J3vb 827b370ac1 fix: audio cleanup srcObject, diagnostics rate limit, orphan cleanup race (BUG-107, BUG-121, BUG-132) ...

BUG-107: cleanupAllAudioElements now calls pause() and sets
srcObject = null before removing elements from DOM, ensuring streams
are fully released during reconnection cleanup.

BUG-121: Diagnostics endpoint now has 5 req/min rate limit as
documented, preventing enumeration of internal topology.

BUG-132: DeleteOrphanedAttachments uses DELETE ... RETURNING stored_as
(atomic) instead of separate SELECT then DELETE, eliminating the race
where a file could be deleted after its attachment was linked.

2026-04-02 13:45:41 +02:00

..

admin

fix: atomic setup prevents TOCTOU race creating multiple owners (BUG-119)

2026-04-02 12:09:27 +02:00

api

fix: audio cleanup srcObject, diagnostics rate limit, orphan cleanup race (BUG-107, BUG-121, BUG-132)

2026-04-02 13:45:41 +02:00

auth

fix: self-signed cert no longer generated as CA (BUG-138)

2026-04-02 13:03:02 +02:00

config

chore: add dev tooling — Stryker, gremlins, k6, toxiproxy, Coraza WAF, Zod

2026-04-01 13:49:06 +02:00

db

fix: audio cleanup srcObject, diagnostics rate limit, orphan cleanup race (BUG-107, BUG-121, BUG-132)

2026-04-02 13:45:41 +02:00

migrations

fix: require auth + channel ACL on file serving (BUG-092)

2026-04-02 11:16:16 +02:00

permissions

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

scripts

chore: add dev tooling — Stryker, gremlins, k6, toxiproxy, Coraza WAF, Zod

2026-04-01 13:49:06 +02:00

storage

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

syncutil

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

updater

fix: resolve 4 server bugs (Phase 1: BUG-085, BUG-087, BUG-090, BUG-091)

2026-04-01 17:52:06 +02:00

ws

fix: immediately disconnect banned user's WebSocket connection (BUG-113)

2026-04-02 13:16:06 +02:00

.air.toml

refactor: extensibility overhaul — handler registry, permission checker, sidebar decomposition, DX improvements

2026-03-29 12:19:08 +02:00

.golangci.yml

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

.gremlins.yaml

chore: add dev tooling — Stryker, gremlins, k6, toxiproxy, Coraza WAF, Zod

2026-04-01 13:49:06 +02:00

go.mod

chore: add dev tooling — Stryker, gremlins, k6, toxiproxy, Coraza WAF, Zod

2026-04-01 13:49:06 +02:00

go.sum

chore: add dev tooling — Stryker, gremlins, k6, toxiproxy, Coraza WAF, Zod

2026-04-01 13:49:06 +02:00

main.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00