xarmian ab4cd6926e fix(server): an open workspace event stream closes when its workspace is soft-deleted (BUG-3273) (#1638) ...

The per-tick recheck of GET /api/v1/events asked only about the
principal. A soft delete keeps membership and grant rows for restore,
so members, guests, the cookie admin and legacy tokens all stayed
admitted, while the entry check refuses a deleted workspace to
everyone. A stream open at delete time ran on for as long as the tab
held it, taking a slot in the SSE budget.

The recheck now asks about the workspace first, through the live-only
GetWorkspaceByID: nil ends the stream with `unauthorized` for every
principal, and a store error keeps the connection, like the checks
after it. Collab sockets already close through authorizeCollabAccess.

Claude-Session: https://claude.ai/code/session_01NidgPePY7UvHcEJCMkD2Qz

2026-09-28 11:04:51 -04:00

..

artifact

fix(export): mark bundle bodies that were stale when written, and refuse the migration that would abandon them (BUG-3032) (#1356)

2026-09-14 01:45:30 -04:00

attachments

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

billing

feat(admin): add /api/v1/admin/billing-stats proxy + cloud client (TASK-827) (#266)

2026-04-27 14:42:53 -04:00

buildtools

fix(cli): a CLI call during an install-refresh bounce waits for the refresh instead of auto-starting a server over it (BUG-3215) (#1544)

2026-09-25 09:55:48 -04:00

cli

fix(comments): deleting a comment that has replies answers 409 comment_has_replies instead of 500 (BUG-3252) (#1608)

2026-09-27 09:11:48 -04:00

cmdhelp

feat(playbook): match free text to an active playbook via the decision provider (TASK-3120) (#1429)

2026-09-22 11:28:57 -04:00

collab

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

collections

fix(project): a collection's own abandoned_options decide what the changelog, standup and reports count as shipped (BUG-2347) (#1464)

2026-09-23 12:52:46 -04:00

config

fix(collab): WebSocket dials get their own per-user bucket and a per-user socket cap, and the editor jitters its reconnects (BUG-1308) (#1499)

2026-09-24 04:51:57 -04:00

decision

feat(playbook): match free text to an active playbook via the decision provider (TASK-3120) (#1429)

2026-09-22 11:28:57 -04:00

diff

Initial release

2026-03-26 01:52:36 +00:00

email

feat(store): email_verification_tokens + SendEmailVerification + token reaper (TASK-1936) (#806)

2026-07-04 01:19:41 -04:00

events

fix(events): a resume from exactly the discarded peak is refused after a counter-backwards reset, instead of being handed the new sequence as though it followed (BUG-3206) (#1530)

2026-09-25 02:35:38 -04:00

idspace

refactor(events): one home for the asymmetry, one assertion for the count (BUG-2736)

2026-08-22 20:48:58 +00:00

items

fix(fields): field writes keep every number's literal, so an integer above 2^53 is no longer rounded by a write that never named it (BUG-3202) (#1545)

2026-09-25 14:22:09 -04:00

jsonscan

fix(server): the request-body gate reads tokens with jsontext, so a NUL behind a repeated key or beside 1e999 is refused, and a repeated request member is refused on every body (BUG-2812) (#1550)

2026-09-25 21:48:30 -04:00

kernelevents

feat: item reminders — the fire-at-an-instant primitive, and one overdue rule for all four surfaces (IDEA-2641, closes #1010) (#1244)

2026-09-04 11:36:11 -04:00

links

fix(documents): the rename cascade decides a link by the wiki grammar, so a legacy title containing | \ or ] keeps its links and no longer rewrites a link to another target (BUG-2806) (#1572)

2026-09-26 10:52:41 -04:00

logging

feat: add readiness probe and structured logging (TASK-161)

2026-04-05 15:02:54 +00:00

mcp

refactor(mcp): route tool results through a Pad-owned seam (TASK-2306 unit 2) (#1611)

2026-09-27 11:00:34 -04:00

metrics

fix(events): Publish reports its outcome, and a failed activity publish is counted and logged (BUG-2732) (#1457)

2026-09-23 07:03:36 -04:00

models

feat(workspaces): a per-user open set of workspace tabs, stored server-side and filtered on read to the workspaces the caller can see (TASK-3256) (#1619)

2026-09-27 14:52:26 -04:00

oauth

perf(test): wire remaining store helpers onto storetest fixture (TASK-1915) (#789)

2026-07-03 12:17:03 -04:00

redisdial

fix(redis): honour the caller's context on TLS dials (BUG-2754) (#1198)

2026-08-25 00:27:27 -04:00

redisns

docs: thirteen claims about code that had moved under them (BUG-2736)

2026-08-22 19:28:17 +00:00

server

fix(server): an open workspace event stream closes when its workspace is soft-deleted (BUG-3273) (#1638)

2026-09-28 11:04:51 -04:00

store

feat(server): workspace_access_changed on the user stream when an existing account gains or loses a workspace (TASK-3272) (#1636)

2026-09-28 10:05:51 -04:00

textguard

refactor(store): delete the NUL SUSPECT path, now that the predicate sees a NUL behind a repeated key (BUG-3220) (#1561)

2026-09-26 01:09:03 -04:00

urlimport

feat(urlimport): OpenAPI 3.x → Markdown converter (TASK-1471) (#555)

2026-05-15 00:24:14 -04:00

watchevents

feat(server): workspace_access_changed on the user stream when an existing account gains or loses a workspace (TASK-3272) (#1636)

2026-09-28 10:05:51 -04:00

webhooks

feat(server): outbox drain — webhooks delivered from the choke point (TASK-2714) (#1173)

2026-08-20 23:33:26 -04:00