Kyle Pope 925c9caf91 Fix QA and pentest findings for event invitations ...

C-01: Use func.count() for invitation cap instead of loading all rows
C-02: Remove unused display_calendar_id from EventInvitationResponse
F-01: Add field allowlist for invited editors (blocks is_starred,
      recurrence_rule, calendar_id mutations)
W-02: Memoize existingInviteeIds Set in EventDetailPanel
W-03: Block per-occurrence overrides on declined/pending invitations
S-01: Make can_modify non-optional in EventInvitation TypeScript type

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-17 01:28:01 +08:00

..

jobs

Address code review findings across all phases

2026-03-13 00:19:33 +08:00

models

Add per-invitee can_modify toggle for event edit access

2026-03-17 00:59:36 +08:00

routers

Fix QA and pentest findings for event invitations

2026-03-17 01:28:01 +08:00

schemas

Fix QA and pentest findings for event invitations

2026-03-17 01:28:01 +08:00

services

Fix QA and pentest findings for event invitations

2026-03-17 01:28:01 +08:00

__init__.py

Initial commit

2026-02-15 16:13:41 +08:00

config.py

Auto-derive CORS_ORIGINS from UMBRA_URL in production

2026-03-02 17:53:26 +08:00

database.py

Phase 2: Backend critical path optimizations

2026-03-13 00:05:54 +08:00

main.py

Implement event invitation feature (invite, RSVP, per-occurrence override, leave)

2026-03-15 02:47:27 +08:00