xarmian 1ee69df394 feat: SSE event permission filtering ...

Filter SSE events by the connected user's collection visibility so
events about items in hidden collections are never sent (TASK-487).

- Compute visible collection slug set at SSE connection time
- Filter live events: check event.Collection against visible set
- Filter replayed events: same check on missed event replay
- Events without a collection field always pass through
- Admins and "all access" members see everything (nil set = no filter)

2026-04-11 01:23:36 +00:00

..

cli

fix: address 6 security findings from Codex review of TOTP 2FA

2026-04-08 20:30:39 +00:00

collections

feat: collection-level visibility + system collections

2026-04-11 01:02:06 +00:00

config

feat: implement SSE connection limits

2026-04-06 01:23:34 +00:00

diff

Initial release

2026-03-26 01:52:36 +00:00

email

feat: account settings, email infrastructure, and UX polish (#23)

2026-03-29 18:29:52 -04:00

events

fix: replace scattered tab-resume refetches with layered sync system

2026-04-10 04:15:43 +00:00

items

Add move item between collections with field migration

2026-03-28 05:01:40 +00:00

links

Initial release

2026-03-26 01:52:36 +00:00

logging

feat: add readiness probe and structured logging (TASK-161)

2026-04-05 15:02:54 +00:00

metrics

fix: replace scattered tab-resume refetches with layered sync system

2026-04-10 04:15:43 +00:00

models

feat: permission-filtered aggregates for all data endpoints

2026-04-11 01:20:05 +00:00

server

feat: SSE event permission filtering

2026-04-11 01:23:36 +00:00

store

feat: permission-filtered aggregates for all data endpoints

2026-04-11 01:20:05 +00:00

webhooks

feat: add readiness probe and structured logging (TASK-161)

2026-04-05 15:02:54 +00:00