3 Commits

Include renames

Author	SHA1	Message	Date
Frederic CabassutandClaude Opus 4.6	b3d40999c9	fix: enforce note ownership across all API endpoints ... - Add userId check to /api/notes/reorder (was completely unprotected) - Scope syncNoteTags by userId to prevent cross-user tag pollution - Verify attachmentId belongs to noteId in attachment operations (IDOR fix) - Remove DEFAULT 0 from userId columns so missing userId fails loudly - Update test helpers and test data to provide required userId Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 01:50:12 +01:00
Frederic CabassutandClaude Opus 4.6	5bed796396	fix(test): update tests for multi-user schema and improve e2e reliability ... Update unit test helpers with full multi-user schema, fix auth tests to include email field, and improve e2e tests with specific card targeting and force clicks for hover-revealed buttons. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 01:10:37 +01:00
Claude	66c91df983	feat: Crumbs by Bretzel — self-hostable notes app MVP ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-05 21:16:45 +01:00