kolaente 08ab38836b fix(mcp): apply the REST layer's guards in Dispatch ...

- page/per_page default and clamp like the REST handler; page < 1 dropped
  the LIMIT clause entirely
- config-gated resources are unreachable through do_action
- create/update run the model's valid: tag rules
- read_all returns {items, result_count, total_items, page, per_page} and
  strips emails from user rows

2026-08-29 00:48:55 +02:00

..

audit

feat(audit): audit full personal data export requests

2026-07-28 18:05:34 +02:00

caldav

fix(caldav): report completion status from Done instead of done_at

2026-07-30 11:32:24 +02:00

caldavtests

fix(caldav): don't duplicate a task when a client PUTs a stale href

2026-08-18 12:55:13 +02:00

cmd

…

config

fix(ratelimit): give session renewal its own budget

2026-08-18 14:01:06 +02:00

cron

…

db

fix(mcp): gate users_search on scopes a token can actually hold

2026-08-29 00:36:12 +02:00

doctor

feat: report ParadeDB extension and index status in doctor command

2026-08-05 19:27:12 +02:00

e2etests

fix(e2etests): drain pending event handlers before seeding fixtures

2026-08-27 13:36:08 +02:00

events

fix(events): don't log event payloads in the poison queue handler

2026-08-20 08:45:42 +02:00

files

fix: use caller's session in LoadFileMetaByID to prevent connection pool deadlock

2026-08-16 17:57:52 +02:00

health

…

i18n

feat(notifications): notify subscribers when a task is created

2026-08-27 15:41:58 +02:00

initialize

…

license

fix(license): refuse redirects and use the SSRF-safe http client for checks

2026-07-28 17:26:12 +02:00

log

…

mail

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

metrics

fix(metrics): store active users as TTL keys in keyvalue to avoid concurrent map access

2026-08-19 17:29:35 +02:00

migration

fix(deps): update module github.com/yuin/goldmark to v2 (#3627)

2026-08-27 20:34:29 +00:00

models

refactor(validation): move govalidator rules and struct validation into models

2026-08-29 00:48:55 +02:00

modules

fix(mcp): apply the REST layer's guards in Dispatch

2026-08-29 00:48:55 +02:00

notifications

fix(deps): update module github.com/yuin/goldmark to v2 (#3627)

2026-08-27 20:34:29 +00:00

plugins

fix(plugins): exclude example plugin from module build

2026-08-20 16:51:01 +02:00

red

…

richtext

fix(deps): update module github.com/yuin/goldmark to v2 (#3627)

2026-08-27 20:34:29 +00:00

routes

refactor(validation): move govalidator rules and struct validation into models

2026-08-29 00:48:55 +02:00

swagger

[skip ci] Updated swagger docs

2026-08-19 00:53:08 +00:00

user

fix(user): expire used TOTP passcodes via keyvalue TTL

2026-08-19 17:29:35 +02:00

utils

feat(migration): client-aware get and size-limited download helpers, bounded json decode

2026-08-20 08:45:42 +02:00

version

…

web

fix(web): stop logging the full auth object on permission denials

2026-07-29 07:58:17 +00:00

websocket

fix(notifications): check project access when reading notifications

2026-07-29 07:58:17 +00:00

webtests

fix(mcp): apply the REST layer's guards in Dispatch

2026-08-29 00:48:55 +02:00

yaegi_symbols

[skip ci] Updated yaegi symbols

2026-08-27 16:46:50 +00:00