J3vbandClaude Fable 5 249e35af91 feat(server): unify channel-visibility through permissions.Checker ...

Route the four "must mirror" READ_MESSAGES filters — REST
ListVisibleChannels, ws buildReady, reconnect replay
computeAllowedChannels, and hub RefreshChannelVisibility — through a
single permissions.Checker predicate so a drift can never leak a
private channel (audit A-2026-07-07 / backlog item 3).

- add permissions.Checker.VisibleChannelIDs + ChannelRef (skips dm,
  fails closed, admin bypass via HasChannelPermBatch)
- delegate the three batch sites; RefreshChannelVisibility uses
  HasChannelPerm instead of its inline EffectivePerms copy
- REST/WS agreement test asserting all three sites yield the identical
  non-DM set across admin / member-with-deny / denied-everywhere

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-20 11:28:03 +02:00

..

admin

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

api

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

auth

fix(security): harden server against verified code-review findings

2026-07-17 21:08:54 +02:00

config

feat(server): support dual-homed voice hosts and user-managed livekit.yaml

2026-07-19 10:50:11 +00:00

db

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

migrations

feat(server,client): announcement channels (D1, closes A-2026-07-01)

2026-07-19 16:00:18 +00:00

permissions

feat(server): unify channel-visibility through permissions.Checker

2026-07-20 11:28:03 +02:00

plugin

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

scripts

feat(server,client): protocol codegen + audit quick-wins batch

2026-07-19 13:32:58 +00:00

service

feat(server): unify channel-visibility through permissions.Checker

2026-07-20 11:28:03 +02:00

storage

fix: comprehensive security hardening from full codebase audit

2026-04-04 16:48:57 +00:00

syncutil

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

telemetry

chore(server): delete unfinished Postgres scaffolding

2026-07-19 08:15:58 +02:00

updater

refactor(updater): export FileSHA256 and reuse it for the update snapshot (W3-2)

2026-07-19 09:04:28 +02:00

ws

feat(server): unify channel-visibility through permissions.Checker

2026-07-20 11:28:03 +02:00

.air.toml

refactor: extensibility overhaul — handler registry, permission checker, sidebar decomposition, DX improvements

2026-03-29 12:19:08 +02:00

.dockerignore

feat: Linux client port, ARM64 CI, and server Docker image

2026-04-03 14:26:26 +02:00

.env.example

feat: add docker-compose with LiveKit for server Docker deployment

2026-04-03 14:32:20 +02:00

.golangci.yml

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

.gremlins.yaml

chore: add dev tooling — Stryker, gremlins, k6, toxiproxy, Coraza WAF, Zod

2026-04-01 13:49:06 +02:00

docker-compose.otel.yml

feat(phase-bc): pass 5 — pgdbgen, postgres EventStore/PluginStore, plugin hub wiring, OTel stack, reconnect DB tier

2026-04-06 22:48:59 +02:00

docker-compose.yml

feat: add docker-compose with LiveKit for server Docker deployment

2026-04-03 14:32:20 +02:00

Dockerfile

feat: Linux client port, ARM64 CI, and server Docker image

2026-04-03 14:26:26 +02:00

go.mod

chore(server): delete unfinished Postgres scaffolding

2026-07-19 08:15:58 +02:00

go.sum

chore(server): delete unfinished Postgres scaffolding

2026-07-19 08:15:58 +02:00

livekit.yaml.example

feat(server): support dual-homed voice hosts and user-managed livekit.yaml

2026-07-19 10:50:11 +00:00

main.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

Makefile

feat(server,client): protocol codegen + audit quick-wins batch

2026-07-19 13:32:58 +00:00

prometheus.dev.yml

feat(phase-bc): pass 5 — pgdbgen, postgres EventStore/PluginStore, plugin hub wiring, OTel stack, reconnect DB tier

2026-04-06 22:48:59 +02:00

sqlc.version

feat: adopt sqlc for type-safe database access (Phase A Step 2)

2026-04-06 09:12:59 +02:00

sqlc.yaml

chore(server): delete unfinished Postgres scaffolding

2026-07-19 08:15:58 +02:00