xarmian e4caad2c64 feat(server): expose MCP tool-surface over authed REST endpoint (#764) ...

Add GET /api/v1/mcp/tool-surface, a session/token-authenticated
same-origin endpoint that serves the MCP catalog descriptor JSON
(the nine env.Catalog tools, their actions, and input schemas) with a
new per-action read_only bool. Backs the Phase 3 browser-side WebMCP
layer (PLAN-1888): the client fetches once and derives readOnlyHint
from the read_only flags without re-deriving the read set in TS.

Wired via the SetMCPTransport injection pattern to avoid the import
cycle: internal/mcp already imports internal/server (dispatch_http.go),
so internal/server cannot import internal/mcp. internal/mcp exports a
cycle-free ToolSurfaceJSON() that builds from the package-global
Catalog plus a co-located readOnlyActions allowlist; cmd/pad/main.go
(which imports both) injects it via Server.SetToolSurfaceHandler before
setupRouter. The route mounts in the authed API group so it inherits
TokenAuth/SessionAuth/CSRFProtect/RequireAuth — NOT the bearer-gated
/mcp infra path — and is available on both cloud and self-host.

The existing actionMetaToolSurface (pad_meta action=tool-surface) now
shares the same serializer, so MCP and REST can't drift; it gains the
additive read_only flag too. No ToolSurfaceVersion bump (DR-7): adding
read_only is additive metadata; names/actions/params are unchanged.

Refs TASK-1891 / PLAN-1888

Claude-Session: https://claude.ai/code/session_01KmxkPxLksjf1pmrZDpsnTJ

2026-06-24 22:45:32 -04:00

..

render

fix(ci): gofmt + bump race-detector timeout to 30m (#299)

2026-04-29 15:41:12 -04:00

artifact_import.go

feat(artifact): server export + import endpoints for playbooks & conventions (#755)

2026-06-22 11:43:52 -04:00

bootstrap_test.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

bootstrap.go

feat(auth): PAD_BYPASS_SETUP_TOKEN open-bootstrap escape hatch (#429)

2026-05-06 13:27:12 -04:00

bug1791_archived_visibility_test.go

fix(items): surface archived items instead of masking them as missing (BUG-1791) (#733)

2026-06-15 14:44:58 -04:00

claim_codes_test.go

feat(mcp): workspace.create + workspace.claim actions + claim-code mechanics (TASK-1521) (#582)

2026-05-18 00:43:46 -04:00

claim_codes.go

feat(mcp): workspace.create + workspace.claim actions + claim-code mechanics (TASK-1521) (#582)

2026-05-18 00:43:46 -04:00

cloud_admin_gate_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

context.go

feat(mcp): persistent audit log for /mcp tool calls (TASK-960) (#389)

2026-05-02 22:56:10 -04:00

decode_json_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

handlers_2fa_recovery_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

handlers_2fa.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_account_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_account.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_activity.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_admin_bearer_gate_test.go

fix(auth): scope admin platform role to cookie session auth (BUG-1616) (#632)

2026-05-27 10:09:30 -04:00

handlers_admin_billing_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_admin_billing.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_admin_invitations.go

fix: green up Go (PostgreSQL) CI (BUG-842) (#275)

2026-04-28 16:21:43 -04:00

handlers_admin_users_test.go

feat(attachments): admin per-user storage quota override UI (TASK-883) (#304)

2026-04-29 17:56:19 -04:00

handlers_admin_users.go

feat(auth): localhost password recovery for locked-out self-host admins (#760)

2026-06-22 20:58:50 -04:00

handlers_admin.go

feat(server): add webmcp_enabled platform setting + session flag (#763)

2026-06-24 22:28:34 -04:00

handlers_agent_roles.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_artifact_export.go

feat(artifact): server export + import endpoints for playbooks & conventions (#755)

2026-06-22 11:43:52 -04:00

handlers_artifact_import.go

fix(artifact): normalize import field map so json fields validate (BUG-1883) (#759)

2026-06-22 13:31:45 -04:00

handlers_artifact_test.go

fix(artifact): normalize import field map so json fields validate (BUG-1883) (#759)

2026-06-22 13:31:45 -04:00

handlers_attachments_download_test.go

fix(ci): gofmt + bump race-detector timeout to 30m (#299)

2026-04-29 15:41:12 -04:00

handlers_attachments_test.go

fix(attachments): grant-aware upload auth so share-link editors can attach (BUG-1661) (#688)

