ProjectCheck - Releases

Fixed

• Form focus jump (desktop): selecting dropdowns, date fields, or text inputs no longer yanks the page. The soft-keyboard helper (keep-focused-visible) only scrolls when the on-screen keyboard has shrunk the visual viewport, skips non-IME controls (select/checkbox/date/time), uses scrollIntoView({ block: 'nearest' }) instead of center, and clears leftover IME padding when the keyboard closes.
• Validation / form messages: first-error and status message scrolls use nearest (with reduced-motion respect) and focus errors with preventScroll so long forms stay calm.
• Global smooth scroll footgun: html { scroll-behavior } defaults to auto so CSS does not amplify programmatic focus scrolls.

Tests

• Keep-focused unit + fleet contract + mutation gauntlet (desktop gate, select skip, nearest-only, keyboard-close pad clear).
• E2E: time-entry create focus must not change window/#app-content scroll; UX journeys + axe smoke remain green.

Fixed

• Project customer reassignment: empty available_hours / decimal fields no longer abort the whole project UPDATE (MariaDB empty DECIMAL), so changing the customer on edit persists correctly even with zero budget.
• Danger / delete actions (WCAG 1.4.3): solid danger buttons and row delete controls use --color-element-error via --pc-danger-fill (not pale --color-error with on-fill text), so trash/delete stays readable in Light, Dark, and High Contrast.
• Empty progress tracks: list progress cells no longer render a blank 0% bar; they show “No hours logged yet” until consumption is greater than zero.

Changed

• Project type icons: Lucide chips replace emoji glyphs across projects, dashboard, and related views (theme-safe).
• Project form quick-add customer: secondary “Add to list” plus a clear next-step Save control so quick-add no longer competes with the primary Create/Update action.

Tests

• FormDecimal / customer-reassign integration + mutation gauntlet; ProgressCellPresentation unit + mutation; danger-button and type-chip CSS/theme contracts; theme × viewport axe and UX journey E2E coverage expanded.

Fixed

• Project file upload / multi-word routes (GitHub #8): route controller segments now use underscores (project_file, time_entry, project_member) so Nextcloud resolves ProjectFileController / TimeEntryController / ProjectMemberController instead of the non-existent ProjectfileController (Linux PSR-4). All linkToRoute call sites updated; contract + container resolution tests and a mutation gauntlet added. Companion /mobile/v1/* paths stay on mobile# / MobileController (web rename is isolated); server↔companion route parity contract + client URL contract cover the full surface.
• Project file upload redirect: non-AJAX upload success/error redirects always use linkToRoute('projectcheck.project.show') — client-supplied redirect parameters are ignored (open-redirect hardening now that uploads resolve again).

Added

• Inline customer quick-add on the project form: create and select a customer without leaving the page (keeps draft fields); full customer form link for email/address.
• Grouped app navigation (pc-nav): Overview / Work / Governance sections with short hints, Lucide icons via IconCatalog, and clearer empty-state guidance on list and time-entry pages.

Changed

• Sidebar shell uses main background (MobilityCheck parity) instead of a dark fill; theme/CSS compliance contracts and UX journey e2e coverage expanded.

Added

• InvoicingCheck unpaid strip on project detail: when InvoicingCheck exposes CrmInvoiceReadFacade::summarizeUnpaidByPcProject, shows remaining €, open invoice count, and overdue count (soft feature-detect; never invents amounts). Clarifies that ProjectCheck “Not yet paid” is open + invoiced hours still unpaid in ProjectCheck.

Changed

• Packaging release: bumped version for App Store / GitHub republish; confirmed Nextcloud max-version 34 against latest stable 34.0.2.

Added

• Public /health probe for mobile login reachability and ops (no version fingerprint; advertises mobileApi: true). App-access ACL does not block this public endpoint.

Unreleased

Fixed

• Schema repair: runtime/post-migration ensurer now creates pc_mob_idem (same path as license tables) so a marked-complete migration without the table cannot brick SchemaGuard / all ProjectCheck HTTP.
• Mobile settlement list: returns hasMore + limit when the outstanding list is truncated at 200 entries (no silent incomplete AR view).
• Mobile settlement apply: response no longer invents totalHours/totalAmount zeros after apply (counts only; money stays on preview).
• Project list settlement filter: stop TypeError on PHP 8.4 when filtering ?settlement=outstanding (named parameters are IParameter objects, not strings).
• License panel: stop claiming the mobile app is “coming soon” — seats copy matches MOBILE_APP_STATUS = available.
• Settings page crash: LicenseUiStrings::forPanel() no longer calls $l->t() with %1$s placeholders and zero arguments (PHP 8 / Nextcloud LazyL10N vsprintf fatal).
• User delete DI: UserDeletedListenerTest mocks MobileIdempotencyMapper so seat + idempotency cleanup stay covered after mobile v1.1.
• Icon gate: IconCatalog includes every template data-lucide name; Lucide validator uses rg --no-filename so path prefixes cannot false-fail.
• Audit gates: PHPUnit prefers Docker nextcloud service when the host has no MariaDB socket.
• A5 analytics: yearly/productivity cost aggregates use SUM(ROUND(hours * rate, 2)); user totals use Money::mul; rollups no longer float-add costs.
• A6 mobile: resolve-hourly-rate is self-only (parity with web), blocking teammate rate preview leakage.

