xarmian 9ad718178d fix(store): workspace-scope the item-grant lookup (TASK-2403) ...

ResolveUserPermission matched item grants on item_id alone, so a grant on
an item in workspace B resolved for a request scoped to workspace A. This
is the underlying lookup behind the delete escalation PLAN-2382 fixed at
the handler; closing it here means the next caller does not have to
remember the workspace-identity guard.

The adjacent collection-grant lookup had the identical defect and the
identical safety argument, so it is scoped in the same commit rather than
leaving a second unscoped lookup three lines below the one DR-5 names.

Safe for every caller: all three (requireEditPermission, the collab
access check, crossWorkspaceEditAllowed) already pass the workspace the
item/collection was resolved in, and grant rows carry the workspace they
were minted in — the same scoping listUserItemGrants already uses.

Claude-Session: https://claude.ai/code/session_01LmbFxQFDjcYKBLcTnor6DC

2026-08-01 23:59:38 +00:00

..

migrations

fix(store): make migration 077 constraint-equivalent to 055 per final review

2026-07-31 12:45:58 +00:00

pgmigrations

feat(store): add item_workspace_moves provenance table (TASK-2356)

2026-07-30 12:20:38 +00:00

storetest

fix(collab): reconcile Postgres commit-ack-loss on version restore instead of treating it as rollback (BUG-2276 residual 1)

2026-07-21 18:00:49 -04:00

account_deletion_comments_test.go

feat(comments): comment editing backend — user_id, UpdateComment, PATCH, SSE (TASK-1663) (#665)

2026-05-30 12:38:57 -04:00

account_deletion_test.go

fix(store): harden account-deletion FK cascade (TASK-1959) (#821)

2026-07-05 19:23:02 -04:00

activities_test.go

feat(project): agent-accessible activity feed (pad project activity + MCP action) (#877)

2026-07-08 16:26:41 -04:00

activities_user_feed_test.go

feat(admin): GET /admin/users/{id}/activity paginated feed (TASK-1546) (#601)

2026-05-20 17:07:57 -04:00

activities.go

feat(project): agent-accessible activity feed (pad project activity + MCP action) (#877)

2026-07-08 16:26:41 -04:00

agent_roles_test.go

fix(mcp): six surgical fixes for BUG-987 (bugs 6, 8, 11, 12, 13, 14) (#361)

2026-05-01 20:39:10 -04:00

agent_roles.go

feat(store): add workspace-scoped monotonic seq column to items (TASK-1352) (#492)

2026-05-11 12:51:49 -04:00

api_tokens_test.go

fix(store): allow NULL api_tokens.workspace_id on SQLite for account tokens (#732)

2026-06-15 11:31:45 -04:00

api_tokens.go

fix(security): scope webhook + token mutations by workspace to close cross-workspace IDOR (TASK-266) (#936)

2026-07-14 23:24:55 -04:00

attachments_copy_plan_test.go

feat(store): add attachment resolution planner for cross-workspace copy (TASK-2354)

2026-07-30 14:37:51 +00:00

attachments_copy_plan.go

feat(server): add cross-workspace copy endpoint with post-commit fanout (TASK-2365)

2026-07-31 00:59:25 +00:00

attachments_live_item_test.go

fix(attachments): gate transform on item visibility (TASK-2402)

2026-08-01 23:05:26 +00:00

attachments_test.go

fix(store): scope attachment list JOINs by workspace (TASK-2399)

2026-08-01 18:11:35 +00:00

attachments.go

fix(attachments): gate transform on item visibility (TASK-2402)

2026-08-01 23:05:26 +00:00

backlinks_visibility.go

fix(backlinks): scope cross-workspace admin enumeration to membership for bearer auth (BUG-1617) (#633)

2026-05-27 10:37:30 -04:00

bench_concurrent_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

bench_oauth_connections_test.go

feat(oauth): per-connection state tables + dual-read introspection gate (TASK-1520) (#581)

2026-05-18 00:03:20 -04:00

bug1791_archived_marker_test.go

fix(items): surface archived items instead of masking them as missing (BUG-1791) (#733)

2026-06-15 14:44:58 -04:00

cli_auth_sessions.go

fix(auth): unify first-run setup into one browser handoff (BUG-1843) (#739)

2026-06-20 23:51:43 -04:00

collections_settings_shape_repair_test.go

feat(store): corrective backfill for collections.settings shape violations (IDEA-1489) (#567)

2026-05-16 11:58:56 -04:00

collections_test.go

refactor(store): unify the collection column list and scan (TASK-2368)

2026-07-31 16:02:52 +00:00

collections.go

refactor(store): unify the collection column list and scan (TASK-2368)