2026-05-31 11:39:02 -04:00

handlers_attachments_thumbnails_test.go

feat(attachments): ImageProcessor interface + pure-Go impl + thumbnail pipeline (TASK-878) (#295)

2026-04-29 14:35:49 -04:00

handlers_attachments_thumbnails.go

feat(attachments): orphan GC sweep with periodic scheduler (TASK-886) (#307)

2026-04-29 19:25:55 -04:00

handlers_attachments_transform_test.go

feat(attachments): editor image crop with aspect presets (TASK-880) (#298)

2026-04-29 15:02:07 -04:00

handlers_attachments_transform.go

feat(attachments): orphan GC sweep with periodic scheduler (TASK-886) (#307)

2026-04-29 19:25:55 -04:00

handlers_attachments.go

fix(attachments): grant-aware upload auth so share-link editors can attach (BUG-1661) (#688)

2026-05-31 11:39:02 -04:00

handlers_audit.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_auth_bootstrap_bypass_test.go

feat(auth): PAD_BYPASS_SETUP_TOKEN open-bootstrap escape hatch (#429)

2026-05-06 13:27:12 -04:00

handlers_auth_bootstrap_token_test.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

handlers_auth_local_reset_test.go

feat(auth): localhost password recovery for locked-out self-host admins (#760)

2026-06-22 20:58:50 -04:00

handlers_auth_loopback_test.go

fix(server): read raw TCP peer for loopback check (TASK-662) (#175)

2026-04-21 19:33:47 -04:00

handlers_auth_ratelimit_test.go

feat(auth): per-email login rate limiter (TASK-651) (#178)

2026-04-21 20:52:03 -04:00

handlers_auth_session_rotation_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

handlers_auth_test.go

feat(auth): surface server version on /auth/session (TASK-1839) (#740)

2026-06-21 00:34:25 -04:00

handlers_auth.go

feat(server): add webmcp_enabled platform setting + session flag (#763)

2026-06-24 22:28:34 -04:00

handlers_backlinks_admin_bearer_test.go

fix(backlinks): scope cross-workspace admin enumeration to membership for bearer auth (BUG-1617) (#633)

2026-05-27 10:37:30 -04:00

handlers_backlinks.go

fix(backlinks): scope cross-workspace admin enumeration to membership for bearer auth (BUG-1617) (#633)

2026-05-27 10:37:30 -04:00

handlers_bootstrap_test.go

feat(server): library endpoints gain ?category, ?summary, /library/entry (TASK-1561) (#612)

2026-05-21 13:08:02 -04:00

handlers_bootstrap.go

feat(onboard): capture workspace intent at creation, warm the onboard run (TASK-1855) (#746)

2026-06-21 12:25:46 -04:00

handlers_capabilities.go

feat(attachments): ImageProcessor interface + pure-Go impl + thumbnail pipeline (TASK-878) (#295)

2026-04-29 14:35:49 -04:00

handlers_changes.go

chore: clear staticcheck SA + U1000 findings on main (TASK-764) (#249)

2026-04-25 11:53:31 -04:00

handlers_claim_code_test.go

fix(web,build): search palette hang on numeric query + graceful SSE shutdown (BUG-1531) (#588)

2026-05-18 15:25:27 -04:00

handlers_claim_code.go

feat(connect): unified Connect-to-agent modal + claim-code endpoint (TASK-1525) (#586)

2026-05-18 10:25:08 -04:00

handlers_cli_auth_test.go

fix(server): derive CLI auth URL scheme from r.TLS, gate X-Forwarded-Proto on trusted proxies (TASK-665) (#190)

2026-04-22 09:27:45 -04:00

handlers_cli_auth.go

fix(auth): unify first-run setup into one browser handoff (BUG-1843) (#739)

2026-06-20 23:51:43 -04:00

handlers_cloud.go

feat(auth): accept provider=apple in cloud oauth-login/link/unlink (TASK-1773) (#714)

2026-06-07 22:08:14 -04:00

handlers_collab_test.go

feat(collab): op-log cursor protocol — force-refresh + watermark advance (TASK-1319) (#472)

2026-05-09 21:45:46 -04:00

handlers_collab.go

fix(auth): scope admin platform role to cookie session auth (BUG-1616) (#632)

2026-05-27 10:09:30 -04:00

handlers_collections.go

feat(store): JSONB NOT NULL hardening on items/views + handler shape validation (IDEA-1486+1488) (#566)

