gstack

Commit Graph

Author	SHA1	Message	Date
Garry Tan	bca29338cf	fix: verify-rls.sh — match current policy (inserts allowed, fix HTTP code parsing) - INSERTs are now expected to succeed (kept for old client compat) - Fix HTTP code parsing bug (401000 concatenation from -sf + write-out) - Accept 200+empty as PASS for SELECT denial (RLS filtering)	2026-03-24 15:03:07 -07:00
Garry Tan	cc60a024eb	fix: pre-landing review fixes — JSONB field order, version filter, RLS verification - Dashboard JSON parsing: use per-object grep instead of field-order-dependent regex (JSONB doesn't preserve key order) - Version distribution: filter to skill_run events only (was counting all types) - verify-rls.sh: only 401/403 count as PASS (not empty 200 or 5xx); add Authorization header to test as anon role properly - Remove dead empty loop in community-pulse	2026-03-24 14:34:06 -07:00
Garry Tan	3330b8e68d	test: RLS smoke test + telemetry field name verification - verify-rls.sh: 9-check smoke test (5 reads + 3 inserts + 1 update) verifying anon key is fully locked out after migration. - telemetry.test.ts: verifies JSONL uses raw field names (v, ts, sessions) that the edge function expects, not Postgres column names. - README.md: fixes privacy claim to match actual RLS policy.	2026-03-24 14:20:08 -07:00

Author

SHA1

Message

Date

Garry Tan

bca29338cf

fix: verify-rls.sh — match current policy (inserts allowed, fix HTTP code parsing)

- INSERTs are now expected to succeed (kept for old client compat)
- Fix HTTP code parsing bug (401000 concatenation from -sf + write-out)
- Accept 200+empty as PASS for SELECT denial (RLS filtering)

2026-03-24 15:03:07 -07:00

Garry Tan

cc60a024eb

fix: pre-landing review fixes — JSONB field order, version filter, RLS verification

- Dashboard JSON parsing: use per-object grep instead of field-order-dependent
  regex (JSONB doesn't preserve key order)
- Version distribution: filter to skill_run events only (was counting all types)
- verify-rls.sh: only 401/403 count as PASS (not empty 200 or 5xx); add
  Authorization header to test as anon role properly
- Remove dead empty loop in community-pulse

2026-03-24 14:34:06 -07:00

Garry Tan

3330b8e68d

test: RLS smoke test + telemetry field name verification

- verify-rls.sh: 9-check smoke test (5 reads + 3 inserts + 1 update)
  verifying anon key is fully locked out after migration.
- telemetry.test.ts: verifies JSONL uses raw field names (v, ts, sessions)
  that the edge function expects, not Postgres column names.
- README.md: fixes privacy claim to match actual RLS policy.

2026-03-24 14:20:08 -07:00

3 Commits