xarmian dbbbefda75 feat(push): the push dispatcher core and its privacy gates, not yet wired (TASK-3939, part B1) (#2280) ...

* feat(store): record a delivery by id, unclaim without an attempt, re-check holds (TASK-3939 B1)

RecordNotificationsSent is token-free for pending|expired rows (r4-L4),
UnclaimNotifications hands never-tried rows back without an attempt,
HeldNotifications is the pre-send re-check. The claim error drops the row
id (Q8), notify.SendTimeout is exported (Q4), and the store doc says SENT
is the one deliberate exception to settle-under-the-claim (Q5).

Claude-Session: https://claude.ai/code/session_018mVC2RwgKtXviHMayjw2pg

* feat(server): the push dispatcher core and its privacy gates (TASK-3939 B1)

Claims settled rows, runs membership, liveness, visibility, assignment,
comment, settings, agent-activity and device gates on each (a skip carries a
recorded reason and never reaches the gateway), groups survivors per
(user, item), sends one content-free push per live device and settles per
chunk. Lease >= sendTimeout + margin is enforced by the setter, the send
deadline and a per-chunk time check. Not wired into cmd/pad.

Claude-Session: https://claude.ai/code/session_018mVC2RwgKtXviHMayjw2pg

* test(server): dispatcher gates, lease invariant and late-send recording (TASK-3939 B1)

Claude-Session: https://claude.ai/code/session_018mVC2RwgKtXviHMayjw2pg

* test(server): an unknown notification kind is skipped (TASK-3939 B1)

Claude-Session: https://claude.ai/code/session_018mVC2RwgKtXviHMayjw2pg

* fix(server): the dispatcher logs no ids, settles zero-message units, checks the comment's item and has a clock seam (TASK-3939 B1)

C1 reword the store header (the dispatcher is wired in part B2). H1 split
computeWatchAccessVisibility into a log-free core the dispatcher calls; the
handler's wrapper logs exactly as before. H2 settle a unit with no message as
a no_device skip. H4 a mention/comment/reply row's comment must be on the
row's item and workspace. Add the unexported now seam. T3 comment on the nil
user branch.

Claude-Session: https://claude.ai/code/session_01SSofJ73Kn2s3W4TTnjoAfU

* test(store): settle primitives assert attempts, sent_at and span more than one id chunk (TASK-3939 B1)

Claude-Session: https://claude.ai/code/session_01SSofJ73Kn2s3W4TTnjoAfU

* test(server): dispatcher fix round, clock-seam lease tests, every gate error, gate order, log leak, zero-message unit (TASK-3939 B1)

Claude-Session: https://claude.ai/code/session_01SSofJ73Kn2s3W4TTnjoAfU

2026-10-22 00:38:26 -04:00

..

migrations

feat(store): push notification schema and settings store (TASK-3937 part A) (#2265)

2026-10-20 19:06:53 -04:00

pgmigrations

feat(store): push notification schema and settings store (TASK-3937 part A) (#2265)

2026-10-20 19:06:53 -04:00

storetest

fix(test): test temp dirs stop leaking into /tmp (BUG-3412) (#1786)

2026-10-05 04:50:02 -04:00

testdata

fix(relations): a relation value stored as text reads as text, not as an unavailable target (BUG-3014, ToolSurfaceVersion 0.50) (#1484)

2026-09-23 22:50:47 -04:00

account_claim.go

feat(store): enqueue push notifications at four store sites (TASK-3937 part B) (#2268)

2026-10-21 03:31:18 -04:00

account_deletion_comments_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

account_deletion_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

activities_debounce_miss_race_test.go

fix(store): two concurrent updates by one writer start one activity row, not two (BUG-2777) (#1482)

2026-09-23 21:52:27 -04:00

activities_debounce_race_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

activities_member_cols_test.go

fix(store): activity reads a member can reach no longer return ip_address and user_agent (BUG-3314) (#1679)

2026-09-30 02:20:23 -04:00

activities_paging_test.go

fix(activity): feeds page by a (created_at, id) keyset and break timestamp ties by id (BUG-2781) (#1459)

2026-09-23 09:05:05 -04:00

activities_test.go

fix(history): split activity runs by source, stamp version source, stop dropping field changes (PLAN-2348 U1) (#1685)

2026-09-30 06:50:13 -04:00

activities_user_feed_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

activities.go

fix(activity): the feed and dashboard count only rows the caller may see (BUG-3687) (#2169)

2026-10-14 13:00:57 -04:00

activity_id_with_error_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

activity_seq_chain.go

feat(items): content-anchored patch writes on an item with no live editor (PLAN-3578 step 1) (#2055)

2026-10-11 06:20:09 -04:00

agent_roles_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

agent_roles.go

feat(server): reference items stop counting as open work (PLAN-3535 PR 2) (#2000)

2026-10-09 22:31:16 -04:00

api_tokens_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

api_tokens.go

fix(security)!: a workspace-pinned API token is confined to its workspace (BUG-3982) (#2266)

2026-10-21 02:43:37 -04:00

app_attribution.go

fix(account): account export reads run inside the deadline, from one snapshot per workspace (BUG-3659) (#2160)

2026-10-14 10:09:13 -04:00

app_ceiling.go

fix(server): the item-grant filter keeps an app request's read ceiling (BUG-3424) (#1825)

2026-10-06 01:33:24 -04:00

app_delivery.go

feat(apps): per-endpoint webhook delivery state, a per-install rate cap, and a 24 h drop (TASK-3408, SPEC-6 U10c) (#1783)

2026-10-05 00:02:49 -04:00

app_event_dto.go

fix(apps): an installed app learns its workspace from the redeem, an unscoped /me and every webhook (BUG-3416) (#1797)

2026-10-05 09:16:24 -04:00

app_grants.go

fix(oauth): a revoked grant mints nothing, and one refresh token rotates once (BUG-3678) (#2121)

2026-10-13 22:34:03 -04:00

app_item_actions.go

feat(apps): app item actions and context codes (TASK-3414, SPEC-6 U11) (#1784)

2026-10-05 02:29:48 -04:00

app_lifecycle.go

feat(apps): upgrade review and draft activation in Settings → Apps (TASK-3413, SPEC-6 U9b) (#1789)

2026-10-05 06:09:12 -04:00

app_pending_test.go

feat(apps): app install staging: apps/1 manifest, fetch policy, pending reservations, preview (TASK-3397, U8a) (#1770)

2026-10-04 07:19:07 -04:00

app_pending.go

feat(apps): app upgrade: staged preview with a classed diff, one-transaction confirm that re-derives it (TASK-3397, SPEC-6 U8b2) (#1777)

2026-10-04 16:16:29 -04:00

app_principal.go

fix(store): account deletion and workspace purge lock comments root first, and retry a residual deadlock (BUG-3395) (#1792)

2026-10-05 07:01:22 -04:00

app_projection.go

feat(apps): app webhook events name the install that wrote them (TASK-3411, SPEC-6 U10d) (#1781)

2026-10-04 21:36:33 -04:00

app_provision.go

fix(apps): an installed app learns its workspace from the redeem, an unscoped /me and every webhook (BUG-3416) (#1797)

2026-10-05 09:16:24 -04:00

app_upgrade.go

feat(apps): app item actions and context codes (TASK-3414, SPEC-6 U11) (#1784)

2026-10-05 02:29:48 -04:00

app_webhooks.go

feat(apps): admin Apps toggle, paused webhook status, app-name attribution, developer docs (TASK-3980) (#2258)

2026-10-20 10:29:59 -04:00

attachment_bidi_backfill_test.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

attachment_bidi_backfill.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

attachments_copy_plan_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

attachments_copy_plan.go

feat(import): mark rows a workspace import wrote, author not verified (BUG-3379) (#1755)

2026-10-03 05:18:30 -04:00

attachments_document_refs_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

attachments_dr15_test.go

fix(export): an export reads one snapshot, so a concurrent write cannot leave an item without its collection (BUG-3654) (#2122)

2026-10-14 00:25:14 -04:00

attachments_gc_claim_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

attachments_live_item_test.go

test(store): waitForLockWait's failure names a concurrent writer, not an archival (BUG-2792)

2026-09-16 15:36:49 -04:00

attachments_remap_lost_update_test.go

test(store): pin the workspace lock that keeps the attachment remap from overwriting a concurrent item edit (BUG-2797) (#1446)

2026-09-22 21:47:27 -04:00

attachments_restore_stamp_test.go

fix(documents): restore only a document of the URL's workspace (BUG-3335) (#1724)

2026-10-02 13:15:31 -04:00

attachments_test.go

feat(storage): enforce plan storage limits at upload; Pro 1 GB pooled per account, Free 100 MB (TASK-3619) (#2110)

2026-10-12 15:12:36 -04:00

attachments.go

fix(diff): version writers never diff text that is not valid UTF-8 (BUG-3839) (#2200)

