{"entries":[{"lastCommit":{"author":{"email":"tre@trezy.com","name":"Trezy","when":"2026-04-29T09:54:11.000000-05:00"},"committer":{"email":"tre@trezy.com","name":"Trezy","when":"2026-04-29T09:54:11.000000-05:00"},"hash":"608e9e7989850d6ee17ddc57bea8e6ce1198abcf","message":"feat(xrpc-proxy): add settings to control the XRPC proxy\n","tree":"44e351ade02de320dc7547b3b2135a0aa488b6d2"},"mode":"0100644","name":"app.rs","size":10280},{"lastCommit":{"author":{"email":"tre@trezy.com","name":"Trezy","when":"2026-03-19T19:32:04.000000-05:00"},"committer":{"email":"tre@trezy.com","name":"Trezy","when":"2026-03-19T19:32:04.000000-05:00"},"hash":"2d9cc0175cca121bc6050c6a7b2ec0ff97d25b57","message":"fix: fix auth tests\n","tree":"978f290b6c3f0ea3cd0d2eb0b9a59838c54c6e02"},"mode":"0100644","name":"auth.rs","size":1513},{"lastCommit":{"author":{"email":"chris.pardy@gmail.com","name":"Chris Pardy","when":"2026-05-01T07:46:55.000000-04:00"},"committer":{"email":"chris.pardy@gmail.com","name":"Chris Pardy","when":"2026-05-01T12:00:51.000000-04:00"},"hash":"68e7920bb9a64509838219e0ccd02a31d79f2c5f","message":"feat(scripts): trigger-keyed scripts subsystem\n\nReplaces the legacy `index_hook` lookup with a trigger-keyed scripts\ntable where each row's PK IS the trigger string the dispatcher resolves\non. There's no separate \"name\" or \"host column\" — bindings, names, and\ninline-vs-named all collapse into one column.\n\nTrigger grammar:\n\n record.index: — wildcard for any record event\n record.create: — specifically a create event\n record.update: — specifically an update event\n record.delete: — specifically a delete event\n xrpc.query: — XRPC query handler\n xrpc.procedure: — XRPC procedure handler\n labeler.apply: — label whose uri is at:////\n labeler.apply:_actor — label whose uri is a bare DID\n\nCascade for record events ONLY: the dispatcher tries\n`record.:` first, falls back to `record.index:`.\nNo cascade for XRPC or labeler triggers.\n\nSchema (one new migration, no data copy — origin/dev had no host\ncolumns to migrate from):\n\n- New `scripts` table (id PK + body / description / script_type +\n timestamps).\n- New `dead_letter_scripts` table (script_ref carries the trigger id).\n- Re-grants `scripts:read` to lexicon-readers, `scripts:manage` to\n lexicon-managers.\n\nCode surface:\n\n- New `src/lua/scripts.rs` dispatcher: ParsedTrigger grammar +\n validator, ScriptRow / ResolvedScript, `resolve` / `resolve_record_event`\n (with cascade), `run_record_event_script` (fail-open + retry +\n dead-letter), `run_label_applied_script`, `trigger_for_label_uri`\n (at:// → nsid, bare DID → _actor), and `run_record_event_once` for\n the dead-letter retry path.\n- New `src/admin/scripts.rs` CRUD (list / get / upsert / patch /\n delete) with trigger-id grammar validation at write-time and Lua\n body validation via `crate::lua::validate_script`.\n- New `Permission::ScriptsRead` / `Permission::ScriptsManage`.\n- `src/labeler.rs::apply_label` computes the trigger from\n `label.uri` and runs the script chain before persisting; rewritten\n labels persist; nil-returning scripts skip.\n- `src/record_handler.rs::handle_record_event` calls\n `run_record_event_script(state, &collection, &action, ...)` for\n both create/update and delete actions.\n- `src/xrpc/procedure.rs` and `src/xrpc/query.rs` look up via the new\n dispatcher (trigger `xrpc.procedure:` / `xrpc.query:`)\n before falling through to the default PDS-write / list flows.