fix: P0/P1 fixes (auth+limit+schema) + project audit docs

ui/routes/admin.js

@@ -54,7 +54,8 @@ function createRouter() {
   // POST /admin/limit/:id — установить лимит компании
   router.post('/admin/limit/:id', async (req, res) => {
     const token = api.token(req);
-    const limit = parseInt(req.body.limit, 10);
+    const rawLimit = req.body.limit;
+    const limit = (rawLimit === '' || rawLimit == null) ? null : parseInt(rawLimit, 10);
     try {
       const r = await api.patch('/api/v1/companies/' + req.params.id + '/limit', token, { limit });
       if (r.status === 200) return res.redirect('/admin?success=' + encodeURIComponent('Лимит обновлён'));

ui/routes/auth.js

@@ -47,7 +47,13 @@ function createRouter({ auth, MOCK_USERS, authLimiter }) {
     });
 
     req.session.token = token;
-    req.session.user  = { clientId: user.clientId, email: user.email, isAdmin: user.isAdmin };
+    req.session.user  = {
+      clientId:    user.clientId,
+      email:       user.email || user.clientId + '@mock.local',
+      companyId:   user.companyId || '00000000-0000-0000-0000-000000000001',
+      companyName: user.companyName || user.clientId,
+      isAdmin:     user.role === 'admin',
+    };
     res.redirect(returnTo || '/');
   });