xarmian d212eb6503 fix(members): keep a workspace's owner and at least one owner member (#1737) ...

* fix(members): a workspace keeps its owner and at least one owner member (BUG-3355)

Role changes and member removals checked nothing about ownership: an owner
could demote themselves or remove the last owner, leaving zero owners, and
demoting the canonical owner split authority from workspaces.owner_id, which
sets the URL, restore rights and plan limits. The store now refuses, in the
write's own transaction, demoting or removing the canonical owner (409
canonical_owner) and leaving no owner member (409 last_owner), locking the
owner membership rows FOR UPDATE on Postgres. An unknown role is a 400
instead of the CHECK constraint's misleading 404.

* fix(members): anchor the owner invariant on the canonical owner, without row locks (BUG-3355)

Codex r1: locking the other owners' rows FOR UPDATE neither serialized a
concurrent promote-then-demote under READ COMMITTED nor kept a lock order
account deletion agreed with (40P01). The canonical owner is an owner member
in every live workspace and owner_id cannot change, so refusing that one row
keeps an owner whatever runs concurrently; the last-owner count stays as a
best-effort guard for legacy rows. Store test covers all three doors,
including removal without revoking grants.

2026-10-02 17:01:54 -04:00

..

migrations

fix(leases): bind item leases to the claiming account (#1731)

2026-10-02 14:20:58 -04:00

pgmigrations

fix(leases): bind item leases to the claiming account (#1731)

2026-10-02 14:20:58 -04:00

storetest

perf(store): clone Postgres test databases from a migrated template (TASK-2900) (#1260)

2026-09-06 12:02:20 -04:00

testdata

fix(relations): a relation value stored as text reads as text, not as an unavailable target (BUG-3014, ToolSurfaceVersion 0.50) (#1484)

2026-09-23 22:50:47 -04:00

account_deletion_comments_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

account_deletion_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

activities_debounce_miss_race_test.go

fix(store): two concurrent updates by one writer start one activity row, not two (BUG-2777) (#1482)

2026-09-23 21:52:27 -04:00

activities_debounce_race_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

activities_member_cols_test.go

fix(store): activity reads a member can reach no longer return ip_address and user_agent (BUG-3314) (#1679)

2026-09-30 02:20:23 -04:00

activities_paging_test.go

fix(activity): feeds page by a (created_at, id) keyset and break timestamp ties by id (BUG-2781) (#1459)

2026-09-23 09:05:05 -04:00

activities_test.go

fix(history): split activity runs by source, stamp version source, stop dropping field changes (PLAN-2348 U1) (#1685)

2026-09-30 06:50:13 -04:00

activities_user_feed_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

activities.go

fix(history): split activity runs by source, stamp version source, stop dropping field changes (PLAN-2348 U1) (#1685)

2026-09-30 06:50:13 -04:00

activity_id_with_error_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

agent_roles_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

agent_roles.go

feat(store): add workspace-scoped monotonic seq column to items (TASK-1352) (#492)

2026-05-11 12:51:49 -04:00

api_tokens_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

api_tokens.go

fix(store): both workspace mints take slug-then-owner locks in one order (BUG-2808 PR A review r2)

2026-09-16 17:02:37 -04:00

attachment_bidi_backfill_test.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

attachment_bidi_backfill.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

attachments_copy_plan_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

attachments_copy_plan.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

attachments_document_refs_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

attachments_dr15_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

attachments_gc_claim_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

attachments_live_item_test.go

test(store): waitForLockWait's failure names a concurrent writer, not an archival (BUG-2792)

2026-09-16 15:36:49 -04:00

attachments_remap_lost_update_test.go

test(store): pin the workspace lock that keeps the attachment remap from overwriting a concurrent item edit (BUG-2797) (#1446)

2026-09-22 21:47:27 -04:00

attachments_restore_stamp_test.go

fix(documents): restore only a document of the URL's workspace (BUG-3335) (#1724)