Added

• Shared list filter toolbar: projects, customers, employees, and time entries use one equal-width filter grid (search beside the selects) with consistent select chrome, visible labels, and theme-safe focus styles (WCAG 2.1 AA).
• Theme-safe productivity / project-type year panels: reusable partials and CSS tokens so analysis blocks stay readable in light, dark, and high-contrast themes.

Changed

• Settlement summary strip: borderless single-line metrics row under the time-entry filters; bulk settlement bar matches the same chrome.
• Icons: Lucide / currentColor masks replace fragile Nextcloud icon-* + white-stroke tiles so budget alerts and list chrome render correctly across themes.
• Nextcloud compatibility: max-version kept aligned with current stable server major 34.

Fixed

• Settlement bucket math: outstanding (not yet paid) is computed with decimal-safe Money addition in the billing service; mapper/recompute accumulate when legacy status labels normalize to the same bucket so totals cannot be silently overwritten.
• Broken CSS selectors from earlier icon migration (orphan braces / truncated rules in list and dashboard stylesheets).

Unreleased

Fixed

• Project budget edits: saving a project no longer fails with a generic error when the input is rejected server-side. Users now see the actual, localized reason (for example: hourly rate required when the project has a budget and uses one rate for the whole project, or budget too low for the hourly rate).
• Same-day project dates: projects with the same start and end date are accepted again; the server now matches the form's "end date must be on or after the start date" rule instead of rejecting equal dates.
• Project form: the edit form flags a missing/zero project hourly rate before submitting when the project has a budget and uses the one-rate-for-the-whole-project pricing method (a pre-filled rate of 0.00 previously slipped past the browser's required check).
• l10n: completed missing translations for the time-entry deletion hint and the start-date validation message in fr/es/da/nl/it/pl/sv/nb.

Added

• Shared list panels: new list-table.css and stats-panel.css unify filters, data tables, footers, and summary panels across time entries, projects, customers, and employees.
• Time entry delete from edit/detail: delete URL wired on the time entry form and detail pages with the shared deletion modal.

Fixed

• Time entry ownership checks: TimeEntry::isOwnedBy() uses a timing-safe compare for access control on show, edit, update, and delete.
• Stylesheet loading: shell, layout, and mobile-nav CSS load as linked stylesheets (via EnrichTemplateNavigationContext) instead of @import in app.css, so theme tokens apply reliably.

Changed

• Page header: inline breadcrumbs, meta strips, and action button styling aligned across list and detail pages.
• Time entries UI: refactored list JavaScript (shared hour formatting, export guard, row action icons, deletion modal integration).
• Time entry form: refreshed layout and styling consistent with the shared panel system.

Added

• Upgrade backup: Pre-migration repair step snapshots ProjectCheck data before schema migrations run; occ projectcheck:upgrade-backup for manual backups and restore workflows.

Fixed

• Disable vs uninstall: UninstallRepairFlow preserves tables when the app is disabled (including auto-disable during server upgrade); data is dropped only on explicit app removal.
• Project list filters: Qualified SQL column names fix filtered project queries on some database backends.
• Admin settings: ProjectCheck settings moved to the Additional settings section (fixes broken sidebar icons in Nextcloud 34).
• Upgrade safety: Repair-step classes registered in Application.php to prevent ArgumentCountError during occ upgrade.

Changed

• UI: Shared page header section and refreshed list view l10n.

Changed

• Documentation: public-facing bilingual README (German / English), aligned with ArbeitszeitCheck-style structure; screenshots and install/support sections for the standalone repository.

Fixed

• Form focus jump (desktop): selecting dropdowns, date fields, or text inputs no longer yanks the page. The soft-keyboard helper (keep-focused-visible) only scrolls when the on-screen keyboard has shrunk the visual viewport, skips non-IME controls (select/checkbox/date/time), uses scrollIntoView({ block: 'nearest' }) instead of center, and clears leftover IME padding when the keyboard closes.
• Validation / form messages: first-error and status message scrolls use nearest (with reduced-motion respect) and focus errors with preventScroll so long forms stay calm.
• Global smooth scroll footgun: html { scroll-behavior } defaults to auto so CSS does not amplify programmatic focus scrolls.

Tests

• Keep-focused unit + fleet contract + mutation gauntlet (desktop gate, select skip, nearest-only, keyboard-close pad clear).
• E2E: time-entry create focus must not change window/#app-content scroll; UX journeys + axe smoke remain green.

