xarmian deec62235e feat(decision): executable conventions, the server half (TASK-3119 U1a) (#1859) ...

* wip(decision): conventions set (TASK-3119 U1a)

* chore(eval): executable-conventions eval through the production question path (TASK-3119 U0)

Measures, before any chip exists, how often the decision provider says a
hand-labelled item breaks a convention at the 0.9 threshold: per
convention precision and recall (all cases and real-only), the false
'Breaks' rate of a behaviour convention, and the calls and tokens spent.
State is decision.BuildItemState, the question a decision.Noul worded as
the U1 contract says, the model decision.DefaultModel.

The hand labels were posted to TASK-3119 before any score existed; the
trail comment carrying them is dropped from every state, and the dry run
refuses a state that still carries them. Reads TYPESAFE_API_KEY only.

Claude-Session: https://claude.ai/code/session_01Q9WssCjFuHjSfLABoW4tmS

* chore(eval): -links and -only for the conventions eval (TASK-3119 U1a)

-links builds each state as the conventions set does, with the item's
links (from the dump: the parent link only; blocking links are not in
pad item show's JSON). -only runs one convention. Used for the lead's
U1a gate: CONVE-1286 rerun with links.

Claude-Session: https://claude.ai/code/session_01Q9WssCjFuHjSfLABoW4tmS

* fix(decision): liveness before EACH split call (TASK-3119 U1a, codex r1)

A split set makes several provider calls; the liveness check ran once
before them, so an item or workspace deleted between calls was still
sent in the later ones. It now runs immediately before every call. A
test deletes the item from inside the first call and the second is not
sent; checking only once fails it.

Claude-Session: https://claude.ai/code/session_01Q9WssCjFuHjSfLABoW4tmS

* fix(decision): decision_check has no default; allow-list the eval's decode (TASK-3119 U1a)

A default "on" was written into every new convention: imports gained a
decision_check field (artifact import parity) and an activated built-in
no longer matched its seed (TASK-3462 would read every one as diverged).
Absent already reads as on, so the field carries no default, in the
template and both migrations.

The conventions eval's readJSON is a raw decode the reserved-field guard
counts; allow-listed with its reason, like the attention harness.

Claude-Session: https://claude.ai/code/session_01Q9WssCjFuHjSfLABoW4tmS

2026-10-07 12:42:32 -04:00

..

migrations

feat(decision): executable conventions, the server half (TASK-3119 U1a) (#1859)

2026-10-07 12:42:32 -04:00

pgmigrations

feat(decision): executable conventions, the server half (TASK-3119 U1a) (#1859)

2026-10-07 12:42:32 -04:00

storetest

fix(test): test temp dirs stop leaking into /tmp (BUG-3412) (#1786)

2026-10-05 04:50:02 -04:00

testdata

fix(relations): a relation value stored as text reads as text, not as an unavailable target (BUG-3014, ToolSurfaceVersion 0.50) (#1484)

2026-09-23 22:50:47 -04:00

account_claim.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

account_deletion_comments_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

account_deletion_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

activities_debounce_miss_race_test.go

fix(store): two concurrent updates by one writer start one activity row, not two (BUG-2777) (#1482)

2026-09-23 21:52:27 -04:00

activities_debounce_race_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

activities_member_cols_test.go

fix(store): activity reads a member can reach no longer return ip_address and user_agent (BUG-3314) (#1679)

2026-09-30 02:20:23 -04:00

activities_paging_test.go

fix(activity): feeds page by a (created_at, id) keyset and break timestamp ties by id (BUG-2781) (#1459)

2026-09-23 09:05:05 -04:00

activities_test.go

fix(history): split activity runs by source, stamp version source, stop dropping field changes (PLAN-2348 U1) (#1685)

2026-09-30 06:50:13 -04:00

activities_user_feed_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

activities.go

feat(appstore): app item create and field update inside the fence (TASK-3390) (#1765)

2026-10-03 18:09:33 -04:00

activity_id_with_error_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

agent_roles_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

agent_roles.go

fix(store): reads exclude soft-deleted collections' items (BUG-3425) (#1820)

2026-10-05 21:18:56 -04:00

api_tokens_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

api_tokens.go

fix(store): an API token mint or rotation reads its row back inside its own transaction, never panics on a concurrent delete (BUG-3405) (#1774)

2026-10-04 13:19:45 -04:00

app_attribution.go

feat(apps): human-facing JSON names the app that wrote an item, comment or version (TASK-3413, SPEC-6 U9c) (#1787)

2026-10-05 04:49:25 -04:00

app_ceiling.go

fix(server): the item-grant filter keeps an app request's read ceiling (BUG-3424) (#1825)

2026-10-06 01:33:24 -04:00

app_delivery.go

feat(apps): per-endpoint webhook delivery state, a per-install rate cap, and a 24 h drop (TASK-3408, SPEC-6 U10c) (#1783)

2026-10-05 00:02:49 -04:00

app_event_dto.go

fix(apps): an installed app learns its workspace from the redeem, an unscoped /me and every webhook (BUG-3416) (#1797)

2026-10-05 09:16:24 -04:00

app_grants.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

app_item_actions.go

feat(apps): app item actions and context codes (TASK-3414, SPEC-6 U11) (#1784)

2026-10-05 02:29:48 -04:00

app_lifecycle.go

feat(apps): upgrade review and draft activation in Settings → Apps (TASK-3413, SPEC-6 U9b) (#1789)

2026-10-05 06:09:12 -04:00

app_pending_test.go

feat(apps): app install staging: apps/1 manifest, fetch policy, pending reservations, preview (TASK-3397, U8a) (#1770)

