4 Commits

Include renames

Author	SHA1	Message	Date
sandrodachandClaude Opus 5.5	6b56a33500	fix(db): report write errors, multi-step changes all or nothing (FLAW-14) ... Store.execInTx runs related statements in one transaction and returns the first error. Used for deleting and moving folders (with the trash), shared folders, folder shares and mounts, deleting task lists and accounts, pinning, and the password reset (new password and the end of all other links together). Writes whose success the API reports now pass their error to the client (logout, new password, setup, sharing mode, new group, restore, unlinking a note block), follow-up tasks and alarm markers log failures. Remaining ignored writes are listed as intentional in flaws.md. Found on the way: DeleteTaskList unlinked all tasks before checking ownership, so a stranger with the list ID could empty it; viewers could unlink tasks from note blocks. Both fixed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 14:59:23 +01:00
sandrodachandClaude Opus 5.5	3900c6104e	fix(security): list items need write access to their list (FLAW-27) ... Creating, checking, editing, deleting, reordering and clearing list items did not check the list at all: any logged-in user with a list or item ID could change it, viewers of shared lists as well. All item endpoints and converting a thought into a list item now require owner or editor rights and that the item belongs to the list (404 without access, 403 for viewers). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 14:28:39 +01:00
sandrodachandClaude Opus 5.5	d1982816c1	fix(alarms): give up after three runs without delivery (FLAW-12) ... New column alarm_failures counts ticker runs in which no channel delivered; at three the alarm is marked as done and a warning is logged instead of retrying every minute forever. Success, a new due date or reopening the task starts over with three attempts. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 12:22:13 +01:00
sandrodachandClaude Opus 5.5	74c394efaa	refactor: split sqlite.go and server.go by domain (FLAW-20) ... Pure moves, no behaviour change: the storage layer now has users, apikeys, thoughts, tasklists, documents, folders, tags, lists, teams and system files next to sqlite.go (store, schema, migrations); the API has handlers_*.go per area plus realtime.go and alarms.go next to server.go (server, router, middleware). Declarations were moved verbatim with an AST-based tool; imports pruned with goimports. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 08:14:33 +01:00