9 Commits

Include renames

Author	SHA1	Message	Date
justmeandClaude Sonnet 5.5	4b4ab4ee4d	feat(files): store files on the host when a channel has no file domain ... Chat stays usable when the file service is off or down. Files up to 256 MB are hosted like chat; downloads try the host first and fall back to file-service tickets. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> [CI]	2026-10-19 14:24:41 +08:00
justme	17638b6e20	refactor(host): single-source ChannelPolicy, space-signed file grants, whole-file registration ... - all authorization rules (owner/creator, per-channel read/write grants, who may remove whom, delete rules, structure management) live in ChannelPolicy; a test fails if they are reimplemented elsewhere - ChannelInfo carries what the caller may do (can_*), member and invitation lists say who can be removed; clients display it and never derive it - the host no longer stores or calls the file service: it only signs short-lived tickets from space permissions (create/put/get/delete/domain), and keeps an opaque fileDomain reference on the channel - a whole file is registered in one request (last frame header + per-frame length and digest) instead of one request per 1 MiB frame; the signed manifest still has to match every digest - drop file quota/threshold, receipts, reconcile and delete-queue code from the host - contract generator emits constants for enums, error codes, token roles, permissions and share states	2026-10-19 13:38:40 +08:00
justme	c858bd2a09	feat(server)!: require a logged-in account for every channel request ... Drop unauthenticated guests from channels: the allow_guests setting, the /guests endpoints and the guest seat table are gone, and requests without an account session get 401 account_required. Share links are unaffected. Contract version is now 8.0.0.	2026-10-16 06:46:15 +08:00
justme	d946fc5e8a	feat(api)!: fold devices into users and report member presence ... Contract 7.0.0 (breaking). Devices become an attribute of the account; members are managed per user, and only unauthenticated guests keep a per-terminal registration. - rename seats -> max_members, seats_used -> members_used, seats_full -> members_full, SeatJoined -> JoinResult, the `seats` stream control message -> `members`, and POST /channels/{id}/seats -> POST /channels/{id}/join (stored channel settings are migrated on start) - drop per-terminal encrypted device labels and the seat list/release endpoints; add GET/DELETE /channels/{id}/guests for guest terminals - authenticate account members by account session only: the terminal key is optional for logged-in accounts, no seat row is written for them, and gated-download grants are counted per user (per terminal for guests) - GET /channels/{id}/members now returns online, devices and online_devices per account; presence is tracked in memory from active WebSocket/SSE subscriptions and is not pushed over the stream - owner invitation list no longer returns accounts that already joined	2026-10-14 22:18:59 +08:00
justme	a6f078d009	feat(files): add per-channel storage quota [CI]	2026-10-14 20:42:08 +08:00
justme	7b8d61d1ba	feat(api): add account workspaces and signed content events	2026-10-14 04:05:30 +08:00
justme	c7d8ef15bc	feat(api): bind encrypted workspaces to accounts and devices	2026-10-13 01:38:19 +08:00
justme	7406e2fe37	feat: integrate client and server sharing workflows	2026-10-02 10:49:45 +08:00
justme	42b93ae2d8	feat(server): implement sealed share lifecycle ... Signed-off-by: JustMe <mr.toing@outlook.com>	2026-10-02 00:59:56 +08:00