1.5.2

- feat: order confirmation PDF generation with VAT support
- feat: order confirmation modal with custom item editing
- fix: attendance negative duration clamping and switchProject timing
- fix: Quill editor locked to Tahoma 14px, PDF heading sizes
- fix: invoice/offer PDF font consistency (Tahoma enforcement)
- fix: invoice alert cron improvements
- fix: NAS financials manager edge cases
- refactor: numbering service with unique sequence constraints

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

src/schemas/projects.schema.ts

@@ -1,7 +1,12 @@
 import { z } from "zod";
 
+const safeProjectNumber = z
+  .string()
+  .regex(/^[\p{L}\p{N}_\-.]+$/u, "Číslo projektu obsahuje nepovolené znaky")
+  .nullish();
+
 export const CreateProjectSchema = z.object({
-  project_number: z.string().nullish(),
+  project_number: safeProjectNumber,
   name: z.string().nullish(),
   customer_id: z
     .union([z.number(), z.string()])
@@ -26,7 +31,6 @@ export const CreateProjectSchema = z.object({
 });
 
 export const UpdateProjectSchema = z.object({
-  project_number: z.string().nullish(),
   name: z.string().nullish(),
   status: z.string().optional(),
   notes: z.string().nullish(),