opened
#25 feat: make workspace invitation expiry configurable
Opened
#26 chore: add PHPStan/Larastan to dev dependencies
Opened
#27 chore: pin host-uk/core dependency to stable version
Opened
#28 docs: fix incorrect namespace in README.md usage examples
Opened
#29 test: add tests for WorkspaceController API endpoints
Opened
#30 test: add tests for NamespaceService
Opened
#31 chore: add IDE helper annotations to Eloquent models
Opened
#32 chore: create artisan command for manual package provisioning
Opened
#33 docs: add OpenAPI/Swagger documentation for all API endpoints
Opened
#34 test: add mutation testing with Infection PHP
Opened
#35 feat: add workspace ownership transfer
Opened
#36 feat: add bulk workspace invitation support
Opened
#37 feat: add workspace activity audit log
Opened
#38 roadmap: php-tenant production readiness
Opened
#40 fix: entitlement_features.parent_feature_id nullOnDelete orphans child features
Opened
#41 perf: add missing indexes to entitlement_webhook_deliveries table
Opened
#42 security: EntitlementService usage recording has race condition under concurrency
Opened
#43 fix: validate invitation token format before database lookup in web routes
Opened
#44 epic: php-tenant production readiness
Opened
#46 [audit] Security, code quality, missing tests, error handling
Opened
#47 [scan] Security attack vector mapping
Opened
#48 [scan] API contract extraction
Opened
#49 [scan] Convention drift check