Fixed

• Project customer reassignment: empty available_hours / decimal fields no longer abort the whole project UPDATE (MariaDB empty DECIMAL), so changing the customer on edit persists correctly even with zero budget.
• Danger / delete actions (WCAG 1.4.3): solid danger buttons and row delete controls use --color-element-error via --pc-danger-fill (not pale --color-error with on-fill text), so trash/delete stays readable in Light, Dark, and High Contrast.
• Empty progress tracks: list progress cells no longer render a blank 0% bar; they show “No hours logged yet” until consumption is greater than zero.

Changed

• Project type icons: Lucide chips replace emoji glyphs across projects, dashboard, and related views (theme-safe).
• Project form quick-add customer: secondary “Add to list” plus a clear next-step Save control so quick-add no longer competes with the primary Create/Update action.

Tests

• FormDecimal / customer-reassign integration + mutation gauntlet; ProgressCellPresentation unit + mutation; danger-button and type-chip CSS/theme contracts; theme × viewport axe and UX journey E2E coverage expanded.

Fixed

• Project file upload / multi-word routes (GitHub #8): route controller segments now use underscores (project_file, time_entry, project_member) so Nextcloud resolves ProjectFileController / TimeEntryController / ProjectMemberController instead of the non-existent ProjectfileController (Linux PSR-4). All linkToRoute call sites updated; contract + container resolution tests and a mutation gauntlet added. Companion /mobile/v1/* paths stay on mobile# / MobileController (web rename is isolated); server↔companion route parity contract + client URL contract cover the full surface.
• Project file upload redirect: non-AJAX upload success/error redirects always use linkToRoute('projectcheck.project.show') — client-supplied redirect parameters are ignored (open-redirect hardening now that uploads resolve again).

Added

• Inline customer quick-add on the project form: create and select a customer without leaving the page (keeps draft fields); full customer form link for email/address.
• Grouped app navigation (pc-nav): Overview / Work / Governance sections with short hints, Lucide icons via IconCatalog, and clearer empty-state guidance on list and time-entry pages.

Changed

• Sidebar shell uses main background (MobilityCheck parity) instead of a dark fill; theme/CSS compliance contracts and UX journey e2e coverage expanded.

Added

• InvoicingCheck unpaid strip on project detail: when InvoicingCheck exposes CrmInvoiceReadFacade::summarizeUnpaidByPcProject, shows remaining €, open invoice count, and overdue count (soft feature-detect; never invents amounts). Clarifies that ProjectCheck “Not yet paid” is open + invoiced hours still unpaid in ProjectCheck.

Changed

• Packaging release: bumped version for App Store / GitHub republish; confirmed Nextcloud max-version 34 against latest stable 34.0.2.

Added

• Public /health probe for mobile login reachability and ops (no version fingerprint; advertises mobileApi: true). App-access ACL does not block this public endpoint.

Unreleased

Fixed

• Schema repair: runtime/post-migration ensurer now creates pc_mob_idem (same path as license tables) so a marked-complete migration without the table cannot brick SchemaGuard / all ProjectCheck HTTP.
• Mobile settlement list: returns hasMore + limit when the outstanding list is truncated at 200 entries (no silent incomplete AR view).
• Mobile settlement apply: response no longer invents totalHours/totalAmount zeros after apply (counts only; money stays on preview).
• Project list settlement filter: stop TypeError on PHP 8.4 when filtering ?settlement=outstanding (named parameters are IParameter objects, not strings).
• License panel: stop claiming the mobile app is “coming soon” — seats copy matches MOBILE_APP_STATUS = available.
• Settings page crash: LicenseUiStrings::forPanel() no longer calls $l->t() with %1$s placeholders and zero arguments (PHP 8 / Nextcloud LazyL10N vsprintf fatal).
• User delete DI: UserDeletedListenerTest mocks MobileIdempotencyMapper so seat + idempotency cleanup stay covered after mobile v1.1.
• Icon gate: IconCatalog includes every template data-lucide name; Lucide validator uses rg --no-filename so path prefixes cannot false-fail.
• Audit gates: PHPUnit prefers Docker nextcloud service when the host has no MariaDB socket.
• A5 analytics: yearly/productivity cost aggregates use SUM(ROUND(hours * rate, 2)); user totals use Money::mul; rollups no longer float-add costs.
• A6 mobile: resolve-hourly-rate is self-only (parity with web), blocking teammate rate preview leakage.

Added

• Shared list filter toolbar: projects, customers, employees, and time entries use one equal-width filter grid (search beside the selects) with consistent select chrome, visible labels, and theme-safe focus styles (WCAG 2.1 AA).
• Theme-safe productivity / project-type year panels: reusable partials and CSS tokens so analysis blocks stay readable in light, dark, and high-contrast themes.

Changed

• Settlement summary strip: borderless single-line metrics row under the time-entry filters; bulk settlement bar matches the same chrome.
• Icons: Lucide / currentColor masks replace fragile Nextcloud icon-* + white-stroke tiles so budget alerts and list chrome render correctly across themes.
• Nextcloud compatibility: max-version kept aligned with current stable server major 34.

