Florian Sylvain b39a41be88 refac: DELETE /v1/user/{id}?expected_role_id=N, user.remove audit event, 409 target_role_not_found, GetAll returns its error, Own-scope visibility filter moved into repos, JSON tags removed from use-case types

2026-10-29 16:28:25 +01:00

..

AcceptInvite.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

activityQuery.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

ActivityRetention.go

feat: setup logs retention by max file size

2026-10-07 22:02:13 +02:00

ApplyRestartRequest.go

feat: restart to apply update, privileged helper, rollback

2026-10-01 21:36:40 +02:00

articleSlug.go

feat: SEO backend data (1/4)

2026-10-15 19:30:29 +02:00

auditFailures.go

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

AuthenticateAPIKey.go

feat: integration v2 and API key PART 1/3

2026-10-04 21:56:14 +02:00

AuthenticateUser.go

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

authorSupport.go

feat: more role backend and admin/writer roles additions and adjustments

2026-10-26 18:15:26 +01:00

BackfillImageMetadata.go

refac: decouple persistence and image storage behind driver registries

2026-10-06 02:13:35 +02:00

CancelInvite.go

feat: activity log producers

2026-10-06 22:25:23 +02:00

CancelRegistration.go

refac: reamaining auth surface rewrite, T0

2026-09-24 05:11:49 +02:00

ChangeUserRole.go

feat: roles SPA Users, Profile, API keys, Activity

2026-10-28 00:10:15 +01:00

CheckArticleSEO.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

CheckForUpdate.go

feat: activity log producers

2026-10-06 22:25:23 +02:00

CheckPermission.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

CleanupActivity.go

feat: setup logs retention by max file size

2026-10-07 22:02:13 +02:00

contentCaller.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

CreateAPIKey.go

feat: activity log backend foundation

2026-10-06 20:35:03 +02:00

CreateArticle.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

CreateAuthor.go

feat: Authors feature backend (and upgraded deprecated mods)

2026-10-14 17:45:00 +02:00

CreateContentType.go

feat: /v1/role list, get, create, update and delete. Reassign members on delete. Write-time validation (ValidateGrants, duplicates, typed keys against real content types). Name uniqueness (role_name_taken), role_locked, role_has_members, role_conflict on version mismatch. No-escalation: nobody grants a permission they don't hold, and roles.edit_owner_only guards the Owner role. Activity events for role changes. Typed-key exposure in /auth/me. Cleanup of typed rows when a content type is deleted. | Backend only. Will carry the deferred ListGrants decision.

2026-10-27 00:45:24 +01:00

CreateEntry.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

CreateImage.go

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

CreateInvite.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

CreateMyAuthor.go

feat: sites and authors integration into existing screens (& formated all frontend files kinda accidentally)

2026-10-15 05:25:44 +02:00

CreateRole.go

feat: /v1/role list, get, create, update and delete. Reassign members on delete. Write-time validation (ValidateGrants, duplicates, typed keys against real content types). Name uniqueness (role_name_taken), role_locked, role_has_members, role_conflict on version mismatch. No-escalation: nobody grants a permission they don't hold, and roles.edit_owner_only guards the Owner role. Activity events for role changes. Typed-key exposure in /auth/me. Cleanup of typed rows when a content type is deleted. | Backend only. Will carry the deferred ListGrants decision.

2026-10-27 00:45:24 +01:00

CreateSite.go

feat: SEO backend data (1/4)

2026-10-15 19:30:29 +02:00

CreateUser.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

CreateVariant.go

feat: image variants engine

2026-10-08 02:33:32 +02:00

DeleteArticle.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

DeleteAuthor.go

feat: Authors feature backend (and upgraded deprecated mods)

2026-10-14 17:45:00 +02:00

DeleteContentType.go

feat: /v1/role list, get, create, update and delete. Reassign members on delete. Write-time validation (ValidateGrants, duplicates, typed keys against real content types). Name uniqueness (role_name_taken), role_locked, role_has_members, role_conflict on version mismatch. No-escalation: nobody grants a permission they don't hold, and roles.edit_owner_only guards the Owner role. Activity events for role changes. Typed-key exposure in /auth/me. Cleanup of typed rows when a content type is deleted. | Backend only. Will carry the deferred ListGrants decision.