2026-10-04 07:19:07 -04:00

app_pending.go

feat(apps): app upgrade: staged preview with a classed diff, one-transaction confirm that re-derives it (TASK-3397, SPEC-6 U8b2) (#1777)

2026-10-04 16:16:29 -04:00

app_principal.go

fix(store): account deletion and workspace purge lock comments root first, and retry a residual deadlock (BUG-3395) (#1792)

2026-10-05 07:01:22 -04:00

app_projection.go

feat(apps): app webhook events name the install that wrote them (TASK-3411, SPEC-6 U10d) (#1781)

2026-10-04 21:36:33 -04:00

app_provision.go

fix(apps): an installed app learns its workspace from the redeem, an unscoped /me and every webhook (BUG-3416) (#1797)

2026-10-05 09:16:24 -04:00

app_upgrade.go

feat(apps): app item actions and context codes (TASK-3414, SPEC-6 U11) (#1784)

2026-10-05 02:29:48 -04:00

app_webhooks.go

feat(apps): per-endpoint webhook delivery state, a per-install rate cap, and a 24 h drop (TASK-3408, SPEC-6 U10c) (#1783)

2026-10-05 00:02:49 -04:00

attachment_bidi_backfill_test.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

attachment_bidi_backfill.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

attachments_copy_plan_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

attachments_copy_plan.go

feat(import): mark rows a workspace import wrote, author not verified (BUG-3379) (#1755)

2026-10-03 05:18:30 -04:00

attachments_document_refs_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

attachments_dr15_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

attachments_gc_claim_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

attachments_live_item_test.go

test(store): waitForLockWait's failure names a concurrent writer, not an archival (BUG-2792)

2026-09-16 15:36:49 -04:00

attachments_remap_lost_update_test.go

test(store): pin the workspace lock that keeps the attachment remap from overwriting a concurrent item edit (BUG-2797) (#1446)

2026-09-22 21:47:27 -04:00

attachments_restore_stamp_test.go

fix(documents): restore only a document of the URL's workspace (BUG-3335) (#1724)

2026-10-02 13:15:31 -04:00

attachments_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

attachments.go

feat(appstore): app attachment upload, read rule and caps behind FencedTx (TASK-3396, U7a) (#1768)

2026-10-03 21:31:44 -04:00

backlink_content_state_test.go

fix(items): eleven hand-built doors carry the stale-body marker (BUG-3033) (#1344)

2026-09-13 18:34:16 -04:00

backlink_xws_content_state_test.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

backlinks_visibility.go

fix(access): system collections are ordinary collections for restricted members (TASK-3376) (#1756)

2026-10-03 09:19:10 -04:00

bench_concurrent_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

bench_oauth_connections_test.go

feat(oauth): per-connection state tables + dual-read introspection gate (TASK-1520) (#581)

2026-05-18 00:03:20 -04:00

bug1791_archived_marker_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

bug2136_reinvite_concurrency_test.go

fix(store): concurrent re-invites no longer report a successful replace as an error (BUG-3460) (#1840)

2026-10-06 21:23:38 -04:00

bug2631_scope_collection_test.go

fix(store): a collection gated by ID is queried by ID, so a slug freed and re-taken in between cannot answer for another collection (BUG-2631) (#1535)

2026-09-25 04:25:42 -04:00

bug2717_intx_snapshot_test.go

fix(store): restore and move return their own in-tx snapshot, and bulk member snapshots are read in batches (BUG-2717, BUG-2718) (#1539)

2026-09-25 06:02:57 -04:00

bug2718_member_snapshots_test.go

fix(store): restore and move return their own in-tx snapshot, and bulk member snapshots are read in batches (BUG-2717, BUG-2718) (#1539)

2026-09-25 06:02:57 -04:00

bug2788_entry_id_backfill_test.go

fix(timeline): structured entries get a persisted id instead of a positional one that renumbers when a sibling moves (BUG-2788) (#1540)

2026-09-25 07:10:26 -04:00

bug2806_document_rename_escaped_test.go

fix(documents): the rename cascade decides a link by the wiki grammar, so a legacy title containing | \ or ] keeps its links and no longer rewrites a link to another target (BUG-2806) (#1572)

2026-09-26 10:52:41 -04:00

bug2819_provenance_test.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

bug2896_import_duplicate_keys_test.go

fix(store): a JSON blob that repeats a member is stored collapsed, so SQLite's json_extract and Go read the same value (BUG-2896) (#1547)

2026-09-25 16:24:50 -04:00

bug3028_relation_blank_test.go

fix: a relation's "no target" has one stored form, and required means it names one (BUG-3028) (#1427)

2026-09-22 08:08:15 -04:00

bug3099_delete_account_lock_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

bug3124_content_bearing_test.go

fix(store): content_state counts only op-log rows that can change the document (BUG-3124 unit A) (#1419)

2026-09-21 22:02:48 -04:00

bug3124_watermark_stamp_test.go

feat: a caught-up tab stamps the flush watermark, so viewing an item no longer leaves it pending (BUG-3124 unit B) (#1420)

2026-09-21 22:50:56 -04:00

bug3133_pending_count_test.go

fix: refuse a token-guarded content write over unflushed tab edits (BUG-3133) (#1423)

2026-09-22 00:42:02 -04:00

bug3135_sync_frame_dedupe_test.go

fix(collab): the relay does not store a byte-identical re-sent frame (BUG-3135) (#1425)

2026-09-22 04:15:14 -04:00

bug3136_step2_twin_test.go

fix(store): a step2 answer carrying an update's exact payload is not content (BUG-3136) (#1422)

2026-09-22 01:27:03 -04:00

bug3167_exact_field_filters_test.go

fix(store): item field filters match exactly; the comma OR is explicit and lives only in the list endpoint's query parse (BUG-3167) (#1478)