Fixed

• Settlement bucket math: outstanding (not yet paid) is computed with decimal-safe Money addition in the billing service; mapper/recompute accumulate when legacy status labels normalize to the same bucket so totals cannot be silently overwritten.
• Broken CSS selectors from earlier icon migration (orphan braces / truncated rules in list and dashboard stylesheets).

Unreleased

Fixed

• Project budget edits: saving a project no longer fails with a generic error when the input is rejected server-side. Users now see the actual, localized reason (for example: hourly rate required when the project has a budget and uses one rate for the whole project, or budget too low for the hourly rate).
• Same-day project dates: projects with the same start and end date are accepted again; the server now matches the form's "end date must be on or after the start date" rule instead of rejecting equal dates.
• Project form: the edit form flags a missing/zero project hourly rate before submitting when the project has a budget and uses the one-rate-for-the-whole-project pricing method (a pre-filled rate of 0.00 previously slipped past the browser's required check).
• l10n: completed missing translations for the time-entry deletion hint and the start-date validation message in fr/es/da/nl/it/pl/sv/nb.

Added

• Shared list panels: new list-table.css and stats-panel.css unify filters, data tables, footers, and summary panels across time entries, projects, customers, and employees.
• Time entry delete from edit/detail: delete URL wired on the time entry form and detail pages with the shared deletion modal.

Fixed

• Time entry ownership checks: TimeEntry::isOwnedBy() uses a timing-safe compare for access control on show, edit, update, and delete.
• Stylesheet loading: shell, layout, and mobile-nav CSS load as linked stylesheets (via EnrichTemplateNavigationContext) instead of @import in app.css, so theme tokens apply reliably.

Changed

• Page header: inline breadcrumbs, meta strips, and action button styling aligned across list and detail pages.
• Time entries UI: refactored list JavaScript (shared hour formatting, export guard, row action icons, deletion modal integration).
• Time entry form: refreshed layout and styling consistent with the shared panel system.

Added

• Upgrade backup: Pre-migration repair step snapshots ProjectCheck data before schema migrations run; occ projectcheck:upgrade-backup for manual backups and restore workflows.

Fixed

• Disable vs uninstall: UninstallRepairFlow preserves tables when the app is disabled (including auto-disable during server upgrade); data is dropped only on explicit app removal.
• Project list filters: Qualified SQL column names fix filtered project queries on some database backends.
• Admin settings: ProjectCheck settings moved to the Additional settings section (fixes broken sidebar icons in Nextcloud 34).
• Upgrade safety: Repair-step classes registered in Application.php to prevent ArgumentCountError during occ upgrade.

Changed

• UI: Shared page header section and refreshed list view l10n.

Changed

• Release metadata aligned with the latest stable Nextcloud 33 server line (max-version verified against upstream).

Changed

• Mobile layout: responsive CSS converted to mobile-first min-width breakpoints across shell, navigation, projects, time entries, settings, and shared components; desktop (≥1024px) layout preserved.
• Mobile navigation: replaced the core floating menu toggle with an in-page Menu button in the page header and a slide-in drawer (no dimming backdrop); drawer sits below the Nextcloud header with focus trap and Escape / tap-outside to close.

Fixed

• Shell layout: page title and main content stack correctly above each other on desktop (fixes flex row regression on .pc-shell pages).

Fixed

• Employee detail page crashed for admins: hourly rate section called non-existent OCP\Util::getLocale(); now uses injected htmlLang like other date fields.
• Hourly rate workflow: locale-aware rate history display, client-side validation, future-date guard on effective-from, read-only rate history for removed accounts, and API rejection when adding rates for deleted users.

Changed

• Employee hourly rate section: clearer layout, WCAG-oriented form structure (fieldset, hints, table caption), and responsive styling aligned with project team rate UI.

Fixed

• Search field magnifier sat at the top of the input: global .lucide-icon-host { height: 1.125em } overrode the search icon’s full-height positioning. The search icon host now uses height: auto with top/bottom: 0 so it centres on the input. Moved the screen-reader hint outside .employees-search so it cannot affect layout.

Added

• Project edit — team callout: Prominent callout on the project form deep-links to the team section on project detail, with permission-aware copy, member count, and secondary footer links.

Changed

• Time entries: Clearer admin override messaging on project detail and the time-entry form; tighter server-side checks when adding time on behalf of others.
• Team roster: Improved rate-mode handling and project mapper hydration for member lists.

Fixed

• Tests: ProjectMapperHydrationTest, HourlyRateServiceTest, and ProjectServiceTest cover team roster and rate-mode edge cases.

Fixed

• Pricing mode cards: disabled cards no longer show the primary focus ring; styles use :has(:disabled) so locked modes stay visually inactive over :checked / :hover.
• Project files: refreshed upload/dropzone layout and project-detail files UX.