\n- `src/admin/dead_letters.rs::retry_single` resolves via the new\n dispatcher's cascade (404s if no script matches now).\n- Legacy `execute_hook_script`, `HookEvent`, and `run_hook_once`\n removed from `src/lua/execute.rs`.\n- `register_record_api` refactored to take Optional Claims / PdsAuth;\n new `register_record_api_no_auth` public wrapper for the no-auth\n contexts (record / labeler / query). PDS-touching methods\n (`r:save`, `r:delete`, `Record.save_all`) error cleanly with\n \"no PDS auth in this script context\" when registered without auth.\n- `r:save_local()` / `r:delete_local()` instance methods +\n `Record.delete_local(uri)` static for local-only mutation in any\n script context.\n- `r:delete()` proceeds with the local delete even on PDS failure\n (operator's logical action is removal regardless of PDS state).\n\nLegacy `lexicons.index_hook` column is retained but inert — operators\nwith existing data manually port into a `record.index:` script\nrow via the dashboard.\n\nTests:\n\n- 12 new lib tests in `src/lua/scripts.rs` covering trigger grammar,\n NSID validation, label URI routing, and the `_actor` special case.\n- 8 integration tests in `tests/lua_record_api.rs` covering the\n Record local API + the no-PDS-auth boundary.\n- 18 e2e tests in `tests/e2e_scripts.rs` covering admin CRUD,\n trigger validation, the cascade rule, label-script + record-event\n Record local mutation, and the dead-letter behavior when a label\n script reaches for `r:save()`.\n- The 4 query-script lib tests in `src/lua/xrpc_api.rs` updated to\n seed scripts via the new table (plus a single-connection test pool\n so the in-memory sqlite is shared).\n","tree":"1d9e7d348e68af85955c9556b3b8ca4383e9c46a"},"mode":"0100644","name":"db.rs","size":2163},{"lastCommit":{"author":{"email":"tre@trezy.com","name":"Trezy","when":"2026-03-18T16:01:16.000000-05:00"},"committer":{"email":"tre@trezy.com","name":"Trezy","when":"2026-03-18T16:03:53.000000-05:00"},"hash":"b7b2488f4e5c48434d2b275ce260ea21e8c65e42","message":"feat: add builtin oauth, removing AIP dependency\n","tree":"9dfb6f4d7ddccd097fd5358ef3226da8b9929b21"},"mode":"0100644","name":"fixtures.rs","size":2866},{"lastCommit":{"author":{"email":"tre@trezy.com","name":"Trezy","when":"2026-02-13T10:17:30.000000-06:00"},"committer":{"email":"tre@trezy.com","name":"Trezy","when":"2026-02-13T10:17:30.000000-06:00"},"hash":"c9c57d698aec7dcded2b3be527a42193f9eb3623","message":"test: add e2e tests for health, admin, and XRPC routes\n","tree":"19322617b282e5a0ce36bc3a7fcaa8e2067d0563"},"mode":"0100644","name":"mod.rs","size":201}],"lastCommit":{"author":{"email":"chris.pardy@gmail.com","name":"Chris Pardy","when":"2026-05-01T07:46:55.000000-04:00"},"committer":{"email":"chris.pardy@gmail.com","name":"Chris Pardy","when":"2026-05-01T12:00:51.000000-04:00"},"hash":"68e7920bb9a64509838219e0ccd02a31d79f2c5f","message":"feat(scripts): trigger-keyed scripts subsystem\n\nReplaces the legacy `index_hook` lookup with a trigger-keyed scripts\ntable where each row's PK IS the trigger string the dispatcher resolves\non. There's no separate \"name\" or \"host column\" — bindings, names, and\ninline-vs-named all collapse into one column.\n\nTrigger grammar:\n\n record.index: — wildcard for any record event\n record.create: — specifically a create event\n record.update: — specifically an update event\n record.delete: — specifically a delete event\n xrpc.query: — XRPC query handler\n xrpc.procedure: — XRPC procedure handler\n labeler.apply: — label whose uri is at:////\n labeler.apply:_actor — label whose uri is a bare DID\n\nCascade for record events ONLY: the dispatcher tries\n`record.:` first, falls back to `record.index:`.