xarmian a2e1c5d9ca fix(oauth): narrow current-only wildcard connections to their current workspaces (BUG-3338) (#1752) ...

Connected Apps let a user turn include_future_workspaces off under the
wildcard, but the wildcard is live and the flag was never read, so those
connections kept reaching workspaces joined later. A startup step,
next to BackfillOAuthConnections, turns each such connection into a
specific list of its user's live memberships and clears the wildcard:
the same result as "Limit to my current workspaces".

Narrowing-only (it writes rows only for workspaces the wildcard already
reached and only ever clears the wildcard), idempotent (a narrowed row
no longer matches, and no door stores the split combination since
BUG-3338), one transaction, and it logs how many connections it
narrowed, how many rows it wrote, and how many were left empty.

A Go step rather than a numbered migration because the migration runner
has no per-migration hook to log a count.

Claude-Session: https://claude.ai/code/session_01H63zaWhkb5pAafx2WGjrVC

2026-10-02 23:32:42 -04:00

..

loadtest-collab

fix(collab): WebSocket dials get their own per-user bucket and a per-user socket cap, and the editor jitters its reconnects (BUG-1308) (#1499)

2026-09-24 04:51:57 -04:00

pad

fix(oauth): narrow current-only wildcard connections to their current workspaces (BUG-3338) (#1752)

2026-10-02 23:32:42 -04:00