Changed

• Rate history migrations: consolidated rate-table bootstrap into RateHistoryTables / RateTableRenamer; added migration Version2011Date20260526120000.
• info.xml dependencies: declare mysql and pgsql under <dependencies> for DB standards linting.

Changed

• DB-standards alignment (Oracle/MySQL/PostgreSQL portability): every migration declares : ?ISchemaWrapper and wraps createTable / column additions in hasTable / hasColumn guards (idempotent across replays). Primary keys and indexes use explicit short names (pc_*_pk, pc_*_idx). PcCoreSchemaBootstrap helpers now return false instead of bailing early so re-runs after partial failures finish the schema.
• Budget display: "Over by X" instead of negative remaining. BudgetService now returns over_budget_amount alongside is_over_budget (computed via Money fixed-point so display never drifts). Project detail and budget bar both flip to "Over by X" via the new shared templates/parts/budget-remaining-line.php partial; the duplicate "Over Budget" breakdown row is removed.
• Time entries: moved the filter container CSS out of an inline <style> block (with CSP nonce) into css/time-entries.css.

Added

• OCA\ProjectCheck\Repair\UninstallDropTables + <repair-steps><uninstall> in appinfo/info.xml: auto-generated drop list keeps every projectcheck table ever created in sync. Disabling the app now drops all pc_* (and legacy) tables, migrations rows, and app config — no orphan data on remove. Regenerate with php scripts/check-nextcloud-db-standards.php sync-uninstall --app=projectcheck.
• l10n: Over by %s (en: Over by %s, de: Überschreitung um %s).
• Tests: BudgetServiceTest covers the new over_budget_amount field.

Bumped

• Nextcloud max-version: 33 (latest stable major).

Fixed

• App Store: donation, website, and author homepage in appinfo/info.xml use https:// URLs so they validate against the store schema (donation requires pattern https://.+).

Changed

• Release: Nextcloud max-version set to current stable major 33 (upstream lookup during release prep).

Fixed

• Budget overview: clearer UI state handling when loading or when data is empty.
• Organization currency settings: stricter validation and safer persistence of the default currency.

Changed

• Dashboard widgets: prefer dark-themed app icons where the server exposes them, for better contrast on the dashboard.
• Release metadata for App Store: version 2.0.32, package alignment, and Nextcloud 32–33 compatibility (max-version aligned with current stable server major 33).

Fixed

• Time entries page (/apps/projectcheck/time-entries) crashed with SQLSTATE[42S22] Unknown column ':dcValue1' on installs whose pc_projects.project_type column was missing. The fallback SELECT branch in TimeEntryMapper::findWithProjectInfo() was emitting a named parameter placeholder as if it were a column identifier; that branch is now removed in favour of the existing PHP-level fallback to 'client'.

Added

• New migration Version2007Date20260506180000 ensures that pc_projects.project_type always exists (varchar(32) NOT NULL DEFAULT 'client') and is indexed (pc_proj_type_idx) on every install, including fresh installs and partial upgrades from the legacy projectcontrol schema. Idempotent and cross-database safe.

Changed

• Consolidated the two divergent columnExists() helpers in TimeEntryMapper and ProjectService into a shared ColumnIntrospectionTrait. The new helper is portable across MySQL, PostgreSQL and SQLite, immune to false negatives on empty tables, and caches results for the request lifetime so a typical request now performs at most one introspection probe per (table, column) pair.

Changed

• Database migration hardening for production upgrades: legacy generic table and identifier names are normalized to pc_* names with idempotent upgrade-safe migrations and cross-database compatibility safeguards.

Changed

• Prepared ProjectCheck 2.0.29 release metadata for App Store publishing with aligned package versioning and Nextcloud 32-33 compatibility.

Changed

• Finalized organization-scoped settings and deletion workflow hardening across controllers, templates, listener wiring, and localization payloads.
• Release operator guidance now explicitly requires a new app version for each published update to ensure upgrade visibility in Nextcloud instances.

Changed

• Release metadata alignment for App Store publishing: bumped appinfo/info.xml and package.json to 2.0.27, and aligned declared Nextcloud compatibility to 32-33 for this validated release line.
• Release documentation refreshed (README.md, release/APPSTORE-RELEASE.md) to match the current support policy and current release placeholder examples.

Changed

• Documentation: public-facing bilingual README (German / English), aligned with ArbeitszeitCheck-style structure; screenshots and install/support sections for the standalone repository.

Fixed

• Form focus jump (desktop): selecting dropdowns, date fields, or text inputs no longer yanks the page. The soft-keyboard helper (keep-focused-visible) only scrolls when the on-screen keyboard has shrunk the visual viewport, skips non-IME controls (select/checkbox/date/time), uses scrollIntoView({ block: 'nearest' }) instead of center, and clears leftover IME padding when the keyboard closes.
• Validation / form messages: first-error and status message scrolls use nearest (with reduced-motion respect) and focus errors with preventScroll so long forms stay calm.
• Global smooth scroll footgun: html { scroll-behavior } defaults to auto so CSS does not amplify programmatic focus scrolls.

