4 Commits

Include renames

Author	SHA1	Message	Date
sandrodachandClaude Opus 5.5	25bb787a8e	feat(lists): drag tasks and list entries onto another list; remember open list and view; live pill in lists ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-31 10:01:41 +01:00
sandrodachandClaude Opus 5.5	a69bcbaf10	feat(notify): bundled notifications, task watchers, daily summary ... - Per-user routing (own mail / own Discord webhook) for task alarms (sent at once), shares, completed shared tasks and watched tasks; settings as JSON on the user (GET /auth/me, PATCH /auth/settings). - Everything but alarms is queued and sent as one message per user after NOTIFY_DIGEST_MINUTES (default 5); mails now multipart with an HTML version, Discord as one embed. Three failed attempts drop it. - Own changes never notify the actor, except on watched tasks when asked for; "paused" stops everything including alarms. - Task watchers: POST/DELETE /tasks/{id}/watch, isWatching on tasks. - Daily summary at a chosen time: overdue, today, tomorrow, plus the count of the next 7 days; nothing due, nothing sent. - Migration 7; jobs do not run in the demo. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-30 09:49:13 +01:00
sandrodachandClaude Opus 5.5	3900c6104e	fix(security): list items need write access to their list (FLAW-27) ... Creating, checking, editing, deleting, reordering and clearing list items did not check the list at all: any logged-in user with a list or item ID could change it, viewers of shared lists as well. All item endpoints and converting a thought into a list item now require owner or editor rights and that the item belongs to the list (404 without access, 403 for viewers). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 14:28:39 +01:00
sandrodachandClaude Opus 5.5	74c394efaa	refactor: split sqlite.go and server.go by domain (FLAW-20) ... Pure moves, no behaviour change: the storage layer now has users, apikeys, thoughts, tasklists, documents, folders, tags, lists, teams and system files next to sqlite.go (store, schema, migrations); the API has handlers_*.go per area plus realtime.go and alarms.go next to server.go (server, router, middleware). Declarations were moved verbatim with an AST-based tool; imports pruned with goimports. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 08:14:33 +01:00