OwnCord

J3vb/OwnCord

Fork 0

mirror of https://github.com/J3vb/OwnCord.git synced 2026-09-03 03:50:00 +03:00

Files

T

History

J3vbandClaude Fable 5 2b2d58abc1 feat(b2-6): safe audit coverage (S-02) (#1441 )

* docs(b2-6): enumerate the security-sensitive mutations and their audit coverage

Step 1 of B2-6: the mutation inventory crossed with the 43 non-test
Audit( call sites at 67fdd18d, recorded in the plan's evidence block.
Invite create/revoke (S-02) and plugin install/uninstall have no audit
row; no timeout mutation exists (kick is force_logout / voice_mod_kick).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rg9QQWVN3E5UUgBD2dydtu

* added new doc

* docs(audit): update changelog and security documentation to include admin panel actions in audit log

* feat(b2-6): audit every security-sensitive mutation, invite and plugin rows first (S-02)

Step 2 of B2-6. TestAuditCoverage_* in service, api and admin drive each
mutation from the plan's inventory against a fake db.AuditStore
(Server/db/audittest) and assert the expected action arrives. Red before
this commit on exactly four rows: invite_create, invite_revoke,
plugin_install, plugin_uninstall.

- InviteService writes invite_create / invite_revoke naming the invite by
  id, never by code; RevokeInvite now takes the actor, threaded from the
  handler. A failed revoke writes nothing (test).
- The plugin admin handler takes a db.Auditor and writes plugin_install /
  plugin_uninstall against the RequireAdminAuth principal
  (admin.ActorIDFromContext, exported for that).
- docs/security.md lists the four new actions; CHANGELOG under Unreleased.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rg9QQWVN3E5UUgBD2dydtu

* test(b2-6): denylist over the recorded audit detail corpus

Step 3 of B2-6. Each TestAuditCoverage_* table now ends with a subtest
that runs audittest.AssertSafeDetails over every entry its rows recorded:
a shape denylist (bcrypt/argon2 hashes, password=/token=/secret=/
recovery-code key-value leaks, otpauth URIs, Bearer credentials) plus the
fixture's own secrets (raw tokens, passwords and hashes, TOTP secrets and
codes, invite codes, message bodies). audittest_test.go proves each class
bites and that ordinary details pass. Zero hits on the corpus at HEAD, so
no call site needed changing.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rg9QQWVN3E5UUgBD2dydtu

* docs(b2-6): record pre-squash SHAs, red/green and denylist evidence

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rg9QQWVN3E5UUgBD2dydtu

* fix(b2-6): audit committed invites on a canceled request; 404 unknown plugin uninstall

Codex P2s on #1441, both test-first:
- CreateInvite read the invite back on the request context, so a cancel
  after the insert committed returned an error and skipped invite_create.
  The read-back and audit now run on context.WithoutCancel, like the
  password-change tail. TestCreateInvite_AuditSurvivesCanceledLookup.
- Registry.UninstallPlugin is idempotent on an unknown id, so the handler
  wrote plugin_uninstall for plugins that never existed. It now checks the
  row first: 404 and no audit. TestPluginsHandlerUninstallUnknownID.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rg9QQWVN3E5UUgBD2dydtu

* docs(b2-6): record the Codex review outcome on #1441

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rg9QQWVN3E5UUgBD2dydtu

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

2026-08-29 11:11:37 +02:00

testdata/fuzz

Release v1.2.0-alpha.1 -> main (#1309 )

2026-08-01 22:06:14 +02:00

audit_coverage_plugin_test.go

feat(b2-6): safe audit coverage (S-02) (#1441 )

2026-08-29 11:11:37 +02:00

audit_coverage_test.go

feat(b2-6): safe audit coverage (S-02) (#1441 )

2026-08-29 11:11:37 +02:00

auth_handler_delete_broadcast_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

auth_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

auth_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

avatar_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

blocks_handler_test.go

test: close measured test-coverage gaps across server, client and Rust

2026-07-25 14:47:21 +00:00

bodycap_test.go

fix: resolve 107 verified defects across ws hub, voice/E2EE, db, and client (#1331 )

2026-08-07 21:20:48 +02:00

channel_around_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

channel_authz_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

channel_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

channel_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

channel_reaction_users_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

client_update_epoch_test.go

feat(b2-2): protocol epoch and negotiation (slim) (#1438 )

2026-08-29 07:23:06 +02:00

client_update_test.go

test(b2-1): capture the epoch-1 protocol fixtures and retire S-15 (#1435 )