2026-10-15 10:24:24 -04:00

backlink_content_state_test.go

fix(items): eleven hand-built doors carry the stale-body marker (BUG-3033) (#1344)

2026-09-13 18:34:16 -04:00

backlink_xws_content_state_test.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

backlinks_visibility.go

fix(access): system collections are ordinary collections for restricted members (TASK-3376) (#1756)

2026-10-03 09:19:10 -04:00

bench_concurrent_test.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

bench_oauth_connections_test.go

feat(oauth): per-connection state tables + dual-read introspection gate (TASK-1520) (#581)

2026-05-18 00:03:20 -04:00

billing_users.go

feat(cloud): GET /admin/billing-users pages the users the reconcile sweep re-syncs (TASK-3564, pad half) (#2042)

2026-10-10 23:11:23 -04:00

bug1791_archived_marker_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

bug2136_reinvite_concurrency_test.go

fix(store): concurrent re-invites no longer report a successful replace as an error (BUG-3460) (#1840)

2026-10-06 21:23:38 -04:00

bug2631_scope_collection_test.go

fix(store): a collection gated by ID is queried by ID, so a slug freed and re-taken in between cannot answer for another collection (BUG-2631) (#1535)

2026-09-25 04:25:42 -04:00

bug2717_intx_snapshot_test.go

fix(store): restore and move return their own in-tx snapshot, and bulk member snapshots are read in batches (BUG-2717, BUG-2718) (#1539)

2026-09-25 06:02:57 -04:00

bug2718_member_snapshots_test.go

fix(store): restore and move return their own in-tx snapshot, and bulk member snapshots are read in batches (BUG-2717, BUG-2718) (#1539)

2026-09-25 06:02:57 -04:00

bug2788_entry_id_backfill_test.go

fix(timeline): structured entries get a persisted id instead of a positional one that renumbers when a sibling moves (BUG-2788) (#1540)

2026-09-25 07:10:26 -04:00

bug2806_document_rename_escaped_test.go

fix(documents): the rename cascade decides a link by the wiki grammar, so a legacy title containing | \ or ] keeps its links and no longer rewrites a link to another target (BUG-2806) (#1572)

2026-09-26 10:52:41 -04:00

bug2819_provenance_test.go

fix(attachments,mcp-audit): record where a stored filename or tool name came from, instead of sentinel strings a caller can choose (BUG-2819) (#1537)

2026-09-25 05:13:05 -04:00

bug2896_import_duplicate_keys_test.go

fix(store): a JSON blob that repeats a member is stored collapsed, so SQLite's json_extract and Go read the same value (BUG-2896) (#1547)

2026-09-25 16:24:50 -04:00

bug3028_relation_blank_test.go

fix: a relation's "no target" has one stored form, and required means it names one (BUG-3028) (#1427)

2026-09-22 08:08:15 -04:00

bug3099_delete_account_lock_test.go

fix(store): a workspace slug is slugified whichever door supplies it; migrate-to-pg keeps existing slugs (BUG-3769) (#2205)

2026-10-15 21:24:48 -04:00

bug3124_content_bearing_test.go

fix(store): content_state counts only op-log rows that can change the document (BUG-3124 unit A) (#1419)

2026-09-21 22:02:48 -04:00

bug3124_watermark_stamp_test.go

feat: a caught-up tab stamps the flush watermark, so viewing an item no longer leaves it pending (BUG-3124 unit B) (#1420)

2026-09-21 22:50:56 -04:00

bug3133_pending_count_test.go

fix: refuse a token-guarded content write over unflushed tab edits (BUG-3133) (#1423)

2026-09-22 00:42:02 -04:00

bug3135_sync_frame_dedupe_test.go

fix(collab): the relay does not store a byte-identical re-sent frame (BUG-3135) (#1425)

2026-09-22 04:15:14 -04:00

bug3136_step2_twin_test.go

fix(collab): stop appending the whole document to the op-log on every reconnect (BUG-3523) (#1965)

2026-10-09 10:42:55 -04:00

bug3167_exact_field_filters_test.go

fix(store): item field filters match exactly; the comma OR is explicit and lives only in the list endpoint's query parse (BUG-3167) (#1478)

2026-09-23 20:24:40 -04:00

bug3202_outbox_compare_test.go

fix(fields): field writes keep every number's literal, so an integer above 2^53 is no longer rounded by a write that never named it (BUG-3202) (#1545)

2026-09-25 14:22:09 -04:00

bug3244_set_aside_race_test.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

bug3244_set_aside_test.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

bug3253_sync_frames_test.go

fix(collab): persist a typed burst's waiting frames in one transaction (BUG-3253) (#1909)

2026-10-08 18:21:18 -04:00

bug3307_workspace_slug_test.go

fix(store): reusing a recently deleted workspace's name no longer 500s, and a create that loses a slug race takes the next one (BUG-3307) (#1689)

2026-09-30 09:10:41 -04:00

bug3327_flush_dedupe_test.go

fix(versions): an applier-path body write leaves a version row (BUG-3327) (#1709)

2026-10-01 23:56:37 -04:00

bug3331_search_failclosed_test.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

bug3344_backlinks_deleted_collection_test.go

fix(store): wiki backlinks exclude sources in soft-deleted collections (BUG-3344) (#1814)

2026-10-05 18:38:46 -04:00

bug3349_active_user_test.go

fix(store): a role change or disable of a vanished user is 404, and the unguarded DisableUser is gone (BUG-3826) (#2196)

2026-10-15 08:23:56 -04:00

bug3355_owner_guard_test.go

fix(members): keep a workspace's owner and at least one owner member (#1737)

2026-10-02 17:01:54 -04:00

bug3356_plan_revision_test.go

fix(billing): a plan past its expiry entitles nothing, and Stripe plan writes are ordered (BUG-3356) (#1753)

2026-10-02 23:32:54 -04:00

bug3357_import_duplicate_ids_test.go

fix(import): refuse duplicate source ids and attach by source id (#1740)

2026-10-02 17:51:55 -04:00

bug3382_password_fence_test.go

fix(auth): a verification link verifies only for its account's session; the mailbox owner can claim (BUG-3382) (#1758)

2026-10-03 09:48:19 -04:00

bug3385_variant_binding_test.go

fix(attachments): a thumbnail takes its original's binding at insert time (BUG-3385) (#1762)

2026-10-03 13:58:22 -04:00

bug3395_comment_lockorder_test.go

fix(store): account deletion and workspace purge lock comments root first, and retry a residual deadlock (BUG-3395) (#1792)

2026-10-05 07:01:22 -04:00

bug3395_retry_test.go

fix(store): account deletion and workspace purge lock comments root first, and retry a residual deadlock (BUG-3395) (#1792)

2026-10-05 07:01:22 -04:00

bug3405_token_readback_test.go

fix(store): an API token mint or rotation reads its row back inside its own transaction, never panics on a concurrent delete (BUG-3405) (#1774)

2026-10-04 13:19:45 -04:00

bug3407_revalidate_test.go

fix(store,server): an item write re-checks its fields under the seq lock when the schema it was validated against has moved (BUG-3407) (#1806)

2026-10-05 12:44:17 -04:00

bug3425_deleted_collection_reads_test.go

fix(store): reads exclude soft-deleted collections' items (BUG-3425) (#1820)

2026-10-05 21:18:56 -04:00

bug3428_deleted_collection_reads_test.go

fix: the access epoch tracks the live collection set; deleted collections leave the local index; the open-children guard ignores them (BUG-3428 phase 2) (#1826)

2026-10-06 07:59:20 -04:00

bug3430_rebind_unsupported_forms_test.go

fix(store): rebindQuery skips SQL comments and quoted identifiers (BUG-3430) (#1822)

2026-10-05 22:54:52 -04:00

bug3434_relationship_reads_test.go

fix(store): relationship reads exclude soft-deleted collections (BUG-3434) (#1828)

2026-10-06 09:59:38 -04:00

bug3447_collection_source_export_test.go

fix: the first-run launchpad follows an onboarding agent live (BUG-3447) (#1837)

2026-10-06 18:31:29 -04:00

bug3561_claim_read_error_test.go

fix(cloud): a failed read of a Stripe event row is not a claim (BUG-3561) (#2083)

2026-10-11 19:31:59 -04:00

bug3561_event_lease_test.go

feat(cloud): a Stripe event marker is a claim with a lease, so a handler that dies does not lose the event (BUG-3561, pad half) (#2043)

2026-10-11 00:02:50 -04:00

bug3591_upgrades_test.go

fix(billing): admin stats count upgrades by when the account became Pro (BUG-3591) (#2069)

2026-10-11 16:25:01 -04:00

bug3627_import_wiki_links_test.go

fix(store): import indexes wiki-links, so an imported workspace has backlinks without waiting for a restart (BUG-3627) (#2111)

2026-10-12 16:03:18 -04:00

bug3632_with_context_test.go

fix(server): the account export's store reads are cancelled at its deadline (BUG-3632) (#2223)

