Anso 4c28b37a59 fix(stacks): require stack:read on file explorer GET routes (#1200) ...

The four file-explorer GET endpoints (list, content, download,
permissions) previously relied on auth alone. Their write-side siblings
required stack:edit, so the read path was the only file-explorer surface
without an explicit capability check. The shipped roles all carry
stack:read globally so behaviour is unchanged today, but adding the
guard prevents a future role definition from silently inheriting
unrestricted file reads, and it brings the file-explorer reads in line
with gitSources and stackActivity which already gate on stack:read.

The frontend Files tab trigger, panel, and the anatomy-panel "Open
Files" affordance now render only when the user holds stack:read for
the active stack. An effect canonicalises activeTab back to 'compose'
if the user lands on 'files' without permission, so a denied user
cannot end up staring at an empty panel.

2026-05-24 22:58:28 -04:00

..

scripts

fix(fleet): resolve getSenchoVersion crash in Docker containers (#396)

2026-04-06 00:44:36 -04:00

src

fix(stacks): require stack:read on file explorer GET routes (#1200)

2026-05-24 22:58:28 -04:00

.npmrc

chore(deps): upgrade major dependencies (ESLint 10, recharts 3, TS 6, Vite 8) (#130)

2026-03-25 00:03:08 -04:00

eslint.config.mjs

refactor(backend): collapse entitlement provider abstraction back to LicenseService (#889)

2026-05-02 23:45:44 -04:00

package-lock.json

chore(deps): bump the all-npm-backend group in /backend with 5 updates (#1173)

2026-05-23 03:07:20 -04:00

package.json

ci: harden CI and supply-chain pipeline (#1169)

2026-05-23 02:37:29 -04:00

tsconfig.json

perf(build): enable incremental tsc (#827)

2026-04-28 09:15:54 -04:00

vitest.config.ts

perf(test): build baseline DB once via vitest globalSetup (#829)

2026-04-28 10:08:39 -04:00