Closer

Commit Graph

Author	SHA1	Message	Date
null	3cd3195e3f	build(functions): bump runtime Node 20 → 22 (Node 20 decommissioned 2026-10-30) Node 20 was deprecated 2026-04-30 and deploys are blocked after 2026-10-30. nodejs22 is GA for BOTH gens (deprecation 2027-04-30) — required because the runtime is codebase-wide and onUserDelete stays gen1. nodejs24 was checked per plan and rejected: 2nd-gen only. - functions/package.json engines.node 20 → 22 (the deploy-facing change; dist unaffected) - .github/workflows/backend-ci.yml: both setup-node pins 20 → 22 so CI matches prod Verified pre-deploy: tsc clean, 70 tests green, emulator discovery loads all 35 / 0 errors. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-08 03:42:18 -05:00
null	55699e17ed	feat: security hardening, CI, analytics, invite deep links, solo mode, weekly recap Roadmap phases 0-3.1 (see plan). Verified: unit tests, functions tests, firestore rules 119/119, live emulator smokes. Security + CI: - Move App Check debug token out of committed build.gradle.kts to local.properties (secret() resolver: local.properties -> -P -> env); admin service-account key relocated outside the repo. - Add GitHub Actions (android unit/scan/gitleaks, backend functions + rules emulator via emulators:exec) with a CI google-services.json stub and a reviewed .gitleaksignore baseline. - Fix firestore rules tests to the current deployed contract (was 108/118, now 119/119). Analytics + consent: - FirebaseRetentionAnalytics behind a fail-safe composite sink, single- sourced hashing (AnalyticsHashing), Settings -> Privacy opt-out toggle gating Firebase + the sink, and the ~11 missing event call sites. - NoPlaintextInAnalyticsTest guards the content-free rule at build time. Funnel: - Invite deep links (https App Link + closer:// fallback), JoinLink parser, PendingJoinCodeStore, prefilled/already-paired pairing, richer share text. - Solo pre-pairing: UnpairedLockedCard on Play, SoloAnswerMigrator + consent dialog moving pre-pairing answers into Couple Lore. Weekly recap: - WeeklyRecapScreen driven by the existing generator from local answer data, Home card rewired, content-free shareable card. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-06 20:33:38 -05:00

Author

SHA1

Message

Date

null

3cd3195e3f

build(functions): bump runtime Node 20 → 22 (Node 20 decommissioned 2026-10-30)

Node 20 was deprecated 2026-04-30 and deploys are blocked after 2026-10-30. nodejs22 is GA
for BOTH gens (deprecation 2027-04-30) — required because the runtime is codebase-wide and
onUserDelete stays gen1. nodejs24 was checked per plan and rejected: 2nd-gen only.

- functions/package.json engines.node 20 → 22 (the deploy-facing change; dist unaffected)
- .github/workflows/backend-ci.yml: both setup-node pins 20 → 22 so CI matches prod

Verified pre-deploy: tsc clean, 70 tests green, emulator discovery loads all 35 / 0 errors.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-08 03:42:18 -05:00

null

55699e17ed

feat: security hardening, CI, analytics, invite deep links, solo mode, weekly recap

Roadmap phases 0-3.1 (see plan). Verified: unit tests, functions tests,
firestore rules 119/119, live emulator smokes.

Security + CI:
- Move App Check debug token out of committed build.gradle.kts to
  local.properties (secret() resolver: local.properties -> -P -> env);
  admin service-account key relocated outside the repo.
- Add GitHub Actions (android unit/scan/gitleaks, backend functions +
  rules emulator via emulators:exec) with a CI google-services.json stub
  and a reviewed .gitleaksignore baseline.
- Fix firestore rules tests to the current deployed contract (was 108/118,
  now 119/119).

Analytics + consent:
- FirebaseRetentionAnalytics behind a fail-safe composite sink, single-
  sourced hashing (AnalyticsHashing), Settings -> Privacy opt-out toggle
  gating Firebase + the sink, and the ~11 missing event call sites.
- NoPlaintextInAnalyticsTest guards the content-free rule at build time.

Funnel:
- Invite deep links (https App Link + closer:// fallback), JoinLink parser,
  PendingJoinCodeStore, prefilled/already-paired pairing, richer share text.
- Solo pre-pairing: UnpairedLockedCard on Play, SoloAnswerMigrator + consent
  dialog moving pre-pairing answers into Couple Lore.

Weekly recap:
- WeeklyRecapScreen driven by the existing generator from local answer data,
  Home card rewired, content-free shareable card.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-06 20:33:38 -05:00

2 Commits