Jeppe Bandopenhands cdf8541e78 fix(api): exclude spot-free-lastbil from audited add-on reason policy (#372) ...

## Problem

The mobile POS step 2 \"enter note\" dialog was triggering for product
24
(\"Højtryk - ekstra tid\" / spotfree-lastbil) because product 24 was
listed
in `AFFECTED_PRODUCT_IDS` in
`services/nginx/app/classes/order_item_reason_policy.php`.

Product 24 is the \"spot-free-lastbil\" package, not an audited
extra-time
add-on — the server-side reason policy should only enforce the comment
requirement on {21, 22, 25, 26, 27}, matching the frontend
`AUDITED_ORDER_ITEM_PRODUCT_IDS` set.

Companion to the frontend PR copenhagentruckwash/pleno-vue#301.

## Fix

Drop product 24 from `AFFECTED_PRODUCT_IDS`.

## Verification

Tracked under workboard-94209138-31f6-422e-ac8c-181ad391b8a7.

🤖 This PR was created by an AI agent (OpenHands) on behalf of the
truckwash.io team.

Co-authored-by: openhands <openhands@all-hands.dev>

2026-08-13 21:11:44 +02:00

..

account_deletion_http_exception.php

Add in-app account deletion (#319)

2026-07-22 19:22:17 +02:00

account_deletion_schema_bootstrap.php

Add in-app account deletion (#319)

2026-07-22 19:22:17 +02:00

account_deletion_service.php

refactor(api): centralise truthy-string -> bool coercion in a shared trait (#368)

2026-08-12 20:20:03 +02:00

application_write_freeze.php

Implement replication management endpoints and enhance application write freeze handling

2026-05-18 09:59:15 +02:00

attachment_store.php

Improve invoice period data and POS add-on validation

2026-07-15 17:04:52 +02:00

attachments.php

Normalize attachment object type lookups

2026-06-10 18:40:34 +02:00

authentication.php

Add in-app account deletion (#319)

2026-07-22 19:22:17 +02:00

backup_schema_bootstrap.php

Add system status displays for Minio and Redis, and enhance backup configuration

2026-07-13 10:08:00 +02:00

backup_store.php

Add system status displays for Minio and Redis, and enhance backup configuration

2026-07-13 10:08:00 +02:00

bird.php

Add secure Bird gateway for Pleno Control Plane (#332)

2026-07-29 19:59:20 +02:00

cloud_shelly_transport.php

Add edge gateway broker configurations and session management routes

2026-04-28 10:04:17 +02:00

coolify_api_client.php

Add system status displays for Minio and Redis, and enhance backup configuration

2026-07-13 10:08:00 +02:00

coolify_manager.php

Fix api-v2 CORS at the edge without changing rollout flows (#330)

2026-07-29 09:01:08 +02:00

coolify_schema_bootstrap.php

Add configuration for GitHub self-hosted runners

2026-06-02 11:25:00 +02:00

coolify.php

Integrate Coolify API client and module for managing Coolify services, enhancing automation and deployment processes.

2026-05-19 13:17:07 +02:00

cors_policy.php

Fix api-v2 CORS at the edge without changing rollout flows (#330)

2026-07-29 09:01:08 +02:00

cron_schedule.php

Refactor cron scheduling

2026-07-09 11:04:13 +02:00

cron_scheduler.php

Fix cron worker minute cadence (#324)

2026-07-27 18:16:09 +02:00

cron_schema_bootstrap.php

Fix cron worker minute cadence (#324)

2026-07-27 18:16:09 +02:00

cron_task_definition.php

Refactor cron scheduling

2026-07-09 11:04:13 +02:00

cron_task_registry.php

Refactor cron scheduling

2026-07-09 11:04:13 +02:00

cron_worker.php

refactor(api): centralise truthy-string -> bool coercion in a shared trait (#368)