2026-10-17 19:32:06 -04:00

bug3634_inviter_scope_test.go

fix(members): a collection-restricted owner cannot grant beyond its scope through invitations or role changes (BUG-3634) (#2116)

2026-10-13 11:16:07 -04:00

bug3653_copy_storage_test.go

test(storage): force the copy/upload race so the storage lock's test can go red (TASK-3779) (#2135)

2026-10-13 16:54:44 -04:00

bug3655_version_remap_test.go

fix(import): bundle import remaps attachment references in version history, and on a kept partial import (BUG-3655, BUG-3656) (#2156)

2026-10-14 08:05:34 -04:00

bug3658_relation_defaults_import_test.go

fix(import): relation defaults in imported schemas point at the imported items (BUG-3658) (#2159)

2026-10-14 08:53:26 -04:00

bug3663_migration_025_test.go

fix(store): migration 025 rebuilds documents with foreign keys off, so a database with versions can upgrade (BUG-3663) (#2120)

2026-10-13 16:43:10 -04:00

bug3664_legacy_numbering_test.go

fix(store): legacy per-collection item numbering is converted even after migration 056 dropped its marker (BUG-3664) (#2129)

2026-10-13 15:05:11 -04:00

bug3665_forced_move_origin_test.go

fix(items): a move uses the item as it stands under the lock (BUG-3665) (#2165)

2026-10-14 11:08:56 -04:00

bug3667_sequence_subquery_index_test.go

fix(store): index status_transitions(seq) on both backends (BUG-3667) (#2164)

2026-10-14 10:21:01 -04:00

bug3668_credential_lookup_index_test.go

fix(store): index api_tokens.token_hash on both backends (BUG-3668) (#2157)

2026-10-14 08:16:14 -04:00

bug3678_refresh_after_revoke_test.go

fix(oauth): a revoked grant mints nothing, and one refresh token rotates once (BUG-3678) (#2121)

2026-10-13 22:34:03 -04:00

bug3679_reset_links_on_password_change_test.go

fix(auth): a password change kills outstanding reset links (BUG-3679) (#2114)

2026-10-13 10:15:42 -04:00

bug3686_list_search_test.go

fix(store): an item list with a search term keeps include_archived and sort, and the tag filter matches exactly (BUG-3686, BUG-3706) (#2147)

2026-10-14 03:32:30 -04:00

bug3693_reference_shaped_title_test.go

fix(links,store): wiki links stay on their item through a reference-shaped rename and legacy renumbering (BUG-3693, BUG-3750) (#2140)

2026-10-13 19:46:53 -04:00

bug3703_stored_field_keys_test.go

fix(api): item lists are bounded at 1000 with has-more paging, and filter-key probing is bounded (BUG-3704, BUG-3703) (#2143)

2026-10-14 01:07:58 -04:00

bug3704_sort_tiebreak_test.go

fix(api): item lists are bounded at 1000 with has-more paging, and filter-key probing is bounded (BUG-3704, BUG-3703) (#2143)

2026-10-14 01:07:58 -04:00

bug3744_snapshot_behind_content_test.go

fix(collab): a delayed browser snapshot cannot overwrite a body built from more ops (BUG-3744) (#2132)

2026-10-13 21:32:47 -04:00

bug3745_throttled_version_test.go

fix(import): bundle import remaps attachment references in version history, and on a kept partial import (BUG-3655, BUG-3656) (#2156)

2026-10-14 08:05:34 -04:00

bug3747_compaction_generation_test.go

fix(collab): a compaction snapshot covers only its own generation's cursors (BUG-3747) (#2142)

2026-10-13 23:30:26 -04:00

bug3750_renumber_refs_test.go

fix(links,store): wiki links stay on their item through a reference-shaped rename and legacy renumbering (BUG-3693, BUG-3750) (#2140)

2026-10-13 19:46:53 -04:00

bug3751_migration_054_test.go

fix(store): PG migration 054 breaks same-second version ties by id, not ctid (BUG-3751) (#2183)

2026-10-14 22:53:53 -04:00

bug3752_pg_migration_004_test.go

fix(store): Postgres migration 004 drops the old doc_type CHECK before renaming phase-plan rows (BUG-3752) (#2130)

2026-10-13 15:05:17 -04:00

bug3769_workspace_slug_test.go

fix(store): a workspace slug is slugified whichever door supplies it; migrate-to-pg keeps existing slugs (BUG-3769) (#2205)

2026-10-15 21:24:48 -04:00

bug3770_inviter_authority_test.go

fix(invitations): a pending invitation dies with its inviter's authority (BUG-3770) (#2214)

2026-10-16 21:14:10 -04:00

bug3776_link_endpoint_workspace_test.go

test(store): BUG-3776's malformed-row subtest requires A6 in the progress list (TASK-3857) (#2211)

2026-10-16 11:08:12 -04:00

bug3805_secret_backfill_race_test.go

fix(store): startup secret encryption passes compare-and-set on the value read (BUG-3805) (#2177)

2026-10-14 17:49:17 -04:00

bug3806_legacy_adoption_race_test.go

fix(store): legacy built-in adoption re-reads each item under the workspace lock (BUG-3806) (#2179)

2026-10-14 18:46:59 -04:00

bug3811_last_admin_race_test.go

fix(admin): the instance always keeps an active admin; demote, disable and self-delete share one locked guard (BUG-3811) (#2178)

2026-10-14 19:48:28 -04:00

bug3814_version_snapshot_test.go

fix(store): version doors resolve the patch chain from the body read in the same snapshot (BUG-3814) (#2190)

2026-10-15 03:51:15 -04:00

bug3816_unlink_last_method_test.go

fix(store): an unlink re-checks that a sign-in method remains under the account lock (BUG-3816) (#2191)

2026-10-15 17:23:24 -04:00

bug3817_resend_invitation_test.go

fix(invitations): a pending invitation dies with its inviter's authority (BUG-3770) (#2214)

2026-10-16 21:14:10 -04:00

bug3820_version_body_hash_test.go

fix(store): version rows record their body's hash, and the walk refuses what it cannot verify (BUG-3820) (#2192)

2026-10-15 07:20:42 -04:00

bug3825_import_unique_values_test.go

fix(store): import drops a unique value an earlier archive item holds, and says so (BUG-3825) (#2194)

2026-10-15 11:24:31 -04:00

bug3826_last_admin_followups_test.go

fix(store): a role change or disable of a vanished user is 404, and the unguarded DisableUser is gone (BUG-3826) (#2196)

2026-10-15 08:23:56 -04:00

bug3833_document_version_snapshot_test.go

fix(store): legacy document version doors resolve from the body read in the same snapshot (BUG-3833) (#2198)

2026-10-15 12:22:37 -04:00

bug3839_broken_chain_test.go

fix(diff): version writers never diff text that is not valid UTF-8 (BUG-3839) (#2200)

2026-10-15 10:24:24 -04:00

bug3839_invalid_utf8_version_test.go

fix(diff): version writers never diff text that is not valid UTF-8 (BUG-3839) (#2200)

2026-10-15 10:24:24 -04:00

bug3870_member_dead_invitation_test.go

fix(invitations): a member accepting a dead invitation is already in, not told to get re-invited (BUG-3870) (#2217)

2026-10-17 11:32:56 -04:00

bug3958_migrated_census_test.go

fix(store): refuse writes to read cursors and app installs after migrate-to-pg, and classify every table (BUG-3958) (#2257)

2026-10-20 12:58:18 -04:00

bug3985_settings_not_object_test.go

fix(store): collection settings must be a JSON object at every write door (BUG-3985) (#2260)

2026-10-20 18:11:13 -04:00

bug4019_totp_lazy_decrypt_test.go

fix(store): a user read no longer decrypts the TOTP secret; only the second-factor check does (BUG-4019) (#2275)

2026-10-21 15:57:29 -04:00

builtin_legacy.go

fix(store): legacy built-in adoption re-reads each item under the workspace lock (BUG-3806) (#2179)

2026-10-14 18:46:59 -04:00

builtin_origin_test.go

feat: built-ins record their origin; an item made from one can be offered Pad's current text (TASK-3462 U1+U2) (#1852)

2026-10-07 06:40:06 -04:00

builtin_origin.go

feat: built-ins record their origin; an item made from one can be offered Pad's current text (TASK-3462 U1+U2) (#1852)

2026-10-07 06:40:06 -04:00

cascade_serial_guard_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

catch_up.go

feat(server): per-user catch-up digest and read cursor (TASK-3615, PR A) (#2219)

2026-10-18 12:12:51 -04:00

cli_auth_sessions.go

feat(auth): Deny and request context on the CLI sign-in approval page (TASK-2253) (#1943)

2026-10-09 05:04:19 -04:00

collection_traits_backfill_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

collections_archive_test.go

feat: archived collections can be listed, restored and undone; the archive confirm shows the count (TASK-2189) (#1874)