2026-10-27 00:45:24 +01:00

DeleteEntry.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

DeleteMedia.go

feat: SEO backend data (1/4)

2026-10-15 19:30:29 +02:00

DeleteRole.go

feat: /v1/role list, get, create, update and delete. Reassign members on delete. Write-time validation (ValidateGrants, duplicates, typed keys against real content types). Name uniqueness (role_name_taken), role_locked, role_has_members, role_conflict on version mismatch. No-escalation: nobody grants a permission they don't hold, and roles.edit_owner_only guards the Owner role. Activity events for role changes. Typed-key exposure in /auth/me. Cleanup of typed rows when a content type is deleted. | Backend only. Will carry the deferred ListGrants decision.

2026-10-27 00:45:24 +01:00

DeleteSite.go

feat: Sites feature backend

2026-10-14 03:56:50 +02:00

DeleteVariant.go

feat: image variants engine

2026-10-08 02:33:32 +02:00

EnforceRetention.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

entryMedia.go

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

entryRelation.go

feat: relation field and picker

2026-10-23 00:13:42 +02:00

entrySupport.go

feat: relation field and picker

2026-10-23 00:13:42 +02:00

ExportActivity.go

feat: more role backend and admin/writer roles additions and adjustments

2026-10-26 18:15:26 +01:00

flightGroup.go

refac: removed 7 direct and 12 indirect go modules for custom code instead

2026-10-21 23:13:46 +02:00

GenerateAllImageVariants.go

feat: image variants per image

2026-10-08 19:57:51 +02:00

GenerateImageVariant.go

feat: image variants per image

2026-10-08 19:57:51 +02:00

GenerateVariantsOnUpload.go

feat: image variants per image

2026-10-08 19:57:51 +02:00

GetActivitySummary.go

feat: activity log backend foundation

2026-10-06 20:35:03 +02:00

GetArticle.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

GetBuiltinType.go

feat: custom content type icons, built-in types, user lookup

2026-10-19 18:22:55 +02:00

GetContentType.go

feat: custom content types backend

2026-10-19 17:01:37 +02:00

GetEntry.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

GetInvite.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

GetMediaUsage.go

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

GetMyAccess.go

feat: roles SPA Users, Profile, API keys, Activity

2026-10-28 00:10:15 +01:00

GetMyAuthor.go

feat: Authors feature backend (and upgraded deprecated mods)

2026-10-14 17:45:00 +02:00

GetPurgeSettings.go

feat: media duplicate purge, part 1 of 3: persisted purge settings and the purge API

2026-10-05 18:24:03 +02:00

GetRole.go

feat: /v1/role list, get, create, update and delete. Reassign members on delete. Write-time validation (ValidateGrants, duplicates, typed keys against real content types). Name uniqueness (role_name_taken), role_locked, role_has_members, role_conflict on version mismatch. No-escalation: nobody grants a permission they don't hold, and roles.edit_owner_only guards the Owner role. Activity events for role changes. Typed-key exposure in /auth/me. Cleanup of typed rows when a content type is deleted. | Backend only. Will carry the deferred ListGrants decision.