2026-05-16 10:15:59 -04:00

handlers_comments_edit_test.go

feat(comments): comment editing backend — user_id, UpdateComment, PATCH, SSE (TASK-1663) (#665)

2026-05-30 12:38:57 -04:00

handlers_comments.go

feat(comments): comment editing backend — user_id, UpdateComment, PATCH, SSE (TASK-1663) (#665)

2026-05-30 12:38:57 -04:00

handlers_connected_apps_mutations_test.go

feat(oauth): connected-apps mutation endpoints + edit UI (TASK-1524) (#585)

2026-05-18 08:33:39 -04:00

handlers_connected_apps_test.go

feat(oauth): backfill session.Extra into oauth_connections + switch read path (TASK-1522) (#583)

2026-05-18 03:32:42 -04:00

handlers_connected_apps.go

feat(oauth): connected-apps mutation endpoints + edit UI (TASK-1524) (#585)

2026-05-18 08:33:39 -04:00

handlers_convention_library.go

feat(server): library endpoints gain ?category, ?summary, /library/entry (TASK-1561) (#612)

2026-05-21 13:08:02 -04:00

handlers_dashboard_test.go

feat: retire IDEA-1 seed pattern + 'pad onboard' cobra + surface blank in init (TASK-1501/1502/1503) (#577)

2026-05-17 13:40:15 -04:00

handlers_dashboard.go

feat(web): unify dashboard onboarding banners around needs_onboarding signal (TASK-1530) (#594)

2026-05-19 13:17:57 -04:00

handlers_documents_test.go

fix(fields,activity): debounce typed-input field saves + collapse same-field activity runs (BUG-1466) (#549)

2026-05-14 22:10:12 -04:00

handlers_documents.go

feat(store): add users.last_write_at column + write-path hook (TASK-1543) (#598)

2026-05-20 16:39:23 -04:00

handlers_events_filter_test.go

feat(api): bulk-mutation endpoint + single SSE batch event (TASK-1668) (#669)

2026-05-30 18:41:55 -04:00

handlers_events_revalidation_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_events_test.go

fix(sse): surface write errors and link keepalive to IdleTimeout (BUG-1532) (#590)

2026-05-18 18:29:28 -04:00

handlers_events.go

feat(api): bulk-mutation endpoint + single SSE batch event (TASK-1668) (#669)

2026-05-30 18:41:55 -04:00

handlers_export_bundle_test.go

feat(attachments): bundle attachments + manifest in workspace export (TASK-884) (#305)

2026-04-29 18:30:43 -04:00

handlers_export_bundle.go

feat(attachments): bundle attachments + manifest in workspace export (TASK-884) (#305)

2026-04-29 18:30:43 -04:00

handlers_grants.go

fix(share): guard nil grants/share-link slices to prevent ShareDialog TypeError (BUG-1598) (#624)

2026-05-24 16:12:38 -04:00

handlers_graph_test.go

feat(server): focused neighborhood mode on workspace graph endpoint (TASK-1781) (#718)

2026-06-08 18:13:10 -04:00

handlers_graph.go

feat(server): focused neighborhood mode on workspace graph endpoint (TASK-1781) (#718)

2026-06-08 18:13:10 -04:00

handlers_import_bundle_test.go

fix(cli): construct auth login URL on CLI side to avoid 0.0.0.0 leak (TASK-839) (#311)

2026-04-29 22:03:27 -04:00

handlers_import_bundle.go

chore(import-bundle): audit + harden bundle import validation (TASK-891) (#308)

2026-04-29 20:24:25 -04:00

handlers_import_test.go

feat(server): POST /api/v1/import/url endpoint + integration tests (TASK-1472) (#556)

2026-05-15 00:36:41 -04:00

handlers_import.go

feat(server): POST /api/v1/import/url endpoint + integration tests (TASK-1472) (#556)

2026-05-15 00:36:41 -04:00

handlers_item_links_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_item_links.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_item_versions.go

fix(timeline): resolve collab-snapshot diffs + collapse autosave bursts (BUG-1612) (#691)

2026-06-01 21:25:42 -04:00

handlers_items_bulk_test.go

feat(api): bulk restore op for undo (TASK-1674 backend) (#675)

2026-05-30 22:28:34 -04:00

handlers_items_bulk.go

feat(api): bulk restore op for undo (TASK-1674 backend) (#675)

2026-05-30 22:28:34 -04:00

handlers_items_collab_versions_test.go

feat(collab): op-log cursor protocol — force-refresh + watermark advance (TASK-1319) (#472)

