7d9a54ca0f
A privilege-escalation fix in the Windows installer, the multi-site portability work, and a documentation and API surface that a second site can rely on. The installer created C:\shopdb-flask, C:\Python314 and C:\MySQL84 without breaking inheritance from the drive root, whose default DACL grants Authenticated Users an inherit-only Modify. Two files inside those roots are executed by someone else - shopdb-admin.ps1 self-elevates, and instance config.py is loaded unconditionally by the app - so any logged-on user could replace either and wait. Verified fixed as SYSTEM in the Windows 11 VM against the shipped functions. Contract 0.19.0 is breaking: get_dashboard_widgets returns data and shape, not a component name. The change itself shipped earlier without a bump, with the contract docs still teaching the dead shape; both are corrected. The version and the changelog are the release; the detail is in the entry.
41 lines
997 B
JSON
41 lines
997 B
JSON
{
|
|
"name": "shopdb-frontend",
|
|
"version": "0.10.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"stage": "node ../scripts/stage-frontend.mjs",
|
|
"predev": "npm run stage",
|
|
"dev": "vite",
|
|
"prebuild": "npm run stage",
|
|
"build": "vite build",
|
|
"preview": "vite preview",
|
|
"pretest": "npm run stage",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest"
|
|
},
|
|
"dependencies": {
|
|
"@fontsource-variable/inter": "^5.2.8",
|
|
"@fullcalendar/core": "^6.1.20",
|
|
"@fullcalendar/daygrid": "^6.1.20",
|
|
"@fullcalendar/vue3": "^6.1.20",
|
|
"axios": "^1.6.0",
|
|
"dompurify": "^3.4.11",
|
|
"jsbarcode": "^3.12.3",
|
|
"jspdf": "^4.2.1",
|
|
"leaflet": "^1.9.4",
|
|
"lucide-vue-next": "^0.563.0",
|
|
"pinia": "^2.1.0",
|
|
"qrcode": "^1.5.4",
|
|
"vue": "^3.4.0",
|
|
"vue-router": "^4.2.0"
|
|
},
|
|
"devDependencies": {
|
|
"@vitejs/plugin-vue": "^5.2.4",
|
|
"@vue/test-utils": "^2.4.6",
|
|
"jsdom": "^25.0.1",
|
|
"vite": "^6.4.1",
|
|
"vitest": "^2.1.9"
|
|
}
|
|
}
|