xarmian 775dd89fdc feat(cloud): add /admin/stripe-event-unmark endpoint (TASK-736 / 1 of 2) (#228) ...

* feat(cloud): add /admin/stripe-event-unmark endpoint (TASK-736 / 1 of 2)

Parent: PLAN-645. Pair with pad-cloud follow-up.

* fix(cloud): add processed_at race protection + audit log per Codex review (round 1)

2026-04-23 20:26:02 -04:00

..

cloud_admin_gate_test.go

feat(cloud): add /admin/stripe-event-unmark endpoint (TASK-736 / 1 of 2) (#228)

2026-04-23 20:26:02 -04:00

decode_json_test.go

fix(server): cap JSON body + header size (TASK-663) (#184)

2026-04-21 22:47:09 -04:00

handlers_2fa_recovery_test.go

feat(auth): bigger recovery codes + per-challenge attempt limit (TASK-658) (#186)

2026-04-21 23:26:42 -04:00

handlers_2fa.go

feat(auth): bigger recovery codes + per-challenge attempt limit (TASK-658) (#186)

2026-04-21 23:26:42 -04:00

handlers_account_test.go

feat(billing): cancel Stripe customer on account delete (TASK-690) (#227)

2026-04-23 19:35:12 -04:00

handlers_account.go

feat(billing): cancel Stripe customer on account delete (TASK-690) (#227)

2026-04-23 19:35:12 -04:00

handlers_activity.go

feat: collection & item grants, guest access, share dialog (PLAN-407 Phase 3) (#87)

2026-04-11 14:46:24 -04:00

handlers_admin_invitations.go

feat: add invitation management panel for admin console (#107)

2026-04-13 23:02:19 -04:00

handlers_admin_users.go

feat: add user detail panel with workspace memberships (#106)

2026-04-13 22:36:14 -04:00

handlers_admin.go

feat: add API token rotation, expiry defaults, and scope enforcement

2026-04-08 18:00:43 +00:00

handlers_agent_roles.go

feat: collection & item grants, guest access, share dialog (PLAN-407 Phase 3) (#87)

2026-04-11 14:46:24 -04:00

handlers_audit.go

fix: address Codex review findings for backup and audit trail

2026-04-06 02:22:23 +00:00

handlers_auth_loopback_test.go

fix(server): read raw TCP peer for loopback check (TASK-662) (#175)

2026-04-21 19:33:47 -04:00

handlers_auth_ratelimit_test.go

feat(auth): per-email login rate limiter (TASK-651) (#178)

2026-04-21 20:52:03 -04:00

handlers_auth_session_rotation_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

handlers_auth_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

handlers_auth.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

handlers_changes.go

feat: collection & item grants, guest access, share dialog (PLAN-407 Phase 3) (#87)

2026-04-11 14:46:24 -04:00

handlers_cli_auth_test.go

fix(server): derive CLI auth URL scheme from r.TLS, gate X-Forwarded-Proto on trusted proxies (TASK-665) (#190)

2026-04-22 09:27:45 -04:00

handlers_cli_auth.go

fix(server): derive CLI auth URL scheme from r.TLS, gate X-Forwarded-Proto on trusted proxies (TASK-665) (#190)

2026-04-22 09:27:45 -04:00

handlers_cloud.go

feat(cloud): add /admin/stripe-event-unmark endpoint (TASK-736 / 1 of 2) (#228)

2026-04-23 20:26:02 -04:00

handlers_collections.go

fix: comprehensive collection visibility enforcement

2026-04-11 02:18:36 +00:00

handlers_comments.go

fix: link comment to activity record to prevent duplicate timeline entries (#114)

2026-04-14 16:21:21 -04:00

handlers_convention_library.go

Initial release

2026-03-26 01:52:36 +00:00

handlers_dashboard_test.go

Rename Phases to Plans, clean up deprecated aliases (#71)

2026-04-07 14:55:23 -04:00

handlers_dashboard.go

feat: tie done-detection to the board group-by field (TASK-604) (#140)

2026-04-17 21:45:55 -04:00

handlers_documents.go

feat: collection & item grants, guest access, share dialog (PLAN-407 Phase 3) (#87)

2026-04-11 14:46:24 -04:00

handlers_events_revalidation_test.go

feat(server): periodically revalidate SSE subscriber membership (TASK-670) (#194)

2026-04-22 13:30:20 -04:00

handlers_events_test.go

feat: implement SSE connection limits

2026-04-06 01:23:34 +00:00

handlers_events.go

feat(server): periodically revalidate SSE subscriber membership (TASK-670) (#194)

2026-04-22 13:30:20 -04:00

handlers_grants.go

feat: collection & item grants, guest access, share dialog (PLAN-407 Phase 3) (#87)

2026-04-11 14:46:24 -04:00

handlers_item_links_test.go

feat(lineage): surface derived closure for TASK-122 (#40)

2026-04-02 10:46:09 -04:00

handlers_item_links.go

feat: collection & item grants, guest access, share dialog (PLAN-407 Phase 3) (#87)

2026-04-11 14:46:24 -04:00

handlers_item_versions.go

feat: collection & item grants, guest access, share dialog (PLAN-407 Phase 3) (#87)