2026-09-23 20:24:40 -04:00

bug3202_outbox_compare_test.go

fix(fields): field writes keep every number's literal, so an integer above 2^53 is no longer rounded by a write that never named it (BUG-3202) (#1545)

2026-09-25 14:22:09 -04:00

bug3244_set_aside_race_test.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

bug3244_set_aside_test.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

bug3307_workspace_slug_test.go

fix(store): reusing a recently deleted workspace's name no longer 500s, and a create that loses a slug race takes the next one (BUG-3307) (#1689)

2026-09-30 09:10:41 -04:00

bug3327_flush_dedupe_test.go

fix(versions): an applier-path body write leaves a version row (BUG-3327) (#1709)

2026-10-01 23:56:37 -04:00

bug3331_search_failclosed_test.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

bug3344_backlinks_deleted_collection_test.go

fix(store): wiki backlinks exclude sources in soft-deleted collections (BUG-3344) (#1814)

2026-10-05 18:38:46 -04:00

bug3349_active_user_test.go

feat(oauth): install clients, service tokens and the issuance barrier for installed apps (TASK-3394, SPEC-6 U5a) (#1769)

2026-10-04 05:58:33 -04:00

bug3355_owner_guard_test.go

fix(members): keep a workspace's owner and at least one owner member (#1737)

2026-10-02 17:01:54 -04:00

bug3356_plan_revision_test.go

fix(billing): a plan past its expiry entitles nothing, and Stripe plan writes are ordered (BUG-3356) (#1753)

2026-10-02 23:32:54 -04:00

bug3357_import_duplicate_ids_test.go

fix(import): refuse duplicate source ids and attach by source id (#1740)

2026-10-02 17:51:55 -04:00

bug3382_password_fence_test.go

fix(auth): a verification link verifies only for its account's session; the mailbox owner can claim (BUG-3382) (#1758)

2026-10-03 09:48:19 -04:00

bug3385_variant_binding_test.go

fix(attachments): a thumbnail takes its original's binding at insert time (BUG-3385) (#1762)

2026-10-03 13:58:22 -04:00

bug3395_comment_lockorder_test.go

fix(store): account deletion and workspace purge lock comments root first, and retry a residual deadlock (BUG-3395) (#1792)

2026-10-05 07:01:22 -04:00

bug3395_retry_test.go

fix(store): account deletion and workspace purge lock comments root first, and retry a residual deadlock (BUG-3395) (#1792)

2026-10-05 07:01:22 -04:00

bug3405_token_readback_test.go

fix(store): an API token mint or rotation reads its row back inside its own transaction, never panics on a concurrent delete (BUG-3405) (#1774)

2026-10-04 13:19:45 -04:00

bug3407_revalidate_test.go

fix(store,server): an item write re-checks its fields under the seq lock when the schema it was validated against has moved (BUG-3407) (#1806)

2026-10-05 12:44:17 -04:00

bug3425_deleted_collection_reads_test.go

fix(store): reads exclude soft-deleted collections' items (BUG-3425) (#1820)

2026-10-05 21:18:56 -04:00

bug3428_deleted_collection_reads_test.go

fix: the access epoch tracks the live collection set; deleted collections leave the local index; the open-children guard ignores them (BUG-3428 phase 2) (#1826)

2026-10-06 07:59:20 -04:00

bug3430_rebind_unsupported_forms_test.go

fix(store): rebindQuery skips SQL comments and quoted identifiers (BUG-3430) (#1822)

2026-10-05 22:54:52 -04:00

bug3434_relationship_reads_test.go

fix(store): relationship reads exclude soft-deleted collections (BUG-3434) (#1828)

2026-10-06 09:59:38 -04:00

bug3447_collection_source_export_test.go

fix: the first-run launchpad follows an onboarding agent live (BUG-3447) (#1837)

2026-10-06 18:31:29 -04:00

builtin_origin_test.go

feat: built-ins record their origin; an item made from one can be offered Pad's current text (TASK-3462 U1+U2) (#1852)

2026-10-07 06:40:06 -04:00

builtin_origin.go

feat: built-ins record their origin; an item made from one can be offered Pad's current text (TASK-3462 U1+U2) (#1852)

2026-10-07 06:40:06 -04:00

cascade_serial_guard_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

cli_auth_sessions.go

fix(auth): unify first-run setup into one browser handoff (BUG-1843) (#739)

2026-06-20 23:51:43 -04:00

collection_traits_backfill_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

collections_relation_rename_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

collections_retarget_multi_relation_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

collections_settings_shape_repair_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

collections_slug_race_pg_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

collections_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

collections.go

fix(server): an ordinary open backlog fills Up next and pad project ready (BUG-3453) (#1854)

2026-10-07 08:36:58 -04:00

comments_agent_name_test.go

fix(history): split activity runs by source, stamp version source, stop dropping field changes (PLAN-2348 U1) (#1685)

2026-09-30 06:50:13 -04:00

comments_tombstone_test.go

fix(comments): a deleted comment with replies leaves a tombstone (BUG-3252) (#1675)

2026-09-30 00:41:20 -04:00

comments.go

fix(timeline): 'commented on update' only for a comment an update carried (BUG-3437) (#1832)

2026-10-06 12:57:14 -04:00

connected_apps_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

connected_apps.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

content_pending_guard.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

content_watermark_stamp.go

fix(editor): opening an item without typing no longer rewrites a body the editor does not reproduce byte for byte (BUG-3197) (#1515)

2026-09-24 16:42:14 -04:00

dashboard_batch_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

deadlock_retry.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

decisions_test.go

feat(decision): typed-decision storage and async runner (TASK-3117) (#1417)