2026-05-09 21:45:46 -04:00

handlers_items_jsonb_inner_shape_test.go

feat(store): JSONB NOT NULL hardening on items/views + handler shape validation (IDEA-1486+1488) (#566)

2026-05-16 10:15:59 -04:00

handlers_items_moved_out_test.go

fix(sync): moved-out tombstones for cross-visibility collection moves (BUG-1675) (#670)

2026-05-30 19:57:45 -04:00

handlers_items_open_children_guard_test.go

fix(deps): bump go-jose/v3 to v3.0.5 to clear GO-2026-4945 (BUG-1619) (#634)

2026-05-27 13:21:57 -04:00

handlers_items_open_children_guard.go

feat(server): refuse to mark item terminal while it has open children (IDEA-1494) (#571)

2026-05-17 00:15:52 -04:00

handlers_items_test.go

fix(web): collection cards show real child-item progress; child-progress endpoint (BUG-1509) (#710)

2026-06-06 11:14:23 -04:00

handlers_items.go

feat(artifact): server export + import endpoints for playbooks & conventions (#755)

2026-06-22 11:43:52 -04:00

handlers_library_entry.go

feat(cli): pad library get + list --full + server-side category filter (TASK-1562) (#613)

2026-05-21 16:59:57 -04:00

handlers_library_test.go

feat(cli): pad library get + list --full + server-side category filter (TASK-1562) (#613)

2026-05-21 16:59:57 -04:00

handlers_mcp_audit_test.go

feat(mcp): persistent audit log for /mcp tool calls (TASK-960) (#389)

2026-05-02 22:56:10 -04:00

handlers_mcp_audit.go

feat(mcp): persistent audit log for /mcp tool calls (TASK-960) (#389)

2026-05-02 22:56:10 -04:00

handlers_mcp_test.go

fix(mcp): raise MCP per-token burst + classify 429 as ErrRateLimited (BUG-1430) (#546)

2026-05-14 15:45:51 -04:00

handlers_mcp_tool_surface_test.go

feat(server): expose MCP tool-surface over authed REST endpoint (#764)

2026-06-24 22:45:32 -04:00

handlers_mcp.go

feat(server): expose MCP tool-surface over authed REST endpoint (#764)

2026-06-24 22:45:32 -04:00

handlers_me_test.go

feat(workspace): expose currentRole + resource-scoped permission helpers (TASK-1101) (#415)

2026-05-05 08:52:05 -04:00

handlers_me.go

feat(workspace): expose currentRole + resource-scoped permission helpers (TASK-1101) (#415)

2026-05-05 08:52:05 -04:00

handlers_members.go

fix: green up Go (PostgreSQL) CI (BUG-842) (#275)

2026-04-28 16:21:43 -04:00

handlers_oauth_claim_test.go

feat(mcp): workspace.create + workspace.claim actions + claim-code mechanics (TASK-1521) (#582)

2026-05-18 00:43:46 -04:00

handlers_oauth_claim.go

feat(mcp): workspace.create + workspace.claim actions + claim-code mechanics (TASK-1521) (#582)

2026-05-18 00:43:46 -04:00

handlers_oauth_clients.go

feat(oauth): MCPBearerAuth OAuth integration + public-info (TASK-1027) — closes TASK-951 (#375)

2026-05-02 13:33:53 -04:00

handlers_oauth_provider_test.go

feat(auth): accept provider=apple in cloud oauth-login/link/unlink (TASK-1773) (#714)

2026-06-07 22:08:14 -04:00

handlers_oauth_test.go

chore(web): npm audit fix — svelte 5.55.8, devalue 5.8.1, mermaid 11.15.0 (#589)

2026-05-18 17:17:42 -04:00

handlers_oauth.go

feat(oauth): consent screen rewrite + new-tables write path (TASK-1523) (#584)

2026-05-18 07:51:12 -04:00

handlers_playbook_library.go

feat(server): library endpoints gain ?category, ?summary, /library/entry (TASK-1561) (#612)

2026-05-21 13:08:02 -04:00

handlers_playbooks_test.go

feat(playbook): add pad playbook CLI (list/show/run) + endpoints (TASK-1382) (#520)

2026-05-12 18:29:11 -04:00

handlers_playbooks.go

feat(playbook): add pad playbook CLI (list/show/run) + endpoints (TASK-1382) (#520)

2026-05-12 18:29:11 -04:00

handlers_rbac_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_ref_resolver_test.go

fix(server): gate ref-resolver admin bypass on bearer auth (BUG-1618) (#690)