2026-10-08 03:59:26 -04:00

collections_archive.go

feat: archived collections can be listed, restored and undone; the archive confirm shows the count (TASK-2189) (#1874)

2026-10-08 03:59:26 -04:00

collections_relation_rename_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

collections_retarget_multi_relation_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

collections_settings_shape_repair_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

collections_slug_race_pg_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

collections_test.go

feat: a collection can be reference material, not work (PLAN-3535 PR 1) (#1996)

2026-10-09 21:47:50 -04:00

collections.go

fix(store): collection settings must be a JSON object at every write door (BUG-3985) (#2260)

2026-10-20 18:11:13 -04:00

comment_mentions_backfill.go

feat(store): @mentions enqueue a push notification (TASK-3946) (#2272)

2026-10-21 10:12:15 -04:00

comment_mentions.go

feat(store): @mentions enqueue a push notification (TASK-3946) (#2272)

2026-10-21 10:12:15 -04:00

comments_agent_name_test.go

fix(history): split activity runs by source, stamp version source, stop dropping field changes (PLAN-2348 U1) (#1685)

2026-09-30 06:50:13 -04:00

comments_tombstone_test.go

fix(comments): a deleted comment with replies leaves a tombstone (BUG-3252) (#1675)

2026-09-30 00:41:20 -04:00

comments.go

feat(store): @mentions enqueue a push notification (TASK-3946) (#2272)

2026-10-21 10:12:15 -04:00

connected_apps_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

connected_apps.go

fix(oauth): a revoked grant mints nothing, and one refresh token rotates once (BUG-3678) (#2121)

2026-10-13 22:34:03 -04:00

content_pending_guard.go

fix(collab): a schema-version rebuild sets unflushed edits aside instead of deleting them (BUG-3244 A) (#1598)

2026-09-27 05:40:55 -04:00

content_watermark_stamp.go

feat(collab): count and log watermark stamps that cover content-bearing rows (TASK-3541 step 0) (#2023)

2026-10-10 11:54:42 -04:00

convention_role_backfill_test.go

feat(store): copy a convention's role field into its role column at startup (PLAN-3598) (#2092)

2026-10-11 22:17:03 -04:00

convention_role_backfill.go

feat(store): copy a convention's role field into its role column at startup (PLAN-3598) (#2092)

2026-10-11 22:17:03 -04:00

dashboard_batch_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

deadlock_retry.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

decisions_debounce_test.go

feat(decision): debounce decision re-asks with decision_jobs.not_before (TASK-3916) (#2230)

2026-10-19 04:08:03 -04:00

decisions_owe_test.go

feat(decision): effort, effort_medium and high_stakes on the attention set, staged; drain-paced backfill (TASK-3921) (#2236)

2026-10-19 13:05:05 -04:00

decisions_test.go

fix(store): decision last_error is sanitised and cut at a rune boundary (BUG-4018) (#2277)

2026-10-21 18:22:54 -04:00

decisions.go

fix(store): decision last_error is sanitised and cut at a rune boundary (BUG-4018) (#2277)

2026-10-21 18:22:54 -04:00

delete_account_late_reference_test.go

fix(store): retry account deletion when a late reference fails its final delete (BUG-3289) (#1655)

2026-09-28 22:07:36 -04:00

delete_account_lockorder_test.go

fix(store): serialise concurrent account deletions on Postgres (BUG-3286) (#1653)

2026-09-28 19:32:50 -04:00

delete_account_writer_lockorder_test.go

fix(store): retry account deletion when a late reference fails its final delete (BUG-3289) (#1655)

2026-09-28 22:07:36 -04:00

dialect_fieldvalue.go

feat(apps): app install staging: apps/1 manifest, fetch policy, pending reservations, preview (TASK-3397, U8a) (#1770)

2026-10-04 07:19:07 -04:00

dialect_test.go

fix(store): rebindQuery skips SQL comments and quoted identifiers (BUG-3430) (#1822)

2026-10-05 22:54:52 -04:00

dialect.go

fix(store): an item list with a search term keeps include_archived and sort, and the tag filter matches exactly (BUG-3686, BUG-3706) (#2147)

2026-10-14 03:32:30 -04:00

documents_cascade_lost_update_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

documents_rename_bounds_test.go

fix(documents): bound the rename cascade at the title and at the projected total (BUG-2798, BUG-2796) (#1218)

2026-08-27 22:45:27 -04:00

documents_rename_deadlock_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

documents.go

fix(diff): version writers never diff text that is not valid UTF-8 (BUG-3839) (#2200)

2026-10-15 10:24:24 -04:00

done_field_test.go

fix(store): search, tags, children and progress exclude soft-deleted collections (BUG-3428, phase 1) (#1824)

2026-10-06 01:04:29 -04:00

email_optouts.go

feat: email unsubscribe for non-transactional emails (#96)

2026-04-13 09:14:04 -04:00

email_verification_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

email_verification.go

fix(store): every write that reads its row back does so inside its transaction (TASK-3406) (#1805)

2026-10-05 11:27:18 -04:00

encryption_test.go

fix(store): a user read no longer decrypts the TOTP secret; only the second-factor check does (BUG-4019) (#2275)

2026-10-21 15:57:29 -04:00

encryption.go

fix(store): startup secret encryption passes compare-and-set on the value read (BUG-3805) (#2177)

2026-10-14 17:49:17 -04:00

event_outbox_bounds_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

event_outbox_scrub_test.go

fix(store): account deletion reads the owned workspaces inside its transaction under the owner lock, so a workspace minted or unjoined in the window no longer survives its deleted owner (BUG-3099) (#1567)

2026-09-26 09:47:46 -04:00

event_outbox_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

event_outbox.go

feat(webhooks): owner webhooks keep per-endpoint delivery state; 408/425/429 are retried (TASK-3409) (#1809)

2026-10-05 14:44:50 -04:00

export_content_state_test.go

fix(export): mark bundle bodies that were stale when written, and refuse the migration that would abandon them (BUG-3032) (#1356)

2026-09-14 01:45:30 -04:00

export_reference_test.go

fix(store): preserve valid item references across workspace import (#1271)

2026-09-07 08:27:58 -04:00

export_snapshot_test.go

fix(export): an export reads one snapshot, so a concurrent write cannot leave an item without its collection (BUG-3654) (#2122)

2026-10-14 00:25:14 -04:00

export_soft_deleted_collection_test.go

fix(store): reads exclude soft-deleted collections' items (BUG-3425) (#1820)

2026-10-05 21:18:56 -04:00

export.go

feat(store): @mention index on comments (TASK-3917) (#2243)

2026-10-19 23:27:16 -04:00

fenced_attachments.go

fix(apps): an app upload is charged against the plan's storage cap (BUG-3653 part B) (#2119)

2026-10-13 15:44:44 -04:00

fenced_comments.go

feat(store): @mentions enqueue a push notification (TASK-3946) (#2272)

2026-10-21 10:12:15 -04:00

fenced_items.go

fix(store): version rows record their body's hash, and the walk refuses what it cannot verify (BUG-3820) (#2192)

2026-10-15 07:20:42 -04:00

fenced_tx_test.go

feat(apps): app attachment routes: item-scoped upload, metadata, and a streamed download re-admitted before its first byte (TASK-3401, SPEC-6 U6c) (#1776)

2026-10-04 15:14:27 -04:00

fenced_tx.go

fix(apps): an app upload is charged against the plan's storage cap (BUG-3653 part B) (#2119)

2026-10-13 15:44:44 -04:00

field_option_rename_test.go

fix(store): renaming a multi_select option rewrites the option inside every array that holds it, and a rename map applies simultaneously (BUG-3224) (#1557)

2026-09-26 00:15:15 -04:00

field_option_rename.go

fix(store): renaming a multi_select option rewrites the option inside every array that holds it, and a rename map applies simultaneously (BUG-3224) (#1557)

2026-09-26 00:15:15 -04:00

field_usage.go

feat: schema edits say what they do to items; removing an option is never a rename (TASK-2188, TASK-2187) (#1877)

2026-10-08 08:29:44 -04:00

field_value_dialect_test.go

fix(search): scope workspace search to visible items (#1723)

2026-10-02 11:18:07 -04:00

grants_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

grants.go

fix(server): the account export's store reads are cancelled at its deadline (BUG-3632) (#2223)

2026-10-17 19:32:06 -04:00

graph.go

fix(store): a link row counts only when both endpoints live in its workspace (BUG-3776) (#2208)

2026-10-16 06:13:11 -04:00

idempotency.go

feat(push): idempotency keys for push, and the monitor drops a re-published push (TASK-3585) (#2071)

2026-10-11 16:44:56 -04:00

import_fts_test.go

fix(store): a workspace import no longer re-inserts every item into items_fts after its commit, and migration 095 rebuilds the index (BUG-2758) (#1507)

