J3vb/OwnCord
1
0
Fork 0
mirror of https://github.com/J3vb/OwnCord.git synced 2026-09-03 03:50:00 +03:00
Code Issues Packages Projects Releases Wiki Activity
Files
ead64cdc20d7a29b2a272e81b352653c999f9ca3
OwnCord/Server/api
T
History
J3vbandClaude Fable 5 ead64cdc20 chore(lint): errorlint + exhaustive + switch-exhaustiveness-check, and permissions.deny for generated files (#1462) 
* chore(claude): deny hand-edits to generated files via permissions.deny

CLAUDE.md already says the sqlc, protocol and tauri-typegen outputs are
never hand-edited; this turns the sentence into a permission rule so the
Edit/Write tools refuse those paths outright.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Jwaz4CHGAz85Rpypjvto5a

* chore(lint): switch-exhaustiveness-check on the client, default branch counts as exhaustive

A switch over a string union that misses a member is a silent drop, not a
type error. Every existing default-less switch already covers its union, so
this adds no exceptions; the four switches with a default keep it as the
deliberate catch-all.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Jwaz4CHGAz85Rpypjvto5a

* chore(lint): enable errorlint and exhaustive in golangci and fix the 110 hits

errorlint: 68 fmt.Errorf sites wrapped the inner error with %v, which hid it
from errors.Is/As upstream — now %w; 6 == / != comparisons on sentinel
errors become errors.Is (the recover() branch in the router asserts the
recovered value is an error first); 36 ClientError type assertions become
errors.As, so a wrapped ClientError still reaches the client with its code.
Three test assertions the autofixer inverted (!ok || code mismatch) are
restored by hand.

exhaustive (default-signifies-exhaustive): one hit, the hub simulation's
FaultStatus switch — FaultOK moves from an if-guard into the switch.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Jwaz4CHGAz85Rpypjvto5a

* chore(claude): path-scoped rules for the three generated-code workflows

.claude/rules/{db-change,protocol-change,gendocs}.md load only when Claude
reads a matching source-of-truth file, so the db-change / protocol-change
skills and the gendocs regeneration step surface at the moment they apply
instead of relying on the CLAUDE.md table being remembered. .gitignore
whitelists .claude/rules/ next to skills/, workflows/ and settings.json.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Jwaz4CHGAz85Rpypjvto5a

