xarmian 371ea3a145 fix: a tab's older content write can no longer land over its newer one (BUG-3080) (#1435) ...

* fix: a tab's older content write can no longer land over its newer one (BUG-3080)

The item pane's teardown flushes (collab snapshot and raw markdown) are
fire-and-forget PATCHes carrying the whole body. Two can be in flight at once,
for example after a cancelled unload, more typing, then a real close. When
they arrive in the wrong order, the older one puts old text back.

The client cannot order them: the second is sent from a page that is going
away. A version token cannot either: both are dispatched before the tab sees
either result, so both carry the same token, and the older landing first would
get the NEWER refused. So the order is decided at the server, from what the
tab says:

- Every item-pane content PATCH now carries client_write {tab, n}. The tab is
  a per-page-load random id (never a session or user id), and n only rises.
  This covers all five content writes the pane sends, not only teardown, so an
  ordinary slow-then-fast pair is ordered too. That is intended.
- The server keeps the highest n APPLIED per (item, tab) in one bounded map
  (10,000 keys, 10 minutes idle). A lower n answers 409 superseded_write,
  naming the n it lost to, and writes nothing. The pane treats that answer as
  success and never retries.
- The per-key lock is held from the check through the write, so the older
  write cannot pass its check and then land last.
- Per instance, and forgotten on restart: a missing mark refuses nothing, so
  every gap degrades to today's behaviour. A write without client_write (the
  CLI, MCP) is never compared against a mark. The CLAUDE.md note sits beside
  the SSE budget.
- Refusals are counted in pad_content_writes_superseded_total.

Tests: Go handler tests on both paths, including a concurrent case held open
through a test-only seam, age and bound, and unstamped writes. Playwright
holds a real older flush and delivers it last. Removing the server check,
releasing the lock early, or not sending the stamp each turns a test red.

Claude-Session: https://claude.ai/code/session_01X4uYKs5ZPF28eCWfm8VPvE

* fix(server): client_write orders CONTENT writes only (BUG-3080, codex round 1)

A stamp on a PATCH that carries no content (a field or title write) used to
advance the (item, tab) mark. That could refuse this tab's next real content
write with a lower n. The stamp now neither orders nor marks a write that
carries no body. The pane never stamps such writes, so this pins the contract
rather than a current path. A test covers it, and dropping the gate turns it
red (409 superseded_by 50).

Claude-Session: https://claude.ai/code/session_01X4uYKs5ZPF28eCWfm8VPvE

* fix(server): the client_write mark moves when the write commits, not at the response (BUG-3080, codex round 2)

The mark was advanced only on the 200 exit. A write that committed and then
failed in response enrichment (a 500) left it behind, so this tab's older
write could pass its check and overwrite what was just stored. It now moves at
the point every write path has confirmed its commit. That is argued from the
code: there is no seam to make enrichment fail on demand.

Claude-Session: https://claude.ai/code/session_01X4uYKs5ZPF28eCWfm8VPvE

2026-09-22 13:54:24 -04:00

..

render

fix(attachments): a HEIC embed is decided by what can be served and painted, not by an image/ prefix (BUG-2964)

2026-09-08 19:40:37 -04:00

testdata

feat(web): push-to-agent composer in the item view (TASK-2561) (#1099)

2026-08-15 08:22:09 -04:00

access_epoch_test.go

feat(server,web): detect a revocation that writes no item, and evict the cache it left stale (IDEA-2898) (#1261)

2026-09-06 13:36:22 -04:00

access_epoch.go

feat(server,web): detect a revocation that writes no item, and evict the cache it left stale (IDEA-2898) (#1261)

2026-09-06 13:36:22 -04:00

artifact_import.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

attachments_authz.go

fix(store): route cross-workspace copy's lock-held reads through the copy transaction (BUG-2409) (#1136)

2026-08-17 08:16:02 -04:00

authz_cross_workspace_test.go

feat(server): add cross-workspace copy dry-run preflight endpoint (TASK-2364)

2026-07-30 20:15:00 +00:00

authz_cross_workspace.go

docs(server): correct the cross-workspace authz re-check contract per final review

2026-07-31 02:35:53 +00:00

bootstrap_test.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

bootstrap.go

feat(auth): PAD_BYPASS_SETUP_TOKEN open-bootstrap escape hatch (#429)

2026-05-06 13:27:12 -04:00

bug1791_archived_visibility_test.go

fix(items): surface archived items instead of masking them as missing (BUG-1791) (#733)

2026-06-15 14:44:58 -04:00

bug2685_grandfathered_reserved_key_test.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

bug3028_relation_blank_test.go

fix: a relation's "no target" has one stored form, and required means it names one (BUG-3028) (#1427)

2026-09-22 08:08:15 -04:00

bug3035_applier_seq_test.go

fix(cli): item edit refuses a stale body, guards its save with expected_seq, and keeps a recovery file on failure (BUG-3035) (#1418)

2026-09-21 21:03:05 -04:00

bug3037_expected_seq_test.go

feat(items): expected_seq — an OCC token that can tell two same-second writes apart (BUG-3037) (#1351)

2026-09-13 22:38:15 -04:00

bug3049_bulk_field_patch_test.go

fix(items): twelve item-field writers send a patch instead of replacing the blob (BUG-3049 / BUG-3055) (#1349)

2026-09-13 21:14:57 -04:00

bug3079_default_drop_test.go

fix(items): an injected schema default takes the same type check a supplied value takes (BUG-3079) (#1362)

2026-09-14 09:03:24 -04:00

bug3080_client_write_test.go

fix: a tab's older content write can no longer land over its newer one (BUG-3080) (#1435)

2026-09-22 13:54:24 -04:00

bug3124_watermark_stamp_test.go

feat: a caught-up tab stamps the flush watermark, so viewing an item no longer leaves it pending (BUG-3124 unit B) (#1420)

2026-09-21 22:50:56 -04:00

claim_codes_test.go

feat(mcp): workspace.create + workspace.claim actions + claim-code mechanics (TASK-1521) (#582)

2026-05-18 00:43:46 -04:00

claim_codes.go

feat(mcp): workspace.create + workspace.claim actions + claim-code mechanics (TASK-1521) (#582)

2026-05-18 00:43:46 -04:00

client_write_marks.go

fix: a tab's older content write can no longer land over its newer one (BUG-3080) (#1435)

2026-09-22 13:54:24 -04:00

cloud_admin_gate_test.go

fix(server): gate RequireAuth's cloud-secret bypass on validated session (BUG-1944) (#1112)

2026-08-15 19:18:55 -04:00

collection_resolve_test.go

fix(cli,mcp): send raw collection slug so an alias can't shadow a real collection (BUG-2630) (#1162)

2026-08-19 08:13:29 -04:00

collection_resolve.go

fix(cli,mcp): send raw collection slug so an alias can't shadow a real collection (BUG-2630) (#1162)

2026-08-19 08:13:29 -04:00

content_state_population_test.go

feat(playbook): match free text to an active playbook via the decision provider (TASK-3120) (#1429)

2026-09-22 11:28:57 -04:00

context.go

fix(server): a stream ends when the credential that opened it stops being valid (BUG-3007) (#1323)

2026-09-10 16:47:31 -04:00

copy_preflight_drop_reason_parity_test.go

IDEA-2893 + IDEA-2894: record the accepted carry disclosure, and make the drop-reason mapper testable (#1254)

2026-09-05 19:01:57 -04:00

dashboard_attention_decisions_test.go

feat(decision): content-aware attention on the dashboard and item page (TASK-3118) (#1421)

2026-09-21 23:55:54 -04:00

decision_settings_test.go

feat(decision): instance-admin settings for the decision provider (TASK-3121) (#1426)