2026-10-27 00:45:24 +01:00

GetSettings.go

feat: settings page, sidebar and drawer destination "Settings" (icon settings, after Integration), route /settings (verified), showing only the running build's Version

2026-09-30 00:19:29 +02:00

GetUpdateStatus.go

feat: more role backend and admin/writer roles additions and adjustments

2026-10-26 18:15:26 +01:00

GetUser.go

refac: remove frontend & clearer DDD

2025-12-21 21:31:30 +01:00

GetVariantCacheStats.go

feat: image variants cache panel

2026-10-08 21:13:32 +02:00

imageVariantView.go

feat: image variants per image

2026-10-08 19:57:51 +02:00

inviteLookup.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

inviteMail.go

feat: invite management API: DELETE /v1/user/invite/:id (204, cancels a pending invite) and POST /v1/user/invite/:id/renew (200, new code, expires_at = now+3d, created_at = now, resends the invitation email, old link dead)

2026-09-30 01:36:43 +02:00

ListActivity.go

feat: more role backend and admin/writer roles additions and adjustments

2026-10-26 18:15:26 +01:00

ListAPIKeys.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

ListArticles.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

ListAuthors.go

feat: more role backend and admin/writer roles additions and adjustments

2026-10-26 18:15:26 +01:00

ListBuiltinTypes.go

feat: custom content type icons, built-in types, user lookup

2026-10-19 18:22:55 +02:00

ListContentTypes.go

feat: custom content types backend

2026-10-19 17:01:37 +02:00

ListEntries.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

ListImageVariants.go

feat: image variants per image

2026-10-08 19:57:51 +02:00

ListMedia.go

feat(API): media field type

2026-10-21 05:07:36 +02:00

ListPermissions.go

feat: roles system backend

2026-10-26 05:02:49 +01:00

ListRoles.go

feat: /v1/role list, get, create, update and delete. Reassign members on delete. Write-time validation (ValidateGrants, duplicates, typed keys against real content types). Name uniqueness (role_name_taken), role_locked, role_has_members, role_conflict on version mismatch. No-escalation: nobody grants a permission they don't hold, and roles.edit_owner_only guards the Owner role. Activity events for role changes. Typed-key exposure in /auth/me. Cleanup of typed rows when a content type is deleted. | Backend only. Will carry the deferred ListGrants decision.

2026-10-27 00:45:24 +01:00

ListSitemap.go

feat: SEO backend output (2/4)

2026-10-15 21:48:55 +02:00

ListSites.go

fix: technical debts left by the Sites, Authors and SEO slices, plus backend support for the new Sites and Authors pagination

2026-10-19 00:25:31 +02:00

ListUsers.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

ListUsersAndInvites.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

ListVariants.go

feat: image variants engine

2026-10-08 02:33:32 +02:00

LookupUserNames.go

feat: custom content type icons, built-in types, user lookup

2026-10-19 18:22:55 +02:00

ManageBrowserUpdates.go

feat: restart to apply update, privileged helper, rollback

2026-10-01 21:36:40 +02:00

mediaRemover.go

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

mediaUploader.go

feat(API): media library

2026-09-30 18:35:28 +02:00

MergeMedia.go

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

OpenMedia.go

refac: decouple persistence and image storage behind driver registries

2026-10-06 02:13:35 +02:00

PreviewPurge.go

feat(API): media field type

2026-10-21 05:07:36 +02:00

PurgeImageVariant.go

feat: image variants per image

2026-10-08 19:57:51 +02:00

purgePlan.go

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

PurgeScheduler.go

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

PurgeVariant.go

feat: image variants engine

2026-10-08 02:33:32 +02:00

PurgeVariantCache.go

feat: image variants cache panel

2026-10-08 21:13:32 +02:00

ReassignRoleMembers.go

refac: DELETE /v1/user/{id}?expected_role_id=N, user.remove audit event, 409 target_role_not_found, GetAll returns its error, Own-scope visibility filter moved into repos, JSON tags removed from use-case types

2026-10-29 16:28:25 +01:00

RecordRunningInfo.go

feat: restart to apply update, privileged helper, rollback

2026-10-01 21:36:40 +02:00

RemoveUser.go

refac: DELETE /v1/user/{id}?expected_role_id=N, user.remove audit event, 409 target_role_not_found, GetAll returns its error, Own-scope visibility filter moved into repos, JSON tags removed from use-case types

