feat: system settings, dynamic logos, template numbering, permission consolidation

- System settings page with tabs: Security, System, Firma - Configurable attendance rules (break thresholds, rounding) from DB - Configurable document numbering with template patterns ({YYYY}/{PREFIX}/{NNN}) - Dynamic logo upload (light/dark variants) served from DB instead of static files - Email settings (SMTP from/name, alert/leave emails) configurable in UI - Currency and VAT rate lists configurable, used across all modules - Permissions simplified: offers.settings + settings.roles + settings.security → settings.manage - Leaflet bundled locally, removed unpkg.com from CSP - Silent catch blocks fixed with proper logging - console.log replaced with app.log.info in server.ts - Schema renamed: company-settings.schema → settings.schema - App info section: version, Node.js, uptime, memory, DB status, NAS status Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-27 10:15:47 +01:00
parent f49015a627
commit 6b31b2f74b
43 changed files with 2094 additions and 525 deletions
--- a/src/services/system-settings.ts
+++ b/src/services/system-settings.ts
@@ -0,0 +1,97 @@
+import prisma from "../config/database";
+
+interface SystemSettings {
+  break_threshold_hours: number;
+  break_duration_short: number;
+  break_duration_long: number;
+  clock_rounding_minutes: number;
+  invoice_alert_email: string;
+  leave_notify_email: string;
+  max_login_attempts: number;
+  lockout_minutes: number;
+  max_requests_per_minute: number;
+  default_currency: string;
+  default_vat_rate: number;
+  available_vat_rates: number[];
+  available_currencies: string[];
+  smtp_from: string;
+  smtp_from_name: string;
+}
+
+const DEFAULTS: SystemSettings = {
+  break_threshold_hours: 6,
+  break_duration_short: 15,
+  break_duration_long: 30,
+  clock_rounding_minutes: 15,
+  invoice_alert_email: "",
+  leave_notify_email: "",
+  max_login_attempts: 5,
+  lockout_minutes: 15,
+  max_requests_per_minute: 300,
+  default_currency: "CZK",
+  default_vat_rate: 21,
+  available_vat_rates: [0, 10, 12, 15, 21],
+  available_currencies: ["CZK", "EUR", "USD", "GBP"],
+  smtp_from: "",
+  smtp_from_name: "",
+};
+
+let cache: SystemSettings | null = null;
+let cacheTime = 0;
+const CACHE_TTL = 60_000; // 60 seconds
+
+export async function getSystemSettings(): Promise<SystemSettings> {
+  if (cache && Date.now() - cacheTime < CACHE_TTL) return cache;
+
+  const row = await prisma.company_settings.findFirst();
+  if (!row) {
+    cache = { ...DEFAULTS };
+    cacheTime = Date.now();
+    return cache;
+  }
+
+  let vatRates = DEFAULTS.available_vat_rates;
+  let currencies = DEFAULTS.available_currencies;
+  try {
+    if (row.available_vat_rates) vatRates = JSON.parse(row.available_vat_rates);
+  } catch {
+    /* keep default */
+  }
+  try {
+    if (row.available_currencies)
+      currencies = JSON.parse(row.available_currencies);
+  } catch {
+    /* keep default */
+  }
+
+  cache = {
+    break_threshold_hours: Number(
+      row.break_threshold_hours ?? DEFAULTS.break_threshold_hours,
+    ),
+    break_duration_short:
+      row.break_duration_short ?? DEFAULTS.break_duration_short,
+    break_duration_long:
+      row.break_duration_long ?? DEFAULTS.break_duration_long,
+    clock_rounding_minutes:
+      row.clock_rounding_minutes ?? DEFAULTS.clock_rounding_minutes,
+    invoice_alert_email: row.invoice_alert_email || "",
+    leave_notify_email: row.leave_notify_email || "",
+    max_login_attempts: row.max_login_attempts ?? DEFAULTS.max_login_attempts,
+    lockout_minutes: row.lockout_minutes ?? DEFAULTS.lockout_minutes,
+    max_requests_per_minute:
+      row.max_requests_per_minute ?? DEFAULTS.max_requests_per_minute,
+    default_currency: row.default_currency || DEFAULTS.default_currency,
+    default_vat_rate: Number(row.default_vat_rate ?? DEFAULTS.default_vat_rate),
+    available_vat_rates: vatRates,
+    available_currencies: currencies,
+    smtp_from: row.smtp_from || "",
+    smtp_from_name: row.smtp_from_name || DEFAULTS.smtp_from_name,
+  };
+  cacheTime = Date.now();
+  return cache;
+}
+
+export function invalidateSettingsCache(): void {
+  cache = null;
+  cacheTime = 0;
+}