2026-09-22 07:34:33 -04:00

decision_settings.go

feat(decision): instance-admin settings for the decision provider (TASK-3121) (#1426)

2026-09-22 07:34:33 -04:00

decision_tick.go

feat(decision): instance-admin settings for the decision provider (TASK-3121) (#1426)

2026-09-22 07:34:33 -04:00

decode_json_nul_test.go

feat(items): execution lease — atomic claim/checkout with expiry (#1238)

2026-09-18 12:25:38 -04:00

decode_json_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

document_lock_contention_test.go

fix(store): serialize document renames and stop reading the pool inside transactions (BUG-2778) (#1208)

2026-08-25 22:40:58 -04:00

events_surface_test.go

feat(server): outbox drain — webhooks delivered from the choke point (TASK-2714) (#1173)

2026-08-20 23:33:26 -04:00

events_surface.go

feat(server): outbox drain — webhooks delivered from the choke point (TASK-2714) (#1173)

2026-08-20 23:33:26 -04:00

handlers_2fa_recovery_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

handlers_2fa_totp_step_test.go

fix(security): make TOTP login codes single-use (BUG-2054) (#914)

2026-07-10 23:56:59 -04:00

handlers_2fa.go

fix(security): make TOTP login codes single-use (BUG-2054) (#914)

2026-07-10 23:56:59 -04:00

handlers_account_export_contract_test.go

test: cover account delete + export contracts and Danger Zone e2e (TASK-1963) (#824)

2026-07-05 20:47:30 -04:00

handlers_account_export_gate_test.go

fix(server): deny account export to restricted owners (BUG-1945) (#814)

2026-07-04 14:38:01 -04:00

handlers_account_test.go

test: cover account delete + export contracts and Danger Zone e2e (TASK-1963) (#824)

2026-07-05 20:47:30 -04:00

handlers_account.go

feat(server): require TOTP re-verification to delete account (#822)

2026-07-05 19:58:07 -04:00

handlers_activity_debounce_actor_test.go

fix(store): activity debounce must not merge across writers (BUG-2763) (#1201)

2026-08-25 14:28:29 -04:00

handlers_activity.go

feat(project): agent-accessible activity feed (pad project activity + MCP action) (#877)

2026-07-08 16:26:41 -04:00

handlers_admin_bearer_gate_test.go

fix(security): gate collab WebSocket writes on editor role (TASK-265) (#938)

2026-07-15 01:30:12 -04:00

handlers_admin_billing_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_admin_billing.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_admin_invitations.go

fix(store,server): an invitation to a soft-deleted workspace reads as unknown (BUG-3104) (#1413)

2026-09-21 17:58:27 -04:00

handlers_admin_settings_test.go

fix(admin): stop leaking 2FA secret via GET /admin/settings (BUG-1909) (#779)

2026-07-01 17:44:43 -04:00

handlers_admin_users_test.go

feat(admin): admin force-verify email override (TASK-1939) (#809)

2026-07-04 04:15:09 -04:00

handlers_admin_users.go

feat(admin): admin force-verify email override (TASK-1939) (#809)

2026-07-04 04:15:09 -04:00

handlers_admin.go

feat(decision): instance-admin settings for the decision provider (TASK-3121) (#1426)

2026-09-22 07:34:33 -04:00

handlers_agent_roles.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_artifact_export.go

fix(items): eleven hand-built doors carry the stale-body marker (BUG-3033) (#1344)

2026-09-13 18:34:16 -04:00

handlers_artifact_import_relation_carry_test.go

fix: a relation's "no target" has one stored form, and required means it names one (BUG-3028) (#1427)

2026-09-22 08:08:15 -04:00

handlers_artifact_import_warnings_test.go

WIP feat(server,store): referent validation for relation values — 6 of 8 doors (TASK-2878) (#1246)

2026-09-05 10:07:44 -04:00

handlers_artifact_import.go

fix(limits): workspace-scoped plan limits are decided in the insert's transaction (BUG-2808 PR B)

2026-09-17 09:46:27 -04:00

handlers_artifact_test.go

fix(cli): refuse a blank --stdin body on item create/update; add --clear-content (BUG-3100) (#1415)

2026-09-21 18:52:28 -04:00

handlers_attachments_download_authz_test.go

refactor(attachments): centralize parent resolution, close orphan-read and delete-denial gaps

2026-08-02 00:55:20 +00:00

handlers_attachments_download_mime_test.go

fix(server): force-download unknown and disallowed stored MIME (BUG-2413)

2026-08-08 20:37:39 +00:00

handlers_attachments_download_test.go

fix(ci): gofmt + bump race-detector timeout to 30m (#299)

2026-04-29 15:41:12 -04:00

handlers_attachments_isobmff_test.go

fix(attachments): HEIC, HEIF and AVIF are recognised from their bytes, not refused (BUG-2961) (#1291)

2026-09-08 13:30:42 -04:00

handlers_attachments_test.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

handlers_attachments_thumbnails_parent_test.go

fix(attachments): skip derivation for an archived parent (TASK-2404)

2026-08-01 23:27:34 +00:00

handlers_attachments_thumbnails_test.go

fix(cli,mcp): send raw collection slug so an alias can't shadow a real collection (BUG-2630) (#1162)

2026-08-19 08:13:29 -04:00

handlers_attachments_thumbnails.go

feat(web,server): render embedded image attachments on share pages via a variants-only byte endpoint (BUG-2389 2b, TASK-2637) (#1153)

2026-08-18 12:26:00 -04:00

handlers_attachments_transform_authz_test.go

fix(attachments): gate transform on item visibility (TASK-2402)

2026-08-01 23:05:26 +00:00

handlers_attachments_transform_test.go

feat(attachments): editor image crop with aspect presets (TASK-880) (#298)

2026-04-29 15:02:07 -04:00

handlers_attachments_transform.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

handlers_attachments_upload_live_item_test.go

refactor(attachments): centralize parent resolution, close orphan-read and delete-denial gaps

2026-08-02 00:55:20 +00:00

handlers_attachments_variant_headers_test.go

fix(attachments): a HEIC embed is decided by what can be served and painted, not by an image/ prefix (BUG-2964)

2026-09-08 19:40:37 -04:00

handlers_attachments.go

fix(attachments): a HEIC embed is decided by what can be served and painted, not by an image/ prefix (BUG-2964)

2026-09-08 19:40:37 -04:00

handlers_audit.go

fix(security): scope MCP workspace-global reads by OAuth consent allow-list (BUG-2102) (#935)

2026-07-14 20:37:03 -04:00

handlers_auth_bootstrap_bypass_test.go

feat(auth): PAD_BYPASS_SETUP_TOKEN open-bootstrap escape hatch (#429)

2026-05-06 13:27:12 -04:00

handlers_auth_bootstrap_token_test.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

handlers_auth_local_reset_test.go

feat(auth): localhost password recovery for locked-out self-host admins (#760)

2026-06-22 20:58:50 -04:00

handlers_auth_loopback_test.go

fix(server): read raw TCP peer for loopback check (TASK-662) (#175)

2026-04-21 19:33:47 -04:00

handlers_auth_ratelimit_test.go

feat(auth): per-email login rate limiter (TASK-651) (#178)

2026-04-21 20:52:03 -04:00

handlers_auth_session_rotation_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

handlers_auth_test.go

feat(server): expose password_set on /auth/me + TS User type (#819)

2026-07-05 18:44:26 -04:00

handlers_auth.go

docs(server): register pre-check comment no longer overstates the reconcile (BUG-3098 review r2)

2026-09-17 16:13:36 -04:00

handlers_backlinks_admin_bearer_test.go

fix(backlinks): scope cross-workspace admin enumeration to membership for bearer auth (BUG-1617) (#633)