2026-07-31 16:02:52 +00:00

comments.go

feat(comments): comment editing backend — user_id, UpdateComment, PATCH, SSE (TASK-1663) (#665)

2026-05-30 12:38:57 -04:00

connected_apps_test.go

feat(oauth): backfill session.Extra into oauth_connections + switch read path (TASK-1522) (#583)

2026-05-18 03:32:42 -04:00

connected_apps.go

feat(oauth): connected-apps mutation endpoints + edit UI (TASK-1524) (#585)

2026-05-18 08:33:39 -04:00

dashboard_batch_test.go

perf(server): collapse dashboard/bootstrap N+1 into set-based queries (BUG-2002) (#847)

2026-07-07 17:18:54 -04:00

dialect_test.go

feat(report): windowed project report endpoint + DateBucket dialect (TASK-1630) (#638)

2026-05-29 08:24:05 -04:00

dialect.go

feat(tags): workspace tag enumeration endpoint + cross-collection filter (TASK-1653) (#658)

2026-05-29 23:43:02 -04:00

documents.go

fix: green up Go (PostgreSQL) CI (BUG-842) (#275)

2026-04-28 16:21:43 -04:00

done_field_test.go

fix(store): optimistic concurrency + sibling broadcast for collection settings (BUG-2265) (#989)

2026-07-21 09:43:05 -04:00

email_optouts.go

feat: email unsubscribe for non-transactional emails (#96)

2026-04-13 09:14:04 -04:00

email_verification_test.go

feat(store): email_verification_tokens + SendEmailVerification + token reaper (TASK-1936) (#806)

2026-07-04 01:19:41 -04:00

email_verification.go

feat(server): cloud email self-registration + verify-email/resend endpoints (TASK-1938) (#808)

2026-07-04 03:32:48 -04:00

encryption_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

encryption.go

fix(security): encrypt webhook HMAC secrets at rest, mask in responses (BUG-2057) (#915)

2026-07-11 00:10:27 -04:00

export.go

fix(store): monotonic tie-breaker for same-second item version ordering (BUG-2270)

2026-07-21 16:16:15 -04:00

grants_test.go

fix(store): workspace-scope the item-grant lookup (TASK-2403)

2026-08-01 23:59:38 +00:00

grants.go

fix(store): workspace-scope the item-grant lookup (TASK-2403)

2026-08-01 23:59:38 +00:00

graph.go

feat(server): workspace graph endpoint — nodes + typed edges (TASK-1731) (#699)

2026-06-05 18:12:56 -04:00

invitation_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

item_links_lineage_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

item_stars_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

item_stars.go

fix(items): surface archived items instead of masking them as missing (BUG-1791) (#733)

2026-06-15 14:44:58 -04:00

item_workspace_moves_test.go

refactor(store): delete two unused item-workspace-move accessors (TASK-2374)

2026-07-31 17:28:05 +00:00

item_workspace_moves.go

refactor(store): delete two unused item-workspace-move accessors (TASK-2374)

2026-07-31 17:28:05 +00:00

items_collab_versions_test.go

fix(collab): version restore via prune+reseed (BUG-2264) (#990)

2026-07-21 15:21:57 -04:00

items_create_tx_test.go

refactor(store): extract tx-taking item creation helper (TASK-2362)

2026-07-30 13:03:16 +00:00

items_cross_workspace_copy_pg_test.go

test(store): make the copy concurrency and attachment assertions bite (TASK-2372)

2026-07-31 16:50:37 +00:00

items_cross_workspace_copy_test.go

refactor(store): delete two unused item-workspace-move accessors (TASK-2374)

2026-07-31 17:28:05 +00:00

items_cross_workspace_copy.go

refactor(store): unify the collection column list and scan (TASK-2368)

2026-07-31 16:02:52 +00:00

items_fieldpatch_test.go

feat(items): field-level PATCH + conflict envelope + read-only version history (TASK-2022) (#876)

2026-07-08 16:47:34 -04:00

items_test.go

fix(collab): version restore via prune+reseed (BUG-2264) (#990)

2026-07-21 15:21:57 -04:00

items_version_seq_test.go

fix(store): monotonic tie-breaker for same-second item version ordering (BUG-2270)

2026-07-21 16:16:15 -04:00

items_views_jsonb_test.go

feat(store): JSONB NOT NULL hardening on items/views + handler shape validation (IDEA-1486+1488) (#566)

2026-05-16 10:15:59 -04:00

items.go

feat(server): add cross-workspace copy endpoint with post-commit fanout (TASK-2365)