2026-10-02 13:15:31 -04:00

attachments_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

attachments.go

feat(attachments): attach binds an unattached upload to an item, so its share renders it (TASK-2247) (#1652)

2026-09-28 19:25:55 -04:00

backlink_content_state_test.go

fix(items): eleven hand-built doors carry the stale-body marker (BUG-3033) (#1344)

2026-09-13 18:34:16 -04:00

backlink_xws_content_state_test.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

backlinks_visibility.go

fix(store): route cross-workspace copy's lock-held reads through the copy transaction (BUG-2409) (#1136)

2026-08-17 08:16:02 -04:00

bench_concurrent_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

bench_oauth_connections_test.go

feat(oauth): per-connection state tables + dual-read introspection gate (TASK-1520) (#581)

2026-05-18 00:03:20 -04:00

bug1791_archived_marker_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

bug2631_scope_collection_test.go

fix(store): a collection gated by ID is queried by ID, so a slug freed and re-taken in between cannot answer for another collection (BUG-2631) (#1535)

2026-09-25 04:25:42 -04:00

bug2717_intx_snapshot_test.go

fix(store): restore and move return their own in-tx snapshot, and bulk member snapshots are read in batches (BUG-2717, BUG-2718) (#1539)

2026-09-25 06:02:57 -04:00

bug2718_member_snapshots_test.go

fix(store): restore and move return their own in-tx snapshot, and bulk member snapshots are read in batches (BUG-2717, BUG-2718) (#1539)

2026-09-25 06:02:57 -04:00

bug2788_entry_id_backfill_test.go

fix(timeline): structured entries get a persisted id instead of a positional one that renumbers when a sibling moves (BUG-2788) (#1540)

2026-09-25 07:10:26 -04:00

bug2806_document_rename_escaped_test.go

fix(documents): the rename cascade decides a link by the wiki grammar, so a legacy title containing | \ or ] keeps its links and no longer rewrites a link to another target (BUG-2806) (#1572)

2026-09-26 10:52:41 -04:00

bug2819_provenance_test.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

bug2896_import_duplicate_keys_test.go

fix(store): a JSON blob that repeats a member is stored collapsed, so SQLite's json_extract and Go read the same value (BUG-2896) (#1547)

2026-09-25 16:24:50 -04:00

bug3028_relation_blank_test.go

fix: a relation's "no target" has one stored form, and required means it names one (BUG-3028) (#1427)

2026-09-22 08:08:15 -04:00

bug3099_delete_account_lock_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

bug3124_content_bearing_test.go

fix(store): content_state counts only op-log rows that can change the document (BUG-3124 unit A) (#1419)

2026-09-21 22:02:48 -04:00

bug3124_watermark_stamp_test.go

feat: a caught-up tab stamps the flush watermark, so viewing an item no longer leaves it pending (BUG-3124 unit B) (#1420)

2026-09-21 22:50:56 -04:00

bug3133_pending_count_test.go

fix: refuse a token-guarded content write over unflushed tab edits (BUG-3133) (#1423)

2026-09-22 00:42:02 -04:00

bug3135_sync_frame_dedupe_test.go

fix(collab): the relay does not store a byte-identical re-sent frame (BUG-3135) (#1425)

2026-09-22 04:15:14 -04:00

bug3136_step2_twin_test.go

fix(store): a step2 answer carrying an update's exact payload is not content (BUG-3136) (#1422)

2026-09-22 01:27:03 -04:00

bug3167_exact_field_filters_test.go

fix(store): item field filters match exactly; the comma OR is explicit and lives only in the list endpoint's query parse (BUG-3167) (#1478)

2026-09-23 20:24:40 -04:00

bug3202_outbox_compare_test.go

fix(fields): field writes keep every number's literal, so an integer above 2^53 is no longer rounded by a write that never named it (BUG-3202) (#1545)

