mirror of
https://github.com/PerpetualSoftware/pad.git
synced 2026-10-25 05:49:50 +00:00
xarmian
282a42f69f
* feat(store): a bot's visibility is its install's ceiling, at every caller (TASK-3401) * feat(server): the app API door, route table, ceiling, and read routes (TASK-3401, U6a) * test(server): U6a door, ceiling, DTO census and visibility-caller census (TASK-3401) * test(server): controls for the cross-workspace refusals; role follows access; cross-item parent projects null (TASK-3401) * fix(server): app responses are re-validated against revocation before they are sent; one users read in the bot ceiling (TASK-3401, codex r1) * fix(server): re-admit an app request and replay its authorizations before the response is sent (TASK-3401, codex r2) * fix(server): re-admission rechecks apps availability and fails closed without a re-check holder; collection re-checks memoized (TASK-3401, codex r3) * test(server): re-validation fails closed without a re-check holder (TASK-3401) * docs(server): the re-check memo is sequential, not a snapshot (TASK-3401, codex r4) * chore(server): drop the unused write-rule helper until U6b's first caller (TASK-3401) * style(server): gofmt after dropping the helper (TASK-3401) * fix(server): app item lists page by window (has_more, next_offset), not by page length (TASK-3401, Rook review)