feat: implement permissions and actions management

- Add permissions logic for status options in corrective actions.
- Create tests for permissions functionality.
- Implement queries for user authentication and actions management.
- Develop Actions page to display and manage corrective actions.
- Create authentication pages for login, setup, and password reset.
- Add IncidentDetail page to view incident details and associated actions.
- Implement Settings page for user management and password changes.

server/config.ts

@@ -7,6 +7,11 @@ export interface Config {
   production: boolean
   /** Built web app to serve, if present. */
   staticDir: string
+  /** e.g. `smtps://user:pass@smtp.example.com:465`. Without it, emails are printed to the log (development only). */
+  smtpUrl: string | undefined
+  mailFrom: string
+  uploadDir: string
+  maxUploadBytes: number
 }
 
 export function loadConfig(env: NodeJS.ProcessEnv = process.env): Config {
@@ -18,5 +23,9 @@ export function loadConfig(env: NodeJS.ProcessEnv = process.env): Config {
     secureCookies: publicUrl.startsWith('https://'),
     production: env.NODE_ENV === 'production',
     staticDir: env.STATIC_DIR ?? 'dist',
+    smtpUrl: env.SMTP_URL || undefined,
+    mailFrom: env.MAIL_FROM ?? 'Open SafetyLog EHS <no-reply@localhost>',
+    uploadDir: env.UPLOAD_DIR ?? './data/uploads',
+    maxUploadBytes: Number(env.MAX_UPLOAD_MB ?? 10) * 1024 * 1024,
   }
 }