sandrodachandClaude Opus 5.5 1f63e08a73 feat(media): images and recordings in backups, exports and imports (M6) ...

- Backup ZIP (download and automatic per-user server backups) carries the
  files of the user's own notes as media/<id><ext>; restoring creates
  them with new IDs and rewrites the blocks.
- Markdown archive puts them under attachments/ and embeds them relative
  to each note (![caption](../attachments/…)); re-importing turns them
  back into image/audio blocks.
- Obsidian import takes images and audio a note embeds on its own
  (![[file.png]], ![](path/file.png)); unused or invalid files appear as
  skipped in the preview instead of vanishing.
- Format detection and file paths moved into storage for this.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-29 23:41:26 +01:00

..

alarm_test.go

feat(tasks): due dates with optional time; alarms at the right moment

2026-10-29 07:48:37 +01:00

alarms.go

fix(security): demo sends nothing, hidden SMTP password, body limits (FLAW-33..38)

2026-10-29 19:43:23 +01:00

backups_test.go

feat(backup): daily server and user backups, restore by section (backend)

2026-10-29 15:10:06 +01:00

backups.go

fix(security): demo sends nothing, hidden SMTP password, body limits (FLAW-33..38)

2026-10-29 19:43:23 +01:00

bodylimit_test.go

feat(voice): self-hosted speech recognition via Whisper (STT_*)

2026-10-29 22:12:57 +01:00

bodylimit.go

feat(media): storage for images and audio in notes (M1)

2026-10-29 22:57:59 +01:00

clientip.go

feat(auth): lock logins after repeated failures, trust proxies explicitly (FLAW-09)

2026-10-29 14:26:02 +01:00

demo_test.go

feat(demo): reset the demo instance every 20 minutes with a countdown

2026-10-29 14:22:06 +01:00

demo.go

feat(media): storage for images and audio in notes (M1)

2026-10-29 22:57:59 +01:00

docsync_test.go

feat(notes): compact the operation log and purge old tombstones

2026-10-28 15:08:13 +01:00

docsync.go

feat(media): storage for images and audio in notes (M1)

2026-10-29 22:57:59 +01:00

handlers_account.go

feat(media): images and recordings in backups, exports and imports (M6)

2026-10-29 23:41:26 +01:00

handlers_admin.go

fix(security): demo sends nothing, hidden SMTP password, body limits (FLAW-33..38)

2026-10-29 19:43:23 +01:00

handlers_auth.go

feat(voice): self-hosted speech recognition via Whisper (STT_*)

2026-10-29 22:12:57 +01:00

handlers_documents.go

refactor: split sqlite.go and server.go by domain (FLAW-20)

2026-10-29 08:14:33 +01:00

handlers_folders.go

refactor: split sqlite.go and server.go by domain (FLAW-20)

2026-10-29 08:14:33 +01:00

handlers_integrations.go

fix(security): demo sends nothing, hidden SMTP password, body limits (FLAW-33..38)

2026-10-29 19:43:23 +01:00

handlers_lists.go

fix(security): list items need write access to their list (FLAW-27)

2026-10-29 14:28:39 +01:00

handlers_tasklists.go

fix(db): report write errors, multi-step changes all or nothing (FLAW-14)

2026-10-29 14:59:23 +01:00

handlers_teams.go

fix(db): report write errors, multi-step changes all or nothing (FLAW-14)

2026-10-29 14:59:23 +01:00

handlers_thoughts.go

fix(db): report write errors, multi-step changes all or nothing (FLAW-14)

2026-10-29 14:59:23 +01:00

headers_test.go

fix(security): safe links and security headers (FLAW-28, FLAW-29)

2026-10-29 19:02:13 +01:00

headers.go

fix(security): safe links and security headers (FLAW-28, FLAW-29)

2026-10-29 19:02:13 +01:00

loginguard_test.go

feat(auth): lock logins after repeated failures, trust proxies explicitly (FLAW-09)

2026-10-29 14:26:02 +01:00

loginguard.go

fix(auth): longer IDs and invite codes, register limits, single-use invites (FLAW-32, FLAW-39, FLAW-40)

2026-10-29 19:28:09 +01:00

mail_test.go

fix(smtp): AUTH LOGIN fallback when PLAIN is refused

2026-10-29 00:09:27 +01:00

mail.go

fix(smtp): AUTH LOGIN fallback when PLAIN is refused

2026-10-29 00:09:27 +01:00

media_test.go

feat(media): storage for images and audio in notes (M1)

2026-10-29 22:57:59 +01:00

media.go

feat(media): images and recordings in backups, exports and imports (M6)

2026-10-29 23:41:26 +01:00

netguard_test.go

fix(security): SSRF protection for alarm webhooks (FLAW-05)

2026-10-29 07:37:39 +01:00

netguard.go

fix(security): SSRF protection for alarm webhooks (FLAW-05)

2026-10-29 07:37:39 +01:00

password_reset.go

fix(auth): longer IDs and invite codes, register limits, single-use invites (FLAW-32, FLAW-39, FLAW-40)

2026-10-29 19:28:09 +01:00

realtime_test.go

feat(auth): server-side sessions and current password for account changes (FLAW-30, FLAW-31)

2026-10-29 19:25:22 +01:00

realtime.go

feat(auth): server-side sessions and current password for account changes (FLAW-30, FLAW-31)

2026-10-29 19:25:22 +01:00

register_limits_test.go

fix(auth): longer IDs and invite codes, register limits, single-use invites (FLAW-32, FLAW-39, FLAW-40)

2026-10-29 19:28:09 +01:00

s4_test.go

fix(security): demo sends nothing, hidden SMTP password, body limits (FLAW-33..38)

2026-10-29 19:43:23 +01:00

server_test.go

feat(auth): server-side sessions and current password for account changes (FLAW-30, FLAW-31)

2026-10-29 19:25:22 +01:00

server.go

feat(media): storage for images and audio in notes (M1)

2026-10-29 22:57:59 +01:00

sessions_test.go

feat(auth): server-side sessions and current password for account changes (FLAW-30, FLAW-31)

2026-10-29 19:25:22 +01:00

sessions.go

fix(security): demo sends nothing, hidden SMTP password, body limits (FLAW-33..38)

2026-10-29 19:43:23 +01:00

streamticket_test.go

fix(security): stream tickets instead of session tokens in URLs (FLAW-22)

2026-10-29 14:46:58 +01:00

streamticket.go

feat(auth): server-side sessions and current password for account changes (FLAW-30, FLAW-31)

2026-10-29 19:25:22 +01:00

voice_test.go

feat(voice): self-hosted speech recognition via Whisper (STT_*)

2026-10-29 22:12:57 +01:00

voice.go

feat(voice): self-hosted speech recognition via Whisper (STT_*)

2026-10-29 22:12:57 +01:00