Kyle Pope cdbf3175aa Fix remaining QA warnings: lazy=raise on CalendarMember + bidirectional connection check ...

W-03: invite_member now verifies the target user has a reciprocal
UserConnection row before sending the invite.

W-04: CalendarMember relationships changed from lazy="selectin" to
lazy="raise". All queries that access .user, .calendar, or .inviter
already use explicit selectinload() — verified across all routers
and services.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-06 23:45:10 +08:00

..

jobs

Fix QA review findings: 3 critical, 5 warnings, 1 suggestion

2026-03-06 23:41:08 +08:00

models

Fix remaining QA warnings: lazy=raise on CalendarMember + bidirectional connection check

2026-03-06 23:45:10 +08:00

routers

Fix remaining QA warnings: lazy=raise on CalendarMember + bidirectional connection check

2026-03-06 23:45:10 +08:00

schemas

Fix QA review findings: 3 critical, 5 warnings, 1 suggestion

2026-03-06 23:41:08 +08:00

services

Fix 2 pentest findings: unlock permission check + permanent lock preservation

2026-03-06 23:37:05 +08:00

__init__.py

Initial commit

2026-02-15 16:13:41 +08:00

config.py

Auto-derive CORS_ORIGINS from UMBRA_URL in production

2026-03-02 17:53:26 +08:00

database.py

Fix code review findings: security hardening and frontend fixes

2026-02-16 07:49:21 +08:00

main.py

Phase 2: Shared calendars backend core + QA fixes

2026-03-06 04:46:17 +08:00