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-08-30 20:22:55 +02:00
..
testdata/fuzz
test(b3-6): fuzz seeds — epoch-1 corpora for every target, protocol/auth/predicate-parity fuzz targets, make fuzz green (#1457)
2026-08-30 14:30:53 +00:00
absence_contract_test.go
docs(b2-7): trust model, absence proofs, plugin boundary (#1443)
2026-08-29 11:49:24 +00:00
audit_coverage_plugin_test.go
feat(b2-6): safe audit coverage (S-02) (#1441)
2026-08-29 11:11:37 +02:00
audit_coverage_test.go
feat(b2-6): safe audit coverage (S-02) (#1441)
2026-08-29 11:11:37 +02:00
auth_characterization_test.go
fix(b3-9): close the B3-tagged findings — OC-0345, OC-0346, OC-0376, OC-0377, OC-0378 (#1454)
2026-08-30 12:56:04 +02:00
auth_deps.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
auth_handler_delete_broadcast_test.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
auth_handler_test.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
auth_handler.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
avatar_handler_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
blocks_handler_test.go
test: close measured test-coverage gaps across server, client and Rust
2026-07-25 14:47:21 +00:00
bodycap_test.go
fix: resolve 107 verified defects across ws hub, voice/E2EE, db, and client (#1331)
2026-08-07 21:20:48 +02:00
channel_around_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
channel_authz_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
channel_handler_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
channel_handler.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
channel_reaction_users_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
client_update_epoch_test.go
feat(b2-2): protocol epoch and negotiation (slim) (#1438)
2026-08-29 07:23:06 +02:00
client_update_test.go
test(b2-1): capture the epoch-1 protocol fixtures and retire S-15 (#1435)
2026-08-28 15:43:30 +02:00
client_update.go
feat(b2-2): protocol epoch and negotiation (slim) (#1438)
2026-08-29 07:23:06 +02:00
clientip_test.go
Fix 27 findings from 2026-08-21 bug hunt (#1400)
2026-08-21 12:41:56 +02:00
constants_test.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
constants.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
contract_test.go
refactor(server): thread context.Context through the db layer and all callers
2026-07-23 17:03:52 +02:00
coverage_push_test.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
crs_fs_test.go
release: v1.1.0-alpha.4 — first-run setup wizard, LiveKit auto-download, WAF & CI fixes (#1292)
2026-07-31 15:41:57 +02:00
crs_fs.go
release: v1.1.0-alpha.4 — first-run setup wizard, LiveKit auto-download, WAF & CI fixes (#1292)
2026-07-31 15:41:57 +02:00
diagnostics_handler_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
diagnostics_handler.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
dm_group_handler_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
dm_handler_block_context_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
dm_handler_create_notify_test.go
fix: correctness fixes from the 2026-08-20 bug hunt (#1398)
2026-08-20 20:45:30 +02:00
dm_handler_presence_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
dm_handler_rename_participant_lookup_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
dm_handler_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
dm_handler_visibility_ctx_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
dm_handler_watermark_voice_test.go
fix: execute the 2026-08-19 audit fix order (docs refresh + five FRAGILE fixes) (#1396)
2026-08-20 03:49:13 +02:00
dm_handler.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
emoji_handler_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
emoji_handler.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
export_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
filestore.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
gif_handler_internal_test.go
fix: batch of 25 correctness fixes across server and client (#1370)
2026-08-14 14:49:27 +02:00
gif_handler_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
gif_handler.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
health_test.go
infra: observability, backups, guardrails, and deployment hardening (#1376)
2026-08-15 20:50:47 +02:00
image_dimensions_fuzz_test.go
Release v1.2.0-alpha.1 -> main (#1309)
2026-08-01 22:06:14 +02:00
invite_handler_test.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
invite_handler.go
feat(b2-6): safe audit coverage (S-02) (#1441)
2026-08-29 11:11:37 +02:00
livekit_proxy_test.go
release: v1.1.0-alpha.5 — voice origin fixes (desktop + same-origin), log-stream API tokens (#1296)
2026-07-31 18:30:31 +02:00
livekit_proxy_ws_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
livekit_proxy.go
release: v1.1.0-alpha.5 — voice origin fixes (desktop + same-origin), log-stream API tokens (#1296)
2026-07-31 18:30:31 +02:00
livekit_ratelimit_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
logbounds_test.go
test(api): logbounds — a marker the random request id cannot contain (#1460)
2026-08-30 16:06:55 +00:00
main_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
metrics_handler_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
metrics_handler.go
infra: observability, backups, guardrails, and deployment hardening (#1376)
2026-08-15 20:50:47 +02:00
middleware_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
middleware.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
plugins_handler_test.go
feat(b2-6): safe audit coverage (S-02) (#1441)
2026-08-29 11:11:37 +02:00
plugins_handler.go
feat(b2-6): safe audit coverage (S-02) (#1441)
2026-08-29 11:11:37 +02:00
profile_handler_fuzz_test.go
Release v1.2.0-alpha.1 -> main (#1309)
2026-08-01 22:06:14 +02:00
profile_handler_identity_key_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
profile_handler_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
profile_handler.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
recoverer_otel_test.go
fix(b3-9): close the B3-tagged findings — OC-0345, OC-0346, OC-0376, OC-0377, OC-0378 (#1454)
2026-08-30 12:56:04 +02:00
router_delete_account_broadcast_test.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
router_livekit_process_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
router_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
router_totp_key_fatal_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
router.go
chore(lint): errorlint + exhaustive + switch-exhaustiveness-check, and permissions.deny for generated files (#1462)
2026-08-30 20:22:55 +02:00
totp_cap_before_store_test.go
fix(b3-9): close the B3-tagged findings — OC-0345, OC-0346, OC-0376, OC-0377, OC-0378 (#1454)
2026-08-30 12:56:04 +02:00
totp_handler_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
totp_handler.go
refactor(b3-2): auth vertical slice — service.AuthService behind a consumer-owned interface (S-10) + HP-3 draft (#1450)
2026-08-30 09:49:05 +02:00
upload_bench_test.go
test(b3-6): benchmarks and a recorded bench baseline — six Benchmark* on the B6 gate paths, bench-baseline.sh with a missing-name guard (#1459)
2026-08-30 15:24:53 +00:00
upload_filename_fuzz_test.go
Release v1.2.0-alpha.1 -> main (#1309)
2026-08-01 22:06:14 +02:00
upload_handler_deleted_message_test.go
fix: resolve 107 verified defects across ws hub, voice/E2EE, db, and client (#1331)
2026-08-07 21:20:48 +02:00
upload_handler_test.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
upload_handler.go
B1-5: ownership moves (RL-09 / L-09, RL-10 / L-10, RL-11 / L-11, RL-13 / L-12) (#1417)
2026-08-27 07:11:18 +02:00
waf_crs_test.go
release: v1.1.0-alpha.4 — first-run setup wizard, LiveKit auto-download, WAF & CI fixes (#1292)
2026-07-31 15:41:57 +02:00
waf_test.go
test: audit 2026-08-19 — fix stale tests, close coverage gaps (#1397)
2026-08-20 19:29:31 +02:00
waf.go
refactor(server): work off the complexity backlog — 62 findings to 0 (#1389)
2026-08-18 20:39:45 +02:00