2026-09-25 14:22:09 -04:00

bug3244_set_aside_race_test.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

bug3244_set_aside_test.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

bug3307_workspace_slug_test.go

fix(store): reusing a recently deleted workspace's name no longer 500s, and a create that loses a slug race takes the next one (BUG-3307) (#1689)

2026-09-30 09:10:41 -04:00

bug3327_flush_dedupe_test.go

fix(versions): an applier-path body write leaves a version row (BUG-3327) (#1709)

2026-10-01 23:56:37 -04:00

bug3331_search_failclosed_test.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

bug3355_owner_guard_test.go

fix(members): keep a workspace's owner and at least one owner member (#1737)

2026-10-02 17:01:54 -04:00

cascade_serial_guard_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

cli_auth_sessions.go

fix(auth): unify first-run setup into one browser handoff (BUG-1843) (#739)

2026-06-20 23:51:43 -04:00

collection_traits_backfill_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

collections_relation_rename_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

collections_retarget_multi_relation_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

collections_settings_shape_repair_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

collections_slug_race_pg_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

collections_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

collections.go

fix(store): renaming a multi_select option rewrites the option inside every array that holds it, and a rename map applies simultaneously (BUG-3224) (#1557)

2026-09-26 00:15:15 -04:00

comments_agent_name_test.go

fix(history): split activity runs by source, stamp version source, stop dropping field changes (PLAN-2348 U1) (#1685)

2026-09-30 06:50:13 -04:00

comments_tombstone_test.go

fix(comments): a deleted comment with replies leaves a tombstone (BUG-3252) (#1675)

2026-09-30 00:41:20 -04:00

comments.go

fix(api): body-supplied IDs must name something in the authorized workspace (BUG-3346) (#1728)

2026-10-02 13:34:22 -04:00

connected_apps_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

connected_apps.go

feat(oauth): connected-apps mutation endpoints + edit UI (TASK-1524) (#585)

2026-05-18 08:33:39 -04:00

content_pending_guard.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

content_watermark_stamp.go

fix(editor): opening an item without typing no longer rewrites a body the editor does not reproduce byte for byte (BUG-3197) (#1515)

2026-09-24 16:42:14 -04:00

dashboard_batch_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

decisions_test.go

feat(decision): typed-decision storage and async runner (TASK-3117) (#1417)

2026-09-21 20:46:41 -04:00

decisions.go

fix(comments): a deleted comment with replies leaves a tombstone (BUG-3252) (#1675)

2026-09-30 00:41:20 -04:00

delete_account_late_reference_test.go

fix(store): retry account deletion when a late reference fails its final delete (BUG-3289) (#1655)

2026-09-28 22:07:36 -04:00

delete_account_lockorder_test.go

fix(store): serialise concurrent account deletions on Postgres (BUG-3286) (#1653)

2026-09-28 19:32:50 -04:00

delete_account_writer_lockorder_test.go

fix(store): retry account deletion when a late reference fails its final delete (BUG-3289) (#1655)

2026-09-28 22:07:36 -04:00

dialect_fieldvalue.go

fix(store): field values are compared, counted, sorted and shown by JSON type, so the same query answers the same on SQLite and Postgres (BUG-3221, BUG-3218) (#1555)

2026-09-25 23:33:14 -04:00

dialect_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

dialect.go

fix(store): field values are compared, counted, sorted and shown by JSON type, so the same query answers the same on SQLite and Postgres (BUG-3221, BUG-3218) (#1555)

2026-09-25 23:33:14 -04:00

documents_cascade_lost_update_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

documents_rename_bounds_test.go

fix(documents): bound the rename cascade at the title and at the projected total (BUG-2798, BUG-2796) (#1218)

2026-08-27 22:45:27 -04:00

documents_rename_deadlock_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

documents.go

fix(documents): restore only a document of the URL's workspace (BUG-3335) (#1724)

2026-10-02 13:15:31 -04:00

done_field_test.go

fix(progress): an abandoned child leaves both the done count and the total, and 0/0 renders as no progress (BUG-3195) (#1510)