2026-10-29 16:28:25 +01:00

RenameMedia.go

feat: activity log producers

2026-10-06 22:25:23 +02:00

renderArticleBody.go

feat: articles format option with markdown new default

2026-10-04 19:04:12 +02:00

RenewInvite.go

feat: Users API, ownership transfer and removal of the legacy role string

2026-10-27 03:08:15 +01:00

RequestPasswordReset.go

feat: activity log backend foundation

2026-10-06 20:35:03 +02:00

RequestRestart.go

feat: activity log producers

2026-10-06 22:25:23 +02:00

ResetPassword.go

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

ResolveArticleSEO.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

RevokeAPIKey.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

RevokeSession.go

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

roleRef.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

roleSupport.go

feat: Users API, ownership transfer and removal of the legacy role string

2026-10-27 03:08:15 +01:00

roleView.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

RunPurge.go

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

SendMail.go

refac: remove frontend & clearer DDD

2025-12-21 21:31:30 +01:00

seoBody.go

feat: SEO backend output (2/4)

2026-10-15 21:48:55 +02:00

seoRules.go

feat: SEO backend output (2/4)

2026-10-15 21:48:55 +02:00

ServeVariant.go

refac: removed 7 direct and 12 indirect go modules for custom code instead

2026-10-21 23:13:46 +02:00

ServeVariantGenerate.go

feat: image variants per image

2026-10-08 19:57:51 +02:00

SetDefaultSite.go

feat: Sites feature backend

2026-10-14 03:56:50 +02:00

SetVariantEnabled.go

feat: image variants engine

2026-10-08 02:33:32 +02:00

siteAudit.go

feat: Sites feature backend

2026-10-14 03:56:50 +02:00

siteImageUsage.go

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

StartUpdateDownload.go

feat: activity log producers

2026-10-06 22:25:23 +02:00

TransferOwnership.go

refac: stale test entries, failing web tests, Postgre backup bug, Hardcoded MySQL table count, Stale Postgre connection in test, own-scope visibility filter, GetAll ignoring its error, JSON tags in use-case types, 31 copies of DESKTOP_QUERY, ProfileView endpoint paths

2026-10-28 17:54:10 +01:00

UpdateArticle.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

UpdateAuthor.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

UpdateContentType.go

feat: relation field and picker

2026-10-23 00:13:42 +02:00

UpdateEntry.go

refac: debt on role backend

2026-10-26 23:34:35 +01:00

UpdatePurgeSettings.go

feat: media duplicate purge, part 1 of 3: persisted purge settings and the purge API

2026-10-05 18:24:03 +02:00

UpdateRole.go

feat: /v1/role list, get, create, update and delete. Reassign members on delete. Write-time validation (ValidateGrants, duplicates, typed keys against real content types). Name uniqueness (role_name_taken), role_locked, role_has_members, role_conflict on version mismatch. No-escalation: nobody grants a permission they don't hold, and roles.edit_owner_only guards the Owner role. Activity events for role changes. Typed-key exposure in /auth/me. Cleanup of typed rows when a content type is deleted. | Backend only. Will carry the deferred ListGrants decision.

2026-10-27 00:45:24 +01:00

UpdateSite.go

feat: SEO backend data (1/4)

2026-10-15 19:30:29 +02:00

updateStatusBuilder.go

feat: restart to apply update, privileged helper, rollback

2026-10-01 21:36:40 +02:00

UpdateUserProfile.go

feat: activity log producers

2026-10-06 22:25:23 +02:00

UpdateVariant.go

feat: image variants engine

2026-10-08 02:33:32 +02:00

variantCache.go

feat: image variants cache panel

2026-10-08 21:13:32 +02:00

variantSettings.go

feat: image variants engine

2026-10-08 02:33:32 +02:00

variantSummary.go

feat: image variants engine

2026-10-08 02:33:32 +02:00

VerifyUser.go

feat: activity log producers

2026-10-06 22:25:23 +02:00