- Self-updater extractZip: detect and strip a common top-level prefix
folder so that release ZIPs built with a versioned wrapper (the
build.sh convention) overlay the live install correctly instead of
creating a schneespur-X.Y.Z/ subdirectory at the install root.
The v1.0.3 update on the test environment surfaced this — files were
copied, state.json was committed to 1.0.3, but the wrapper folder
meant the live config/app.php and VERSION were never actually
overwritten. Same defensive prefix-stripping pattern as the module
installer.
- Counter check ordering: the same-version short-circuit now runs
BEFORE the strict counter check. Previously, after a successful
install, the next "prüfen" fetched the same manifest (same counter)
and the counter check would throw "Rollback-Versuch", masking the
intended "you're up to date" response. The counter check is still
enforced for genuinely older manifests — it just doesn't misfire
when the server keeps serving the same release.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This is an internal authoring doc, not part of the shipped Laravel
application. Lifting it out of the schneespur/ subdirectory keeps it
out of the release build (build.sh copies only the Laravel app
directories) and clarifies the separation between code-that-ships
and meta documentation about the module system.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
- bootstrap/app.php: restore default Laravel exception logging. The
diagnostic reportable() callback no longer returns false unconditionally
it only suppresses default reporting when a reporter actually handled the
exception, so storage/logs/laravel.log shows errors again on fresh installs.
- Customer object creation: fix 500 when notify_recipients is empty (NOT NULL
violation). Reconcile drift across migration/validation/form/lang: the field
is now treated consistently as an enum (customer|object|both) matching the
notification consumers; form uses a <select> instead of free-text input;
validation tightened via in: rule; coercion in prepareForValidation keeps
the DB invariant intact when the field is empty or missing.
- config/app.php: version is now read from the VERSION file at runtime.
The previously hardcoded '1.0.0' caused footer, settings, and dashboard to
show a stale version after every release. VERSION is now the single source
of truth for display.
- Module catalog UI: fix render crash (htmlspecialchars on i18n category dict)
and disappearing modules on 304 Not Modified responses. SchneespurModuleClient
now has a normalizeModule() adapter that bridges server-side field naming
(current_version, image_url, i18n category dict) to the internal shape used
by controller and views. The catalog body is cached in state, so 304
responses replay the cached catalog instead of falling back to the
semantically wrong "installed" list.
- Module installer: strip common top-level prefix from module ZIPs to prevent
modules/<slug>/<slug>/ double-nesting. The installer now detects whether all
ZIP entries share one wrapper folder and strips it during extraction; flat
ZIPs continue to work unchanged. Path-traversal validation runs on the
original entry names before the strip, so the security guarantee is intact.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
- Reverts the schneespur/ subdirectory restructure (b8e426b)
- Restores package.json and vite.config.js (needed for npm build, were
removed in an earlier cleanup before the restructure)
- Updates public/build/ assets with current Vite output (new content hashes)
User-facing improvements
- Installer detects browser language from the Accept-Language header
on the very first request. de-* → Schneespur/DE, everything else
(en-*, zh, ja, ar, it, fr, …) → Wintertrace/EN.
- DE/EN switcher in the installer layout header for manual override.
The choice persists for the browser session.
- Step 5 (Config) now reflects the already-resolved locale instead of
detecting again client-side, eliminating a brief "wrong language"
flash between steps.
Under the hood
- New SetInstallerLocale middleware (Symfony's getPreferredLanguage
with strict top-preference, list order ['en','de'] so non-matching
browsers fall back to en/Wintertrace, not de/Schneespur).
- brand() helper resolves from the runtime locale when the app_brand
setting is absent (pre-install). Post-install behaviour unchanged.
- Composer now declares ext-sodium explicitly (required by the Ed25519
signature verification in the auto-update flow).
No DB migrations, no breaking changes, no config rewrites needed.
- Move all application code into schneespur/ subdirectory for cleaner
GitHub presentation (README, LICENSE, INSTALL guides stay in root)
- Fix German Umlaut encoding in INSTALL.de.md and README.md
(ae→ä, oe→ö, ue→ü throughout)
- ZIP download structure remains flat (code in root) for easy deployment
Schneespur — Open-source winter service documentation software (PWA + Admin).
GPS tracking via OwnTracks, weather data, photo evidence, and legally
compliant service records for winter maintenance operators.
License: AGPL-3.0-or-later
