silberengel/next.orly.dev - next.orly.dev - Gitea: Git with a cup of tea

Author	SHA1	Message	Date
woikos	9c231169d2	Complete DDD improvements: handlers, ACL injection, Rule decomposition - Simplify HandleEvent to thin protocol adapter (~320 -> ~130 lines) - Create ingestion service for full event pipeline orchestration - Add specialkinds.go for special kind handler registration - Eliminate global ACL singleton with injectable Registry interface - Add ACLRegistry() accessor to Server for dependency injection - Decompose Rule value object into AccessControl, Constraints, TagValidationConfig sub-components for cleaner organization - Add LoggingSubscriber for domain event analytics - Update all policy tests for embedded struct initialization - Update DDD_ANALYSIS.md to 10/10 maturity score Files modified: - app/handle-event.go: Simplified to delegate to ingestion service - app/specialkinds.go: NEW - Special kind handler registration - app/server.go: Add aclRegistry field and ACLRegistry() accessor - pkg/interfaces/acl/acl.go: Add Registry interface - pkg/acl/acl.go: Add accessor methods for privatized fields - pkg/policy/policy.go: Decompose Rule into sub-value objects - pkg/policy/*_test.go: Update struct literals for embedded types - pkg/event/ingestion/service.go: Add ACLMode, special kinds support - pkg/event/processing/processing.go: Add domain event dispatcher - pkg/domain/events/subscribers/logging.go: NEW - Analytics subscriber - DDD_ANALYSIS.md: Update to 10/10 maturity score Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	4 months ago
mleku	869006c4c3	Add comprehensive tests for new policy fields and combinations Introduce tests to validate functionality for new policy fields, including `max_expiry_duration`, `protected_required`, `identifier_regex`, and `follows_whitelist_admins`. Also, cover combinations of new and existing fields to ensure compatibility and precedence rules are correctly enforced. bump to v0.31.2	6 months ago
mleku	f1ddad3318	fix policy logic error caused by interface breach	6 months ago
mleku	1c376e6e8d	migrate to new nostr library	6 months ago
mleku	ebe0012863	fix auth, read/white whitelisting and rule precedence, bump to v0.29.13 Policy System Verification & Testing (Latest Updates) Authentication & Security: Verified policy system enforces authentication for all REQ and EVENT messages when enabled Confirmed AUTH challenges are sent immediately on connection and repeated until authentication succeeds Validated unauthenticated requests are silently rejected regardless of other policy rules Access Control Logic: Confirmed privileged flag only restricts read access (REQ queries), not write operations (EVENT submissions) Validated read_allow and privileged use OR logic: users get access if EITHER they're in the allow list OR they're a party to the event (author/p-tag) This design allows both explicit whitelisting and privacy for involved parties Kind Whitelisting: Verified kind filtering properly rejects unlisted events in all scenarios: Explicit kind.whitelist: Only listed kinds accepted, even if rules exist for other kinds Implicit whitelist (rules only): Only kinds with defined rules accepted Blacklist mode: Blacklisted kinds rejected, others require rules Added comprehensive test suite (10 scenarios) covering edge cases and real-world configurations	6 months ago