2026-09-21 20:46:41 -04:00

decisions.go

fix(comments): a deleted comment with replies leaves a tombstone (BUG-3252) (#1675)

2026-09-30 00:41:20 -04:00

delete_account_late_reference_test.go

fix(store): retry account deletion when a late reference fails its final delete (BUG-3289) (#1655)

2026-09-28 22:07:36 -04:00

delete_account_lockorder_test.go

fix(store): serialise concurrent account deletions on Postgres (BUG-3286) (#1653)

2026-09-28 19:32:50 -04:00

delete_account_writer_lockorder_test.go

fix(store): retry account deletion when a late reference fails its final delete (BUG-3289) (#1655)

2026-09-28 22:07:36 -04:00

dialect_fieldvalue.go

feat(apps): app install staging: apps/1 manifest, fetch policy, pending reservations, preview (TASK-3397, U8a) (#1770)

2026-10-04 07:19:07 -04:00

dialect_test.go

fix(store): rebindQuery skips SQL comments and quoted identifiers (BUG-3430) (#1822)

2026-10-05 22:54:52 -04:00

dialect.go

fix(store): rebindQuery skips SQL comments and quoted identifiers (BUG-3430) (#1822)

2026-10-05 22:54:52 -04:00

documents_cascade_lost_update_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

documents_rename_bounds_test.go

fix(documents): bound the rename cascade at the title and at the projected total (BUG-2798, BUG-2796) (#1218)

2026-08-27 22:45:27 -04:00

documents_rename_deadlock_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

documents.go

fix(store): every write that reads its row back does so inside its transaction (TASK-3406) (#1805)

2026-10-05 11:27:18 -04:00

done_field_test.go

fix(store): search, tags, children and progress exclude soft-deleted collections (BUG-3428, phase 1) (#1824)

2026-10-06 01:04:29 -04:00

email_optouts.go

feat: email unsubscribe for non-transactional emails (#96)

2026-04-13 09:14:04 -04:00

email_verification_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

email_verification.go

fix(store): every write that reads its row back does so inside its transaction (TASK-3406) (#1805)

2026-10-05 11:27:18 -04:00

encryption_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

encryption.go

feat(apps): the installed-app API door, ceiling and read routes (TASK-3401, SPEC-6 U6a) (#1771)

2026-10-04 09:51:29 -04:00

event_outbox_bounds_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

event_outbox_scrub_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

event_outbox_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

event_outbox.go

feat(webhooks): owner webhooks keep per-endpoint delivery state; 408/425/429 are retried (TASK-3409) (#1809)

2026-10-05 14:44:50 -04:00

export_content_state_test.go

fix(export): mark bundle bodies that were stale when written, and refuse the migration that would abandon them (BUG-3032) (#1356)

2026-09-14 01:45:30 -04:00

export_reference_test.go

fix(store): preserve valid item references across workspace import (#1271)

2026-09-07 08:27:58 -04:00

export_soft_deleted_collection_test.go

fix(store): reads exclude soft-deleted collections' items (BUG-3425) (#1820)

2026-10-05 21:18:56 -04:00

export.go

feat: built-ins record their origin; an item made from one can be offered Pad's current text (TASK-3462 U1+U2) (#1852)

2026-10-07 06:40:06 -04:00

fenced_attachments.go

feat(appstore): app attachment upload, read rule and caps behind FencedTx (TASK-3396, U7a) (#1768)

2026-10-03 21:31:44 -04:00

fenced_comments.go

feat(apps): app webhook events name the install that wrote them (TASK-3411, SPEC-6 U10d) (#1781)

2026-10-04 21:36:33 -04:00

fenced_items.go

fix(store,server): an item write re-checks its fields under the seq lock when the schema it was validated against has moved (BUG-3407) (#1806)

2026-10-05 12:44:17 -04:00

fenced_tx_test.go

feat(apps): app attachment routes: item-scoped upload, metadata, and a streamed download re-admitted before its first byte (TASK-3401, SPEC-6 U6c) (#1776)

2026-10-04 15:14:27 -04:00

fenced_tx.go

feat(apps): app attachment routes: item-scoped upload, metadata, and a streamed download re-admitted before its first byte (TASK-3401, SPEC-6 U6c) (#1776)

2026-10-04 15:14:27 -04:00

field_option_rename_test.go

fix(store): renaming a multi_select option rewrites the option inside every array that holds it, and a rename map applies simultaneously (BUG-3224) (#1557)

2026-09-26 00:15:15 -04:00

field_option_rename.go

fix(store): renaming a multi_select option rewrites the option inside every array that holds it, and a rename map applies simultaneously (BUG-3224) (#1557)

2026-09-26 00:15:15 -04:00

field_value_dialect_test.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

grants_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

grants.go

feat(apps): app item actions and context codes (TASK-3414, SPEC-6 U11) (#1784)

2026-10-05 02:29:48 -04:00

graph.go

fix(store): reads exclude soft-deleted collections' items (BUG-3425) (#1820)

2026-10-05 21:18:56 -04:00

import_fts_test.go

fix(store): a workspace import no longer re-inserts every item into items_fts after its commit, and migration 095 rebuilds the index (BUG-2758) (#1507)

2026-09-24 09:16:17 -04:00

import_plan_limit_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

import_workspace_husk_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

install_clients.go

fix(server): the upgrade diff states what a widened delegated access grants (BUG-3427) (#1817)

2026-10-05 19:45:01 -04:00

invitation_deleted_workspace_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

invitation_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_content_state_test.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

item_lease_test.go

fix(leases): bind item leases to the claiming account (#1731)

2026-10-02 14:20:58 -04:00

item_lease.go

fix(leases): bind item leases to the claiming account (#1731)

