T

weichen d2f96e79bb Admit private member uploads and preserve masked metadata edits

Why:
Nested unchanged credential masks left empty parents that looked like managed
subtree overwrites. Shared members also hit an owner-only upload guard, while
upload ingestion cards could disclose private filenames and parser metadata.

Evidence:
SELF independent nested-mask probe, HTTP nested/mixed writeback, member upload,
project card privacy and authorization-change regressions failed before each fix
and passed after it. Affected settings/server suite passed; exact final-object
build and independent replay remain delivery gates owned by the task coordinator.

Impact:
Prune only parents emptied by ignored masks; explicit empty/real managed writes
stay rejected. Registered uploads check live work and trusted project existence,
keep originals owned by the actor, and recheck before persistence. Suppress only
upload project cards when no private stream exists; explicit structure cards and
unregistered upload behavior remain available.

Refs:
Dev project-member-access plan r1 Task 1/R5; independent nested mask P2;
2026-10-13 composed member-upload and private project-stream acceptance findings

2026-10-13 10:23:37 +00:00

.gitea/workflows

Install house-style Python packages before backend CI

2026-10-03 12:46:10 +00:00

cmd

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

deps

Bump embedded core pin to TS mirror fix 5773e74

2026-10-13 07:07:47 +00:00

envs

Add the startup configuration pipe with file and env layers plus explain