2026-05-27 10:37:30 -04:00

handlers_backlinks.go

fix(server): consistent soft-delete handling across item sub-resources (#771)

2026-06-27 21:42:52 -05:00

handlers_bootstrap_test.go

fix(server): guard degraded/degraded_sections in bootstrap dashboard (BUG-2072) (#869)

2026-07-08 13:09:26 -04:00

handlers_bootstrap.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

handlers_capabilities.go

fix(attachments): a HEIC embed is decided by what can be served and painted, not by an image/ prefix (BUG-2964)

2026-09-08 19:40:37 -04:00

handlers_changes.go

chore: clear staticcheck SA + U1000 findings on main (TASK-764) (#249)

2026-04-25 11:53:31 -04:00

handlers_claim_code_test.go

fix(web,build): search palette hang on numeric query + graceful SSE shutdown (BUG-1531) (#588)

2026-05-18 15:25:27 -04:00

handlers_claim_code.go

feat(web): default agent-connect modal to MCP setup, steer zero-grant users (#817)

2026-07-05 12:05:24 -04:00

handlers_cli_auth_test.go

fix(server): derive CLI auth URL scheme from r.TLS, gate X-Forwarded-Proto on trusted proxies (TASK-665) (#190)

2026-04-22 09:27:45 -04:00

handlers_cli_auth.go

fix(auth): unify first-run setup into one browser handoff (BUG-1843) (#739)

2026-06-20 23:51:43 -04:00

handlers_cloud_autocreate_husk_test.go

fix(cloud): auto-create removes a workspace it cannot seed or administer, and leaves no restorable husk (BUG-3087) (#1383)

2026-09-15 12:50:53 -04:00

handlers_cloud_autocreate_workspace_test.go

fix(cloud): auto-create removes a workspace it cannot seed or administer, and leaves no restorable husk (BUG-3087) (#1383)

2026-09-15 12:50:53 -04:00

handlers_cloud_member_ack_test.go

fix(cloud): reconcile before destroying a workspace whose owner-add lost its ack (BUG-3026) (#1341)

2026-09-11 19:34:44 -04:00

handlers_cloud.go

fix(store): enforce items_per_workspace at workspace import (BUG-3103)

2026-09-17 23:54:41 -04:00

handlers_collab_applier_refusal_test.go

fix(server): a successful applier-path PATCH stops answering with the previous content (BUG-2995) (#1320)

2026-09-10 12:37:49 -04:00

handlers_collab_prune_atomicity_test.go

fix(server): the op-log prune rides inside the write it justifies (BUG-2840 half B) (#1295)

2026-09-08 16:46:28 -04:00

handlers_collab_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

handlers_collab_watermark.go

feat: a caught-up tab stamps the flush watermark, so viewing an item no longer leaves it pending (BUG-3124 unit B) (#1420)

2026-09-21 22:50:56 -04:00

handlers_collab.go

fix(server): a stream ends when the credential that opened it stops being valid (BUG-3007) (#1323)

2026-09-10 16:47:31 -04:00

handlers_collection_crud_visibility_test.go

fix(server): gate collection update/delete on visibility (BUG-1921) (#795)

2026-07-03 18:12:35 -04:00

handlers_collection_traits_rename_test.go

feat(store,server,web): collection kernel traits — de-hardcode conventions/playbooks slugs (TASK-2657, BUG-2702) (#1171)

2026-08-20 13:26:05 -04:00

handlers_collection_traits_test.go

feat(store,server): make collection trait uniqueness a database invariant — de-dup pass + partial unique indexes (TASK-2710) (#1257)

2026-09-05 20:43:43 -04:00

handlers_collections_concurrency_test.go

fix(events): release SSE admission slots when a client leaves mid-establishment (BUG-2749) (#1186)

2026-08-24 08:24:34 -04:00

handlers_collections_refusal_status_test.go

fix(server): a refused collection prefix reaches the caller as a 400 naming the rule (BUG-2951) (#1293)

2026-09-08 14:51:21 -04:00

handlers_collections_reserved_keys_test.go

fix(server): reserve parent/plan schema field keys (TASK-1912) (#786)

2026-07-03 03:27:04 -04:00

handlers_collections.go

fix(server): a refused collection prefix reaches the caller as a 400 naming the rule (BUG-2951) (#1293)

2026-09-08 14:51:21 -04:00

handlers_comments_atomic_test.go

fix(comments): the "commented" activity and the comment commit in one transaction (BUG-2716) (#1388)

2026-09-15 16:36:26 -04:00

handlers_comments_bearer_gate_test.go

fix(server): bearer-gate canEditComment's admin bypass (BUG-1919) (#796)

2026-07-03 18:24:36 -04:00

handlers_comments_edit_test.go

feat(comments): comment editing backend — user_id, UpdateComment, PATCH, SSE (TASK-1663) (#665)

2026-05-30 12:38:57 -04:00

handlers_comments.go

fix(comments): the "commented" activity and the comment commit in one transaction (BUG-2716) (#1388)

2026-09-15 16:36:26 -04:00

handlers_connected_apps_mutations_test.go

feat(oauth): connected-apps mutation endpoints + edit UI (TASK-1524) (#585)

2026-05-18 08:33:39 -04:00

handlers_connected_apps_test.go

feat(oauth): backfill session.Extra into oauth_connections + switch read path (TASK-1522) (#583)

2026-05-18 03:32:42 -04:00

handlers_connected_apps.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

handlers_content_state_doors_test.go

fix(items): eleven hand-built doors carry the stale-body marker (BUG-3033) (#1344)

2026-09-13 18:34:16 -04:00

handlers_convention_library.go

feat(server): library endpoints gain ?category, ?summary, /library/entry (TASK-1561) (#612)

2026-05-21 13:08:02 -04:00

handlers_dashboard_test.go

test(server): adopt t.Parallel() in heaviest handler tests (TASK-2059) (#918)

2026-07-11 09:38:14 -04:00

handlers_dashboard.go

feat(decision): content-aware attention on the dashboard and item page (TASK-3118) (#1421)

2026-09-21 23:55:54 -04:00

handlers_decisions_test.go

feat(decision): typed-decision storage and async runner (TASK-3117) (#1417)

2026-09-21 20:46:41 -04:00

handlers_decisions.go

feat(decision): typed-decision storage and async runner (TASK-3117) (#1417)

2026-09-21 20:46:41 -04:00

handlers_documents_test.go

fix(fields,activity): debounce typed-input field saves + collapse same-field activity runs (BUG-1466) (#549)

2026-05-14 22:10:12 -04:00

handlers_documents_title_test.go

fix(documents): bound the rename cascade at the title and at the projected total (BUG-2798, BUG-2796) (#1218)

2026-08-27 22:45:27 -04:00

handlers_documents.go

fix(comments): the "commented" activity and the comment commit in one transaction (BUG-2716) (#1388)

2026-09-15 16:36:26 -04:00

handlers_events_access_epoch_stream_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

handlers_events_access_epoch_test.go

feat(server,web): detect a revocation that writes no item, and evict the cache it left stale (IDEA-2898) (#1261)

2026-09-06 13:36:22 -04:00

handlers_events_cancel_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

handlers_events_failed_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

handlers_events_filter_test.go

fix(store): optimistic concurrency + sibling broadcast for collection settings (BUG-2265) (#989)

2026-07-21 09:43:05 -04:00

handlers_events_membership_test.go

fix(security): require workspace membership on SSE subscriptions (TASK-264) (#937)

2026-07-14 23:43:19 -04:00

handlers_events_resume_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

handlers_events_revalidation_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_events_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

handlers_events.go

fix(server): a stream ends when the credential that opened it stops being valid (BUG-3007) (#1323)