2026-10-02 14:20:58 -04:00

item_links_lineage_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_mutation_signal_test.go

feat(server,cli): watches, user-scoped event stream, plugin monitor command — PLAN-2469 Phase 1 (TASK-2533) (#1082)

2026-08-12 15:50:41 -04:00

item_stars_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_stars.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

item_workspace_moves_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_workspace_moves.go

refactor(store): delete two unused item-workspace-move accessors (TASK-2374)

2026-07-31 17:28:05 +00:00

items_changes_cursor_test.go

fix(store): include the cursor's own second in /changes deltas (BUG-2539) (#1086)

2026-08-13 12:18:26 -04:00

items_collab_versions_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_create_tx_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_cross_workspace_copy_pg_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

items_cross_workspace_copy_test.go

feat(import): mark rows a workspace import wrote, author not verified (BUG-3379) (#1755)

2026-10-03 05:18:30 -04:00

items_cross_workspace_copy.go

fix(server): attribution comes from the request, never the body (BUG-3372) (#1754)

2026-10-03 03:51:24 -04:00

items_empty_assignment_test.go

fix(store): treat empty assignment IDs as clear-to-NULL (BUG-2566) (#1098)

2026-08-14 22:39:39 -04:00

items_fieldpatch_test.go

fix(items): note and decide append server-side under the write lock, so they no longer revert a concurrent field write (BUG-3056) (#1458)

2026-09-23 07:46:45 -04:00

items_preimage_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_rename_bounds_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_rename_escape_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_rename_probe_test.go

fix(store,links): remove both quadratics in the item rename cascade and bound it (BUG-2804) (#1224)

2026-08-31 12:59:14 -04:00

items_rename_slug_prefix_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_revalidate.go

fix(store,server): an item write re-checks its fields under the seq lock when the schema it was validated against has moved (BUG-3407) (#1806)

2026-10-05 12:44:17 -04:00

items_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

items_title_validation_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

items_version_seq_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_versions_page_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_views_jsonb_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

items.go

feat: built-ins record their origin; an item made from one can be offered Pad's current text (TASK-3462 U1+U2) (#1852)

2026-10-07 06:40:06 -04:00

limits_mint_race_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

limits_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

limits_workspace_mint_race_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

limits.go

feat(apps): app-owned webhooks, held until redeem hands out the secret (TASK-3408, SPEC-6 U10a) (#1778)

2026-10-04 18:21:57 -04:00

link_types.go

feat(server): add cross-workspace copy dry-run preflight endpoint (TASK-2364)

2026-07-30 20:15:00 +00:00

main_test.go

perf(store): clone Postgres test databases from a migrated template (TASK-2900) (#1260)

2026-09-06 12:02:20 -04:00

materialize_flush_internal_test.go

feat(materialize): recover unsaved editor sessions into items.content (TASK-2198 U4) (#1683)

2026-09-30 11:03:07 -04:00

materialize_flush_test.go

fix(materialize): the recovery sweep stops re-queuing an exhausted item every tick (BUG-3325) (#1704)

2026-10-01 20:49:44 -04:00

materialize_flush.go

fix(materialize): the recovery sweep stops re-queuing an exhausted item every tick (BUG-3325) (#1704)

2026-10-01 20:49:44 -04:00

mcp_audit_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

mcp_audit.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

mcp_resume_test.go

feat(mcp): MCP addressing from config; mcp_enabled setting with an env lock (TASK-3302, PLAN-2310 U1) (#1662)

2026-09-29 12:46:03 -04:00

mcp_resume.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

migrated_test.go

fix(db): a finished SQLite→Postgres migration marks its source so the abandoned file refuses writes (BUG-3072, BUG-3077) (#1361)

2026-09-14 08:51:45 -04:00

migrated.go

feat(workspaces): a per-user open set of workspace tabs, stored server-side and filtered on read to the workspaces the caller can see (TASK-3256) (#1619)

2026-09-27 14:52:26 -04:00

migration_095_items_fts_test.go

fix(store): a workspace import no longer re-inserts every item into items_fts after its commit, and migration 095 rebuilds the index (BUG-2758) (#1507)

2026-09-24 09:16:17 -04:00

migration_atomicity_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

migration_guard_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

migration_guard.go

feat(store): guard against schema-ahead downgrade + pre-migration snapshot + upgrade docs (TASK-2006) (#843)

2026-07-07 16:32:20 -04:00

moved_out_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

my_invitations.go

feat: pending invitations in '+', accepted by id through one accept core (TASK-3277) (#1641)

2026-09-28 12:55:03 -04:00

non_terminal_filter_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

nul_native_pg_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

nul_repair_differential_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

nul_trigger_header.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nul_unprotected_baseline.txt

feat: in-app tutorials on Pad Cloud, links to getpad.dev/learn elsewhere (TASK-3452) (#1839)

2026-10-06 22:23:29 -04:00

nulcolumns_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

nulcolumns.go

feat: built-ins record their origin; an item made from one can be offered Pad's current text (TASK-3462 U1+U2) (#1852)

2026-10-07 06:40:06 -04:00

nulguard_bench_test.go

fix(store,server): close codex round 3 — inspect what is actually bound

2026-09-01 14:29:07 +00:00

nulguard_test.go

feat(apps): app install staging: apps/1 manifest, fetch policy, pending reservations, preview (TASK-3397, U8a) (#1770)

2026-10-04 07:19:07 -04:00

nulguard.go

feat(appstore): FencedTx, the appstore skeleton, and the boundary and write-capture guards (TASK-3388) (#1764)

2026-10-03 16:02:18 -04:00

nulmigrated_test.go

refactor(store): delete the NUL SUSPECT path, now that the predicate sees a NUL behind a repeated key (BUG-3220) (#1561)