2026-09-24 09:16:17 -04:00

import_plan_limit_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

import_unique.go

fix(store): import drops a unique value an earlier archive item holds, and says so (BUG-3825) (#2194)

2026-10-15 11:24:31 -04:00

import_workspace_husk_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

install_clients.go

fix(server): the upgrade diff states what a widened delegated access grants (BUG-3427) (#1817)

2026-10-05 19:45:01 -04:00

instance_mode.go

fix(server): a non-cloud boot no longer makes a Pad Cloud database's free users unlimited (TASK-3551) (#2028)

2026-10-10 17:26:08 -04:00

invitation_deleted_workspace_test.go

fix(admin): the instance always keeps an active admin; demote, disable and self-delete share one locked guard (BUG-3811) (#2178)

2026-10-14 19:48:28 -04:00

invitation_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_content_state_test.go

fix(api): /changes is bounded at 1000 and continues by a cursor on the write order (BUG-3791) (#2151)

2026-10-14 03:34:15 -04:00

item_lease_test.go

feat(lease): an opaque worker id holds item leases, so two agents under one name do not share one (TASK-3613) (#2102)

2026-10-12 09:24:33 -04:00

item_lease.go

feat(lease): an opaque worker id holds item leases, so two agents under one name do not share one (TASK-3613) (#2102)

2026-10-12 09:24:33 -04:00

item_links_lineage_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_mutation_signal_test.go

feat(server,cli): watches, user-scoped event stream, plugin monitor command — PLAN-2469 Phase 1 (TASK-2533) (#1082)

2026-08-12 15:50:41 -04:00

item_patches.go

feat(items): pad item patch --undo, anchored on each edit's context (PLAN-3578 step 3) (#2058)

2026-10-11 09:28:08 -04:00

item_sort_order.go

feat: bulk sort_order: one all-or-nothing request per lane reorder, one activity row per item collapsed per batch (TASK-3517) (#1933)

2026-10-09 02:04:52 -04:00

item_stars_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_stars.go

fix(api): children, starred and shared-collection lists are bounded at 1000 and paged; MCP starred caps at 300 (BUG-3789, BUG-3790, BUG-3792) (#2153)

2026-10-14 05:35:34 -04:00

item_workspace_moves_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

item_workspace_moves.go

refactor(store): delete two unused item-workspace-move accessors (TASK-2374)

2026-07-31 17:28:05 +00:00

items_changes_cursor_test.go

fix(api): /changes is bounded at 1000 and continues by a cursor on the write order (BUG-3791) (#2151)

2026-10-14 03:34:15 -04:00

items_collab_versions_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_convention_mirror_test.go

fix: a convention's stored metadata copy follows its ordinary fields (TASK-2257) (#1964)

2026-10-09 09:38:42 -04:00

items_convention_mirror.go

fix: a convention's stored metadata copy follows its ordinary fields (TASK-2257) (#1964)

2026-10-09 09:38:42 -04:00

items_create_tx_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_cross_workspace_copy_pg_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

items_cross_workspace_copy_test.go

feat(import): mark rows a workspace import wrote, author not verified (BUG-3379) (#1755)

2026-10-03 05:18:30 -04:00

items_cross_workspace_copy.go

test(storage): force the copy/upload race so the storage lock's test can go red (TASK-3779) (#2135)

2026-10-13 16:54:44 -04:00

items_empty_assignment_test.go

fix(store): treat empty assignment IDs as clear-to-NULL (BUG-2566) (#1098)

2026-08-14 22:39:39 -04:00

items_fieldpatch_test.go

fix(items): note and decide append server-side under the write lock, so they no longer revert a concurrent field write (BUG-3056) (#1458)

2026-09-23 07:46:45 -04:00

items_preimage_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_rename_bounds_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_rename_escape_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_rename_probe_test.go

fix(store,links): remove both quadratics in the item rename cascade and bound it (BUG-2804) (#1224)

2026-08-31 12:59:14 -04:00

items_rename_slug_prefix_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_revalidate.go

fix(store,server): an item write re-checks its fields under the seq lock when the schema it was validated against has moved (BUG-3407) (#1806)

2026-10-05 12:44:17 -04:00

items_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

items_title_validation_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

items_version_seq_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_versions_page_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

items_views_jsonb_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

items.go

feat(needs): store reads for importance and simplicity scoring (TASK-3959, part 1a) (#2271)

2026-10-21 08:02:26 -04:00

limits_mint_race_test.go

fix(store): a workspace slug is slugified whichever door supplies it; migrate-to-pg keeps existing slugs (BUG-3769) (#2205)

2026-10-15 21:24:48 -04:00

limits_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

limits_workspace_mint_race_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

limits.go

fix(store): a user read no longer decrypts the TOTP secret; only the second-factor check does (BUG-4019) (#2275)

2026-10-21 15:57:29 -04:00

link_types.go

feat(server): add cross-workspace copy dry-run preflight endpoint (TASK-2364)

2026-07-30 20:15:00 +00:00

main_test.go

perf(store): clone Postgres test databases from a migrated template (TASK-2900) (#1260)

2026-09-06 12:02:20 -04:00

materialize_flush_internal_test.go

feat(materialize): recover unsaved editor sessions into items.content (TASK-2198 U4) (#1683)

2026-09-30 11:03:07 -04:00

materialize_flush_test.go

fix(materialize): the recovery sweep stops re-queuing an exhausted item every tick (BUG-3325) (#1704)

2026-10-01 20:49:44 -04:00

materialize_flush.go

fix(collab): a delayed browser snapshot cannot overwrite a body built from more ops (BUG-3744) (#2132)

2026-10-13 21:32:47 -04:00

mcp_audit_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

mcp_audit.go

feat(admin): the MCP audit page names users and connections instead of truncated UUIDs (TASK-2255 C110) (#2032)

2026-10-10 18:32:29 -04:00

mcp_resume_test.go

feat(mcp): MCP addressing from config; mcp_enabled setting with an env lock (TASK-3302, PLAN-2310 U1) (#1662)

2026-09-29 12:46:03 -04:00

mcp_resume.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

migrated_test.go

feat(needs): per-user dismiss/defer storage and the needs/snooze routes (TASK-3918) (#2231)

2026-10-19 07:02:00 -04:00

migrated.go

feat(store): enqueue push notifications at four store sites (TASK-3937 part B) (#2268)

2026-10-21 03:31:18 -04:00

migration_095_items_fts_test.go

fix(store): a workspace import no longer re-inserts every item into items_fts after its commit, and migration 095 rebuilds the index (BUG-2758) (#1507)

2026-09-24 09:16:17 -04:00

migration_atomicity_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

migration_guard_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

migration_guard.go

feat(store): guard against schema-ahead downgrade + pre-migration snapshot + upgrade docs (TASK-2006) (#843)

2026-07-07 16:32:20 -04:00

moved_out_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

my_invitations.go

fix(invitations): a pending invitation dies with its inviter's authority (BUG-3770) (#2214)

2026-10-16 21:14:10 -04:00

needs_read_test.go

feat(needs): GET /me/needs, the cross-workspace needs-you inbox and its router (TASK-3920) (#2253)

2026-10-20 15:23:54 -04:00

needs_read.go

feat(needs): GET /me/needs, the cross-workspace needs-you inbox and its router (TASK-3920) (#2253)

2026-10-20 15:23:54 -04:00

needs_scoring_test.go

feat(needs): store reads for importance and simplicity scoring (TASK-3959, part 1a) (#2271)

2026-10-21 08:02:26 -04:00

needs_scoring.go

feat(needs): store reads for importance and simplicity scoring (TASK-3959, part 1a) (#2271)

2026-10-21 08:02:26 -04:00

needs_snooze_test.go

feat(needs): per-user dismiss/defer storage and the needs/snooze routes (TASK-3918) (#2231)

2026-10-19 07:02:00 -04:00

needs_snooze.go

feat(needs): per-user dismiss/defer storage and the needs/snooze routes (TASK-3918) (#2231)

2026-10-19 07:02:00 -04:00

non_terminal_filter_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

notification_settings_test.go

feat(store): push notification schema and settings store (TASK-3937 part A) (#2265)

2026-10-20 19:06:53 -04:00

notification_settings.go

feat(store): push notification schema and settings store (TASK-3937 part A) (#2265)

2026-10-20 19:06:53 -04:00

notifications_test.go

feat(store): enqueue push notifications at four store sites (TASK-3937 part B) (#2268)

2026-10-21 03:31:18 -04:00

notifications.go

feat(push): the push dispatcher core and its privacy gates, not yet wired (TASK-3939, part B1) (#2280)

2026-10-22 00:38:26 -04:00

nul_native_pg_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

nul_repair_differential_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

nul_trigger_header.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nul_unprotected_baseline.txt

fix(store): version rows record their body's hash, and the walk refuses what it cannot verify (BUG-3820) (#2192)