2026-08-12 20:20:03 +02:00

customer_mass_import_service.php

Fix e-conomic EAN customer transfer

2026-07-06 11:34:23 +02:00

customer_name_cache_payload_builder.php

Add unit tests for invoicing period pagination, normalization, and filtering logic

2026-05-12 03:37:47 +02:00

customer_order_product_policy.php

Add customer rule product restrictions

2026-07-16 11:50:52 +02:00

customer_product_rule_service.php

Add customer rule product restrictions

2026-07-16 11:50:52 +02:00

customer_rule_product_restriction_schema_bootstrap.php

Fix customer restriction CI regressions

2026-07-16 12:06:42 +02:00

customer_rule_product_restriction_service.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

db.php

Add system status displays for Minio and Redis, and enhance backup configuration

2026-07-13 10:08:00 +02:00

department_customer_price_overrides_schema_bootstrap.php

Implement department-specific customer pricing functionality

2026-07-07 17:27:56 +02:00

department_customer_pricing_service.php

Harden Sæby demo registration and department scope (#335)

2026-08-02 11:50:56 +02:00

department_daily_report_complaints_schema_bootstrap.php

Add support for archived departments with schema updates, API integration, and filtering logic

2026-05-07 13:50:32 +02:00

department_gate_config.php

Add department hardware workspace and plate scanner updates

2026-04-23 13:31:57 +02:00

department_outside_hours_statistics_service.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

department_relay_config.php

Add department_relay_config and department_gate_config classes and refactor gate/relay handling logic to use strongly-typed configuration models

2026-03-03 12:24:01 +01:00

department_wash_count_service.php

Implement department wash count service and refactor related reporting functions

2026-07-08 10:35:24 +02:00

departments_schema_bootstrap.php

Add custom-only department pricing enforcement

2026-07-06 10:15:11 +02:00

economic_transfer_executor.php

Enforce e-conomic discount template + EAN draft metadata (#349)

2026-08-05 14:44:40 +02:00

economic_transfer_queue_details_summary.php

Add unit tests for InvoicingPeriodDraftOverlay and reference suggestion logic, including fake DB integration and aggregation methods

2026-05-11 18:18:08 +02:00

economic_transfer_queue_schema_bootstrap.php

Add invoice period review workflow (#336)

2026-08-02 19:20:50 +02:00

economic_transfer_queue.php

Complete selected-customer invoice period tree (#338)

2026-08-03 12:02:34 +02:00

economic_v2_compare_engine.php

Add economic V2 modules for history backfill, comparison, and distribution services.

2026-03-12 17:57:27 +01:00

economic_v2_distribution_service.php

Implement department-specific customer pricing functionality

2026-07-07 17:27:56 +02:00

economic_v2_line_normalizer.php

Add economic V2 modules for history backfill, comparison, and distribution services.

2026-03-12 17:57:27 +01:00

economic_v2_revenue_statistics_service.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

economic_v2_schema_bootstrap.php

Implement department-specific customer pricing functionality

2026-07-07 17:27:56 +02:00

economic_v2_versioning_service.php

Implement department-specific customer pricing functionality

2026-07-07 17:27:56 +02:00

economic.php

Fix e-conomic EAN customer transfer

2026-07-06 11:34:23 +02:00

edge_broker_client.php

Fail closed when edge broker secret is missing

2026-06-01 23:13:04 +02:00

edgegateway.php

Add edge gateway broker configurations and session management routes

2026-04-28 10:04:17 +02:00

email.php

Surface silent-skip paths and additional silent failures in email/booking/order flows (#352)

2026-08-09 00:21:04 +02:00

encrypt.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

entra.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

error_report_schema_bootstrap.php

Integrate Coolify API client and module for managing Coolify services, enhancing automation and deployment processes.

2026-05-19 13:17:07 +02:00

error_report_service.php

[codex] Allow error reports without screenshots (#299)

2026-07-06 14:27:47 +02:00

error_report_store.php

Integrate Coolify API client and module for managing Coolify services, enhancing automation and deployment processes.