2026-09-24 11:24:33 -04:00

email_optouts.go

feat: email unsubscribe for non-transactional emails (#96)

2026-04-13 09:14:04 -04:00

email_verification_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

email_verification.go

feat(server): cloud email self-registration + verify-email/resend endpoints (TASK-1938) (#808)

2026-07-04 03:32:48 -04:00

encryption_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

encryption.go

fix(security): encrypt webhook HMAC secrets at rest, mask in responses (BUG-2057) (#915)

2026-07-11 00:10:27 -04:00

event_outbox_bounds_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

event_outbox_scrub_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

event_outbox_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

event_outbox.go

fix(fields): field writes keep every number's literal, so an integer above 2^53 is no longer rounded by a write that never named it (BUG-3202) (#1545)

2026-09-25 14:22:09 -04:00

export_content_state_test.go

fix(export): mark bundle bodies that were stale when written, and refuse the migration that would abandon them (BUG-3032) (#1356)

2026-09-14 01:45:30 -04:00

export_reference_test.go

fix(store): preserve valid item references across workspace import (#1271)

2026-09-07 08:27:58 -04:00

export_soft_deleted_collection_test.go

test(store): tests that capture the global slog default run serially (BUG-3088) (#1492)

2026-09-24 01:39:03 -04:00

export.go

feat(history): version rows carry their writer, line counts and create marker, plus a per-version diff endpoint (PLAN-2348 U2) (#1691)

2026-09-30 10:02:41 -04:00

field_option_rename_test.go

fix(store): renaming a multi_select option rewrites the option inside every array that holds it, and a rename map applies simultaneously (BUG-3224) (#1557)

2026-09-26 00:15:15 -04:00

field_option_rename.go

fix(store): renaming a multi_select option rewrites the option inside every array that holds it, and a rename map applies simultaneously (BUG-3224) (#1557)

2026-09-26 00:15:15 -04:00

field_value_dialect_test.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

grants_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

grants.go

fix(grants): an item grant never opens a deleted collection (BUG-3333) (#1725)

2026-10-02 12:29:03 -04:00

graph.go

feat(server): workspace graph endpoint — nodes + typed edges (TASK-1731) (#699)

2026-06-05 18:12:56 -04:00

import_fts_test.go

fix(store): a workspace import no longer re-inserts every item into items_fts after its commit, and migration 095 rebuilds the index (BUG-2758) (#1507)

2026-09-24 09:16:17 -04:00

import_plan_limit_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

import_workspace_husk_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

invitation_deleted_workspace_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

invitation_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_content_state_test.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

item_lease_test.go

fix(leases): bind item leases to the claiming account (#1731)

2026-10-02 14:20:58 -04:00

item_lease.go

fix(leases): bind item leases to the claiming account (#1731)

2026-10-02 14:20:58 -04:00

item_links_lineage_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_mutation_signal_test.go

feat(server,cli): watches, user-scoped event stream, plugin monitor command — PLAN-2469 Phase 1 (TASK-2533) (#1082)

2026-08-12 15:50:41 -04:00

item_stars_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_stars.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

item_workspace_moves_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_workspace_moves.go

refactor(store): delete two unused item-workspace-move accessors (TASK-2374)

2026-07-31 17:28:05 +00:00

items_changes_cursor_test.go

fix(store): include the cursor's own second in /changes deltas (BUG-2539) (#1086)

2026-08-13 12:18:26 -04:00

items_collab_versions_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_create_tx_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_cross_workspace_copy_pg_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

items_cross_workspace_copy_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

items_cross_workspace_copy.go

fix(fields): field writes keep every number's literal, so an integer above 2^53 is no longer rounded by a write that never named it (BUG-3202) (#1545)

2026-09-25 14:22:09 -04:00

items_empty_assignment_test.go

fix(store): treat empty assignment IDs as clear-to-NULL (BUG-2566) (#1098)

