nexxo 86bf4f26e0 List issued invoices in the console, with no way to change one ... Read-only by design, and the absence is the feature: an issued invoice is corrected by cancelling it and issuing another, which is the only lawful way to correct one. There is no edit button here whose absence needs explaining, and a test asserts there is none. The PDF is a plain route rather than a Livewire action. A download is a download, and routing one through a component round-trip only adds a way for it to fail. Two findings on the way, and both were mine. The year filter used YEAR() in raw SQL, which is MySQL's. SQLite has no such function, so the page worked against the real database and threw against the test one — a query that only runs on one engine makes the test database a different product from the one being shipped. The years are derived in PHP now. And a test put a User on the operator guard, where EnsureAdmin calls isActive() on it and a 403 becomes a 500. Not a code defect: actingAs() calls Auth::shouldUse(), so a second actingAs() in the same test with no guard named lands on whichever guard the FIRST one named. That trap is written up in CLAUDE.md, I quoted it earlier today, and I walked into it anyway. The tests are split now and both name their guard. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-07-29 02:21:15 +02:00
..
admin.php	List issued invoices in the console, with no way to change one	2026-07-29 02:21:15 +02:00
admin_settings.php	Update only to a released version, never to whatever landed on main	2026-07-28 22:32:44 +02:00
auth.php	Give the console a front door of its own	2026-07-28 11:45:22 +02:00
backups.php	feat(portal): full sidebar — Cloud, Users, Backups, Invoices, Support	2026-07-25 08:08:33 +02:00
billing.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
cloud.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
coming_soon.php	Dress the placeholder page, and record why the obvious VPN fix cannot work	2026-07-27 09:19:30 +02:00
common.php	Recover silently from an expired session, and show a connection banner when offline	2026-07-28 21:36:21 +02:00
dashboard.php	Stop mailing the initial admin password, hold it in the panel until noted	2026-07-28 23:19:20 +02:00
datacenters.php	Let a datacenter code be corrected while nothing depends on it, and say which building	2026-07-28 22:25:21 +02:00
devices.php	Recognise the devices an account signs in from, and warn about a new one	2026-07-28 23:28:34 +02:00
errors.php	Refuse a portal login for an address that already belongs to an operator	2026-07-28 14:42:16 +02:00
finance.php	Give the console a Finance tab: company details, VAT rate, invoice series	2026-07-29 01:18:43 +02:00
hosts.php	Show WireGuard tunnel state per host in the hosts list	2026-07-29 00:10:15 +02:00
impersonate.php	feat(admin): impersonate customer portal — session login + return banner	2026-07-25 13:46:48 +02:00
instances.php	Pin the sidebar header and footer so only the nav list scrolls, and shorten two action labels that wrapped	2026-07-28 20:52:12 +02:00
integrations.php	Add a raw .env editor to the Integrations page, with a net under it	2026-07-29 01:51:27 +02:00
invoice.php	Issue an invoice from what somebody bought, and freeze it there	2026-07-29 02:09:05 +02:00
invoice_mail.php	Send the invoice with the invoice attached	2026-07-29 02:13:41 +02:00
invoices.php	feat(portal): full sidebar — Cloud, Users, Backups, Invoices, Support	2026-07-25 08:08:33 +02:00
invoices_admin.php	List issued invoices in the console, with no way to change one	2026-07-29 02:21:15 +02:00
mail.php	Recognise the devices an account signs in from, and warn about a new one	2026-07-28 23:28:34 +02:00
mail_settings.php	Bound the mail test-send and real send to a timeout instead of hanging	2026-07-28 16:36:14 +02:00
maintenance.php	Put every mail in one design, and confirm an order when the money arrives	2026-07-29 00:14:04 +02:00
orders.php	Keep the shop window off the portal's front door	2026-07-29 00:26:22 +02:00
plans.php	Make the console's access list reach the proxy, price in euros, and answer errors	2026-07-27 06:51:05 +02:00
provisioning.php	Keep the shop window off the portal's front door	2026-07-29 00:26:22 +02:00
secrets.php	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
sessions.php	Show where an account is signed in, and let it sign the other places out	2026-07-28 23:38:17 +02:00
settings.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
status.php	Make the console's access list reach the proxy, price in euros, and answer errors	2026-07-27 06:51:05 +02:00
support.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00
two_factor_setup.php	Let a half-finished two-factor enrolment be cancelled, and rework the setup page	2026-07-28 22:25:27 +02:00
updating.php	feat(ops): update page, automatic 419 recovery, CI workflow	2026-07-26 00:58:27 +02:00
users.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
verify_email.php	Require a confirmed address before an account can use anything	2026-07-28 23:43:20 +02:00
vpn.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00