2026-05-19 13:17:07 +02:00

failover.php

Integrate Coolify API client and module for managing Coolify services, enhancing automation and deployment processes.

2026-05-19 13:17:07 +02:00

form.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

fxratesapi.php

Support collected invoice economic PDF downloads

2026-07-14 15:39:39 +02:00

gateway_shelly_transport.php

Add batch processing for lane hardware commands and status retrieval

2026-06-30 09:30:43 +02:00

gatewayapi.php

Add department time bookings functionality

2025-05-13 12:33:44 +02:00

hetzner_cloud_client.php

Enhance Coolify API deployment with improved gateway route handling and extensive test coverage. Add new methods for service updates and ensure Composer vendor sanity checks in PHP container.

2026-05-20 16:45:50 +02:00

image_processor.php

Add OCR Space module with configuration and image processing support

2025-08-06 10:27:39 +02:00

invoice_collection_bulk_action_service.php

Fix false 409 snapshot expiry in invoice-period tree preview (#350)

2026-08-05 12:55:06 +00:00

invoice_collection_schema_bootstrap.php

Gate invoice tree activation on audit schema (#339)

2026-08-03 13:03:55 +02:00

invoice_period_flag_schema_bootstrap.php

Add governed XL Vask AI invoice automation (#343)

2026-08-04 11:32:49 +02:00

invoice_period_flag_service.php

fix(api): do not raise historical_primary_product_mismatch for single-tractor orders (#363)

2026-08-11 07:39:00 +02:00

invoice_store.php

Support collected invoice economic PDF downloads

2026-07-14 15:39:39 +02:00

invoicing_period_utils.php

Introduce centralized date normalization and duplicate filtering for invoicing logic, and add comprehensive unit tests

2026-03-12 16:09:54 +01:00

licenseplaterecognizer.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

limble.php

Expand Limble module with additional helper classes, task formatting logic, webhook handling, configuration endpoints, and extended API request support.

2025-06-12 15:15:26 +02:00

limited_backoffice_exception.php

Add limited backoffice functionality with employee management and department pricing

2026-07-01 16:37:32 +02:00

limited_backoffice_login_grant_service.php

Add one-time limited backoffice login grants (#329)

2026-07-29 00:01:13 +02:00

limited_backoffice_schema_bootstrap.php

Add one-time limited backoffice login grants (#329)

2026-07-29 00:01:13 +02:00

limited_backoffice_service.php

Harden Sæby demo registration and department scope (#335)

2026-08-02 11:50:56 +02:00

module_usage_registry.php

Support collected invoice economic PDF downloads

2026-07-14 15:39:39 +02:00

module_usage_schema_bootstrap.php

Support collected invoice economic PDF downloads

2026-07-14 15:39:39 +02:00

module_usage_service.php

refactor(api): centralise truthy-string -> bool coercion in a shared trait (#368)

2026-08-12 20:20:03 +02:00

motorapi.php

Support collected invoice economic PDF downloads

2026-07-14 15:39:39 +02:00

n8n.php

Harden n8n webhook trigger URL validation

2026-06-02 00:32:35 +02:00

object_property.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

ocr_space.php

Add OCR processing integration and module scanner routes

2025-08-06 15:19:43 +02:00

openai.php

xlvask-autopilot (#347)

2026-08-04 17:46:15 +02:00

order_bookings_counts_cache.php

Remove outdated edge gateway object classes, add new agent implementation

2026-04-21 14:13:17 +02:00

order_bookings_list_cache.php

Remove outdated edge gateway object classes, add new agent implementation

2026-04-21 14:13:17 +02:00

order_item_reason_policy.php

fix(api): exclude spot-free-lastbil from audited add-on reason policy (#372)

2026-08-13 21:11:44 +02:00

order_payment_lock.php

Serialize VAT collection mutations with payment operations (#326)

2026-07-28 22:00:59 +02:00

order_reference_suggestions_service.php

Restrict vehicle reference suggestions by department context

2026-06-01 23:26:27 +02:00

orders_input_normalizer.php

Add API test suite for Bird Voice Webhook endpoints, including comprehensive lifecycle tests for inbound call handling scenarios. Extend fixtures with department gate creation support and update OpenAPI spec validations.