2026-07-31 00:59:25 +00:00

limits_test.go

Reduce free-tier workspace cap from 5 to 3 (TASK-1609) (#627)

2026-05-25 09:24:57 -04:00

limits.go

feat(store): add CopyItemAcrossWorkspaces atomic orchestration (TASK-2363)

2026-07-30 15:50:18 +00:00

link_types.go

feat(server): add cross-workspace copy dry-run preflight endpoint (TASK-2364)

2026-07-30 20:15:00 +00:00

main_test.go

perf(test): build the SQLite migration chain once per test binary (IDEA-1914) (#788)

2026-07-03 10:15:49 -04:00

mcp_audit_test.go

feat(mcp): persistent audit log for /mcp tool calls (TASK-960) (#389)

2026-05-02 22:56:10 -04:00

mcp_audit.go

feat(mcp): persistent audit log for /mcp tool calls (TASK-960) (#389)

2026-05-02 22:56:10 -04:00

migration_atomicity_test.go

feat(store): wrap migrations in atomic transactions (IDEA-1485) (#565)

2026-05-15 23:57:38 -04:00

migration_guard_test.go

feat(store): guard against schema-ahead downgrade + pre-migration snapshot + upgrade docs (TASK-2006) (#843)

2026-07-07 16:32:20 -04:00

migration_guard.go

feat(store): guard against schema-ahead downgrade + pre-migration snapshot + upgrade docs (TASK-2006) (#843)

2026-07-07 16:32:20 -04:00

moved_out_test.go

fix(sync): moved-out tombstones for cross-visibility collection moves (BUG-1675) (#670)

2026-05-30 19:57:45 -04:00

non_terminal_filter_test.go

fix(server,cli,mcp): default item list to per-collection non-terminal filter (BUG-2001) (#845)

2026-07-07 16:45:00 -04:00

oauth_connections_backfill_test.go

feat(oauth): backfill session.Extra into oauth_connections + switch read path (TASK-1522) (#583)

2026-05-18 03:32:42 -04:00

oauth_connections_backfill.go

feat(oauth): backfill session.Extra into oauth_connections + switch read path (TASK-1522) (#583)

2026-05-18 03:32:42 -04:00

oauth_connections_test.go

feat(oauth): per-connection state tables + dual-read introspection gate (TASK-1520) (#581)

2026-05-18 00:03:20 -04:00

oauth_connections.go

feat(web): default agent-connect modal to MCP setup, steer zero-grant users (#817)

2026-07-05 12:05:24 -04:00

oauth_test.go

feat(metrics): MCP + OAuth observability metrics for /mcp (TASK-961) (#398)

2026-05-03 16:37:49 -04:00

oauth.go

feat(metrics): MCP + OAuth observability metrics for /mcp (TASK-961) (#398)

2026-05-03 16:37:49 -04:00

parent_link_concurrency_test.go

fix(store): workspace-level guard for N-hop parent cycles (BUG-2074) (#871)

2026-07-08 14:46:15 -04:00

password_resets.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

permissions_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

platform_settings.go

feat: add PostgreSQL support with dual-driver store layer (TASK-157)

2026-04-05 18:50:50 +00:00

reactions.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

report_layouts_test.go

feat(insights): per-user layout customization + persistence (TASK-1634) (#645)

2026-05-29 15:00:34 -04:00

report_layouts.go

feat(insights): per-user layout customization + persistence (TASK-1634) (#645)

2026-05-29 15:00:34 -04:00

reports_test.go

fix(store): monotonic seq tiebreak for same-second status transitions (TASK-1643) (#655)

2026-05-29 18:56:13 -04:00

reports.go

fix(store): monotonic seq tiebreak for same-second status transitions (TASK-1643) (#655)

2026-05-29 18:56:13 -04:00

search_quality_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

search.go

feat(store): add workspace-scoped monotonic seq column to items (TASK-1352) (#492)

2026-05-11 12:51:49 -04:00

sessions_test.go

fix(server): non-fatal UA session binding + sliding session renewal (#727)

2026-06-14 21:15:35 -04:00

sessions.go

fix(server): non-fatal UA session binding + sliding session renewal (#727)

2026-06-14 21:15:35 -04:00

share_links.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

snapshots.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

status_transitions_backfill.go

fix(store): cast jsonb metadata to text for Postgres LIKE + gofmt (BUG-1702) (#693)

2026-06-02 09:39:22 -04:00

status_transitions_test.go

feat(insights): reconstruct historical WIP + status snapshot for past periods (TASK-1640) (#650)

2026-05-29 17:30:23 -04:00

store_test.go

perf(test): build the SQLite migration chain once per test binary (IDEA-1914) (#788)

