4 commits

Author	SHA1	Message	Date
lorentz	701fea04cc	chore: merge executor worktree (worktree-agent-a985b30606e37e1d0)	2026-07-15 19:33:32 -04:00
lorentz	959907d63b	feat(18-03): add GET /api/phishing/campaigns/[id] nested detail ... - requirePermission('phishing','read') gate (ACCESS-01) - UUID-validated id (400 on malformed), 404 when campaign absent - bulk-fetch reports/messages/indicators via ANY($1::uuid[]) keyed by parent id array (device-link-conflicts pattern) - requesterEmail derived via reports.requester_contact_id -> contacts join (campaigns has no recipients column) - messages.subject pulled from headers->>'subject' JSONB (no subject column) - classifications included in shape (Phase 19 stub, expected empty)	2026-07-15 19:31:35 -04:00
lorentz	c852cfee13	feat(18-03): add GET /api/phishing/campaigns paginated list ... - requirePermission('phishing','read') gate (ACCESS-01) - limit/offset clamped, optional status filter via parameterized $n placeholder (never string-interpolated) - camelCase response { items, total, limit, offset }	2026-07-15 19:31:19 -04:00
lorentz	de013e6ec1	feat(18-02): add POST /api/phishing/tickets/[ticket_id]/analyze route ... - Orchestrates detectPhishingTicket -> parseAndStoreMessage -> groupReportIntoCampaign - requirePermission('phishing','analyze') gate first-line (D-06, 401/403) - Validates ticket_id numeric (400), missing ticket (404), non-phishing ticket (400) - No skipIfAlreadyGrouped (D-08) — always re-runs grouping on demand	2026-07-15 19:30:46 -04:00