mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-08-05 16:37:46 +00:00
9b067b4f4c
requireNodeProxy checked username === 'node-proxy', so a normal session with that account name could write mute-rule replicas and fleet sync payloads. Gate on verified machineAuthScope, reserve the username, and avoid SSO colliding with the synthetic identity. Capability-cleanup DELETE also wrote a permanent tombstone, so clearing a schedule (or upgrading a remote) could never re-sync that rule id. Pass until_updated_at on fleet retracts and allow strictly newer POSTs to recreate after cleanup while still blocking delayed same-version pushes. Co-authored-by: Anso <dev@anso.codes>