appview/src/lib/ at fix/backfill-trigger-env · colibri.social/appview

at_uri.rs

feat: Push notifications for all message types

4 hours ago

auth_bridge.rs

feat: WebSocket auth via protocols

3 weeks ago

author_cache.rs

feat: custom colibri profiles + onboarding

3 weeks ago

blob_cache.rs

feat: range blob handling

3 weeks ago

bsky.rs

feat: Bot badges

3 weeks ago

channel_authz.rs

feat: community migrations

2 weeks ago

channel_unread.rs

fix: Batch and cap listUnreadStatus queries, require membership (#33)

6 days ago

colibri.rs

fix: Spoofing prevention methods

2 weeks ago

community_authz.rs

feat: voice channel mod tooling & permission

1 week ago

community_credentials.rs

feat: delete endpoint for communities, full actor data for blocked users

1 month ago

community_record.rs

fix: Format & Clippy warnings

1 month ago

community_write.rs

fix: Format & Clippy warnings

1 month ago

crypto.rs

feat: on-protocol moderation writes + community.create / registerCredentials Moves `social.colibri.moderation` records off the local `record_data` cache and onto the community's actual PDS. Adds the credential-management infrastructure this requires plus the two registration endpoints needed to populate it end-to-end. Plumbing - `lib::crypto` — AES-256-GCM authenticated encryption (aes-gcm crate). Master key loaded once from `CREDENTIAL_ENCRYPTION_KEY` (base64, 32 bytes) into a process-wide `OnceLock`. - `community_credentials` table (migration m20260515) + model. Ciphertext + nonce stored as base64 strings. Each row is tagged `appview_managed` or `byo`. - `lib::pds_client` — minimal HTTP client for `com.atproto.server. createSession`, `com.atproto.repo.createRecord` (with optional pinned rkey), `com.atproto.repo.deleteRecord` (reserved for follow-up), `com.atproto.server.createAccount` (accepts optional admin Basic auth). - `lib::moderation::write_moderation_record` rewritten: load credentials → createSession → createRecord on the community repo; optimistic best-effort local insert into `record_data` so the issuer's own queries reflect the change immediately. Local-insert failures log and rely on the upstream firehose ingester to reconcile. Variant A: `social.colibri.community.create` - Auths the caller. Generates random handle/email/password. - Calls createAccount on `PDS_LOC` with HTTP Basic auth from `PDS_ADMIN_USER` / `PDS_ADMIN_PASS` so the PDS mints an account without an invite code. - Stores credentials encrypted, then createSession to obtain an access JWT for the bootstrap writes. - Pre-generates four TIDs (category, channel, role, member) so every record can embed forward references before any PDS round-trip, then writes five records on the new repo: * `social.colibri.community` pinned at `rkey: "self"` * `social.colibri.category` ("General") * `social.colibri.channel` ("general", text type) * `social.colibri.role` ("Owner") with the full permission catalog and `protected: true` * `social.colibri.member` with the caller as subject and the Owner role assigned - Response carries all five at-URIs + the new community DID. Variant B: `social.colibri.community.registerCredentials` - BYO submission of (DID, PDS endpoint, identifier, app password). - Proof-of-control: calls createSession against the supplied PDS and rejects the submission if the resulting session's DID doesn't match the claimed community DID. - Stores credentials encrypted; no bootstrap. Lexicons (separate PR in the website repo) - `social.colibri.community` revision bumped to 2 with `key: "literal:self"`. - `social.colibri.role` revision bumped to 2 with a new optional `protected: boolean` field. Other - `Permission::all()` enumerates the full catalog for the bootstrap role. - Boot-time invariant check: AppView panics with a descriptive message if `PDS_LOC` / `PDS_ADMIN_USER` / `PDS_ADMIN_PASS` / `APPVIEW_HANDLE_DOMAIN` are missing. Tests: 150 passing (22 new across crypto, credentials store, pds-client, community.create, registerCredentials). Follow-ups in this stack (matches the agreed three-way split): - Filter inbound message/reaction records from banned users at the `ack_tap_msg` persistence site and at read time. - Delete `social.colibri.member` records on ban / kick / leave via `pds_client::delete_record` (which is already wired but unused). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2 months ago

db.rs

feat: performance improvements for backfill & events (sharding + caching)