2026-08-14 22:39:39 -04:00

items_fieldpatch_test.go

fix(items): note and decide append server-side under the write lock, so they no longer revert a concurrent field write (BUG-3056) (#1458)

2026-09-23 07:46:45 -04:00

items_preimage_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_rename_bounds_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_rename_escape_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_rename_probe_test.go

fix(store,links): remove both quadratics in the item rename cascade and bound it (BUG-2804) (#1224)

2026-08-31 12:59:14 -04:00

items_rename_slug_prefix_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

items_title_validation_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

items_version_seq_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_versions_page_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_views_jsonb_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

items.go

fix(versions): an applier-path body write leaves a version row (BUG-3327) (#1709)

2026-10-01 23:56:37 -04:00

limits_mint_race_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

limits_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

limits_workspace_mint_race_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

limits.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

link_types.go

feat(server): add cross-workspace copy dry-run preflight endpoint (TASK-2364)

2026-07-30 20:15:00 +00:00

main_test.go

perf(store): clone Postgres test databases from a migrated template (TASK-2900) (#1260)

2026-09-06 12:02:20 -04:00

materialize_flush_internal_test.go

feat(materialize): recover unsaved editor sessions into items.content (TASK-2198 U4) (#1683)

2026-09-30 11:03:07 -04:00

materialize_flush_test.go

fix(materialize): the recovery sweep stops re-queuing an exhausted item every tick (BUG-3325) (#1704)

2026-10-01 20:49:44 -04:00

materialize_flush.go

fix(materialize): the recovery sweep stops re-queuing an exhausted item every tick (BUG-3325) (#1704)

2026-10-01 20:49:44 -04:00

mcp_audit_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

mcp_audit.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

mcp_resume_test.go

feat(mcp): MCP addressing from config; mcp_enabled setting with an env lock (TASK-3302, PLAN-2310 U1) (#1662)

2026-09-29 12:46:03 -04:00

mcp_resume.go

fix(oauth): sweep expired token, code and PKCE rows (BUG-3301) (#1671)

2026-09-29 19:29:17 -04:00

migrated_test.go

fix(db): a finished SQLite→Postgres migration marks its source so the abandoned file refuses writes (BUG-3072, BUG-3077) (#1361)

2026-09-14 08:51:45 -04:00

migrated.go

feat(workspaces): a per-user open set of workspace tabs, stored server-side and filtered on read to the workspaces the caller can see (TASK-3256) (#1619)

2026-09-27 14:52:26 -04:00

migration_095_items_fts_test.go

fix(store): a workspace import no longer re-inserts every item into items_fts after its commit, and migration 095 rebuilds the index (BUG-2758) (#1507)

2026-09-24 09:16:17 -04:00

migration_atomicity_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

migration_guard_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

migration_guard.go

feat(store): guard against schema-ahead downgrade + pre-migration snapshot + upgrade docs (TASK-2006) (#843)

2026-07-07 16:32:20 -04:00

moved_out_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

my_invitations.go

feat: pending invitations in '+', accepted by id through one accept core (TASK-3277) (#1641)

2026-09-28 12:55:03 -04:00

non_terminal_filter_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

nul_native_pg_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

nul_repair_differential_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

nul_trigger_header.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nul_unprotected_baseline.txt

fix(comments): a deleted comment with replies leaves a tombstone (BUG-3252) (#1675)

2026-09-30 00:41:20 -04:00

nulcolumns_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

nulcolumns.go

fix(leases): bind item leases to the claiming account (#1731)

2026-10-02 14:20:58 -04:00

nulguard_bench_test.go

fix(store,server): close codex round 3 — inspect what is actually bound

2026-09-01 14:29:07 +00:00

nulguard_test.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

nulguard.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

nulmigrated_test.go

refactor(store): delete the NUL SUSPECT path, now that the predicate sees a NUL behind a repeated key (BUG-3220) (#1561)

2026-09-26 01:09:03 -04:00

nulmigrated.go

refactor(store): delete the NUL SUSPECT path, now that the predicate sees a NUL behind a repeated key (BUG-3220) (#1561)