2026-04-11 14:46:24 -04:00

handlers_items_test.go

Rename Phases to Plans, clean up deprecated aliases (#71)

2026-04-07 14:55:23 -04:00

handlers_items.go

feat: tie done-detection to the board group-by field (TASK-604) (#140)

2026-04-17 21:45:55 -04:00

handlers_members.go

fix(auth): bind invitation acceptance to invitee email (TASK-650) (#177)

2026-04-21 20:20:19 -04:00

handlers_playbook_library.go

Initial release

2026-03-26 01:52:36 +00:00

handlers_rbac_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

handlers_role_board.go

feat: collection & item grants, guest access, share dialog (PLAN-407 Phase 3) (#87)

2026-04-11 14:46:24 -04:00

handlers_search.go

feat: add pagination and sorting to search API (#123)

2026-04-14 23:40:23 -04:00

handlers_share_links.go

feat: share links with hardened security, anonymous access, and analytics (#88)

2026-04-11 16:40:18 -04:00

handlers_stars.go

feat: add SSE events for item star/unstar (#121)

2026-04-14 21:03:37 -04:00

handlers_timeline.go

fix: comprehensive collection visibility enforcement

2026-04-11 02:18:36 +00:00

handlers_tokens.go

feat: add cloud infrastructure for hosted Pad (PLAN-427)

2026-04-12 17:43:40 +00:00

handlers_unsubscribe_test.go

fix(server): escape unsubscribe page via html/template + add strict CSP (TASK-657) (#185)

2026-04-21 22:53:27 -04:00

handlers_unsubscribe.go

fix(server): escape unsubscribe page via html/template + add strict CSP (TASK-657) (#185)

2026-04-21 22:53:27 -04:00

handlers_versions.go

feat: collection & item grants, guest access, share dialog (PLAN-407 Phase 3) (#87)

2026-04-11 14:46:24 -04:00

handlers_views.go

feat: collection & item grants, guest access, share dialog (PLAN-407 Phase 3) (#87)

2026-04-11 14:46:24 -04:00

handlers_webhooks.go

feat: add cloud infrastructure for hosted Pad (PLAN-427)

2026-04-12 17:43:40 +00:00

handlers_workspaces.go

fix(server): cap JSON body + header size (TASK-663) (#184)

2026-04-21 22:47:09 -04:00

item_lineage.go

fix: breadcrumbs show parent item path for child items (#94)

2026-04-12 23:53:58 -04:00

metrics_auth_test.go

feat(server): gate /metrics behind loopback + bearer token (TASK-653) (#180)

2026-04-21 21:27:33 -04:00

middleware_auth.go

fix(server): deny-by-default whitelist for API token scopes (TASK-667) (#192)

2026-04-22 11:28:44 -04:00

middleware_csrf_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

middleware_csrf.go

fix(server): constant-time compare for CSRF token validation (TASK-659) (#187)

2026-04-21 23:46:48 -04:00

middleware_logging.go

feat: add readiness probe and structured logging (TASK-161)

2026-04-05 15:02:54 +00:00

middleware_metrics_test.go

feat: add Prometheus metrics and /metrics endpoint

2026-04-06 01:13:40 +00:00

middleware_metrics.go

feat: add Prometheus metrics and /metrics endpoint

2026-04-06 01:13:40 +00:00

middleware_ratelimit_test.go

PHASE-12: Security Hardening for Pad Cloud (#67)

2026-04-05 10:26:00 -04:00

middleware_ratelimit.go

feat(cloud): add /admin/stripe-event-unmark endpoint (TASK-736 / 1 of 2) (#228)

2026-04-23 20:26:02 -04:00

middleware_realip_test.go

fix(server): read raw TCP peer for loopback check (TASK-662) (#175)

2026-04-21 19:33:47 -04:00

middleware_realip.go

fix(server): read raw TCP peer for loopback check (TASK-662) (#175)

2026-04-21 19:33:47 -04:00

middleware_security_test.go

fix(server): reject CORS wildcard when credentials are on (TASK-664) (#188)

2026-04-21 23:59:54 -04:00

middleware_security.go

fix(server): reject CORS wildcard when credentials are on (TASK-664) (#188)

2026-04-21 23:59:54 -04:00

middleware_session_ip_test.go

feat(server): log session IP changes, add optional PAD_IP_CHANGE_ENFORCE=strict (TASK-666) (#191)

2026-04-22 10:43:22 -04:00

password_strength_test.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

password_strength.go

feat(server): zxcvbn password strength check at registration / rotation / reset (TASK-669) (#193)

2026-04-22 12:21:34 -04:00

server_test.go

feat: add cloud infrastructure for hosted Pad (PLAN-427)

2026-04-12 17:43:40 +00:00

server.go

feat(cloud): add /admin/stripe-event-unmark endpoint (TASK-736 / 1 of 2) (#228)

2026-04-23 20:26:02 -04:00

token_scopes_test.go

fix(server): deny-by-default whitelist for API token scopes (TASK-667) (#192)

2026-04-22 11:28:44 -04:00

twofactor_challenge.go

fix: persist 2FA challenge key and prevent duplicate TOTP verification

2026-04-08 20:30:39 +00:00

username.go

feat: username validation, reserved words, and registration flow

2026-04-10 23:12:59 +00:00