Tests

• Keep-focused unit + fleet contract + mutation gauntlet (desktop gate, select skip, nearest-only, keyboard-close pad clear).
• E2E: time-entry create focus must not change window/#app-content scroll; UX journeys + axe smoke remain green.

Fixed

• Project customer reassignment: empty available_hours / decimal fields no longer abort the whole project UPDATE (MariaDB empty DECIMAL), so changing the customer on edit persists correctly even with zero budget.
• Danger / delete actions (WCAG 1.4.3): solid danger buttons and row delete controls use --color-element-error via --pc-danger-fill (not pale --color-error with on-fill text), so trash/delete stays readable in Light, Dark, and High Contrast.
• Empty progress tracks: list progress cells no longer render a blank 0% bar; they show “No hours logged yet” until consumption is greater than zero.

Changed

• Project type icons: Lucide chips replace emoji glyphs across projects, dashboard, and related views (theme-safe).
• Project form quick-add customer: secondary “Add to list” plus a clear next-step Save control so quick-add no longer competes with the primary Create/Update action.

Tests

• FormDecimal / customer-reassign integration + mutation gauntlet; ProgressCellPresentation unit + mutation; danger-button and type-chip CSS/theme contracts; theme × viewport axe and UX journey E2E coverage expanded.

Fixed

• Project file upload / multi-word routes (GitHub #8): route controller segments now use underscores (project_file, time_entry, project_member) so Nextcloud resolves ProjectFileController / TimeEntryController / ProjectMemberController instead of the non-existent ProjectfileController (Linux PSR-4). All linkToRoute call sites updated; contract + container resolution tests and a mutation gauntlet added. Companion /mobile/v1/* paths stay on mobile# / MobileController (web rename is isolated); server↔companion route parity contract + client URL contract cover the full surface.
• Project file upload redirect: non-AJAX upload success/error redirects always use linkToRoute('projectcheck.project.show') — client-supplied redirect parameters are ignored (open-redirect hardening now that uploads resolve again).

Added

• Inline customer quick-add on the project form: create and select a customer without leaving the page (keeps draft fields); full customer form link for email/address.
• Grouped app navigation (pc-nav): Overview / Work / Governance sections with short hints, Lucide icons via IconCatalog, and clearer empty-state guidance on list and time-entry pages.

Changed

• Sidebar shell uses main background (MobilityCheck parity) instead of a dark fill; theme/CSS compliance contracts and UX journey e2e coverage expanded.

Added

• InvoicingCheck unpaid strip on project detail: when InvoicingCheck exposes CrmInvoiceReadFacade::summarizeUnpaidByPcProject, shows remaining €, open invoice count, and overdue count (soft feature-detect; never invents amounts). Clarifies that ProjectCheck “Not yet paid” is open + invoiced hours still unpaid in ProjectCheck.

Changed

• Packaging release: bumped version for App Store / GitHub republish; confirmed Nextcloud max-version 34 against latest stable 34.0.2.

Added

• Public /health probe for mobile login reachability and ops (no version fingerprint; advertises mobileApi: true). App-access ACL does not block this public endpoint.

Unreleased

Fixed

• Schema repair: runtime/post-migration ensurer now creates pc_mob_idem (same path as license tables) so a marked-complete migration without the table cannot brick SchemaGuard / all ProjectCheck HTTP.
• Mobile settlement list: returns hasMore + limit when the outstanding list is truncated at 200 entries (no silent incomplete AR view).
• Mobile settlement apply: response no longer invents totalHours/totalAmount zeros after apply (counts only; money stays on preview).
• Project list settlement filter: stop TypeError on PHP 8.4 when filtering ?settlement=outstanding (named parameters are IParameter objects, not strings).
• License panel: stop claiming the mobile app is “coming soon” — seats copy matches MOBILE_APP_STATUS = available.
• Settings page crash: LicenseUiStrings::forPanel() no longer calls $l->t() with %1$s placeholders and zero arguments (PHP 8 / Nextcloud LazyL10N vsprintf fatal).
• User delete DI: UserDeletedListenerTest mocks MobileIdempotencyMapper so seat + idempotency cleanup stay covered after mobile v1.1.
• Icon gate: IconCatalog includes every template data-lucide name; Lucide validator uses rg --no-filename so path prefixes cannot false-fail.
• Audit gates: PHPUnit prefers Docker nextcloud service when the host has no MariaDB socket.
• A5 analytics: yearly/productivity cost aggregates use SUM(ROUND(hours * rate, 2)); user totals use Money::mul; rollups no longer float-add costs.
• A6 mobile: resolve-hourly-rate is self-only (parity with web), blocking teammate rate preview leakage.