2026-09-26 01:09:03 -04:00

nulrepair.go

refactor(store): delete the NUL SUSPECT path, now that the predicate sees a NUL behind a repeated key (BUG-3220) (#1561)

2026-09-26 01:09:03 -04:00

nulscan_test.go

feat(workspaces): a per-user open set of workspace tabs, stored server-side and filtered on read to the workspaces the caller can see (TASK-3256) (#1619)

2026-09-27 14:52:26 -04:00

nulscan.go

feat(workspaces): a per-user open set of workspace tabs, stored server-side and filtered on read to the workspaces the caller can see (TASK-3256) (#1619)

2026-09-27 14:52:26 -04:00

nultriggers_gen_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nultriggers_order_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nultriggers_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nulutf8_test.go

fix(store): the migrate-to-pg preflight refuses a stored value that is not valid UTF-8, and scan-nul / repair-nul report and repair it (BUG-3222) (#1559)

2026-09-26 00:15:21 -04:00

nulutf8.go

fix(store): the migrate-to-pg preflight refuses a stored value that is not valid UTF-8, and scan-nul / repair-nul report and repair it (BUG-3222) (#1559)

2026-09-26 00:15:21 -04:00

oauth_connections_autoadd_test.go

test(store): SQLite interleaving for the auto-add statement (BUG-2792 review r2 P2)

2026-09-16 15:36:49 -04:00

oauth_connections_backfill_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

oauth_connections_backfill.go

fix(store): serialize document renames and stop reading the pool inside transactions (BUG-2778) (#1208)

2026-08-25 22:40:58 -04:00

oauth_connections_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

oauth_connections.go

fix(oauth): the creator-connection auto-add decides on the grant in force when it writes (BUG-2792)

2026-09-16 15:36:49 -04:00

oauth_sweep_test.go

fix(oauth): sweep expired token, code and PKCE rows (BUG-3301) (#1671)

2026-09-29 19:29:17 -04:00

oauth_sweep.go

fix(oauth): sweep expired token, code and PKCE rows (BUG-3301) (#1671)

2026-09-29 19:29:17 -04:00

oauth_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

oauth.go

feat(metrics): MCP + OAuth observability metrics for /mcp (TASK-961) (#398)

2026-05-03 16:37:49 -04:00

parent_link_concurrency_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

password_resets.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

permissions_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

pg_template_test.go

perf(store): clone Postgres test databases from a migrated template (TASK-2900) (#1260)

2026-09-06 12:02:20 -04:00

plan2348_u2_versions_test.go

feat(history): version rows carry their writer, line counts and create marker, plus a per-version diff endpoint (PLAN-2348 U2) (#1691)

2026-09-30 10:02:41 -04:00

plan_source_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

platform_settings.go

feat(decision): instance-admin settings for the decision provider (TASK-3121) (#1426)

2026-09-22 07:34:33 -04:00

pool_read_in_tx_test.go

fix(store): serialize document renames and stop reading the pool inside transactions (BUG-2778) (#1208)

2026-08-25 22:40:58 -04:00

prefix_doors_test.go

fix: one prefix grammar, and the ref parser widens to it (BUG-2943) (#1286)

2026-09-07 17:32:36 -04:00

prefix_ref_parity_test.go

fix: one prefix grammar, and the ref parser widens to it (BUG-2943) (#1286)

2026-09-07 17:32:36 -04:00

reactions.go

fix(comments): a deleted comment with replies leaves a tombstone (BUG-3252) (#1675)

2026-09-30 00:41:20 -04:00

relation_links_backfill.go

feat(relations): materialised reverse index and Referenced-by (PLAN-2857 U5 / TASK-2997) (#1328)

2026-09-11 00:57:47 -04:00

relation_links_cost_test.go

feat(relations): materialised reverse index and Referenced-by (PLAN-2857 U5 / TASK-2997) (#1328)