2026-10-15 07:20:42 -04:00

nulcolumns_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

nulcolumns.go

fix(store): decision last_error is sanitised and cut at a rune boundary (BUG-4018) (#2277)

2026-10-21 18:22:54 -04:00

nulguard_bench_test.go

fix(store,server): close codex round 3 — inspect what is actually bound

2026-09-01 14:29:07 +00:00

nulguard_test.go

feat(apps): app install staging: apps/1 manifest, fetch policy, pending reservations, preview (TASK-3397, U8a) (#1770)

2026-10-04 07:19:07 -04:00

nulguard.go

feat(appstore): FencedTx, the appstore skeleton, and the boundary and write-capture guards (TASK-3388) (#1764)

2026-10-03 16:02:18 -04:00

nulmigrated_test.go

feat(verify): verification evidence tied to a revision, slice 1 (TASK-3617) (#2228)

2026-10-19 10:25:43 -04:00

nulmigrated.go

feat(verify): verification evidence tied to a revision, slice 1 (TASK-3617) (#2228)

2026-10-19 10:25:43 -04:00

nulrepair.go

refactor(store): delete the NUL SUSPECT path, now that the predicate sees a NUL behind a repeated key (BUG-3220) (#1561)

2026-09-26 01:09:03 -04:00

nulscan_test.go

feat(store): push notification schema and settings store (TASK-3937 part A) (#2265)

2026-10-20 19:06:53 -04:00

nulscan.go

feat(store): push notification schema and settings store (TASK-3937 part A) (#2265)

2026-10-20 19:06:53 -04:00

nultriggers_gen_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nultriggers_order_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nultriggers_test.go

fix(store): NUL Layer B covers columns added after 084 through later generated trigger files (BUG-3108) (#1506)

2026-09-24 08:13:59 -04:00

nulutf8_test.go

fix(store): the migrate-to-pg preflight refuses a stored value that is not valid UTF-8, and scan-nul / repair-nul report and repair it (BUG-3222) (#1559)

2026-09-26 00:15:21 -04:00

nulutf8.go

fix(store): the migrate-to-pg preflight refuses a stored value that is not valid UTF-8, and scan-nul / repair-nul report and repair it (BUG-3222) (#1559)

2026-09-26 00:15:21 -04:00

oauth_connections_autoadd_test.go

test(store): SQLite interleaving for the auto-add statement (BUG-2792 review r2 P2)

2026-09-16 15:36:49 -04:00

oauth_connections_backfill_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

oauth_connections_backfill.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

oauth_connections_narrow_test.go

fix(oauth): narrow current-only wildcard connections to their current workspaces (BUG-3338) (#1752)

2026-10-02 23:32:42 -04:00

oauth_connections_narrow.go

fix(oauth): narrow current-only wildcard connections to their current workspaces (BUG-3338) (#1752)

2026-10-02 23:32:42 -04:00

oauth_connections_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

oauth_connections.go

fix(oauth): include_future_workspaces is no longer a control; limit to current is an action (BUG-3338) (#1751)

2026-10-02 22:41:29 -04:00

oauth_identities.go

fix(auth): a social sign-in without a provider subject is refused on an account with one bound (BUG-3671) [deploy BEFORE pad-cloud #80] (#2144)

2026-10-14 02:02:41 -04:00

oauth_sweep_test.go

fix(oauth): sweep expired token, code and PKCE rows (BUG-3301) (#1671)

2026-09-29 19:29:17 -04:00

oauth_sweep.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

oauth_test.go

fix(auth): disabling an account ends every credential, and a disabled account gets no new one (BUG-3349) (#1741)

2026-10-02 18:34:56 -04:00

oauth.go

fix(oauth): a revoked grant mints nothing, and one refresh token rotates once (BUG-3678) (#2121)

2026-10-13 22:34:03 -04:00

parent_link_concurrency_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

password_resets.go

feat(auth): the bot principal for installed apps: users.kind, kind gates on every sign-in door and credential, people-only counts (TASK-3392) (#1766)

2026-10-03 19:41:18 -04:00

permissions_test.go

fix(access): system collections are ordinary collections for restricted members (TASK-3376) (#1756)

2026-10-03 09:19:10 -04:00

pg_template_test.go

perf(store): clone Postgres test databases from a migrated template (TASK-2900) (#1260)

2026-09-06 12:02:20 -04:00

plan2348_u2_versions_test.go

feat(history): version rows carry their writer, line counts and create marker, plus a per-version diff endpoint (PLAN-2348 U2) (#1691)

2026-09-30 10:02:41 -04:00

plan3535_admin_open_test.go

feat(server): reference items stop counting as open work (PLAN-3535 PR 2) (#2000)

2026-10-09 22:31:16 -04:00

plan3535_import_test.go

feat(server): reference items stop counting as open work (PLAN-3535 PR 2) (#2000)

2026-10-09 22:31:16 -04:00

plan3535_tracks_work_test.go

feat: a collection can be reference material, not work (PLAN-3535 PR 1) (#1996)

2026-10-09 21:47:50 -04:00

plan3578_item_patches_test.go

feat(items): pad item patch --undo, anchored on each edit's context (PLAN-3578 step 3) (#2058)

2026-10-11 09:28:08 -04:00

plan3578_seq_chain_test.go

feat(items): content-anchored patch writes on an item with no live editor (PLAN-3578 step 1) (#2055)

2026-10-11 06:20:09 -04:00

plan3578_seq_site_guard_test.go

feat(store): copy a convention's role field into its role column at startup (PLAN-3598) (#2092)

2026-10-11 22:17:03 -04:00

plan_source_test.go

feat(billing): record plan_source; a lowering applies only from the source that set the plan (TASK-3295) (#1657)

2026-09-29 10:14:38 -04:00

platform_settings.go

feat(decision): instance-admin settings for the decision provider (TASK-3121) (#1426)

2026-09-22 07:34:33 -04:00

pool_read_in_tx_test.go

fix(store): serialize document renames and stop reading the pool inside transactions (BUG-2778) (#1208)

2026-08-25 22:40:58 -04:00

prefix_doors_test.go

fix: one prefix grammar, and the ref parser widens to it (BUG-2943) (#1286)

2026-09-07 17:32:36 -04:00

prefix_ref_parity_test.go

fix: one prefix grammar, and the ref parser widens to it (BUG-2943) (#1286)

2026-09-07 17:32:36 -04:00

push_devices_test.go

feat(server): push device registration and notification settings API (TASK-3938) (#2269)

2026-10-21 06:49:54 -04:00

push_devices.go

feat(server): push device registration and notification settings API (TASK-3938) (#2269)

2026-10-21 06:49:54 -04:00

push_dispatch_settle.go

feat(push): the push dispatcher core and its privacy gates, not yet wired (TASK-3939, part B1) (#2280)

2026-10-22 00:38:26 -04:00

push_dispatch.go

feat(push): the push dispatcher core and its privacy gates, not yet wired (TASK-3939, part B1) (#2280)

2026-10-22 00:38:26 -04:00

reactions.go

fix(store): every write that reads its row back does so inside its transaction (TASK-3406) (#1805)

2026-10-05 11:27:18 -04:00

read_cursors.go

feat(server): per-user catch-up digest and read cursor (TASK-3615, PR A) (#2219)

2026-10-18 12:12:51 -04:00

relation_links_backfill.go

feat(relations): materialised reverse index and Referenced-by (PLAN-2857 U5 / TASK-2997) (#1328)

2026-09-11 00:57:47 -04:00

relation_links_cost_test.go

feat(relations): materialised reverse index and Referenced-by (PLAN-2857 U5 / TASK-2997) (#1328)

2026-09-11 00:57:47 -04:00

relation_links_multi_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_links_test.go

feat(relations): materialised reverse index and Referenced-by (PLAN-2857 U5 / TASK-2997) (#1328)

2026-09-11 00:57:47 -04:00

relation_links.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

relation_multi_defaults_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_multi_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_referents_test.go

fix(store): a relation ref falls back to matching by number only when its prefix names no live collection (BUG-3082) (#1369)

2026-09-14 11:49:35 -04:00

relation_referents.go

fix(relations): a wrong_collection reason is judged on the row resolved, never by a second lookup (BUG-3012) (#1490)

2026-09-24 01:01:52 -04:00

relation_stored_as_text_test.go

fix(relations): a relation value stored as text reads as text, not as an unavailable target (BUG-3014, ToolSurfaceVersion 0.50) (#1484)

2026-09-23 22:50:47 -04:00

relation_titles_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

relation_visibility_rungs_test.go

feat(items): multi_relation — an ordered list of references (TASK-2999 / PLAN-2857 U4) (#1342)

2026-09-13 16:01:12 -04:00

reminder_workspace_constraint_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

reminders_pg_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

reminders_test.go

fix(server,store): both workspace mint doors enforce their preconditions from one place (BUG-2809) (#1268)

