Releases: bitsandbots/inventory
Releases · bitsandbots/inventory
v1.0.0 — First stable release
First stable release. Multi-tenant PHP/MySQL inventory system with full security hardening.
Security (Plan A)
- Session idle timeout (configurable
SESSION_TIMEOUT_MINUTES, default 30 min) - PHP security headers on every response (CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy)
- Self-service password reset (1-hour time-limited tokens, bcrypt, atomic transaction)
- Audit log (login/logout/create/update/delete events with user, IP, summary)
- Per-module RBAC permissions with admin matrix editor
Core features - Multi-tenant architecture with org switching
- Product, customer, sales, and stock management
- Soft-delete with restore throughout
- Role-based access (admin / supervisor / user)
- Media linking with FK integrity
Operations install.sh— one-command setup (Apache vhost, DB, .env, systemd service)scripts/release.sh— automated release with tests + archive verificationscripts/migrate.php— incremental migration runner
Test coverage- 40/40 PHPUnit (unit + integration)
- 43/43 Playwright UI tests (Chromium)
tar xzf inventory-1.0.0.tar.gz
cd inventory
bash install.shVerify checksum before extracting:
sha256sum -c inventory-1.0.0.tar.gz.sha256If upgrading from a pre-v1.0.0 deployment, apply new migrations:
php scripts/migrate.phpOr manually:
sudo mysql inventory < migrations/022_password_resets.up.sql
sudo mysql inventory < migrations/023_audit_log.up.sql
sudo mysql inventory < migrations/024_permissions.up.sql