2026-09-26 01:09:03 -04:00

nulmigrated.go

refactor(store): delete the NUL SUSPECT path, now that the predicate sees a NUL behind a repeated key (BUG-3220) (#1561)

2026-09-26 01:09:03 -04:00

nulrepair.go

refactor(store): delete the NUL SUSPECT path, now that the predicate sees a NUL behind a repeated key (BUG-3220) (#1561)

2026-09-26 01:09:03 -04:00

nulscan_test.go

feat: built-ins record their origin; an item made from one can be offered Pad's current text (TASK-3462 U1+U2) (#1852)

2026-10-07 06:40:06 -04:00

nulscan.go

feat: built-ins record their origin; an item made from one can be offered Pad's current text (TASK-3462 U1+U2) (#1852)

2026-10-07 06:40:06 -04:00

nultriggers_gen_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nultriggers_order_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nultriggers_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nulutf8_test.go

fix(store): the migrate-to-pg preflight refuses a stored value that is not valid UTF-8, and scan-nul / repair-nul report and repair it (BUG-3222) (#1559)

2026-09-26 00:15:21 -04:00

nulutf8.go

fix(store): the migrate-to-pg preflight refuses a stored value that is not valid UTF-8, and scan-nul / repair-nul report and repair it (BUG-3222) (#1559)

2026-09-26 00:15:21 -04:00

oauth_connections_autoadd_test.go

test(store): SQLite interleaving for the auto-add statement (BUG-2792 review r2 P2)

2026-09-16 15:36:49 -04:00

oauth_connections_backfill_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

oauth_connections_backfill.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

oauth_connections_narrow_test.go

fix(oauth): narrow current-only wildcard connections to their current workspaces (BUG-3338) (#1752)

2026-10-02 23:32:42 -04:00

oauth_connections_narrow.go

fix(oauth): narrow current-only wildcard connections to their current workspaces (BUG-3338) (#1752)

2026-10-02 23:32:42 -04:00

oauth_connections_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

oauth_connections.go

fix(oauth): include_future_workspaces is no longer a control; limit to current is an action (BUG-3338) (#1751)

2026-10-02 22:41:29 -04:00

oauth_identities.go

feat(auth): social claim of a never-verified account, provider subjects, cloud-only sidecar routes (TASK-3351) (#1760)

2026-10-03 12:15:04 -04:00

oauth_sweep_test.go

fix(oauth): sweep expired token, code and PKCE rows (BUG-3301) (#1671)

2026-09-29 19:29:17 -04:00

oauth_sweep.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

oauth_test.go

fix(auth): disabling an account ends every credential, and a disabled account gets no new one (BUG-3349) (#1741)

2026-10-02 18:34:56 -04:00

oauth.go

feat(oauth): install clients, service tokens and the issuance barrier for installed apps (TASK-3394, SPEC-6 U5a) (#1769)

2026-10-04 05:58:33 -04:00

parent_link_concurrency_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

password_resets.go

feat(auth): the bot principal for installed apps: users.kind, kind gates on every sign-in door and credential, people-only counts (TASK-3392) (#1766)

2026-10-03 19:41:18 -04:00

permissions_test.go

fix(access): system collections are ordinary collections for restricted members (TASK-3376) (#1756)

2026-10-03 09:19:10 -04:00

pg_template_test.go

perf(store): clone Postgres test databases from a migrated template (TASK-2900) (#1260)

2026-09-06 12:02:20 -04:00

plan2348_u2_versions_test.go

feat(history): version rows carry their writer, line counts and create marker, plus a per-version diff endpoint (PLAN-2348 U2) (#1691)

2026-09-30 10:02:41 -04:00

plan_source_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

platform_settings.go

feat(decision): instance-admin settings for the decision provider (TASK-3121) (#1426)

2026-09-22 07:34:33 -04:00

pool_read_in_tx_test.go

fix(store): serialize document renames and stop reading the pool inside transactions (BUG-2778) (#1208)

2026-08-25 22:40:58 -04:00

prefix_doors_test.go

fix: one prefix grammar, and the ref parser widens to it (BUG-2943) (#1286)

2026-09-07 17:32:36 -04:00

prefix_ref_parity_test.go

fix: one prefix grammar, and the ref parser widens to it (BUG-2943) (#1286)

2026-09-07 17:32:36 -04:00

reactions.go

fix(store): every write that reads its row back does so inside its transaction (TASK-3406) (#1805)

2026-10-05 11:27:18 -04:00

relation_links_backfill.go

feat(relations): materialised reverse index and Referenced-by (PLAN-2857 U5 / TASK-2997) (#1328)

2026-09-11 00:57:47 -04:00

relation_links_cost_test.go

feat(relations): materialised reverse index and Referenced-by (PLAN-2857 U5 / TASK-2997) (#1328)

2026-09-11 00:57:47 -04:00

relation_links_multi_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_links_test.go

feat(relations): materialised reverse index and Referenced-by (PLAN-2857 U5 / TASK-2997) (#1328)

2026-09-11 00:57:47 -04:00

relation_links.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

relation_multi_defaults_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_multi_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_referents_test.go

fix(store): a relation ref falls back to matching by number only when its prefix names no live collection (BUG-3082) (#1369)

2026-09-14 11:49:35 -04:00

relation_referents.go

fix(relations): a wrong_collection reason is judged on the row resolved, never by a second lookup (BUG-3012) (#1490)

2026-09-24 01:01:52 -04:00

relation_stored_as_text_test.go

fix(relations): a relation value stored as text reads as text, not as an unavailable target (BUG-3014, ToolSurfaceVersion 0.50) (#1484)

