Marc-André Bombeck b37e4f5df7 fix(admin): the last-admin rule counts only admins who can sign in ...

Demoting an admin counted every admin, pending deletion included, so after
one admin deleted their account the other could step down and leave the
instance with no admin who can sign in or undo the deletion. Both the
demotion and an admin's own deletion now count the other admins not pending
deletion, inside the transaction that makes the change, under one roster
lock, so two at the same moment cannot each count the other.

2026-10-25 17:02:32 +01:00

..

ai-quality

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

ai-settings

fix(admin): lift the bench when the operator fixes the shared provider

2026-10-25 00:42:20 +02:00

app-logs

refactor(validation): route every ISO instant through isoDateTime

2026-10-16 03:57:46 +02:00

audit-log

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

backup/test

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

backups

fix(db-backup): read the off-host leg of the dump on its own

2026-10-25 16:53:24 +01:00

central-codex

fix(ai): close the notes' windows on a fresh Codex sign-in

2026-10-25 01:03:50 +02:00

data

fix(sync): expire delta cursors issued before a restore or a data wipe

2026-09-27 13:46:38 +02:00

drain-per-sample-cumulative

fix(api): bound every JSON body read

2026-06-10 11:36:51 +02:00

encryption

feat(admin): replace the key backup step with a recovery kit

2026-10-25 13:32:29 +01:00

host-metrics

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

import-apple-health-export

refactor(jobs): declare every queue in a typed registry and load handlers on first job

2026-10-23 12:36:09 +02:00

invites

refactor(api): read the remaining settings and admin route bodies through parseJsonBody

2026-10-23 11:29:23 +02:00

maintenance

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

monitoring

fix(monitoring): route Umami events to the endpoint the tracker was built with

2026-10-04 15:13:52 +02:00

notifications

fix(http): refuse state changes a browser sends from another site

2026-10-25 13:52:04 +01:00

provider-health

refactor(ai): move the stored-key opener and the Anthropic host check out of provider.ts

2026-10-23 17:19:21 +02:00

recovery-kit

feat(admin): replace the key backup step with a recovery kit

2026-10-25 13:32:29 +01:00

recovery-readiness

feat(recovery): judge the bucket's rule for database dumps in readiness

2026-10-25 16:00:35 +01:00

rollups/recompute

fix(api): bound every JSON body read

2026-06-10 11:36:51 +02:00

settings

refactor(api): read the remaining settings and admin route bodies through parseJsonBody

2026-10-23 11:29:23 +02:00

status

feat(ops): name 1536 MB as the supported memory floor

2026-10-21 19:36:06 +02:00

support-report

feat(admin): fill the redacted support report with its redaction guard

2026-10-15 22:15:50 +02:00

tokens

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

users

fix(admin): the last-admin rule counts only admins who can sign in

2026-10-25 17:02:32 +01:00