2026-09-11 00:57:47 -04:00

relation_links_multi_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_links_test.go

feat(relations): materialised reverse index and Referenced-by (PLAN-2857 U5 / TASK-2997) (#1328)

2026-09-11 00:57:47 -04:00

relation_links.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

relation_multi_defaults_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_multi_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_referents_test.go

fix(store): a relation ref falls back to matching by number only when its prefix names no live collection (BUG-3082) (#1369)

2026-09-14 11:49:35 -04:00

relation_referents.go

fix(relations): a wrong_collection reason is judged on the row resolved, never by a second lookup (BUG-3012) (#1490)

2026-09-24 01:01:52 -04:00

relation_stored_as_text_test.go

fix(relations): a relation value stored as text reads as text, not as an unavailable target (BUG-3014, ToolSurfaceVersion 0.50) (#1484)

2026-09-23 22:50:47 -04:00

relation_titles_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_visibility_rungs_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

reminder_workspace_constraint_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

reminders_pg_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

reminders_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

reminders.go

feat(store): composite FK making a reminder's workspace agree with its item's (IDEA-2883) (#1252)

2026-09-05 00:47:16 -04:00

report_layouts_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

report_layouts.go

feat(insights): per-user layout customization + persistence (TASK-1634) (#645)

2026-05-29 15:00:34 -04:00

reports_test.go

fix(insights): a default report leaves out system collections (Conventions, Playbooks), so they stop counting in Insights (BUG-2410, ToolSurfaceVersion 0.49) (#1471)

2026-09-23 18:21:38 -04:00

reports.go

fix(store): field values are compared, counted, sorted and shown by JSON type, so the same query answers the same on SQLite and Postgres (BUG-3221, BUG-3218) (#1555)

2026-09-25 23:33:14 -04:00

restore_plan_limit_test.go

fix(limits): item restore enforces items_per_workspace (BUG-3101)

2026-09-17 11:02:02 -04:00

search_quality_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

search.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

sessions_test.go

fix(members): keep a workspace's owner and at least one owner member (#1737)

2026-10-02 17:01:54 -04:00

sessions.go

fix(account): account deletion needs an interactive, recently signed-in session (BUG-3336) (#1733)

2026-10-02 15:43:57 -04:00

share_links.go

fix(share-links): a link stops resolving while its workspace is deleted (#1726)

2026-10-02 12:41:02 -04:00

slog_capture_serial_test.go

test(store): tests that capture the global slog default run serially (BUG-3088) (#1492)

2026-09-24 01:39:03 -04:00

snapshots.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

status_transitions_backfill.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

status_transitions_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

store_test.go

fix(documents): restore only a document of the URL's workspace (BUG-3335) (#1724)

2026-10-02 13:15:31 -04:00

store.go

fix(invitations): accepting as an existing member is idempotent (BUG-3281) (#1645)

2026-09-28 15:46:57 -04:00

stripe_events_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

stripe_events.go

feat(cloud): add /admin/stripe-event-unmark endpoint (TASK-736 / 1 of 2) (#228)

2026-04-23 20:26:02 -04:00

structured_entry_id_backfill.go

fix(timeline): structured entries get a persisted id instead of a positional one that renumbers when a sibling moves (BUG-2788) (#1540)

2026-09-25 07:10:26 -04:00

tags_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

templates.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

testing_helpers.go

fix(invitations): accepting as an existing member is idempotent (BUG-3281) (#1645)

2026-09-28 15:46:57 -04:00

timeline_pagination_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

totp_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

trait_dedupe_test.go

test(store): tests that capture the global slog default run serially (BUG-3088) (#1492)

2026-09-24 01:39:03 -04:00

trait_dedupe.go

feat(store,server): make collection trait uniqueness a database invariant — de-dup pass + partial unique indexes (TASK-2710) (#1257)