\nNo cascade for XRPC or labeler triggers.\n\nSchema (one new migration, no data copy — origin/dev had no host\ncolumns to migrate from):\n\n- New `scripts` table (id PK + body / description / script_type +\n timestamps).\n- New `dead_letter_scripts` table (script_ref carries the trigger id).\n- Re-grants `scripts:read` to lexicon-readers, `scripts:manage` to\n lexicon-managers.\n\nCode surface:\n\n- New `src/lua/scripts.rs` dispatcher: ParsedTrigger grammar +\n validator, ScriptRow / ResolvedScript, `resolve` / `resolve_record_event`\n (with cascade), `run_record_event_script` (fail-open + retry +\n dead-letter), `run_label_applied_script`, `trigger_for_label_uri`\n (at:// → nsid, bare DID → _actor), and `run_record_event_once` for\n the dead-letter retry path.\n- New `src/admin/scripts.rs` CRUD (list / get / upsert / patch /\n delete) with trigger-id grammar validation at write-time and Lua\n body validation via `crate::lua::validate_script`.\n- New `Permission::ScriptsRead` / `Permission::ScriptsManage`.\n- `src/labeler.rs::apply_label` computes the trigger from\n `label.uri` and runs the script chain before persisting; rewritten\n labels persist; nil-returning scripts skip.\n- `src/record_handler.rs::handle_record_event` calls\n `run_record_event_script(state, &collection, &action, ...)` for\n both create/update and delete actions.\n- `src/xrpc/procedure.rs` and `src/xrpc/query.rs` look up via the new\n dispatcher (trigger `xrpc.procedure:` / `xrpc.query:`)\n before falling through to the default PDS-write / list flows.\n- `src/admin/dead_letters.rs::retry_single` resolves via the new\n dispatcher's cascade (404s if no script matches now).\n- Legacy `execute_hook_script`, `HookEvent`, and `run_hook_once`\n removed from `src/lua/execute.rs`.\n- `register_record_api` refactored to take Optional Claims / PdsAuth;\n new `register_record_api_no_auth` public wrapper for the no-auth\n contexts (record / labeler / query). PDS-touching methods\n (`r:save`, `r:delete`, `Record.save_all`) error cleanly with\n \"no PDS auth in this script context\" when registered without auth.\n- `r:save_local()` / `r:delete_local()` instance methods +\n `Record.delete_local(uri)` static for local-only mutation in any\n script context.\n- `r:delete()` proceeds with the local delete even on PDS failure\n (operator's logical action is removal regardless of PDS state).\n\nLegacy `lexicons.index_hook` column is retained but inert — operators\nwith existing data manually port into a `record.index:` script\nrow via the dashboard.\n\nTests:\n\n- 12 new lib tests in `src/lua/scripts.rs` covering trigger grammar,\n NSID validation, label URI routing, and the `_actor` special case.\n- 8 integration tests in `tests/lua_record_api.rs` covering the\n Record local API + the no-PDS-auth boundary.\n- 18 e2e tests in `tests/e2e_scripts.rs` covering admin CRUD,\n trigger validation, the cascade rule, label-script + record-event\n Record local mutation, and the dead-letter behavior when a label\n script reaches for `r:save()`.\n- The 4 query-script lib tests in `src/lua/xrpc_api.rs` updated to\n seed scripts via the new table (plus a single-connection test pool\n so the in-memory sqlite is shared).\n","tree":"1d9e7d348e68af85955c9556b3b8ca4383e9c46a"}}