UMBRA

History

Kyle Pope e6e81c59e7 Phase 2: Shared calendars backend core + QA fixes

Router: invite/accept/reject flow, membership CRUD, event locking
(timed + permanent), sync endpoint, local color override.
Services: permission hierarchy, atomic lock acquisition, disconnect cascade.
Events: shared calendar scoping, permission/lock enforcement, updated_by tracking.
Admin: sharing-stats endpoint. nginx: rate limits for invite + sync.

QA fixes: C-01 (read-only invite gate), C-02 (updated_by in this_and_future),
W-01 (pre-commit response build), W-02 (owned calendar short-circuit),
W-03 (sync calendar_ids cap), W-04 (N+1 owner name batch fetch).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-06 04:46:17 +08:00

audit.py

Extract real client IP from proxy headers instead of Docker bridge IP

2026-03-01 19:20:07 +08:00

auth.py

L-03: Session 7-day sliding window with 30-day hard ceiling

2026-02-27 15:45:15 +08:00

calendar_sharing.py

Phase 2: Shared calendars backend core + QA fixes

2026-03-06 04:46:17 +08:00

connection.py

Address QA warnings W-02 through W-07