2026-09-05 20:43:43 -04:00

unique_fields_test.go

fix(BUG-2367): moves and copies never carry into a computed field, and a carried unique-field collision is dropped and named instead of 500ing or storing a duplicate (#1514)

2026-09-24 13:12:32 -04:00

unique_fields.go

fix(store): field values are compared, counted, sorted and shown by JSON type, so the same query answers the same on SQLite and Postgres (BUG-3221, BUG-3218) (#1555)

2026-09-25 23:33:14 -04:00

users_email_verified_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

users_metrics_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

users_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

users_totp_step_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

users.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

validation_error.go

fix(server): a refused collection prefix reaches the caller as a 400 naming the rule (BUG-2951) (#1293)

2026-09-08 14:51:21 -04:00

versions.go

fix(store): serialize document renames and stop reading the pool inside transactions (BUG-2778) (#1208)

2026-08-25 22:40:58 -04:00

views.go

feat(store): JSONB NOT NULL hardening on items/views + handler shape validation (IDEA-1486+1488) (#566)

2026-05-16 10:15:59 -04:00

watches_test.go

feat(server,cli): watches, user-scoped event stream, plugin monitor command — PLAN-2469 Phase 1 (TASK-2533) (#1082)

2026-08-12 15:50:41 -04:00

watches.go

feat(server,cli): watches, user-scoped event stream, plugin monitor command — PLAN-2469 Phase 1 (TASK-2533) (#1082)

2026-08-12 15:50:41 -04:00

webhooks_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

webhooks.go

fix(webhooks): whole-workspace access to manage; no delivery for a deleted workspace (#1727)

2026-10-02 13:20:09 -04:00

wiki_links_backfill.go

feat(backlinks): server-side reverse index for [[...]] (Phase 1) (#620)

2026-05-23 23:09:44 -04:00

wiki_links_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

wiki_links_xws_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

wiki_links.go

fix(search): the collection filter resolves exact-first per workspace in scope, so a collection named task is no longer shadowed by tasks (BUG-2659, BUG-2839) (#1576)

2026-09-26 12:20:58 -04:00

workspace_invitation_accept_test.go

fix(invitations): accepting as an existing member is idempotent (BUG-3281) (#1645)

2026-09-28 15:46:57 -04:00

workspace_members_admin_detail_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

workspace_members.go

fix(members): keep a workspace's owner and at least one owner member (#1737)

2026-10-02 17:01:54 -04:00

workspace_purge_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

workspace_purge.go

feat(workspaces): a per-user open set of workspace tabs, stored server-side and filtered on read to the workspaces the caller can see (TASK-3256) (#1619)

2026-09-27 14:52:26 -04:00

workspace_tabs_lockorder_test.go

fix(tabs): order workspace-tab lists by a per-user server revision (BUG-3285) (#1649)

2026-09-28 18:33:09 -04:00

workspace_tabs_revision_test.go

fix(tabs): order workspace-tab lists by a per-user server revision (BUG-3285) (#1649)

2026-09-28 18:33:09 -04:00

workspace_tabs_test.go

fix(tabs): order workspace-tab lists by a per-user server revision (BUG-3285) (#1649)

2026-09-28 18:33:09 -04:00

workspace_tabs.go

fix(store): delete issued grants before tabs in account deletion (BUG-3288) (#1654)

2026-09-28 20:55:28 -04:00

workspaces_source_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

workspaces_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

workspaces.go

fix(store): reusing a recently deleted workspace's name no longer 500s, and a create that loses a slug race takes the next one (BUG-3307) (#1689)

2026-09-30 09:10:41 -04:00

yjs_content_bearing_internal_test.go

fix(store): content_state counts only op-log rows that can change the document (BUG-3124 unit A) (#1419)

2026-09-21 22:02:48 -04:00

yjs_content_bearing.go

fix(store): a step2 answer carrying an update's exact payload is not content (BUG-3136) (#1422)

2026-09-22 01:27:03 -04:00

yjs_set_aside.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

yjs_updates_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

yjs_updates.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00