2026-09-06 23:36:58 -04:00

reminders.go

feat(store): enqueue push notifications at four store sites (TASK-3937 part B) (#2268)

2026-10-21 03:31:18 -04:00

report_layouts_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

report_layouts.go

feat(insights): per-user layout customization + persistence (TASK-1634) (#645)

2026-05-29 15:00:34 -04:00

reports_test.go

fix(insights): a default report leaves out system collections (Conventions, Playbooks), so they stop counting in Insights (BUG-2410, ToolSurfaceVersion 0.49) (#1471)

2026-09-23 18:21:38 -04:00

reports_tz_test.go

feat(report): Insights buckets days in the viewer's time zone (TASK-3524) (#1955)

2026-10-09 08:14:55 -04:00

reports_tz.go

feat(report): Insights buckets days in the viewer's time zone (TASK-3524) (#1955)

2026-10-09 08:14:55 -04:00

reports.go

feat(server): reference items stop counting as open work (PLAN-3535 PR 2) (#2000)

2026-10-09 22:31:16 -04:00

restore_plan_limit_test.go

fix(limits): item restore enforces items_per_workspace (BUG-3101)

2026-09-17 11:02:02 -04:00

search_quality_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

search.go

feat: predictable palette search scope; "All" searches every workspace you can see (TASK-3604) (#2085)

2026-10-11 19:48:40 -04:00

sessions_test.go

fix(members): keep a workspace's owner and at least one owner member (#1737)

2026-10-02 17:01:54 -04:00

sessions.go

feat(server): push device registration and notification settings API (TASK-3938) (#2269)

2026-10-21 06:49:54 -04:00

share_links.go

fix(auth): disabling an account ends every credential, and a disabled account gets no new one (BUG-3349) (#1741)

2026-10-02 18:34:56 -04:00

slog_capture_serial_test.go

test(store): tests that capture the global slog default run serially (BUG-3088) (#1492)

2026-09-24 01:39:03 -04:00

snapshots.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

status_transitions_backfill.go

fix(schema): a grandfathered reserved-key FieldDef never reaches an item-field path (BUG-2685) (#1377)

2026-09-15 00:50:12 -04:00

status_transitions_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

store_test.go

fix(test): test temp dirs stop leaking into /tmp (BUG-3412) (#1786)

2026-10-05 04:50:02 -04:00

store.go

feat(server): push device registration and notification settings API (TASK-3938) (#2269)

2026-10-21 06:49:54 -04:00

stripe_events_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

stripe_events.go

fix(cloud): a failed read of a Stripe event row is not a claim (BUG-3561) (#2083)

2026-10-11 19:31:59 -04:00

structured_entry_id_backfill.go

fix(timeline): structured entries get a persisted id instead of a positional one that renumbers when a sibling moves (BUG-2788) (#1540)

2026-09-25 07:10:26 -04:00

system_collection_access_backfill_test.go

fix(access): system collections are ordinary collections for restricted members (TASK-3376) (#1756)

2026-10-03 09:19:10 -04:00

tags_test.go

fix(server): refuse a collection schema that repeats or empties a field key or option (TASK-3539, PR B) (#2009)

2026-10-10 03:04:20 -04:00

task2255_mcp_audit_names_test.go

feat(admin): the MCP audit page names users and connections instead of truncated UUIDs (TASK-2255 C110) (#2032)

2026-10-10 18:32:29 -04:00

task2923_import_renumber_warn_test.go

fix(store): log why a workspace import renumbered its items (TASK-2923) (#1994)

2026-10-09 21:21:19 -04:00

task3351_claim_providers_test.go

feat(auth): social claim of a never-verified account, provider subjects, cloud-only sidecar routes (TASK-3351) (#1760)

2026-10-03 12:15:04 -04:00

task3365_account_delete_report_test.go

feat(server): every access and credential change re-checks live connections (#1746)

2026-10-02 20:39:53 -04:00

task3389_app_projection_test.go

feat(apps): app webhook events name the install that wrote them (TASK-3411, SPEC-6 U10d) (#1781)

2026-10-04 21:36:33 -04:00

task3390_identity_test.go

feat(appstore): app item create and field update inside the fence (TASK-3390) (#1765)

2026-10-03 18:09:33 -04:00

task3390_slugconflict_test.go

feat(appstore): app item create and field update inside the fence (TASK-3390) (#1765)

2026-10-03 18:09:33 -04:00

task3391_comments_rebuild_test.go

feat(appstore): app comment create, edit and delete inside FencedTx (TASK-3391) (#1767)

2026-10-03 20:36:50 -04:00

task3392_bot_principal_test.go

feat(auth): the bot principal for installed apps: users.kind, kind gates on every sign-in door and credential, people-only counts (TASK-3392) (#1766)

2026-10-03 19:41:18 -04:00

task3394_install_clients_test.go

fix(server): the upgrade diff states what a widened delegated access grants (BUG-3427) (#1817)

2026-10-05 19:45:01 -04:00

task3397_lifecycle_test.go

feat(apps): app item actions and context codes (TASK-3414, SPEC-6 U11) (#1784)

2026-10-05 02:29:48 -04:00

task3397_provision_test.go

feat(apps): app install provisioning, install codes and redeem (TASK-3397, SPEC-6 U8b) (#1772)

2026-10-04 11:59:42 -04:00

task3397_upgrade_test.go

feat(apps): app upgrade: staged preview with a classed diff, one-transaction confirm that re-derives it (TASK-3397, SPEC-6 U8b2) (#1777)

2026-10-04 16:16:29 -04:00

task3399_deadlock_retry_test.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

task3399_delegated_barrier_test.go

feat(oauth): delegated sign-in for installed apps through the issuance barrier, shipped closed (TASK-3399, SPEC-6 U5b-1) (#1779)

2026-10-04 19:22:21 -04:00

task3399_reader_census_test.go

fix(oauth): a revoked grant mints nothing, and one refresh token rotates once (BUG-3678) (#2121)

2026-10-13 22:34:03 -04:00

task3401_app_ceiling_test.go

feat(apps): the installed-app API door, ceiling and read routes (TASK-3401, SPEC-6 U6a) (#1771)

2026-10-04 09:51:29 -04:00

task3406_readback_test.go

fix(store): every write that reads its row back does so inside its transaction (TASK-3406) (#1805)

2026-10-05 11:27:18 -04:00

task3408_delivery_test.go

feat(apps): app webhook delivery behind an in-flight fence, signature v2 (TASK-3408, SPEC-6 U10b) (#1780)

2026-10-04 20:35:13 -04:00

task3408_dto_test.go

fix(apps): an installed app learns its workspace from the redeem, an unscoped /me and every webhook (BUG-3416) (#1797)

2026-10-05 09:16:24 -04:00

task3408_ledger_test.go

feat(apps): per-endpoint webhook delivery state, a per-install rate cap, and a 24 h drop (TASK-3408, SPEC-6 U10c) (#1783)

2026-10-05 00:02:49 -04:00

task3409_prune_drops_test.go

feat(webhooks): owner webhooks keep per-endpoint delivery state; 408/425/429 are retried (TASK-3409) (#1809)

2026-10-05 14:44:50 -04:00

task3411_actor_test.go

fix(apps): an installed app learns its workspace from the redeem, an unscoped /me and every webhook (BUG-3416) (#1797)

2026-10-05 09:16:24 -04:00

task3414_redeem_race_test.go

feat(apps): app item actions and context codes (TASK-3414, SPEC-6 U11) (#1784)

2026-10-05 02:29:48 -04:00

task3531_compaction_test.go

fix(store): compaction deletes exactly the rows it read (TASK-3532) (#1995)

2026-10-09 21:29:40 -04:00

task3532_exact_id_delete_test.go

fix(store): compaction deletes exactly the rows it read (TASK-3532) (#1995)

2026-10-09 21:29:40 -04:00

task3541_watermark_stamp_count_test.go

feat(collab): count and log watermark stamps that cover content-bearing rows (TASK-3541 step 0) (#2023)

2026-10-10 11:54:42 -04:00

task3551_instance_mode_test.go

fix(server): a non-cloud boot no longer makes a Pad Cloud database's free users unlimited (TASK-3551) (#2028)

2026-10-10 17:26:08 -04:00

task3574_set_aside_whole_test.go

fix(collab): a schema rebuild sets aside the WHOLE op-log, so set-aside edits can be replayed (TASK-3574 (4)) (#2047)

2026-10-11 00:17:53 -04:00

task3574_step2_only_copy_test.go

fix(collab): recovery replays SyncStep2 rows, which can hold the only copy of an edit (TASK-3574 (2)) (#2046)

2026-10-11 00:07:56 -04:00

task3585_idempotency_test.go

feat(items): idempotency keys for patch writes (TASK-3585) (#2062)

2026-10-11 11:33:30 -04:00

task3601_payer_test.go

feat: a plan-limit refusal is a persistent prompt that names the limit and who can lift it (TASK-3601) (#2080)

