Files
sencho/backend
Cursor Agent 9b067b4f4c fix(notifications): harden mute replica auth and versioned retracts
requireNodeProxy checked username === 'node-proxy', so a normal session
with that account name could write mute-rule replicas and fleet sync
payloads. Gate on verified machineAuthScope, reserve the username, and
avoid SSO colliding with the synthetic identity.

Capability-cleanup DELETE also wrote a permanent tombstone, so clearing
a schedule (or upgrading a remote) could never re-sync that rule id.
Pass until_updated_at on fleet retracts and allow strictly newer POSTs
to recreate after cleanup while still blocking delayed same-version pushes.

Co-authored-by: Anso <dev@anso.codes>
2026-07-22 11:09:37 +00:00
..