2026-09-10 16:47:31 -04:00

handlers_export_bundle_test.go

feat(attachments): bundle attachments + manifest in workspace export (TASK-884) (#305)

2026-04-29 18:30:43 -04:00

handlers_export_bundle.go

fix(server): deny workspace export to restricted owners (BUG-1922) (#813)

2026-07-04 13:54:08 -04:00

handlers_export_gate_test.go

fix(server): deny workspace export to restricted owners (BUG-1922) (#813)

2026-07-04 13:54:08 -04:00

handlers_grant_visibility_test.go

fix(store): optimistic concurrency + sibling broadcast for collection settings (BUG-2265) (#989)

2026-07-21 09:43:05 -04:00

handlers_grants.go

fix(server): filter handleListUserGrants through caller visibility (BUG-1928) (#799)

2026-07-03 20:18:29 -04:00

handlers_graph_test.go

fix(server): bearer-gate visibleCollectionIDs to close BUG-1917 (#792)

2026-07-03 14:40:54 -04:00

handlers_graph.go

feat(server): focused neighborhood mode on workspace graph endpoint (TASK-1781) (#718)

2026-06-08 18:13:10 -04:00

handlers_import_bundle_comment_refs_test.go

fix(store): cover documents and comment bodies in the attachment reference walks (BUG-2614, BUG-2615) (#1145)

2026-08-17 14:26:09 -04:00

handlers_import_bundle_husk_test.go

fix(import): a rejected bundle import leaves no restorable husk, and the shared removal reclaims blobs before it purges (BUG-3094) (#1385)

2026-09-15 14:12:20 -04:00

handlers_import_bundle_partial_test.go

fix(import): a kept partial bundle import is attached to its importer instead of left ownerless (BUG-2709) (#1386)

2026-09-15 15:40:13 -04:00

handlers_import_bundle_test.go

fix(import): a rejected bundle import leaves no restorable husk, and the shared removal reclaims blobs before it purges (BUG-3094) (#1385)

2026-09-15 14:12:20 -04:00

handlers_import_bundle.go

fix(store): enforce items_per_workspace at workspace import (BUG-3103)

2026-09-17 23:54:41 -04:00

handlers_import_stale_bodies_test.go

fix(export): mark bundle bodies that were stale when written, and refuse the migration that would abandon them (BUG-3032) (#1356)

2026-09-14 01:45:30 -04:00

handlers_import_test.go

feat(server): POST /api/v1/import/url endpoint + integration tests (TASK-1472) (#556)

2026-05-15 00:36:41 -04:00

handlers_import.go

feat(server): POST /api/v1/import/url endpoint + integration tests (TASK-1472) (#556)

2026-05-15 00:36:41 -04:00

handlers_invitation_accept_limit_test.go

fix(members): invitation accept enforces members_per_workspace (BUG-3098)

2026-09-17 16:13:36 -04:00

handlers_invitation_deleted_workspace_test.go

fix(store,server): an invitation to a soft-deleted workspace reads as unknown (BUG-3104) (#1413)

2026-09-21 17:58:27 -04:00

handlers_invitation_preview_test.go

fix(server): invitation-preview endpoint + read-only email prefill on /join (BUG-1934) (#803)

2026-07-03 23:47:06 -04:00

handlers_item_lease_test.go

feat(items): execution lease — atomic claim/checkout with expiry (#1238)

2026-09-18 12:25:38 -04:00

handlers_item_lease.go

feat(items): execution lease — atomic claim/checkout with expiry (#1238)

2026-09-18 12:25:38 -04:00

handlers_item_links_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_item_links.go

feat(server): outbox drain — webhooks delivered from the choke point (TASK-2714) (#1173)

2026-08-20 23:33:26 -04:00

handlers_item_versions_bounds_test.go

fix: bound item history and stop resolving bodies nobody reads (BUG-2608) (#1147)

2026-08-17 19:02:53 -04:00

handlers_item_versions_test.go

fix(events): release SSE admission slots when a client leaves mid-establishment (BUG-2749) (#1186)

2026-08-24 08:24:34 -04:00

handlers_item_versions.go

feat(server): outbox drain — webhooks delivered from the choke point (TASK-2714) (#1173)

2026-08-20 23:33:26 -04:00

handlers_items_access_epoch_test.go

feat(server,web): detect a revocation that writes no item, and evict the cache it left stale (IDEA-2898) (#1261)

2026-09-06 13:36:22 -04:00

handlers_items_ack_loss_test.go

fix(items): a lost commit ack no longer writes the item twice (BUG-2994) (#1340)

2026-09-11 18:03:09 -04:00

handlers_items_attribution_test.go

fix(cli,server): make agent attribution actually happen (BUG-2542) (#1088)

2026-08-13 16:21:10 -04:00

handlers_items_bug3133_pending_guard_test.go

fix: refuse a token-guarded content write over unflushed tab edits (BUG-3133) (#1423)

2026-09-22 00:42:02 -04:00

handlers_items_bulk_test.go

fix(events): release SSE admission slots when a client leaves mid-establishment (BUG-2749) (#1186)

2026-08-24 08:24:34 -04:00

handlers_items_bulk.go

fix: a relation's "no target" has one stored form, and required means it names one (BUG-3028) (#1427)

2026-09-22 08:08:15 -04:00

handlers_items_collab_versions_test.go

fix(collab): version restore via prune+reseed (BUG-2264) (#990)

2026-07-21 15:21:57 -04:00

handlers_items_content_echo_test.go

fix(items): a lost commit ack no longer writes the item twice (BUG-2994) (#1340)

2026-09-11 18:03:09 -04:00

handlers_items_content_route_test.go

fix(server): write first, apply second on the collab applier path (TASK-2989 / BUG-2840 half A) (#1318)

2026-09-10 08:54:41 -04:00

handlers_items_content_route.go

fix: refuse a token-guarded content write over unflushed tab edits (BUG-3133) (#1423)

2026-09-22 00:42:02 -04:00

handlers_items_content_state_test.go

feat(items): content_state marks a body the server knows is stale (BUG-3000) (#1343)

2026-09-13 10:51:03 -04:00

handlers_items_copy_attachment_authz_test.go

fix(copy): authorize attachment references in cross-workspace copy (TASK-2408)

2026-08-02 04:54:31 +00:00

handlers_items_copy_content_state_test.go

fix(export): mark bundle bodies that were stale when written, and refuse the migration that would abandon them (BUG-3032) (#1356)

2026-09-14 01:45:30 -04:00

handlers_items_copy_parity_test.go

refactor(server): extract resolveAuthorizedCopy shared by preflight and copy (TASK-2370)

2026-07-31 14:43:40 +00:00

handlers_items_copy_preflight_test.go

fix(events): release SSE admission slots when a client leaves mid-establishment (BUG-2749) (#1186)

2026-08-24 08:24:34 -04:00

handlers_items_copy_preflight.go

fix: a relation's "no target" has one stored form, and required means it names one (BUG-3028) (#1427)

2026-09-22 08:08:15 -04:00

handlers_items_copy_relation_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

handlers_items_copy_resolve.go

fix(server): resolve collection slugs against the workspace's real collections (BUG-2578) (#1146)

2026-08-17 16:34:46 -04:00

handlers_items_copy_test.go

fix(events): release SSE admission slots when a client leaves mid-establishment (BUG-2749) (#1186)

2026-08-24 08:24:34 -04:00

handlers_items_copy.go

fix(export): mark bundle bodies that were stale when written, and refuse the migration that would abandon them (BUG-3032) (#1356)

