3 Commits

Include renames

Author	SHA1	Message	Date
sandrodachandClaude Opus 5.5	2b7356d043	feat(realtime): long polling for app-wide events behind proxies ... When a proxy lets neither WebSocket nor SSE through, the app opens a poll connection: the server buffers its events (an SSEClient without a stream), each GET waits up to 25 s, and room joins work like for SSE. Tasks and lists now update live there too, and note sync takes its notifications from it instead of a second long poll. Idle connections close after two minutes. The profile shows such a connection as limited. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-02 11:50:27 +01:00
sandrodachandClaude Opus 5.5	bcc06da3ee	fix(realtime): scope events to authorized users, authorize rooms, keep SSE alive ... Phase 0 of the collaboration plan: - Remove BroadcastToAll; task, task list and workspace folder events now only reach users who can see the resource. Task list events carry only the list ID, clients reload with their own permissions. - Reject unauthenticated WebSocket/SSE connections (401). Every room join (URL room, JOIN_ROOM, SSE rooms) is checked via a room authorizer; /events/rooms requires login and only accepts the caller's own sseId. - Reorder rejects tasks the caller cannot access or edit (IDOR). - Lift the server WriteTimeout for SSE streams so they are not cut after 30s. - Fix folder share removal sending DOC_DELETED to the share ID. - Tests for all of the above; docs and flaw list updated. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-28 11:19:14 +01:00
sandrodach	8769aceb05	fix: instant graceful shutdown for SSE/WS connections and container stop	2026-10-27 11:50:19 +01:00