UMBRA

History

Kyle Pope df857a5719 Fix QA findings: flush before notify, dedup RSVP, sa_false, validation

- C-02: flush invitations before creating notifications so invitation_id
  is available in notification data; eliminates extra pending fetch
- C-03: skip RSVP notification when status hasn't changed
- C-01: add defensive comments on update/delete endpoints
- W-01: add ge=1, le=2147483647 per-element validation on user_ids
- W-04: deduplicate invited_event_ids query via get_invited_event_ids()
- W-06: replace Python False with sa_false() in or_() clauses
- Frontend: extract resolveInvitationId helper, prefer data.invitation_id

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-16 14:01:15 +08:00

audit.py

Extract real client IP from proxy headers instead of Docker bridge IP

2026-03-01 19:20:07 +08:00

auth.py

Address code review findings across all phases

2026-03-13 00:19:33 +08:00

calendar_sharing.py

Fix QA findings: flush before notify, dedup RSVP, sa_false, validation

2026-03-16 14:01:15 +08:00

connection.py

Action QA findings: refactor sync to accept resolved values