Added

• Shared list filter toolbar: projects, customers, employees, and time entries use one equal-width filter grid (search beside the selects) with consistent select chrome, visible labels, and theme-safe focus styles (WCAG 2.1 AA).
• Theme-safe productivity / project-type year panels: reusable partials and CSS tokens so analysis blocks stay readable in light, dark, and high-contrast themes.

Changed

• Settlement summary strip: borderless single-line metrics row under the time-entry filters; bulk settlement bar matches the same chrome.
• Icons: Lucide / currentColor masks replace fragile Nextcloud icon-* + white-stroke tiles so budget alerts and list chrome render correctly across themes.
• Nextcloud compatibility: max-version kept aligned with current stable server major 34.

Fixed

• Settlement bucket math: outstanding (not yet paid) is computed with decimal-safe Money addition in the billing service; mapper/recompute accumulate when legacy status labels normalize to the same bucket so totals cannot be silently overwritten.
• Broken CSS selectors from earlier icon migration (orphan braces / truncated rules in list and dashboard stylesheets).

Unreleased

Fixed

• Project budget edits: saving a project no longer fails with a generic error when the input is rejected server-side. Users now see the actual, localized reason (for example: hourly rate required when the project has a budget and uses one rate for the whole project, or budget too low for the hourly rate).
• Same-day project dates: projects with the same start and end date are accepted again; the server now matches the form's "end date must be on or after the start date" rule instead of rejecting equal dates.
• Project form: the edit form flags a missing/zero project hourly rate before submitting when the project has a budget and uses the one-rate-for-the-whole-project pricing method (a pre-filled rate of 0.00 previously slipped past the browser's required check).
• l10n: completed missing translations for the time-entry deletion hint and the start-date validation message in fr/es/da/nl/it/pl/sv/nb.

Added

• Shared list panels: new list-table.css and stats-panel.css unify filters, data tables, footers, and summary panels across time entries, projects, customers, and employees.
• Time entry delete from edit/detail: delete URL wired on the time entry form and detail pages with the shared deletion modal.

Fixed

• Time entry ownership checks: TimeEntry::isOwnedBy() uses a timing-safe compare for access control on show, edit, update, and delete.
• Stylesheet loading: shell, layout, and mobile-nav CSS load as linked stylesheets (via EnrichTemplateNavigationContext) instead of @import in app.css, so theme tokens apply reliably.

Changed

• Page header: inline breadcrumbs, meta strips, and action button styling aligned across list and detail pages.
• Time entries UI: refactored list JavaScript (shared hour formatting, export guard, row action icons, deletion modal integration).
• Time entry form: refreshed layout and styling consistent with the shared panel system.

Added

• Upgrade backup: Pre-migration repair step snapshots ProjectCheck data before schema migrations run; occ projectcheck:upgrade-backup for manual backups and restore workflows.

Fixed

• Disable vs uninstall: UninstallRepairFlow preserves tables when the app is disabled (including auto-disable during server upgrade); data is dropped only on explicit app removal.
• Project list filters: Qualified SQL column names fix filtered project queries on some database backends.
• Admin settings: ProjectCheck settings moved to the Additional settings section (fixes broken sidebar icons in Nextcloud 34).
• Upgrade safety: Repair-step classes registered in Application.php to prevent ArgumentCountError during occ upgrade.

Changed

• UI: Shared page header section and refreshed list view l10n.

Changed

• Release metadata aligned with the latest stable Nextcloud 33 server line (max-version verified against upstream).

Changed

• Mobile layout: responsive CSS converted to mobile-first min-width breakpoints across shell, navigation, projects, time entries, settings, and shared components; desktop (≥1024px) layout preserved.
• Mobile navigation: replaced the core floating menu toggle with an in-page Menu button in the page header and a slide-in drawer (no dimming backdrop); drawer sits below the Nextcloud header with focus trap and Escape / tap-outside to close.

Fixed

• Shell layout: page title and main content stack correctly above each other on desktop (fixes flex row regression on .pc-shell pages).

Fixed

• Employee detail page crashed for admins: hourly rate section called non-existent OCP\Util::getLocale(); now uses injected htmlLang like other date fields.
• Hourly rate workflow: locale-aware rate history display, client-side validation, future-date guard on effective-from, read-only rate history for removed accounts, and API rejection when adding rates for deleted users.

Changed

• Employee hourly rate section: clearer layout, WCAG-oriented form structure (fieldset, hints, table caption), and responsive styling aligned with project team rate UI.

Fixed

• Search field magnifier sat at the top of the input: global .lucide-icon-host { height: 1.125em } overrode the search icon’s full-height positioning. The search icon host now uses height: auto with top/bottom: 0 so it centres on the input. Moved the screen-reader hint outside .employees-search so it cannot affect layout.

Added

• Project edit — team callout: Prominent callout on the project form deep-links to the team section on project detail, with permission-aware copy, member count, and secondary footer links.

