Refactor overview page, optimize performance, and enhance security#5

Merged

hasnaintypes merged 23 commits into

mainfrom

Mar 18, 2026

Commits on Mar 18, 2026

fix: upgrade Next.js to 15.5.9 and React to 19.2.4
hasnaintypes
committed
security: harden input validation, CSP header, and report resend
hasnaintypes
committed
refactor: remove Zustand store in favor of React Query
hasnaintypes
committed
fix: add error boundaries and fix useIsMobile hydration mismatch
hasnaintypes
committed
perf: add database indexes and constraints
hasnaintypes
committed
ci: fix pnpm version and add build step
hasnaintypes
committed
feat: implement transaction alert email pipeline
hasnaintypes
committed
chore: update .gitignore and remove obsolete documentation files
hasnaintypes
committed
fix(email): add compileTemplate helper, email validation, template whitelist, and HTTP status in errors
hasnaintypes
committed
fix(security): add category ownership validation, open redirect guard, and auth rate limiting
hasnaintypes
committed
fix(inngest): add Zod event validation, NonRetriableError, Handlebars migration, and select clauses
hasnaintypes
committed
fix(ai): strip raw response from errors, add date filter to anomalies, and isFinite guard
hasnaintypes
committed
fix(routers): move ownership checks into WHERE clause for account and category lookups
hasnaintypes
committed
perf(budget): fix N+1 in evaluateBudgets and add ownership check to checkLowBalance
hasnaintypes
committed
fix(build): add force-dynamic to AI API routes to prevent Prisma errors during static generation
hasnaintypes
committed
fix: resolve client-side env access in error page and Decimal serialization in settings
hasnaintypes
committed
fix(logging): use process.env.NODE_ENV instead of T3 env for client compatibility
hasnaintypes
committed
fix(db): lazy-initialize PrismaClient to prevent build failures in CI
hasnaintypes
committed