Items are now private to their owner. Add items.user_id (migrated in
place, existing items backfilled to the first admin) and scope every
item, results, and dashboard view to the signed-in user via owner-scoped
queries plus an ownedItem 404 guard. Admins get strict isolation too;
elevation stays limited to settings and user management.
Alert routing follows ownership: deal emails go only to the item owner
and the weekly digest is built per-recipient from their own items. The
scheduler still polls every active item; the Apify/eBay budget stays a
shared pool visible to all.
Add TestItemsArePrivatePerUser and seed owners in db tests.
For SSO users the email address is the IdP match key, so allowing them
to edit it in Veola orphaned the row on next sign-in. PostEmailPrefs now
keeps the synced Authentik email for forward users (only the deal-alert
and digest toggles stay editable); the settings form renders the field
read-only with a Managed by Authentik note. Local break-glass users keep
an editable field.
Add forward-auth integration tests over the full Routes() chain: trusted
proxy provisions an admin, untrusted peer's spoofed headers are ignored,
role re-syncs per request, and the email-prefs round trip confirms a form
cannot change a forward user's IdP email.
Auction handling:
- Capture itemEndDate from eBay Browse API and ending_date from ZenMarket
(Yahoo JP); plumb through results.ends_at column. Permissive ZenMarket
parser (multiple layouts, JST when offset missing).
- Per-row "Ends" countdown column + "Ending soon" banner on results pages,
live-ticked by flair.js with urgent/critical tinting under 1h/5m.
- Backfill ends_at for known auctions when their URL reappears in a poll
(dedup hit no longer drops the new end time).
- Hide ended auctions from result listings by default via
ResultsQuery.ExcludeEnded; rows stay in the DB.
Visual flair:
- Glassy backdrop-blur v-cards with gradient-mask borders and hover-lift.
- htmx swap fade-in via transient .v-just-swapped class.
- Count-up animation on dashboard stats. All animations gated behind
prefers-reduced-motion.
eBay condition + region filters (auctions-style scoping):
- items.condition and items.region columns; threaded through item form,
CreateItem/UpdateItem, scheduler eBay plan input, and previewKey so
cache invalidates when these change.
- ebay.SearchParams gains conditionIds and itemLocationCountry filters.
Run Now reload + countdown engine:
- Run Now now sets HX-Refresh: true (non-htmx fallback: 303 redirect) so
the entire results view — best price, chart, badge, last polled —
reflects the new poll, instead of swapping just one partial.
Pre-launch hardening (P1 set):
- auth.EqualizeLoginTiming on no-such-user branch.
- (*App).serverError centralizes 500s; replaces err.Error() leaks across
results/settings/items/users/dashboard handlers.
- main.go server: ReadTimeout 30s / WriteTimeout 60s / IdleTimeout 120s
alongside the existing ReadHeaderTimeout.
- noListFS wrapper blocks static directory listings.
- Credential fields in settings no longer render value=; blank submission
preserves the saved value, with per-field "Saved in settings / Set in
config.toml / Not set" status indicator.
Misc:
- -debug flag wires slog to LevelDebug; raw ZenMarket items logged for
format diagnosis.
- /healthz public endpoint for reverse-proxy probes.
- deploy/veola.service systemd unit template (hardening flags, single
ReadWritePaths=/var/lib/veola).
- handlers_test.go covers /healthz, setup-gate redirect, auth gate, and
/login render with httptest + in-memory sqlite.
- best_price_currency on items; templates pick the right symbol per row.
- .gitignore now excludes *.log / veola-debug.log.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