2026-05-31 12:26:57 -04:00

handlers_ref_resolver.go

fix(server): gate ref-resolver admin bypass on bearer auth (BUG-1618) (#690)

2026-05-31 12:26:57 -04:00

handlers_reports_test.go

feat(report): windowed project report endpoint + DateBucket dialect (TASK-1630) (#638)

2026-05-29 08:24:05 -04:00

handlers_reports.go

feat(report): opt-in 'what shipped' completed-items list (TASK-1641) (#651)

2026-05-29 17:47:25 -04:00

handlers_role_board.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_search.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_share_links_test.go

fix(store): cast jsonb metadata to text for Postgres LIKE + gofmt (BUG-1702) (#693)

2026-06-02 09:39:22 -04:00

handlers_share_links.go

feat(share): include saved views in collection share payload (TASK-1681) (#682)

2026-05-31 01:15:38 -04:00

handlers_stars_test.go

fix(mcp): bundle BUG-1081 + BUG-1082 + TASK-1076 — three small MCP-UX fixes from dogfooding (#387)

2026-05-02 21:31:48 -04:00

handlers_stars.go

fix(mcp): bundle BUG-1081 + BUG-1082 + TASK-1076 — three small MCP-UX fixes from dogfooding (#387)

2026-05-02 21:31:48 -04:00

handlers_storage_test.go

feat(attachments): Settings → Storage tab with attachment list (TASK-882) (#303)

2026-04-29 17:44:12 -04:00

handlers_storage.go

feat(attachment): add pad attachment view|show|list CLI surfaces (IDEA-898) (#321)

2026-04-30 16:06:08 -04:00

handlers_tags_test.go

feat(tags): workspace tag enumeration endpoint + cross-collection filter (TASK-1653) (#658)

2026-05-29 23:43:02 -04:00

handlers_timeline_collapse_test.go

fix(timeline): resolve collab-snapshot diffs + collapse autosave bursts (BUG-1612) (#691)

2026-06-01 21:25:42 -04:00

handlers_timeline.go

fix(timeline): resolve collab-snapshot diffs + collapse autosave bursts (BUG-1612) (#691)

2026-06-01 21:25:42 -04:00

handlers_tokens.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_unsubscribe_test.go

fix(server): escape unsubscribe page via html/template + add strict CSP (TASK-657) (#185)

2026-04-21 22:53:27 -04:00

handlers_unsubscribe.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_versions.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_views_collections_jsonb_test.go

feat(store): JSONB NOT NULL hardening on items/views + handler shape validation (IDEA-1486+1488) (#566)

2026-05-16 10:15:59 -04:00

handlers_views.go

feat(store): JSONB NOT NULL hardening on items/views + handler shape validation (IDEA-1486+1488) (#566)

2026-05-16 10:15:59 -04:00

handlers_webhooks.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_webmcp_setting_test.go

feat(server): add webmcp_enabled platform setting + session flag (#763)

2026-06-24 22:28:34 -04:00

handlers_well_known.go

fix(mcp): publish PAD_MCP_PUBLIC_URL verbatim as canonical resource (no /mcp suffix) (#381)

2026-05-02 18:36:55 -04:00

handlers_workspace_cap_test.go

Standardize plan-limit error envelope across HTTP/MCP/CLI/UI (TASK-788) (#628)

2026-05-25 11:46:41 -04:00

handlers_workspaces_test.go

fix(workspaces): scope admin's personal workspace list to memberships (BUG-982) (#392)

2026-05-03 00:35:31 -04:00

handlers_workspaces.go

fix(server): gate ref-resolver admin bypass on bearer auth (BUG-1618) (#690)

2026-05-31 12:26:57 -04:00

item_lineage.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

main_test.go

fix(ci): lower test-only bcrypt cost + re-enable -race on PRs (BUG-1371) (#513)

2026-05-12 10:01:14 -04:00

metrics_auth_test.go

fix: green up Go (PostgreSQL) CI (BUG-842) (#275)

2026-04-28 16:21:43 -04:00

middleware_auth_admin_token_gate_test.go

fix(auth): scope admin platform role to cookie session auth (BUG-1616) (#632)

2026-05-27 10:09:30 -04:00

middleware_auth_public_paths_test.go

fix(auth): TokenAuth falls through invalid Bearer on public API paths (BUG-1227) (#434)

2026-05-07 20:01:34 -04:00

middleware_auth.go

fix(server): non-fatal UA session binding + sliding session renewal (#727)