2026-07-03 10:15:49 -04:00

store.go

refactor(store): extract tx-taking item creation helper (TASK-2362)

2026-07-30 13:03:16 +00:00

stripe_events_test.go

feat(cloud): add /admin/stripe-event-unmark endpoint (TASK-736 / 1 of 2) (#228)

2026-04-23 20:26:02 -04:00

stripe_events.go

feat(cloud): add /admin/stripe-event-unmark endpoint (TASK-736 / 1 of 2) (#228)

2026-04-23 20:26:02 -04:00

tags_test.go

feat(tags): workspace tag enumeration endpoint + cross-collection filter (TASK-1653) (#658)

2026-05-29 23:43:02 -04:00

templates.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

testing_helpers.go

fix(ci): lower test-only bcrypt cost + re-enable -race on PRs (BUG-1371) (#513)

2026-05-12 10:01:14 -04:00

timeline_pagination_test.go

feat(comments): comment editing backend — user_id, UpdateComment, PATCH, SSE (TASK-1663) (#665)

2026-05-30 12:38:57 -04:00

totp_test.go

fix: address 6 security findings from Codex review of TOTP 2FA

2026-04-08 20:30:39 +00:00

users_email_verified_test.go

feat(store): add users.email_verified_at column + model plumbing (TASK-1935) (#805)

2026-07-04 00:45:48 -04:00

users_metrics_test.go

feat(admin): GET /admin/users/{id}/metrics windowed engagement metrics (TASK-1547) (#602)

2026-05-20 17:13:28 -04:00

users_test.go

feat(admin): extend user list with aggregations + sort/filter (TASK-1544) (#599)

2026-05-20 16:50:16 -04:00

users_totp_step_test.go

fix(security): make TOTP login codes single-use (BUG-2054) (#914)

2026-07-10 23:56:59 -04:00

users.go

fix(security): make TOTP login codes single-use (BUG-2054) (#914)

2026-07-10 23:56:59 -04:00

versions.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

views.go

feat(store): JSONB NOT NULL hardening on items/views + handler shape validation (IDEA-1486+1488) (#566)

2026-05-16 10:15:59 -04:00

webhooks_test.go

fix(security): encrypt webhook HMAC secrets at rest, mask in responses (BUG-2057) (#915)

2026-07-11 00:10:27 -04:00

webhooks.go

fix(security): scope webhook + token mutations by workspace to close cross-workspace IDOR (TASK-266) (#936)

2026-07-14 23:24:55 -04:00

wiki_links_backfill.go

feat(backlinks): server-side reverse index for [[...]] (Phase 1) (#620)

2026-05-23 23:09:44 -04:00

wiki_links_test.go

fix(backlinks): suppression must query item_links, not items.parent_id (TASK-1607 followup) (#626)

2026-05-24 21:27:38 -04:00

wiki_links_xws_test.go

fix(backlinks): scope cross-workspace admin enumeration to membership for bearer auth (BUG-1617) (#633)

2026-05-27 10:37:30 -04:00

wiki_links.go

fix(backlinks): scope cross-workspace admin enumeration to membership for bearer auth (BUG-1617) (#633)

2026-05-27 10:37:30 -04:00

workspace_members_admin_detail_test.go

fix(ci): unbreak Go (PostgreSQL) test + clear x/net govulncheck findings (#618)

2026-05-23 11:36:16 -04:00

workspace_members.go

fix(web): treat CLI/MCP-created workspaces as agent-connected (BUG-1557) (#781)

2026-07-01 23:25:24 -04:00

workspace_purge_test.go

feat(store): hard-purge soft-deleted workspaces after 30 days (TASK-1966) (#825)

2026-07-05 22:23:12 -04:00

workspace_purge.go

feat(store): add item_workspace_moves provenance table (TASK-2356)

2026-07-30 12:20:38 +00:00

workspaces_source_test.go

fix(web): treat CLI/MCP-created workspaces as agent-connected (BUG-1557) (#781)

2026-07-01 23:25:24 -04:00

workspaces_test.go

feat(server): workspace restore + deleted-list endpoints (TASK-1970) (#827)

2026-07-06 10:07:34 -04:00

workspaces.go

feat(server): workspace restore + deleted-list endpoints (TASK-1970) (#827)

2026-07-06 10:07:34 -04:00

yjs_updates_test.go

feat(store): add Yjs op-log table + store methods (TASK-1252) (#450)

2026-05-08 13:28:55 -04:00

yjs_updates.go

fix(collab): version restore via prune+reseed (BUG-2264) (#990)

2026-07-21 15:21:57 -04:00