2026-10-11 18:39:37 -04:00

task3617_verifications_export_test.go

feat(verify): verification evidence tied to a revision, slice 1 (TASK-3617) (#2228)

2026-10-19 10:25:43 -04:00

task3617_verifications_test.go

feat(verify): verification evidence tied to a revision, slice 1 (TASK-3617) (#2228)

2026-10-19 10:25:43 -04:00

task3619_storage_limit_test.go

feat(storage): enforce plan storage limits at upload; Pro 1 GB pooled per account, Free 100 MB (TASK-3619) (#2110)

2026-10-12 15:12:36 -04:00

task3917_comment_mentions_test.go

feat(store): @mentions enqueue a push notification (TASK-3946) (#2272)

2026-10-21 10:12:15 -04:00

task3919_awaits_human_test.go

feat(collections): awaits_human collection setting (TASK-3919) (#2244)

2026-10-19 19:58:46 -04:00

task3939_push_dispatch_test.go

feat(push): gateway client and notification claim lifecycle (TASK-3939, part A of 3) (#2278)

2026-10-21 19:22:06 -04:00

task3939b_settle_test.go

feat(push): the push dispatcher core and its privacy gates, not yet wired (TASK-3939, part B1) (#2280)

2026-10-22 00:38:26 -04:00

task3946_mention_notify_test.go

feat(store): @mentions enqueue a push notification (TASK-3946) (#2272)

2026-10-21 10:12:15 -04:00

templates.go

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00

testing_helpers.go

feat(server): push device registration and notification settings API (TASK-3938) (#2269)

2026-10-21 06:49:54 -04:00

timeline_pagination_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

totp_secret_helper_test.go

fix(store): a user read no longer decrypts the TOTP secret; only the second-factor check does (BUG-4019) (#2275)

2026-10-21 15:57:29 -04:00

totp_test.go

fix(store): a user read no longer decrypts the TOTP secret; only the second-factor check does (BUG-4019) (#2275)

2026-10-21 15:57:29 -04:00

trait_dedupe_test.go

test(store): tests that capture the global slog default run serially (BUG-3088) (#1492)

2026-09-24 01:39:03 -04:00

trait_dedupe.go

feat(store,server): make collection trait uniqueness a database invariant — de-dup pass + partial unique indexes (TASK-2710) (#1257)

2026-09-05 20:43:43 -04:00

ui_dismissals.go

feat: in-app tutorials on Pad Cloud, links to getpad.dev/learn elsewhere (TASK-3452) (#1839)

2026-10-06 22:23:29 -04:00

unique_fields_test.go

fix(BUG-2367): moves and copies never carry into a computed field, and a carried unique-field collision is dropped and named instead of 500ing or storing a duplicate (#1514)

2026-09-24 13:12:32 -04:00

unique_fields.go

fix(server,store): unique_scope values are checked again inside the write, under its lock (BUG-3812) (#2184)

2026-10-14 23:51:01 -04:00

users_email_verified_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

users_metrics_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

users_test.go

feat(metrics): signup and first-write funnel metrics; TouchUserWrite reports the first write (TASK-3926) (#2227)

2026-10-18 23:25:22 -04:00

users_totp_step_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

users.go

fix(store): a user read no longer decrypts the TOTP secret; only the second-factor check does (BUG-4019) (#2275)

2026-10-21 15:57:29 -04:00

validation_error.go

fix(server): a refused collection prefix reaches the caller as a 400 naming the rule (BUG-2951) (#1293)

2026-09-08 14:51:21 -04:00

verifications.go

feat(verify): verification evidence tied to a revision, slice 1 (TASK-3617) (#2228)

2026-10-19 10:25:43 -04:00

version_tie_diagnostic_test.go

feat(store): a read-only diagnostic counts version tie groups migration 054 may have misordered (BUG-3751) (#2136)

2026-10-13 16:43:16 -04:00

version_tie_diagnostic.go

fix(store): PG migration 054 breaks same-second version ties by id, not ctid (BUG-3751) (#2183)

2026-10-14 22:53:53 -04:00

versions.go

fix(store): legacy document version doors resolve from the body read in the same snapshot (BUG-3833) (#2198)

2026-10-15 12:22:37 -04:00

views.go

feat(store): JSONB NOT NULL hardening on items/views + handler shape validation (IDEA-1486+1488) (#566)

2026-05-16 10:15:59 -04:00

watches_test.go

feat(server,cli): watches, user-scoped event stream, plugin monitor command — PLAN-2469 Phase 1 (TASK-2533) (#1082)

2026-08-12 15:50:41 -04:00

watches.go

feat(server,cli): watches, user-scoped event stream, plugin monitor command — PLAN-2469 Phase 1 (TASK-2533) (#1082)

2026-08-12 15:50:41 -04:00

webhook_deliveries.go

feat(webhooks): owner webhooks keep per-endpoint delivery state; 408/425/429 are retried (TASK-3409) (#1809)

2026-10-05 14:44:50 -04:00

webhooks_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

webhooks.go

feat(webhooks): owner webhooks keep per-endpoint delivery state; 408/425/429 are retried (TASK-3409) (#1809)

2026-10-05 14:44:50 -04:00

wiki_links_backfill_race_test.go

fix(store): the wiki-link backfill re-reads each item under the workspace lock (BUG-3666) (#2168)

2026-10-14 12:24:27 -04:00

wiki_links_backfill.go

fix(store): the wiki-link backfill re-reads each item under the workspace lock (BUG-3666) (#2168)

2026-10-14 12:24:27 -04:00

wiki_links_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

wiki_links_xws_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

wiki_links.go

fix(security)!: a workspace-pinned API token is confined to its workspace (BUG-3982) (#2266)

2026-10-21 02:43:37 -04:00

workspace_counts_test.go

fix(export): an export reads one snapshot, so a concurrent write cannot leave an item without its collection (BUG-3654) (#2122)

2026-10-14 00:25:14 -04:00

workspace_counts.go

fix(export): an export reads one snapshot, so a concurrent write cannot leave an item without its collection (BUG-3654) (#2122)

2026-10-14 00:25:14 -04:00

workspace_import_status.go

feat(import): a partly imported workspace is marked until its owner keeps or deletes it (TASK-896) (#1923)

2026-10-08 22:22:06 -04:00

workspace_invitation_accept_test.go

fix(invitations): a pending invitation dies with its inviter's authority (BUG-3770) (#2214)

2026-10-16 21:14:10 -04:00

workspace_members_admin_detail_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

workspace_members.go

fix(server): the account export's store reads are cancelled at its deadline (BUG-3632) (#2223)

2026-10-17 19:32:06 -04:00

workspace_purge_test.go

feat(store): push notification schema and settings store (TASK-3937 part A) (#2265)

2026-10-20 19:06:53 -04:00

workspace_purge.go

feat(items): idempotency keys for patch writes (TASK-3585) (#2062)

2026-10-11 11:33:30 -04:00

workspace_tabs_lockorder_test.go

fix(tabs): order workspace-tab lists by a per-user server revision (BUG-3285) (#1649)

2026-09-28 18:33:09 -04:00

workspace_tabs_revision_test.go

fix(tabs): order workspace-tab lists by a per-user server revision (BUG-3285) (#1649)

2026-09-28 18:33:09 -04:00

workspace_tabs_test.go

fix(tabs): order workspace-tab lists by a per-user server revision (BUG-3285) (#1649)

2026-09-28 18:33:09 -04:00

workspace_tabs.go

fix(store): delete issued grants before tabs in account deletion (BUG-3288) (#1654)

2026-09-28 20:55:28 -04:00

workspaces_source_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

workspaces_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

workspaces.go

fix(store): a workspace slug is slugified whichever door supplies it; migrate-to-pg keeps existing slugs (BUG-3769) (#2205)

2026-10-15 21:24:48 -04:00

yjs_compaction.go

fix(collab): a compaction snapshot covers only its own generation's cursors (BUG-3747) (#2142)

2026-10-13 23:30:26 -04:00

yjs_content_bearing_internal_test.go

fix(store): content_state counts only op-log rows that can change the document (BUG-3124 unit A) (#1419)

2026-09-21 22:02:48 -04:00

yjs_content_bearing.go

fix(collab): stop appending the whole document to the op-log on every reconnect (BUG-3523) (#1965)

2026-10-09 10:42:55 -04:00

yjs_set_aside.go

fix(collab): a schema rebuild sets aside the WHOLE op-log, so set-aside edits can be replayed (TASK-3574 (4)) (#2047)

2026-10-11 00:17:53 -04:00

yjs_updates_test.go

perf(store): run the store suite in parallel (TASK-2900 deliverable 3) (#1263)

2026-09-06 16:59:31 -04:00

yjs_updates.go

feat(collab): compact a dormant op-log into one Yjs snapshot (TASK-3531 U1+U2) (#1984)

2026-10-09 15:03:53 -04:00