luckberg/familysync
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
272 Commits 2 Branches 2 Tags
c0bd6d732dc0093fd7a58d05c0528d7282c07a3a
T
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Lucas Berger c0bd6d732d fix(04-07): add owner-only guard for isShared on PATCH /api/lists/:id (T-04-08) 
- Immediately after access check, return 403 if patch.isShared !== undefined
  and !access.isOwner — blocks sharees from mutating list_shares
- Guard message: 'Only the list owner can change sharing settings'
- Sharees may still PATCH { name } (rename test stays green)
- Update stale comment: 'Reconcile list_shares on visibility change (owner only)'
- Closes T-04-08 (elevation of privilege) and T-04-05 (shared root cause)
2026-06-09 14:22:48 -04:00
.claude/skills/playwright-cli
docs(03-03): complete write API surface plan — enqueue-only endpoints GREEN
2026-06-05 17:59:53 -04:00
.planning
docs(04): gap-closure plan 04-07 (rank collation + isShared owner guard)
2026-06-09 14:07:14 -04:00
.playwright
docs(03-03): complete write API surface plan — enqueue-only endpoints GREEN
2026-06-05 17:59:53 -04:00
apps
fix(04-07): add owner-only guard for isShared on PATCH /api/lists/:id (T-04-08)
2026-06-09 14:22:48 -04:00
docs
feat(02-01): dev-auth bypass middleware with production hard guard
2026-06-05 09:32:00 -04:00
.env.example
feat(02-01): dev-auth bypass middleware with production hard guard
2026-06-05 09:32:00 -04:00
.gitignore
chore(04): commit pattern map + session config; ignore intel/graph diff baselines
2026-06-09 11:40:19 -04:00
CLAUDE.md
docs(03-03): complete write API surface plan — enqueue-only endpoints GREEN
2026-06-05 17:59:53 -04:00
docker-compose.dev.yml
fix(01-01): build Docker image from repo-root pnpm workspace context
2026-06-04 10:17:06 -04:00
docker-compose.yml
chore(03): Gate 2 stack bring-up — serve PWA from API image, prod env, credential seed
2026-06-06 21:30:58 -04:00
package.json
chore(01-01): scaffold monorepo, Docker Compose stack, and Vitest harness
2026-06-04 09:50:16 -04:00
pnpm-lock.yaml
feat(04-01): install new deps + scaffold API test harness with Wave-0 RED stubs
2026-06-09 11:49:10 -04:00
pnpm-workspace.yaml
chore(01-01): scaffold monorepo, Docker Compose stack, and Vitest harness
2026-06-04 09:50:16 -04:00
README
initial commit
2026-06-03 14:34:58 -04:00

README

The file is empty.
Reference in New Issue View Git Blame Copy Permalink
S
Description
No description provided
Readme
14 MiB
Languages
TypeScript 97.3%
JavaScript 1.6%
CSS 0.9%
Dockerfile 0.1%