2026-09-14 01:45:30 -04:00

handlers_items_field_coercion_test.go

test(server): pin the last three coercion call sites (BUG-2850)

2026-09-03 12:49:33 +00:00

handlers_items_fieldpatch_test.go

feat(items): field-level PATCH + conflict envelope + read-only version history (TASK-2022) (#876)

2026-07-08 16:47:34 -04:00

handlers_items_jsonb_inner_shape_test.go

feat(store): JSONB NOT NULL hardening on items/views + handler shape validation (IDEA-1486+1488) (#566)

2026-05-16 10:15:59 -04:00

handlers_items_move_overrides_test.go

fix(cli,mcp): one --field key=value entry means one thing at every door (BUG-2870) (#1283)

2026-09-07 15:33:05 -04:00

handlers_items_moved_out_test.go

fix(sync): moved-out tombstones for cross-visibility collection moves (BUG-1675) (#670)

2026-05-30 19:57:45 -04:00

handlers_items_open_children_guard_test.go

fix(deps): bump go-jose/v3 to v3.0.5 to clear GO-2026-4945 (BUG-1619) (#634)

2026-05-27 13:21:57 -04:00

handlers_items_open_children_guard.go

fix: refuse a token-guarded content write over unflushed tab edits (BUG-3133) (#1423)

2026-09-22 00:42:02 -04:00

handlers_items_parent_ambiguity_test.go

fix(server): refuse a PATCH carrying both a fields hierarchy key and top-level parent_id (BUG-2594) (#1133)

2026-08-17 03:42:08 -04:00

handlers_items_preimage_test.go

fix(server): diff the activity change list against the store's pre-image (BUG-2776) (#1206)

2026-08-25 20:16:18 -04:00

handlers_items_rename_cascade_test.go

fix(items): a lost commit ack no longer writes the item twice (BUG-2994) (#1340)

2026-09-11 18:03:09 -04:00

handlers_items_reserved_fieldpatch_test.go

fix(server,mcp,cli): refuse system-metadata keys in fields_patch + retry-hostile error code (BUG-2627 part 2, BUG-2675) (#1166)

2026-08-19 23:17:24 -04:00

handlers_items_test.go

feat(items): add unparented filtering contract (#926)

2026-07-13 22:46:55 -04:00

handlers_items_title_test.go

fix(items): a lost commit ack no longer writes the item twice (BUG-2994) (#1340)

2026-09-11 18:03:09 -04:00

handlers_items.go

fix: a tab's older content write can no longer land over its newer one (BUG-3080) (#1435)

2026-09-22 13:54:24 -04:00

handlers_library_entry.go

feat(cli): pad library get + list --full + server-side category filter (TASK-1562) (#613)

2026-05-21 16:59:57 -04:00

handlers_library_test.go

feat(cli): pad library get + list --full + server-side category filter (TASK-1562) (#613)

2026-05-21 16:59:57 -04:00

handlers_mcp_audit_test.go

feat(mcp): persistent audit log for /mcp tool calls (TASK-960) (#389)

2026-05-02 22:56:10 -04:00

handlers_mcp_audit.go

feat(mcp): persistent audit log for /mcp tool calls (TASK-960) (#389)

2026-05-02 22:56:10 -04:00

handlers_mcp_test.go

fix(server): serve RFC 9728 PRM at path-aware well-known (BUG-2266) (#1120)

2026-08-16 12:33:12 -04:00

handlers_mcp_tool_surface_test.go

feat(server): expose MCP tool-surface over authed REST endpoint (#764)

2026-06-24 22:45:32 -04:00

handlers_mcp.go

fix(server): serve RFC 9728 PRM at path-aware well-known (BUG-2266) (#1120)

2026-08-16 12:33:12 -04:00

handlers_me_test.go

feat(workspace): expose currentRole + resource-scoped permission helpers (TASK-1101) (#415)

2026-05-05 08:52:05 -04:00

handlers_me.go

feat(workspace): expose currentRole + resource-scoped permission helpers (TASK-1101) (#415)

2026-05-05 08:52:05 -04:00

handlers_member_collection_access_escalation_test.go

fix(server): deny restricted owners from escalating collection access (BUG-1925) (#815)

2026-07-04 14:39:33 -04:00

handlers_members.go

fix(members): invitation accept enforces members_per_workspace (BUG-3098)

2026-09-17 16:13:36 -04:00

handlers_oauth_claim_test.go

feat(mcp): workspace.create + workspace.claim actions + claim-code mechanics (TASK-1521) (#582)

2026-05-18 00:43:46 -04:00

handlers_oauth_claim.go

feat(mcp): workspace.create + workspace.claim actions + claim-code mechanics (TASK-1521) (#582)

2026-05-18 00:43:46 -04:00

handlers_oauth_clients.go

feat(oauth): MCPBearerAuth OAuth integration + public-info (TASK-1027) — closes TASK-951 (#375)

2026-05-02 13:33:53 -04:00

handlers_oauth_provider_test.go

fix(server): auth-perimeter hardening — B6–B9 from the IDEA-1927 audit (TASK-1932) (#811)

2026-07-04 11:33:18 -04:00

handlers_oauth_test.go

fix(oauth): keep zero-workspace consent authorizable via the wildcard path (BUG-2303) (#1124)

2026-08-16 18:25:23 -04:00

handlers_oauth.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

handlers_plan_limit_race_test.go

refactor(store): CreateItem passes its options through createItemTx (BUG-2808 PR B review r1)

2026-09-17 09:46:27 -04:00

handlers_playbook_library.go

feat(server): library endpoints gain ?category, ?summary, /library/entry (TASK-1561) (#612)

2026-05-21 13:08:02 -04:00

handlers_playbook_match_ratelimit_test.go

feat(server): a dedicated rate limit for synchronous decision-provider calls (TASK-3141) (#1436)

2026-09-22 13:42:37 -04:00

handlers_playbook_match_test.go

feat(playbook): match free text to an active playbook via the decision provider (TASK-3120) (#1429)

2026-09-22 11:28:57 -04:00

handlers_playbooks_test.go

fix(playbooks): enforce draft gate server-side + expose status (BUG-2020) (#874)

2026-07-08 15:28:21 -04:00

handlers_playbooks.go

feat(server): a dedicated rate limit for synchronous decision-provider calls (TASK-3141) (#1436)

2026-09-22 13:42:37 -04:00

handlers_project_intel_test.go

fix(server): stop counting disabled conventions as completed work (#1152)

2026-08-18 10:44:50 -04:00

handlers_project_intel.go

feat(relations): exact-title resolution and hydrated reads for relation fields (PLAN-2857 U6 / TASK-2996) (#1326)

2026-09-10 21:06:40 -04:00

handlers_push_cross_instance_test.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

handlers_push_delivery_symmetry_test.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

handlers_push_presence_unreadable_test.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

handlers_push_publish_result_test.go

fix(watchevents): bound the resume settle window by the request context (BUG-2751) (#1197)

2026-08-24 22:32:01 -04:00

handlers_push_store_error_test.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

handlers_push_test.go

fix(server,watchevents): shared session presence + honest push acceptance (BUG-2698, BUG-2699) (#1175)

2026-08-21 20:43:20 -04:00

handlers_push_visibility_test.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

handlers_push.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

handlers_rbac_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_ref_resolver_test.go

fix(server): bearer-gate checkItemVisible's admin bypass (BUG-1918) (#793)

2026-07-03 15:31:17 -04:00

handlers_ref_resolver.go

fix: one prefix grammar, and the ref parser widens to it (BUG-2943) (#1286)

2026-09-07 17:32:36 -04:00

handlers_relation_backlinks.go

feat(relations): materialised reverse index and Referenced-by (PLAN-2857 U5 / TASK-2997) (#1328)