2026-04-13 17:08:37 +02:00

orders_schema_bootstrap.php

fix(api): wire order_item_reason_policy into POST/PUT and persist reason fields (#345)

2026-08-09 17:53:00 +02:00

pdf_generator.php

Enhance PDF generation and wash certificate functionality

2025-04-09 14:19:06 +02:00

pdf_store.php

Improve invoice period data and POS add-on validation

2026-07-15 17:04:52 +02:00

permission_node.php

Integrate subuser permission node system and refactor route-level permissions

2026-02-12 13:54:28 +01:00

price_overrides_schema_bootstrap.php

Add customer product fixed price overrides

2026-07-06 12:52:33 +02:00

products_schema_bootstrap.php

Add invoice_period_flag_ classes to manage invoice period flags with schema, services, and flag lifecycle methods

2026-05-11 21:34:57 +02:00

ratelimit.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

recaptcha.php

Add reCAPTCHA support and enhance Economic configurations

2025-02-10 15:27:32 +01:00

redis.php

Harden Sæby demo registration and department scope (#335)

2026-08-02 11:50:56 +02:00

release_manager_schema_bootstrap.php

Add department_selfserve_path_confirmations table and enhance PingApiTest

2026-05-27 17:35:16 +02:00

release_manager.php

refactor(api): centralise truthy-string -> bool coercion in a shared trait (#368)

2026-08-12 20:20:03 +02:00

releasemanager.php

refactor(api): centralise truthy-string -> bool coercion in a shared trait (#368)

2026-08-12 20:20:03 +02:00

replica_failover_manager.php

refactor(api): centralise truthy-string -> bool coercion in a shared trait (#368)

2026-08-12 20:20:03 +02:00

replication_bootstrap_config.php

Enhance MinIO handling in replication management and update legacy test bootstrap. Add MinIO replication logic, legacy setup cleanup, and include necessary tests for improved MinIO interaction and error tolerance.

2026-05-18 14:12:03 +02:00

replication_manager.php

Integrate Coolify API client and module for managing Coolify services, enhancing automation and deployment processes.

2026-05-19 13:17:07 +02:00

replication_schema_bootstrap.php

Implement replication management endpoints and enhance application write freeze handling

2026-05-18 09:59:15 +02:00

replication_secret_box.php

Implement replication management endpoints and enhance application write freeze handling

2026-05-18 09:59:15 +02:00

request.php

Refactor: migrate files

2025-01-29 14:27:44 +01:00

response.php

Integrate Coolify API client and module for managing Coolify services, enhancing automation and deployment processes.

2026-05-19 13:17:07 +02:00

router.php

Fix router matching for underscored route params

2026-06-30 13:10:06 +02:00

security_policy_service.php

Add system status displays for Minio and Redis, and enhance backup configuration

2026-07-13 10:08:00 +02:00

security_schema_bootstrap.php

Add system status displays for Minio and Redis, and enhance backup configuration

2026-07-13 10:08:00 +02:00

selfserve_schema_bootstrap.php

Fix self-serve schema compatibility in CI

2026-07-13 15:36:03 +02:00

selfserve.php

Fix selfserve lane logging bootstrap dependency handling

2026-02-27 02:02:30 +01:00

session.php

Refactor: migrate files

2025-01-29 14:27:44 +01:00

shelly_relay_inventory.php

Stop exposing relay local IPs by default

2026-06-01 23:43:53 +02:00

shelly_transport_resolver.php

Handle relay command job timeouts for edge gateways

2026-04-27 16:47:09 +02:00

shelly.php

Add timeout settings for Shelly cloud HTTP requests and update related tests

2026-06-09 14:03:12 +02:00

slack.php

Add endpoint and functionality to test Slack internal department goal progress webhook

