6 Commits

Include renames

Author	SHA1	Message	Date
poslop	b0360af79c	Merge pull request 'Fix #83: create API ignores boolean public field' (#88) from fix-83-public-false into main	2026-09-09 15:59:26 +00:00
Hermes Agent	ccb22a2d28	#83: accept boolean public field in create API (false->unlisted, true->public)	2026-09-09 10:57:56 -05:00
poslop	b7d1119d6d	Merge pull request 'docs: design for optional client-side E2E encryption (issue #39)' (#75) from issue-39-e2e-design into main	2026-09-09 14:26:02 +00:00
agent	78374b2d49	fix: atomic burn-after-read claim (#58) ... SoftDelete now reports whether it performed the delete (conditional UPDATE ... WHERE deleted_at IS NULL checked via RowsAffected). RegisterRead returns an admitted flag: legacy burn pastes admit exactly one reader (the atomic soft-delete winner), and burn-after-N pastes increment reads_used via a conditional UPDATE guarded on reads_used < reads_limit, so concurrent readers cannot both consume the final read. API, HTML, and raw read paths return 404 when the reader loses the burn claim; content is never served twice. OpenStore pins the SQLite pool to one connection: concurrent writes on separate pooled connections surfaced SQLITE_BUSY as spurious 500s instead of serializing. Adds concurrency regression tests: 24 parallel readers of a burn paste (exactly one receives content, none of the others leak it) and 30 parallel readers vs a 3-read budget (exactly 3 admitted, then 404).	2026-09-09 09:18:42 -05:00
Hermes Agent	f6c4342468	Exclude password-protected pastes from public listings (#65) ... ListPublic and its COUNT query now filter password_hash IS NULL, so /api/public (and any page backed by it) no longer leaks metadata (title, slug, existence) of password-protected pastes. Unlisted pastes were already excluded. Adds regression test covering both.	2026-09-09 09:13:26 -05:00
poslop	4f1e901f04	Refactor: split monolith into cmd/palette + internal/{store,api,web,lang} (#35)	2026-09-09 01:33:39 -05:00