Kyle Pope 0e94b6e1f7 Fix QA review findings: race condition, detached session, validation ...

- C-01: Wrap connection request flush in IntegrityError handler for
  TOCTOU race on partial unique index
- W-02: Extract ntfy config into plain dict before commit to avoid
  DetachedInstanceError in background tasks
- W-04: Add integer range validation (1–2147483647) on notification IDs
- W-07: Add typed response models for respond_to_request endpoint
- W-09: Document resolved_at requirement for future cancel endpoint
- S-02: Use Literal type for ConnectionRequestResponse.status
- S-04: Check ntfy master switch in extract_ntfy_config
- S-05: Move date import to module level in connection service

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-04 06:36:14 +08:00

..

__init__.py

Initial commit

2026-02-15 16:13:41 +08:00

admin.py

Fix notification UX, admin panel error handling, and data bugs

2026-03-04 05:55:14 +08:00

auth.py

Make umbral name editable in user settings

2026-03-04 05:00:33 +08:00

calendars.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

connections.py

Fix QA review findings: race condition, detached session, validation

2026-03-04 06:36:14 +08:00

dashboard.py

Fix TS build errors and apply remaining QA fixes

2026-02-27 04:42:23 +08:00

event_templates.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

events.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

locations.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

notifications.py

Add user connections, notification centre, and people integration

2026-03-04 02:10:16 +08:00

people.py

Add user connections, notification centre, and people integration

2026-03-04 02:10:16 +08:00

projects.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

reminders.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

settings.py

Add user connections, notification centre, and people integration

2026-03-04 02:10:16 +08:00

todos.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

totp.py

Extract real client IP from proxy headers instead of Docker bridge IP

2026-03-01 19:20:07 +08:00

weather.py

Fix QA review #2: W-03/W-04, S-01 through S-04

2026-02-27 05:41:16 +08:00