2026-06-29 11:32:47 +02:00

statistics.php

Add endpoints and routes for economic statistics management

2025-02-04 08:36:05 +01:00

stripe_fake_http_client.php

Remove outdated edge gateway object classes, add new agent implementation

2026-04-21 14:13:17 +02:00

stripe.php

Remove outdated edge gateway object classes, add new agent implementation

2026-04-21 14:13:17 +02:00

subuser_action_token_service.php

Complete subuser notification and recovery lifecycle (#325)

2026-07-27 18:40:40 +02:00

subuser_contact_verification_service.php

Implement subuser verification and invoice/self-serve API fixes

2026-07-13 15:11:49 +02:00

subuser_permission_templates_service.php

Allow custom subuser grant permission writes

2026-07-13 22:30:18 +02:00

subusers_schema_bootstrap.php

Complete subuser notification and recovery lifecycle (#325)

2026-07-27 18:40:40 +02:00

superuser_system_status_service.php

refactor(api): centralise truthy-string -> bool coercion in a shared trait (#368)

2026-08-12 20:20:03 +02:00

system_search_cache.php

Refactor system search cache handling and update OpenAPI specifications for max results

2026-07-07 18:59:07 +02:00

system_search_document_index.php

Add customer product fixed price overrides

2026-07-06 12:52:33 +02:00

system_search_economic_customer_index.php

Add system_search_document_index class to manage document indexing for system search with table creation, entity-specific document builders, and index refresh logic.

2026-03-13 13:58:48 +01:00

system_search_registry.php

Add system_search_document_index class to manage document indexing for system search with table creation, entity-specific document builders, and index refresh logic.

2026-03-13 13:58:48 +01:00

system_search_service.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

system_session_activity_schema_bootstrap.php

Add Edge Agent implementation for gateway connection lifecycle, agent commands, Shelly device discovery, relay control, and WebSocket communication with broker. Include unit tests for critical flows.

2026-04-08 19:01:42 +02:00

system_session_activity_tracker.php

Add unit tests for Bird department gate phone call logic, Edge Broker configuration, and gateway heartbeat status. Refactor warnings handling, Slack notifications, Bird client usage, and Edge gateway probes for improved maintainability and error clarity.

2026-04-09 08:53:10 +02:00

totp.php

Add two-factor authentication support for users and subusers

2026-02-23 17:00:18 +01:00

upload_store.php

Improve dynamic URL generation and add localhost support for passkey challenges

2026-02-23 23:37:15 +01:00

virkdata.php

Support collected invoice economic PDF downloads

2026-07-14 15:39:39 +02:00

wash_certificate_store.php

Refactor booking status handling and enhance file checks.

2025-02-03 09:34:09 +01:00

weatherapi.php

Document WeatherAPI and department weather endpoints in OpenAPI

2026-03-11 13:56:29 +01:00

webauthn.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

wordpress_bookings_remote.php

Resolve backend Qodana critical and high findings (#314)

2026-07-17 05:44:16 +02:00

workfeed_employee_name_formatter.php

Refactor employee name handling to utilize workfeed_employee_name_formatter for improved name resolution and fallback logic

2026-05-18 10:59:23 +02:00

workfeed_shift_time_resolver.php

Enhance MinIO handling in replication management and update legacy test bootstrap. Add MinIO replication logic, legacy setup cleanup, and include necessary tests for improved MinIO interaction and error tolerance.

2026-05-18 14:12:03 +02:00

workfeed.php

Restrict Workfeed API base URL

2026-06-02 00:22:18 +02:00

xlvask_usage_logs_schema_bootstrap.php

xlvask-autopilot (#347)

2026-08-04 17:46:15 +02:00

xlvask.php

Introduce xlvask_helper base class and refactor XLVask helper classes to extend it. Add methods for XLVask vehicle checks and retrievals, enhance vehicle caching functionality, and update helper class instantiation logic.

2025-06-19 11:06:53 +02:00