Changed

• Time entries: Clearer admin override messaging on project detail and the time-entry form; tighter server-side checks when adding time on behalf of others.
• Team roster: Improved rate-mode handling and project mapper hydration for member lists.

Fixed

• Tests: ProjectMapperHydrationTest, HourlyRateServiceTest, and ProjectServiceTest cover team roster and rate-mode edge cases.

Fixed

• Pricing mode cards: disabled cards no longer show the primary focus ring; styles use :has(:disabled) so locked modes stay visually inactive over :checked / :hover.
• Project files: refreshed upload/dropzone layout and project-detail files UX.

Changed

• Rate history migrations: consolidated rate-table bootstrap into RateHistoryTables / RateTableRenamer; added migration Version2011Date20260526120000.
• info.xml dependencies: declare mysql and pgsql under <dependencies> for DB standards linting.

Changed

• DB-standards alignment (Oracle/MySQL/PostgreSQL portability): every migration declares : ?ISchemaWrapper and wraps createTable / column additions in hasTable / hasColumn guards (idempotent across replays). Primary keys and indexes use explicit short names (pc_*_pk, pc_*_idx). PcCoreSchemaBootstrap helpers now return false instead of bailing early so re-runs after partial failures finish the schema.
• Budget display: "Over by X" instead of negative remaining. BudgetService now returns over_budget_amount alongside is_over_budget (computed via Money fixed-point so display never drifts). Project detail and budget bar both flip to "Over by X" via the new shared templates/parts/budget-remaining-line.php partial; the duplicate "Over Budget" breakdown row is removed.
• Time entries: moved the filter container CSS out of an inline <style> block (with CSP nonce) into css/time-entries.css.

Added

• OCA\ProjectCheck\Repair\UninstallDropTables + <repair-steps><uninstall> in appinfo/info.xml: auto-generated drop list keeps every projectcheck table ever created in sync. Disabling the app now drops all pc_* (and legacy) tables, migrations rows, and app config — no orphan data on remove. Regenerate with php scripts/check-nextcloud-db-standards.php sync-uninstall --app=projectcheck.
• l10n: Over by %s (en: Over by %s, de: Überschreitung um %s).
• Tests: BudgetServiceTest covers the new over_budget_amount field.

Bumped

• Nextcloud max-version: 33 (latest stable major).

Fixed

• App Store: donation, website, and author homepage in appinfo/info.xml use https:// URLs so they validate against the store schema (donation requires pattern https://.+).

Changed

• Release: Nextcloud max-version set to current stable major 33 (upstream lookup during release prep).

Fixed

• Budget overview: clearer UI state handling when loading or when data is empty.
• Organization currency settings: stricter validation and safer persistence of the default currency.

Changed

• Dashboard widgets: prefer dark-themed app icons where the server exposes them, for better contrast on the dashboard.
• Release metadata for App Store: version 2.0.32, package alignment, and Nextcloud 32–33 compatibility (max-version aligned with current stable server major 33).

Fixed

• Time entries page (/apps/projectcheck/time-entries) crashed with SQLSTATE[42S22] Unknown column ':dcValue1' on installs whose pc_projects.project_type column was missing. The fallback SELECT branch in TimeEntryMapper::findWithProjectInfo() was emitting a named parameter placeholder as if it were a column identifier; that branch is now removed in favour of the existing PHP-level fallback to 'client'.

Added

• New migration Version2007Date20260506180000 ensures that pc_projects.project_type always exists (varchar(32) NOT NULL DEFAULT 'client') and is indexed (pc_proj_type_idx) on every install, including fresh installs and partial upgrades from the legacy projectcontrol schema. Idempotent and cross-database safe.

Changed

• Consolidated the two divergent columnExists() helpers in TimeEntryMapper and ProjectService into a shared ColumnIntrospectionTrait. The new helper is portable across MySQL, PostgreSQL and SQLite, immune to false negatives on empty tables, and caches results for the request lifetime so a typical request now performs at most one introspection probe per (table, column) pair.

Changed

• Database migration hardening for production upgrades: legacy generic table and identifier names are normalized to pc_* names with idempotent upgrade-safe migrations and cross-database compatibility safeguards.

Changed

• Prepared ProjectCheck 2.0.29 release metadata for App Store publishing with aligned package versioning and Nextcloud 32-33 compatibility.

Changed

• Finalized organization-scoped settings and deletion workflow hardening across controllers, templates, listener wiring, and localization payloads.
• Release operator guidance now explicitly requires a new app version for each published update to ensure upgrade visibility in Nextcloud instances.

Changed

• Release metadata alignment for App Store publishing: bumped appinfo/info.xml and package.json to 2.0.27, and aligned declared Nextcloud compatibility to 32-33 for this validated release line.
• Release documentation refreshed (README.md, release/APPSTORE-RELEASE.md) to match the current support policy and current release placeholder examples.

Changed

• Documentation: public-facing bilingual README (German / English), aligned with ArbeitszeitCheck-style structure; screenshots and install/support sections for the standalone repository.