luckberg/familysync
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
179 Commits 2 Branches 2 Tags
00a0454514b2518c8841465c702276fba6909024
T
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Lucas Berger 00a0454514 fix(260607-l6l): scope GET /api/events to current user + shared calendars 
BUG 3: GET / had no ownership predicate — it returned all users' events.
Second household member would see other member's private events.

- Resolve currentUserId at top of GET handler (same resolveUserId helper
  as write endpoints); return 401 if unauthenticated.
- Add ownership predicate to WHERE: AND (calendars.userId = currentUserId
  OR calendars.isShared = true). Combined with and() around the existing
  date-window or() block. Mirrors the /writable-calendars idiom (D-03).
2026-06-07 15:28:54 -04:00
.claude/skills/playwright-cli
docs(03-03): complete write API surface plan — enqueue-only endpoints GREEN
2026-06-05 17:59:53 -04:00
.planning
docs(260607-l6l): pre-dispatch plan for write-path correctness bugs
2026-06-07 15:18:38 -04:00
.playwright
docs(03-03): complete write API surface plan — enqueue-only endpoints GREEN
2026-06-05 17:59:53 -04:00
apps
fix(260607-l6l): scope GET /api/events to current user + shared calendars
2026-06-07 15:28:54 -04:00
docs
feat(02-01): dev-auth bypass middleware with production hard guard
2026-06-05 09:32:00 -04:00
.env.example
feat(02-01): dev-auth bypass middleware with production hard guard
2026-06-05 09:32:00 -04:00
.gitignore
chore: remove operator seed script + gitignore local verification artifacts
2026-06-06 21:42:29 -04:00
CLAUDE.md
docs(03-03): complete write API surface plan — enqueue-only endpoints GREEN
2026-06-05 17:59:53 -04:00
docker-compose.dev.yml
fix(01-01): build Docker image from repo-root pnpm workspace context
2026-06-04 10:17:06 -04:00
docker-compose.yml
chore(03): Gate 2 stack bring-up — serve PWA from API image, prod env, credential seed
2026-06-06 21:30:58 -04:00
package.json
chore(01-01): scaffold monorepo, Docker Compose stack, and Vitest harness
2026-06-04 09:50:16 -04:00
pnpm-lock.yaml
feat(03-01): extend schema with calendarOutbox table + calendarEvents.objectUrl; install vite-plugin-pwa
2026-06-05 17:22:37 -04:00
pnpm-workspace.yaml
chore(01-01): scaffold monorepo, Docker Compose stack, and Vitest harness
2026-06-04 09:50:16 -04:00
README
…

README

The file is empty.
Reference in New Issue View Git Blame Copy Permalink
S
Description
No description provided
Readme
14 MiB
Languages
TypeScript 97.3%
JavaScript 1.6%
CSS 0.9%
Dockerfile 0.1%