Claude 5f1d6fc287 refactor(server): remove the store abstraction layer (D3) ...

Deletes Server/store (SQLiteStore, MemStore, the composed Store
interface) and collapses to a single sqlc-backed db package, executing
the prior audit's P4 "single data layer" direction (finding #6).

SQLiteStore was a pure pass-through to *db.DB, so consumers now depend
on narrow interfaces that *db.DB satisfies directly:

  - service.Store   (service/datastore.go, renamed from store/store.go)
  - ws.EventStore   (ws/eventstore.go)
  - plugin.PluginStore (plugin/pluginstore.go)

The event- and plugin-KV methods that lived in the store's SQLite
implementation move into the db package (db/event_queries.go,
db/plugin_queries.go), keeping their raw-SQL form.

Tests: the MemStore-based unit tests now run against a real in-memory
SQLite db opened per-test with migrations applied, via package-local
seed helpers. Fault-injection tests embed a real *db.DB and override the
single method under test, preserving error-path coverage. Full server
suite and sqlc-verify are green.

Docs: audit finding #6 and A-2026-07-06 marked resolved; decisions D3
updated; architecture server.md / data-model.md diagrams and prose
updated to the api -> service -> db layering.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UA17KPvqGBX3XbXYnMf1rA

2026-07-19 16:33:58 +00:00

..

static

fix(server): harden private-channel visibility propagation

2026-07-19 11:20:15 +00:00

admin_handler_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

admin.go

fix(admin): route admin-panel bans through ModerationService (W1-4)

2026-07-19 08:41:12 +02:00

api_edge_cases_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

api_test.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

api.go

feat(server,admin): private channels via per-role permission overrides

2026-07-19 10:50:11 +00:00

handlers_backup_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

handlers_backup.go

feat(server,client): protocol codegen + audit quick-wins batch

2026-07-19 13:32:58 +00:00

handlers_channel_perms_test.go

chore(server): drop unnecessary int64 conversion in perms test

2026-07-19 11:03:59 +00:00

handlers_channel_perms.go

feat(server,admin): private channels via per-role permission overrides

2026-07-19 10:50:11 +00:00

handlers_channels_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

handlers_channels.go

fix: security hardening — 45 issues from full-project Copilot audit

2026-03-29 12:35:04 +02:00

handlers_settings.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

handlers_users.go

fix(service): thread request context through BanUser/UnbanUser

2026-07-19 10:18:40 +02:00

helpers.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

logstream_test.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

logstream.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

middleware_and_spawn_test.go

feat(server,admin): private channels via per-role permission overrides

2026-07-19 10:50:11 +00:00

middleware_coverage_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

middleware.go

fix(phase-bc): address review findings — auth, SSRF, seq alignment

2026-04-06 09:29:29 +00:00

setup_handler_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

setup_handler.go

fix(security): harden server against verified code-review findings

2026-07-17 21:08:54 +02:00

types.go

feat(server,admin): private channels via per-role permission overrides

2026-07-19 10:50:11 +00:00

update_handlers_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

update_handlers.go

refactor(updater): export FileSHA256 and reuse it for the update snapshot (W3-2)

2026-07-19 09:04:28 +02:00