2026-09-11 00:57:47 -04:00

handlers_reminders_test.go

feat: item reminders — the fire-at-an-instant primitive, and one overdue rule for all four surfaces (IDEA-2641, closes #1010) (#1244)

2026-09-04 11:36:11 -04:00

handlers_reminders.go

feat: item reminders — the fire-at-an-instant primitive, and one overdue rule for all four surfaces (IDEA-2641, closes #1010) (#1244)

2026-09-04 11:36:11 -04:00

handlers_reports_test.go

feat(report): windowed project report endpoint + DateBucket dialect (TASK-1630) (#638)

2026-05-29 08:24:05 -04:00

handlers_reports.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

handlers_restore_plan_limit_test.go

test(server): RED legs for item restore past items_per_workspace (BUG-3101)

2026-09-17 11:02:02 -04:00

handlers_role_board.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_search.go

fix(security): scope MCP workspace-global reads by OAuth consent allow-list (BUG-2102) (#935)

2026-07-14 20:37:03 -04:00

handlers_sessions_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

handlers_sessions.go

fix(server,watchevents): shared session presence + honest push acceptance (BUG-2698, BUG-2699) (#1175)

2026-08-21 20:43:20 -04:00

handlers_share_attachments_derive_test.go

feat(web,server): render embedded image attachments on share pages via a variants-only byte endpoint (BUG-2389 2b, TASK-2637) (#1153)

2026-08-18 12:26:00 -04:00

handlers_share_attachments_test.go

feat(web,server): render embedded image attachments on share pages via a variants-only byte endpoint (BUG-2389 2b, TASK-2637) (#1153)

2026-08-18 12:26:00 -04:00

handlers_share_attachments.go

feat(web,server): render embedded image attachments on share pages via a variants-only byte endpoint (BUG-2389 2b, TASK-2637) (#1153)

2026-08-18 12:26:00 -04:00

handlers_share_links_bruteforce_test.go

fix(security): rate-limit share-link password verification (TASK-2055) (#913)

2026-07-10 23:48:59 -04:00

handlers_share_links_test.go

feat(items): add unparented filtering contract (#926)

2026-07-13 22:46:55 -04:00

handlers_share_links.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

handlers_stars_test.go

fix(mcp): bundle BUG-1081 + BUG-1082 + TASK-1076 — three small MCP-UX fixes from dogfooding (#387)

2026-05-02 21:31:48 -04:00

handlers_stars.go

feat(relations): exact-title resolution and hydrated reads for relation fields (PLAN-2857 U6 / TASK-2996) (#1326)

2026-09-10 21:06:40 -04:00

handlers_storage_delete_authz_test.go

fix(attachments): classify derived rows after authorization on delete

2026-08-02 01:50:34 +00:00

handlers_storage_test.go

feat(attachments): Settings → Storage tab with attachment list (TASK-882) (#303)

2026-04-29 17:44:12 -04:00

handlers_storage.go

fix(attachments): classify derived rows after authorization on delete

2026-08-02 01:50:34 +00:00

handlers_stream_gap_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

handlers_stream_session_liveness_test.go

fix(server): a stream ends when the credential that opened it stops being valid (BUG-3007) (#1323)

2026-09-10 16:47:31 -04:00

handlers_tags_test.go

feat(tags): workspace tag enumeration endpoint + cross-collection filter (TASK-1653) (#658)

2026-05-29 23:43:02 -04:00

handlers_timeline_collapse_test.go

fix(timeline): resolve collab-snapshot diffs + collapse autosave bursts (BUG-1612) (#691)

2026-06-01 21:25:42 -04:00

handlers_timeline_comment_agent_test.go

feat(server): timeline comment rows carry the agent name (TASK-2760) (#1196)

2026-08-24 18:09:02 -04:00

handlers_timeline_cursor_test.go

fix: timeline can answer has_more=true with zero entries, and the client cannot page past it (BUG-2765) (#1202)

2026-08-25 16:11:47 -04:00

handlers_timeline_cursor_validation_test.go

feat(store): make the NUL invariant a property of the DATABASE (DOC-2823 S2)

2026-09-01 21:16:17 +00:00

handlers_timeline_id_collision_test.go

fix(server): a structured timeline id must not collide with a row id (BUG-2783) (#1210)

2026-08-26 04:01:55 -04:00

handlers_timeline_structured_test.go

fix: surface implementation notes + decision log in the item timeline (BUG-2301) (#1144)

2026-08-17 12:58:09 -04:00

handlers_timeline.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

handlers_tokens_session_auth_test.go

fix(server): minting or rotating an API token requires an interactive session (BUG-2890) (#1267)

2026-09-06 22:02:05 -04:00

handlers_tokens.go

fix(limits): user-scoped plan limits are decided under the owner lock in the insert's transaction (BUG-2808 PR A)

2026-09-16 17:02:37 -04:00

handlers_unparented_test.go

fix(events): release SSE admission slots when a client leaves mid-establishment (BUG-2749) (#1186)

2026-08-24 08:24:34 -04:00

handlers_unsubscribe_test.go

fix(server): escape unsubscribe page via html/template + add strict CSP (TASK-657) (#185)

2026-04-21 22:53:27 -04:00

handlers_unsubscribe.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_verify_email_test.go

feat(server): cloud email self-registration + verify-email/resend endpoints (TASK-1938) (#808)

2026-07-04 03:32:48 -04:00

handlers_versions.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

handlers_views_collections_jsonb_test.go

feat(store): JSONB NOT NULL hardening on items/views + handler shape validation (IDEA-1486+1488) (#566)

2026-05-16 10:15:59 -04:00

handlers_views_unparented_test.go

feat(items): add unparented filtering contract (#926)

2026-07-13 22:46:55 -04:00

handlers_views.go

feat(items): add unparented filtering contract (#926)

2026-07-13 22:46:55 -04:00

handlers_watch_access_test.go

feat(server,cli): watches, user-scoped event stream, plugin monitor command — PLAN-2469 Phase 1 (TASK-2533) (#1082)

2026-08-12 15:50:41 -04:00

handlers_watch_access.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

handlers_watch_events_cancel_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

handlers_watch_events_oauth_scope_test.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

handlers_watch_events_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

handlers_watch_events.go

fix(server): a stream ends when the credential that opened it stops being valid (BUG-3007) (#1323)

2026-09-10 16:47:31 -04:00

handlers_watch_notify.go

fix(server,watchevents): shared session presence + honest push acceptance (BUG-2698, BUG-2699) (#1175)

2026-08-21 20:43:20 -04:00

handlers_watch_vis_cache_test.go

feat(server): armed-session declaration + push delivery filter (PLAN-2613 S1, TASK-2616) (#1130)

2026-08-17 01:59:02 -04:00

handlers_watches_test.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

handlers_watches.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

handlers_webhook_token_idor_test.go

fix(security): scope webhook + token mutations by workspace to close cross-workspace IDOR (TASK-266) (#936)

2026-07-14 23:24:55 -04:00

handlers_webhooks_secret_test.go

test(webhooks): use a literal IP instead of example.com in two more spots

2026-07-26 23:56:34 +00:00

handlers_webhooks.go

fix(limits): workspace-scoped plan limits are decided in the insert's transaction (BUG-2808 PR B)

2026-09-17 09:46:27 -04:00

handlers_webmcp_setting_test.go

feat(server): add webmcp_enabled platform setting + session flag (#763)

2026-06-24 22:28:34 -04:00

handlers_well_known.go

fix(mcp): publish PAD_MCP_PUBLIC_URL verbatim as canonical resource (no /mcp suffix) (#381)