3 weeks ago

did_document.rs

feat: performance improvements for backfill & events (sharding + caching)

3 weeks ago

dismissed_applications.rs

feat: Oh god so many things

3 weeks ago

embed_cache.rs

fix: harden getImage endpoint (#30)

6 days ago

embed_fetch.rs

fix: Harden web-push implementation (#27)

6 days ago

event_scope.rs

feat: More things(tm)

3 weeks ago

events.rs

feat: Mentionable roles

1 week ago

get_atproto_record.rs

Screw conventional commits, this was a lot of work

1 month ago

get_state.rs

feat: VC

1 week ago

handler.rs

fix: Thread channel scope through permission checks for mod stuff (#34)

6 days ago

http.rs

fix: DID locking, handle resolution cache, collection pooling

2 weeks ago

hum_client.rs

feat: voice channel mod tooling & permission

1 week ago

hum_guard.rs

fix: lint, failing flaky test

2 weeks ago

klipy.rs

feat: GIF picker

3 weeks ago

list_atproto_records.rs

fix: Add pagination to remaining endpoints (#28)

6 days ago

map_tap_event.rs

Update map_tap_event.rs

9 hours ago

mod.rs

feat: Push notifications for all message types

4 hours ago

moderation.rs

feat: Oh god so many things

3 weeks ago

notification_preferences.rs

feat: Push notifications for all message types

4 hours ago

notifications.rs

feat: Push notifications for all message types

4 hours ago

owner_role_heal.rs

feat: voice channel mod tooling & permission

1 week ago

pds_client.rs

fix: Properly guard GET requests (#26)

6 days ago

permissions.rs

feat: Mentionable roles

1 week ago

push_send.rs

feat: Push notifications for all message types

4 hours ago

push_subscriptions.rs

fix: Harden web-push implementation (#27)

6 days ago

range.rs

feat: range blob handling

3 weeks ago

reactions.rs

Screw conventional commits, this was a lot of work

1 month ago

refill.rs

feat: new `REFILL_FROM_SCRATCH` env to retrigger backfill for known DIDs

6 days ago

responses.rs

fix: Properly guard GET requests (#26)

6 days ago

sentry.rs

fix: Sentry releases (#13)

1 week ago

service_auth.rs

fix: harden service auth checks (#32)

6 days ago

state.rs

feat: VC

1 week ago

tap.rs

feat: new `REFILL_FROM_SCRATCH` env to retrigger backfill for known DIDs

6 days ago

test_fixtures.rs

refactor: shared test fixtures in `lib::test_fixtures` Centralize the patterns that were duplicated across ~20 test modules: - `mock_db()` — replaces every bare `MockDatabase::new(DatabaseBackend::Postgres).into_connection()`. Chained constructions (`.append_query_results(...).into_connection()`) stay inline since each one is unique per test. - `owner_authz()` / `empty_authz()` — replace the `ActorAuthz { is_owner: true/false, member: None, roles: vec![] }` literals in handler tests. - `role(name, position, perms)` / `role_with_override(...)` / `member( subject, roles)` — convenience constructors that hide the full `ColibriRole`/`ColibriMember` shape. Module is `#[cfg(test)]`-gated under `lib::`, so it's never compiled into the release binary. Each test module imports only the fixtures it uses. Pure cleanup; 155 tests still pass; clippy clean. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2 months ago

time.rs

chore: satisfy `cargo fmt` and `cargo clippy -- -D warnings` - Apply rustfmt across the new modules. - `#[allow(dead_code)]` on the Permission catalog and on placeholder helpers (`is_user_banned`, `ACTION_UNHIDE_MESSAGE`, `ActorAuthz.member`) that are intentional stubs for endpoints not in this PR. - `#[allow(clippy::too_many_arguments)]` on the two test-injection helpers (`moderate_user_with`, `delete_invitation_with`); the right fix is the handler combinator in the refactor plan. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2 months ago

validate_state.rs

chore: Tests

2 months ago

vapid_config.rs

fix: Harden web-push implementation (#27)

6 days ago

voice_control.rs

feat: voice channel mod tooling & permission

1 week ago

voice_events.rs

feat: voice channel mod tooling & permission

1 week ago

Configure Feed

Configure Feed