2026-08-28 15:43:30 +02:00

client_update.go

feat(b2-2): protocol epoch and negotiation (slim) (#1438 )

2026-08-29 07:23:06 +02:00

clientip_test.go

Fix 27 findings from 2026-08-21 bug hunt (#1400 )

2026-08-21 12:41:56 +02:00

constants_test.go

test: audit 2026-08-19 — fix stale tests, close coverage gaps (#1397 )

2026-08-20 19:29:31 +02:00

constants.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

contract_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

coverage_push_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

crs_fs_test.go

release: v1.1.0-alpha.4 — first-run setup wizard, LiveKit auto-download, WAF & CI fixes (#1292 )

2026-07-31 15:41:57 +02:00

crs_fs.go

release: v1.1.0-alpha.4 — first-run setup wizard, LiveKit auto-download, WAF & CI fixes (#1292 )

2026-07-31 15:41:57 +02:00

diagnostics_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

diagnostics_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

dm_group_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

dm_handler_block_context_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

dm_handler_create_notify_test.go

fix: correctness fixes from the 2026-08-20 bug hunt (#1398 )

2026-08-20 20:45:30 +02:00

dm_handler_presence_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

dm_handler_rename_participant_lookup_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

dm_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

dm_handler_visibility_ctx_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

dm_handler_watermark_voice_test.go

fix: execute the 2026-08-19 audit fix order (docs refresh + five FRAGILE fixes) (#1396 )

2026-08-20 03:49:13 +02:00

dm_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

emoji_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

emoji_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

export_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

filestore.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

gif_handler_internal_test.go

fix: batch of 25 correctness fixes across server and client (#1370 )

2026-08-14 14:49:27 +02:00

gif_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

gif_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

health_test.go

infra: observability, backups, guardrails, and deployment hardening (#1376 )

2026-08-15 20:50:47 +02:00

image_dimensions_fuzz_test.go

Release v1.2.0-alpha.1 -> main (#1309 )

2026-08-01 22:06:14 +02:00

invite_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

invite_handler.go

feat(b2-6): safe audit coverage (S-02) (#1441 )

2026-08-29 11:11:37 +02:00

livekit_proxy_test.go

release: v1.1.0-alpha.5 — voice origin fixes (desktop + same-origin), log-stream API tokens (#1296 )

2026-07-31 18:30:31 +02:00

livekit_proxy_ws_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

livekit_proxy.go

release: v1.1.0-alpha.5 — voice origin fixes (desktop + same-origin), log-stream API tokens (#1296 )

2026-07-31 18:30:31 +02:00

livekit_ratelimit_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

logbounds_test.go

fix(api): bound the logged request id and path (F8)

2026-07-30 15:13:48 +02:00

main_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

metrics_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

metrics_handler.go

infra: observability, backups, guardrails, and deployment hardening (#1376 )

2026-08-15 20:50:47 +02:00

middleware_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

middleware.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

plugins_handler_test.go

feat(b2-6): safe audit coverage (S-02) (#1441 )

2026-08-29 11:11:37 +02:00

plugins_handler.go

feat(b2-6): safe audit coverage (S-02) (#1441 )

2026-08-29 11:11:37 +02:00

profile_handler_fuzz_test.go

Release v1.2.0-alpha.1 -> main (#1309 )

2026-08-01 22:06:14 +02:00

profile_handler_identity_key_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

profile_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

profile_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

router_delete_account_broadcast_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

router_livekit_process_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

router_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

router_totp_key_fatal_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

router.go

feat(b2-6): safe audit coverage (S-02) (#1441 )

2026-08-29 11:11:37 +02:00

totp_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

totp_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

upload_filename_fuzz_test.go

Release v1.2.0-alpha.1 -> main (#1309 )

2026-08-01 22:06:14 +02:00

upload_handler_deleted_message_test.go

fix: resolve 107 verified defects across ws hub, voice/E2EE, db, and client (#1331 )

2026-08-07 21:20:48 +02:00

upload_handler_test.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

upload_handler.go

B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417 )

2026-08-27 07:11:18 +02:00

waf_crs_test.go

release: v1.1.0-alpha.4 — first-run setup wizard, LiveKit auto-download, WAF & CI fixes (#1292 )

2026-07-31 15:41:57 +02:00

waf_test.go

test: audit 2026-08-19 — fix stale tests, close coverage gaps (#1397 )

2026-08-20 19:29:31 +02:00

waf.go

refactor(server): work off the complexity backlog — 62 findings to 0 (#1389 )

2026-08-18 20:39:45 +02:00