2026-05-02 18:36:55 -04:00

handlers_workspace_autoadd_race_test.go

test(store): SQLite interleaving for the auto-add statement (BUG-2792 review r2 P2)

2026-09-16 15:36:49 -04:00

handlers_workspace_cap_test.go

Standardize plan-limit error envelope across HTTP/MCP/CLI/UI (TASK-788) (#628)

2026-05-25 11:46:41 -04:00

handlers_workspace_create_consent_test.go

feat(server): refuse workspace creation without may_create_workspaces consent (IDEA-2756) (#1212)

2026-08-26 13:23:56 -04:00

handlers_workspace_import_nul_test.go

fix(store,server,cli): three defects from codex round 1 (BUG-2810)

2026-09-02 15:15:11 +00:00

handlers_workspace_import_plan_limit_test.go

fix(server): charge workspace imports against the plan limit (BUG-2793) (#1219)

2026-08-27 23:56:55 -04:00

handlers_workspace_import_refusal_status_test.go

fix(server): a refused collection prefix reaches the caller as a 400 naming the rule (BUG-2951) (#1293)

2026-09-08 14:51:21 -04:00

handlers_workspace_mint_parity_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

handlers_workspaces_test.go

feat(server): workspace restore + deleted-list endpoints (TASK-1970) (#827)

2026-07-06 10:07:34 -04:00

handlers_workspaces.go

fix(store): both workspace mints take slug-then-owner locks in one order (BUG-2808 PR A review r2)

2026-09-16 17:02:37 -04:00

import_nul_repair.go

fix(server,store): two more from codex rounds 3 and 4 (BUG-2810)

2026-09-02 16:24:25 +00:00

import_plan_limit_message_test.go

fix(store): enforce items_per_workspace at workspace import (BUG-3103)

2026-09-17 23:54:41 -04:00

import_stale_bodies.go

fix(export): mark bundle bodies that were stale when written, and refuse the migration that would abandon them (BUG-3032) (#1356)

2026-09-14 01:45:30 -04:00

isolated_client_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

item_lineage.go

feat(relations): exact-title resolution and hydrated reads for relation fields (PLAN-2857 U6 / TASK-2996) (#1326)

2026-09-10 21:06:40 -04:00

item_moved_to_test.go

feat(relations): exact-title resolution and hydrated reads for relation fields (PLAN-2857 U6 / TASK-2996) (#1326)

2026-09-10 21:06:40 -04:00

item_moved_to.go

feat(server): expose ACL-gated moved-to pointer on item GET (TASK-2359)

2026-07-30 12:20:38 +00:00

listen_serve_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

main_test.go

perf(test): build the SQLite migration chain once per test binary (IDEA-1914) (#788)

2026-07-03 10:15:49 -04:00

metrics_auth_test.go

perf(test): wire remaining store helpers onto storetest fixture (TASK-1915) (#789)

2026-07-03 12:17:03 -04:00

middleware_auth_admin_token_gate_test.go

fix(auth): scope admin platform role to cookie session auth (BUG-1616) (#632)

2026-05-27 10:09:30 -04:00

middleware_auth_public_paths_test.go

fix(auth): TokenAuth falls through invalid Bearer on public API paths (BUG-1227) (#434)

2026-05-07 20:01:34 -04:00

middleware_auth.go

fix(server): a stream ends when the credential that opened it stops being valid (BUG-3007) (#1323)

2026-09-10 16:47:31 -04:00

middleware_csrf_test.go

fix(server): auth-perimeter hardening — B6–B9 from the IDEA-1927 audit (TASK-1932) (#811)

2026-07-04 11:33:18 -04:00

middleware_csrf.go

fix(server): auth-perimeter hardening — B6–B9 from the IDEA-1927 audit (TASK-1932) (#811)

2026-07-04 11:33:18 -04:00

middleware_logging_test.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

middleware_logging.go

feat(auth): first-run logs-token bootstrap flow (TASK-1167) (#424)

2026-05-06 08:40:11 -04:00

middleware_mcp_audit_test.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

middleware_mcp_audit.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

middleware_mcp_auth_dual_read_test.go

feat(oauth): per-connection state tables + dual-read introspection gate (TASK-1520) (#581)

2026-05-18 00:03:20 -04:00

middleware_mcp_auth.go

fix(server): a stream ends when the credential that opened it stops being valid (BUG-3007) (#1323)

2026-09-10 16:47:31 -04:00

middleware_mcp_metrics_test.go

fix(server): refuse a decoded NUL in a JSON request body (BUG-2803) (#1220)

2026-08-30 21:30:19 -04:00

middleware_mcp_session_test.go

feat(metrics): session-id-keyed TTL sweep for mcp_active_sessions (TASK-1120) (#400)

2026-05-03 17:40:18 -04:00

middleware_mcp_session.go

docs(mcp): the reason given for the protocol restriction was false — replace it with the true one (TASK-2977) (#1312)

2026-09-09 20:35:44 -04:00

middleware_metrics_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

middleware_metrics.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

middleware_query_test.go

fix(server): refuse invalid-UTF-8 and NUL query values at the transport (BUG-2784) (#1217)

2026-08-27 10:35:39 -04:00

middleware_ratelimit_test.go

fix(e2e): disable rate limiting on the E2E server to stop 429 flakes (BUG-2089) (#922)

2026-07-11 14:30:32 -04:00

middleware_ratelimit.go

feat(server): a dedicated rate limit for synchronous decision-provider calls (TASK-3141) (#1436)

2026-09-22 13:42:37 -04:00

middleware_realip_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

middleware_realip.go

fix(server): read raw TCP peer for loopback check (TASK-662) (#175)

2026-04-21 19:33:47 -04:00

middleware_request_text_test.go

fix(server): refuse invalid-UTF-8 and NUL query values at the transport (BUG-2784) (#1217)

2026-08-27 10:35:39 -04:00

middleware_request_text.go

fix(store,server,textguard): close codex round 1 on S1 — seven findings

2026-09-01 12:54:19 +00:00

middleware_security_test.go

chore: bump Go toolchain to 1.26 (TASK-763) (#247)

2026-04-25 11:35:19 -04:00

middleware_security.go

fix(server): reject CORS wildcard when credentials are on (TASK-664) (#188)

2026-04-21 23:59:54 -04:00

middleware_session_ip_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

middleware_session_ua_test.go

feat(security): enforce session UA binding under strict mode (TASK-2056) (#912)

2026-07-10 23:32:22 -04:00

middleware_verified_email_test.go

fix(members): invitation accept enforces members_per_workspace (BUG-3098)

2026-09-17 16:13:36 -04:00

middleware_verified_email.go

feat(server): RequireVerifiedEmail enforcement across all mutation perimeters (TASK-1937) (#807)

2026-07-04 02:06:58 -04:00

mobile_contract_test.go

test(server): the mobile shells' unversioned contracts fail CI when they move (TASK-2053) (#1294)

2026-09-08 15:49:05 -04:00

nul_differential_test.go

feat(server,store): the differential test's three live legs + the 400 mapping

2026-09-01 12:06:08 +00:00

nul_repair_differential_test.go

fix(server,store): two more from codex rounds 3 and 4 (BUG-2810)

2026-09-02 16:24:25 +00:00

open_children_guard_pool_test.go

fix(store): serialize document renames and stop reading the pool inside transactions (BUG-2778) (#1208)

2026-08-25 22:40:58 -04:00

oplog_gc_test.go

feat(collab): periodic op-log GC sweeper for dormant items (TASK-1309) (#471)

2026-05-09 18:19:33 -04:00

oplog_gc.go

fix(server): add panic recovery to background sweeper goroutines (BUG-2071) (#865)