2026-09-23 22:50:47 -04:00

relation_titles_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_visibility_rungs_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

reminder_workspace_constraint_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

reminders_pg_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

reminders_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

reminders.go

feat(store): composite FK making a reminder's workspace agree with its item's (IDEA-2883) (#1252)

2026-09-05 00:47:16 -04:00

report_layouts_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

report_layouts.go

feat(insights): per-user layout customization + persistence (TASK-1634) (#645)

2026-05-29 15:00:34 -04:00

reports_test.go

fix(insights): a default report leaves out system collections (Conventions, Playbooks), so they stop counting in Insights (BUG-2410, ToolSurfaceVersion 0.49) (#1471)

2026-09-23 18:21:38 -04:00

reports.go

fix(store): field values are compared, counted, sorted and shown by JSON type, so the same query answers the same on SQLite and Postgres (BUG-3221, BUG-3218) (#1555)

2026-09-25 23:33:14 -04:00

restore_plan_limit_test.go

fix(limits): item restore enforces items_per_workspace (BUG-3101)

2026-09-17 11:02:02 -04:00

search_quality_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

search.go

fix(store): search, tags, children and progress exclude soft-deleted collections (BUG-3428, phase 1) (#1824)

2026-10-06 01:04:29 -04:00

sessions_test.go

fix(members): keep a workspace's owner and at least one owner member (#1737)

2026-10-02 17:01:54 -04:00

sessions.go

feat(auth): the bot principal for installed apps: users.kind, kind gates on every sign-in door and credential, people-only counts (TASK-3392) (#1766)

2026-10-03 19:41:18 -04:00

share_links.go

fix(auth): disabling an account ends every credential, and a disabled account gets no new one (BUG-3349) (#1741)

2026-10-02 18:34:56 -04:00

slog_capture_serial_test.go

test(store): tests that capture the global slog default run serially (BUG-3088) (#1492)

2026-09-24 01:39:03 -04:00

snapshots.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

status_transitions_backfill.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

status_transitions_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

store_test.go

fix(test): test temp dirs stop leaking into /tmp (BUG-3412) (#1786)

2026-10-05 04:50:02 -04:00

store.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

stripe_events_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

stripe_events.go

feat(cloud): add /admin/stripe-event-unmark endpoint (TASK-736 / 1 of 2) (#228)

2026-04-23 20:26:02 -04:00

structured_entry_id_backfill.go

fix(timeline): structured entries get a persisted id instead of a positional one that renumbers when a sibling moves (BUG-2788) (#1540)

2026-09-25 07:10:26 -04:00

system_collection_access_backfill_test.go

fix(access): system collections are ordinary collections for restricted members (TASK-3376) (#1756)

2026-10-03 09:19:10 -04:00

tags_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

task3351_claim_providers_test.go

feat(auth): social claim of a never-verified account, provider subjects, cloud-only sidecar routes (TASK-3351) (#1760)

2026-10-03 12:15:04 -04:00

task3365_account_delete_report_test.go

feat(server): every access and credential change re-checks live connections (#1746)

2026-10-02 20:39:53 -04:00

task3389_app_projection_test.go

feat(apps): app webhook events name the install that wrote them (TASK-3411, SPEC-6 U10d) (#1781)

2026-10-04 21:36:33 -04:00

task3390_identity_test.go

feat(appstore): app item create and field update inside the fence (TASK-3390) (#1765)

2026-10-03 18:09:33 -04:00

task3390_slugconflict_test.go

feat(appstore): app item create and field update inside the fence (TASK-3390) (#1765)

2026-10-03 18:09:33 -04:00

task3391_comments_rebuild_test.go

feat(appstore): app comment create, edit and delete inside FencedTx (TASK-3391) (#1767)

2026-10-03 20:36:50 -04:00

task3392_bot_principal_test.go

feat(auth): the bot principal for installed apps: users.kind, kind gates on every sign-in door and credential, people-only counts (TASK-3392) (#1766)

2026-10-03 19:41:18 -04:00

task3394_install_clients_test.go

fix(server): the upgrade diff states what a widened delegated access grants (BUG-3427) (#1817)

2026-10-05 19:45:01 -04:00

task3397_lifecycle_test.go

feat(apps): app item actions and context codes (TASK-3414, SPEC-6 U11) (#1784)

2026-10-05 02:29:48 -04:00

task3397_provision_test.go

feat(apps): app install provisioning, install codes and redeem (TASK-3397, SPEC-6 U8b) (#1772)

2026-10-04 11:59:42 -04:00

task3397_upgrade_test.go

feat(apps): app upgrade: staged preview with a classed diff, one-transaction confirm that re-derives it (TASK-3397, SPEC-6 U8b2) (#1777)

2026-10-04 16:16:29 -04:00

task3399_deadlock_retry_test.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

task3399_delegated_barrier_test.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

task3399_reader_census_test.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

task3401_app_ceiling_test.go

feat(apps): the installed-app API door, ceiling and read routes (TASK-3401, SPEC-6 U6a) (#1771)

2026-10-04 09:51:29 -04:00

task3406_readback_test.go

fix(store): every write that reads its row back does so inside its transaction (TASK-3406) (#1805)

2026-10-05 11:27:18 -04:00

task3408_delivery_test.go

feat(apps): app webhook delivery behind an in-flight fence, signature v2 (TASK-3408, SPEC-6 U10b) (#1780)

2026-10-04 20:35:13 -04:00

task3408_dto_test.go

fix(apps): an installed app learns its workspace from the redeem, an unscoped /me and every webhook (BUG-3416) (#1797)

2026-10-05 09:16:24 -04:00

task3408_ledger_test.go

feat(apps): per-endpoint webhook delivery state, a per-install rate cap, and a 24 h drop (TASK-3408, SPEC-6 U10c) (#1783)