2026-06-14 21:15:35 -04:00

middleware_csrf_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

middleware_csrf.go

feat(mcp): pluggable Dispatcher + HTTPHandlerDispatcher for remote MCP (TASK-965) (#343)

2026-05-01 11:51:28 -04:00

middleware_logging_test.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

middleware_logging.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

middleware_mcp_audit_test.go

fix(mcp): raise MCP per-token burst + classify 429 as ErrRateLimited (BUG-1430) (#546)

2026-05-14 15:45:51 -04:00

middleware_mcp_audit.go

feat(metrics): session-id-keyed TTL sweep for mcp_active_sessions (TASK-1120) (#400)

2026-05-03 17:40:18 -04:00

middleware_mcp_auth_dual_read_test.go

feat(oauth): per-connection state tables + dual-read introspection gate (TASK-1520) (#581)

2026-05-18 00:03:20 -04:00

middleware_mcp_auth.go

feat(oauth): per-connection state tables + dual-read introspection gate (TASK-1520) (#581)

2026-05-18 00:03:20 -04:00

middleware_mcp_metrics_test.go

feat(metrics): session-id-keyed TTL sweep for mcp_active_sessions (TASK-1120) (#400)

2026-05-03 17:40:18 -04:00

middleware_mcp_session_test.go

feat(metrics): session-id-keyed TTL sweep for mcp_active_sessions (TASK-1120) (#400)

2026-05-03 17:40:18 -04:00

middleware_mcp_session.go

feat(metrics): session-id-keyed TTL sweep for mcp_active_sessions (TASK-1120) (#400)

2026-05-03 17:40:18 -04:00

middleware_metrics_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

middleware_metrics.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

middleware_ratelimit_test.go

PHASE-12: Security Hardening for Pad Cloud (#67)

2026-04-05 10:26:00 -04:00

middleware_ratelimit.go

feat(auth): localhost password recovery for locked-out self-host admins (#760)

2026-06-22 20:58:50 -04:00

middleware_realip_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

middleware_realip.go

fix(server): read raw TCP peer for loopback check (TASK-662) (#175)

2026-04-21 19:33:47 -04:00

middleware_security_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

middleware_security.go

fix(server): reject CORS wildcard when credentials are on (TASK-664) (#188)

2026-04-21 23:59:54 -04:00

middleware_session_ip_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

oplog_gc_test.go

feat(collab): periodic op-log GC sweeper for dormant items (TASK-1309) (#471)

2026-05-09 18:19:33 -04:00

oplog_gc.go

feat(collab): periodic op-log GC sweeper for dormant items (TASK-1309) (#471)

2026-05-09 18:19:33 -04:00

orphan_gc_test.go

feat(comments): paste/drop image attachments in comments + inline render (IDEA-1650) (#663)

2026-05-30 10:57:31 -04:00

orphan_gc.go

feat(comments): paste/drop image attachments in comments + inline render (IDEA-1650) (#663)

2026-05-30 10:57:31 -04:00

password_strength_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

password_strength.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

server_test.go

fix(server): drain ipRateLimiter cleanup goroutines on Stop() (BUG-851) (#276)

2026-04-28 17:20:03 -04:00

server.go

feat(server): expose MCP tool-surface over authed REST endpoint (#764)

2026-06-24 22:45:32 -04:00

share_page_collab_isolation_test.go

test(collab): regression guard for share-page collab isolation (TASK-1266) (#464)

2026-05-09 07:13:10 -04:00

testimageprocessor_libvips_test.go

feat(attachments): ImageProcessor interface + pure-Go impl + thumbnail pipeline (TASK-878) (#295)

2026-04-29 14:35:49 -04:00

testimageprocessor_purego_test.go

feat(attachments): ImageProcessor interface + pure-Go impl + thumbnail pipeline (TASK-878) (#295)

2026-04-29 14:35:49 -04:00

token_scopes_test.go

feat(oauth): MCPBearerAuth OAuth integration + public-info (TASK-1027) — closes TASK-951 (#375)

2026-05-02 13:33:53 -04:00

token_workspace_allowlist_test.go

feat(oauth): live workspace allow-list + role enforcement (TASK-953) (#377)

2026-05-02 14:29:17 -04:00

twofactor_challenge.go

fix: persist 2FA challenge key and prevent duplicate TOTP verification

2026-04-08 20:30:39 +00:00

username.go

feat: username validation, reserved words, and registration flow

2026-04-10 23:12:59 +00:00