2026-07-08 11:58:41 -04:00

orphan_gc_test.go

fix(server): rowless-blob GC sweep — reclaim blobs no attachments row references (BUG-2406) (#1137)

2026-08-17 09:03:44 -04:00

orphan_gc.go

fix(store): cover documents and comment bodies in the attachment reference walks (BUG-2614, BUG-2615) (#1145)

2026-08-17 14:26:09 -04:00

outbox_drain_test.go

feat(server): outbox drain — webhooks delivered from the choke point (TASK-2714) (#1173)

2026-08-20 23:33:26 -04:00

outbox_drain.go

docs(store,server): four comments and one log line that had stopped being true (BUG-2827)

2026-09-02 12:33:08 +00:00

outbox_payload_limit_test.go

docs,test(store): correct five comments and strengthen the shrink fixture (BUG-2827)

2026-09-02 12:05:57 +00:00

overdue_surfaces_test.go

feat: item reminders — the fire-at-an-instant primitive, and one overdue rule for all four surfaces (IDEA-2641, closes #1010) (#1244)

2026-09-04 11:36:11 -04:00

overdue.go

feat: item reminders — the fire-at-an-instant primitive, and one overdue rule for all four surfaces (IDEA-2641, closes #1010) (#1244)

2026-09-04 11:36:11 -04:00

password_strength_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

password_strength.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

publish_sites_ruled_test.go

fix(server,watchevents): shared session presence + honest push acceptance (BUG-2698, BUG-2699) (#1175)

2026-08-21 20:43:20 -04:00

push_message_collapse_test.go

feat(web): push-to-agent composer in the item view (TASK-2561) (#1099)

2026-08-15 08:22:09 -04:00

redis_health_test.go

fix(watchevents,server): four concurrency findings from codex round 9 (BUG-2727, BUG-2726)

2026-08-22 03:43:15 +00:00

redis_health.go

refactor: prune the claim surface, and turn one prose claim into a test

2026-08-22 05:09:29 +00:00

relation_backlinks_test.go

feat(relations): materialised reverse index and Referenced-by (PLAN-2857 U5 / TASK-2997) (#1328)

2026-09-11 00:57:47 -04:00

relation_hydration.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

relation_multi_roundtrip_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_ref_prefix_test.go

fix(store): a relation ref falls back to matching by number only when its prefix names no live collection (BUG-3082) (#1369)

2026-09-14 11:49:35 -04:00

relation_referents_doors_test.go

WIP feat(server,store): referent validation for relation values — 6 of 8 doors (TASK-2878) (#1246)

2026-09-05 10:07:44 -04:00

relation_referents.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_target_availability.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_titles_copy_test.go

feat(relations): exact-title resolution and hydrated reads for relation fields (PLAN-2857 U6 / TASK-2996) (#1326)

2026-09-10 21:06:40 -04:00

relation_titles_doors_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_titles_import_test.go

fix(store): a relation ref falls back to matching by number only when its prefix names no live collection (BUG-3082) (#1369)

2026-09-14 11:49:35 -04:00

reminder_tick.go

feat: item reminders — the fire-at-an-instant primitive, and one overdue rule for all four surfaces (IDEA-2641, closes #1010) (#1244)

2026-09-04 11:36:11 -04:00

server_test.go

feat(server): a dedicated rate limit for synchronous decision-provider calls (TASK-3141) (#1436)

2026-09-22 13:42:37 -04:00

server.go

fix: a tab's older content write can no longer land over its newer one (BUG-3080) (#1435)

2026-09-22 13:54:24 -04:00

session_identity_test.go

feat(server): armed-session declaration + push delivery filter (PLAN-2613 S1, TASK-2616) (#1130)

2026-08-17 01:59:02 -04:00

session_identity.go

feat(server): armed-session declaration + push delivery filter (PLAN-2613 S1, TASK-2616) (#1130)

2026-08-17 01:59:02 -04:00

session_presence_keys_test.go

feat(redis): namespace every Redis keyspace from one shared config value (BUG-2724)

2026-08-22 01:41:31 +00:00

session_presence_namespace_test.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

session_presence_observer_test.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

session_presence_observer.go

refactor: prune the claim surface, and turn one prose claim into a test

2026-08-22 05:09:29 +00:00

session_presence_redis_round2_test.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

session_presence_redis_test.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

session_presence_redis.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

session_presence_test.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

session_presence.go

fix(push): apply delivery's visibility gate to delivered_sessions (BUG-2725) (#1187)

2026-08-24 09:45:48 -04:00

share_page_collab_isolation_test.go

fix(web): share pages render attachment refs as honest placeholders (BUG-2389) (#1135)

2026-08-17 05:19:25 -04:00

stream_admission_test.go

test: no test request goes through the process-global default transport (BUG-3008, closes BUG-2949) (#1324)

2026-09-10 16:59:58 -04:00

stream_admission.go

fix: five claims the final comment-truth round found (BUG-2724, BUG-2726)

2026-08-22 05:21:01 +00:00

stream_credential_liveness.go

fix(server): a stream ends when the credential that opened it stops being valid (BUG-3007) (#1323)

2026-09-10 16:47:31 -04:00

stream_gap_announcer_test.go

test: close the mutation gaps a coverage audit named (BUG-2730, codex round 18)

2026-08-23 02:32:43 +00:00

stream_gap_announcer.go

revert(sse): remove the ordering barrier; its failure mode is worse than the problem (BUG-2730, codex round 16)

2026-08-23 02:16:35 +00:00

testimageprocessor_libvips_test.go

feat(attachments): ImageProcessor interface + pure-Go impl + thumbnail pipeline (TASK-878) (#295)

2026-04-29 14:35:49 -04:00

testimageprocessor_purego_test.go

feat(attachments): ImageProcessor interface + pure-Go impl + thumbnail pipeline (TASK-878) (#295)

2026-04-29 14:35:49 -04:00

token_reaper_test.go

fix(server): add panic recovery to background sweeper goroutines (BUG-2071) (#865)

2026-07-08 11:58:41 -04:00

token_reaper.go

fix(server): add panic recovery to background sweeper goroutines (BUG-2071) (#865)

2026-07-08 11:58:41 -04:00

token_scopes_test.go

feat(oauth): MCPBearerAuth OAuth integration + public-info (TASK-1027) — closes TASK-951 (#375)

2026-05-02 13:33:53 -04:00

token_workspace_allowlist_test.go

fix(security): scope MCP workspace-global reads by OAuth consent allow-list (BUG-2102) (#935)

2026-07-14 20:37:03 -04:00

token_workspace_consent_scope_test.go

fix(security): scope MCP workspace-global reads by OAuth consent allow-list (BUG-2102) (#935)

2026-07-14 20:37:03 -04:00

twofactor_challenge.go

fix: persist 2FA challenge key and prevent duplicate TOTP verification

2026-04-08 20:30:39 +00:00

username.go

feat: username validation, reserved words, and registration flow

2026-04-10 23:12:59 +00:00

workspace_mint.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

workspace_owner_compensation_test.go

fix(server): a workspace create answers with a usable workspace or with nothing (BUG-2715) (#1376)

2026-09-14 19:43:25 -04:00

workspace_owner_compensation.go

fix(import): a rejected bundle import leaves no restorable husk, and the shared removal reclaims blobs before it purges (BUG-3094) (#1385)

2026-09-15 14:12:20 -04:00

workspace_purge_test.go

feat(store): hard-purge soft-deleted workspaces after 30 days (TASK-1966) (#825)

2026-07-05 22:23:12 -04:00

workspace_purge.go

fix(import): a rejected bundle import leaves no restorable husk, and the shared removal reclaims blobs before it purges (BUG-3094) (#1385)

2026-09-15 14:12:20 -04:00