2026-10-05 00:02:49 -04:00

task3409_prune_drops_test.go

feat(webhooks): owner webhooks keep per-endpoint delivery state; 408/425/429 are retried (TASK-3409) (#1809)

2026-10-05 14:44:50 -04:00

task3411_actor_test.go

fix(apps): an installed app learns its workspace from the redeem, an unscoped /me and every webhook (BUG-3416) (#1797)

2026-10-05 09:16:24 -04:00

task3414_redeem_race_test.go

feat(apps): app item actions and context codes (TASK-3414, SPEC-6 U11) (#1784)

2026-10-05 02:29:48 -04:00

templates.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

testing_helpers.go

fix(store): every write that reads its row back does so inside its transaction (TASK-3406) (#1805)

2026-10-05 11:27:18 -04:00

timeline_pagination_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

totp_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

trait_dedupe_test.go

test(store): tests that capture the global slog default run serially (BUG-3088) (#1492)

2026-09-24 01:39:03 -04:00

trait_dedupe.go

feat(store,server): make collection trait uniqueness a database invariant — de-dup pass + partial unique indexes (TASK-2710) (#1257)

2026-09-05 20:43:43 -04:00

ui_dismissals.go

feat: in-app tutorials on Pad Cloud, links to getpad.dev/learn elsewhere (TASK-3452) (#1839)

2026-10-06 22:23:29 -04:00

unique_fields_test.go

fix(BUG-2367): moves and copies never carry into a computed field, and a carried unique-field collision is dropped and named instead of 500ing or storing a duplicate (#1514)

2026-09-24 13:12:32 -04:00

unique_fields.go

fix(store): field values are compared, counted, sorted and shown by JSON type, so the same query answers the same on SQLite and Postgres (BUG-3221, BUG-3218) (#1555)

2026-09-25 23:33:14 -04:00

users_email_verified_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

users_metrics_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

users_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

users_totp_step_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

users.go

fix(store): account deletion and workspace purge lock comments root first, and retry a residual deadlock (BUG-3395) (#1792)

2026-10-05 07:01:22 -04:00

validation_error.go

fix(server): a refused collection prefix reaches the caller as a 400 naming the rule (BUG-2951) (#1293)

2026-09-08 14:51:21 -04:00

versions.go

fix(store): serialize document renames and stop reading the pool inside transactions (BUG-2778) (#1208)

2026-08-25 22:40:58 -04:00

views.go

feat(store): JSONB NOT NULL hardening on items/views + handler shape validation (IDEA-1486+1488) (#566)

2026-05-16 10:15:59 -04:00

watches_test.go

feat(server,cli): watches, user-scoped event stream, plugin monitor command — PLAN-2469 Phase 1 (TASK-2533) (#1082)

2026-08-12 15:50:41 -04:00

watches.go

feat(server,cli): watches, user-scoped event stream, plugin monitor command — PLAN-2469 Phase 1 (TASK-2533) (#1082)

2026-08-12 15:50:41 -04:00

webhook_deliveries.go

feat(webhooks): owner webhooks keep per-endpoint delivery state; 408/425/429 are retried (TASK-3409) (#1809)

2026-10-05 14:44:50 -04:00

webhooks_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

webhooks.go

feat(webhooks): owner webhooks keep per-endpoint delivery state; 408/425/429 are retried (TASK-3409) (#1809)

2026-10-05 14:44:50 -04:00

wiki_links_backfill.go

feat(backlinks): server-side reverse index for [[...]] (Phase 1) (#620)

2026-05-23 23:09:44 -04:00

wiki_links_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

wiki_links_xws_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

wiki_links.go

fix(store): wiki backlinks exclude sources in soft-deleted collections (BUG-3344) (#1814)

2026-10-05 18:38:46 -04:00

workspace_invitation_accept_test.go

fix(invitations): accepting as an existing member is idempotent (BUG-3281) (#1645)

2026-09-28 15:46:57 -04:00

workspace_members_admin_detail_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

workspace_members.go

fix(store): concurrent re-invites no longer report a successful replace as an error (BUG-3460) (#1840)

2026-10-06 21:23:38 -04:00

workspace_purge_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

workspace_purge.go

feat: built-ins record their origin; an item made from one can be offered Pad's current text (TASK-3462 U1+U2) (#1852)

2026-10-07 06:40:06 -04:00

workspace_tabs_lockorder_test.go

fix(tabs): order workspace-tab lists by a per-user server revision (BUG-3285) (#1649)

2026-09-28 18:33:09 -04:00

workspace_tabs_revision_test.go

fix(tabs): order workspace-tab lists by a per-user server revision (BUG-3285) (#1649)

2026-09-28 18:33:09 -04:00

workspace_tabs_test.go

fix(tabs): order workspace-tab lists by a per-user server revision (BUG-3285) (#1649)

2026-09-28 18:33:09 -04:00

workspace_tabs.go

fix(store): delete issued grants before tabs in account deletion (BUG-3288) (#1654)

2026-09-28 20:55:28 -04:00

workspaces_source_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

workspaces_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

workspaces.go

feat(auth): the bot principal for installed apps: users.kind, kind gates on every sign-in door and credential, people-only counts (TASK-3392) (#1766)

2026-10-03 19:41:18 -04:00

yjs_content_bearing_internal_test.go

fix(store): content_state counts only op-log rows that can change the document (BUG-3124 unit A) (#1419)

2026-09-21 22:02:48 -04:00

yjs_content_bearing.go

fix(store): a step2 answer carrying an update's exact payload is not content (BUG-3136) (#1422)

2026-09-22 01:27:03 -04:00

yjs_set_aside.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

yjs_updates_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

yjs_updates.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00