davidherran 7c689e034e fix(session): validate SESSION_SECRET lazily, not at module load ...

The module-level SESSION_SECRET check threw during `next build` (page-data
collection imports session.ts but has no runtime env vars), breaking the
Docker build at /hq-command/dashboard.

Move the check inside getEncodedKey() so it runs at runtime when a session
is actually created. Security is unchanged: the secret is still never
defaulted, and any attempt to mint a session without a valid 32+ char
secret throws loudly. It just no longer blocks the build.

Verified: `next build` now compiles with SESSION_SECRET unset (replicating
the Docker builder stage) — 56/56 pages generated.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-06 17:14:05 -05:00

.github/workflows

production: docker + nginx config for rf-flux.com

2026-03-20 13:46:05 -05:00

docs

feat(analytics): GA4 with GDPR Consent Mode v2

2026-06-02 06:53:04 -05:00

messages

feat(map): connect Global Map cases to their full application case pages

2026-06-05 12:17:08 -05:00

nginx

feat(team): public Team page + HQ CMS panel

2026-06-02 07:17:09 -05:00

prisma

feat(applications): drag-to-reorder on the public site

2026-06-05 12:04:10 -05:00

public

fix(deploy): stop tracking public/team + public/branding

2026-06-06 16:57:07 -05:00

scripts

fix: nextjs primary group + auto-create asset folders on entity create

2026-05-05 08:01:45 -05:00

src

fix(session): validate SESSION_SECRET lazily, not at module load

2026-06-06 17:14:05 -05:00

tests/ai

feat(i18n): preserve English technical terms in AI translation

2026-06-05 17:15:34 -05:00

.dockerignore

fix: stop ignoring scripts/ in .dockerignore

2026-05-04 18:29:18 -05:00

.gitignore

fix(deploy): stop tracking public/team + public/branding

2026-06-06 16:57:07 -05:00

docker-compose.yml

feat(analytics): activate GA4 (G-KQ1JRV3KN7) + GDPR privacy page + GSC support

2026-06-05 12:00:44 -05:00

Dockerfile

feat(analytics): activate GA4 (G-KQ1JRV3KN7) + GDPR privacy page + GSC support

2026-06-05 12:00:44 -05:00

env

feat(analytics): activate GA4 (G-KQ1JRV3KN7) + GDPR privacy page + GSC support

2026-06-05 12:00:44 -05:00

eslint.config.mjs

Initial commit from Create Next App

2026-02-22 11:45:37 -05:00

MEMORY.md

fixes Markdown

2026-04-16 10:29:20 -05:00

next.config.ts

fix: instant CMS uploads + heritage dark/light + ISR caching

2026-05-04 09:27:46 -05:00

package-lock.json

fix: pin all sharp platform binaries so npm ci works on any host

2026-05-04 15:52:22 -05:00

package.json

feat(security+ai): security hardening + FluxAI conversation analytics

2026-05-27 08:10:19 -05:00

postcss.config.mjs

Initial commit from Create Next App

2026-02-22 11:45:37 -05:00

prisma.config.ts

fix: prisma migrate now runs at container startup + dotenv optional

2026-05-04 15:04:35 -05:00

tsconfig.json

Initial commit from Create Next App

2026-02-22 11:45:37 -05:00

S

Description

No description provided

499 MiB

Languages

TypeScript 98.1%

JavaScript 0.9%

Dockerfile 0.4%

Shell 0.4%

CSS 0.2%