pastilhasandClaude Opus 5
bbb16d6ed3
Tenth extraction, and the first where the blocker was a permission rather than a path. The wallet was kind: 'admin' — owner only, never grantable — and plugin permissions are always kind: 'app'. mount.ts forces that and the manifest has no field for anything else, deliberately, so a plugin cannot ask to be restricted. Extraction therefore could not preserve admin. Raised before moving any code, because turning "the server owner's bitcoin" into a row in the grants list beside Photos and Music is the kind of change nobody notices until someone ticks it. Made anyway, and the objection inverts: every wallet query is scoped by user_id, taken from X-Officer-User which the platform injects from the session, so granting the permission gives an account its OWN wallet rather than access to anyone else's — including to the owner, whose bypass covers permission checks and not query scoping. kind: 'admin' was single-user thinking. Named bitcoin-wallet, not wallet: appName drives route, API prefix, table prefix and install key together, so the name should say what it is. Tables are bitcoin_wallet_*; the prefix guard normalises the hyphen. Verified free before committing to it — no wallet table exists on any server, and db:push would treat a rename as a drop plus a create. registry.test.ts re-anchored: `wallet` was its canonical kind: 'admin' fixture and its no-selfService fixture. Now user-admin/server-admin and terminal, with a note that a plugin's permissions are always `app` — which is exactly why this one needed a decision rather than a default. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
17 lines
715 B
JSON
17 lines
715 B
JSON
{
|
|
"src/apps/officer-web/Screens": 122,
|
|
"src/workspaces/components": 47,
|
|
"src/workspaces/officerdev/src/apps/AppStore": 6,
|
|
"src/workspaces/officerdev/src/apps/Chat": 12,
|
|
"src/workspaces/officerdev/src/apps/ChatHistory": 1,
|
|
"src/workspaces/officerdev/src/apps/CodeEditor": 5,
|
|
"src/workspaces/officerdev/src/apps/Dashboards": 11,
|
|
"src/workspaces/officerdev/src/apps/Dav": 7,
|
|
"src/workspaces/officerdev/src/apps/FileBrowser": 15,
|
|
"src/workspaces/officerdev/src/apps/FileViewer": 38,
|
|
"src/workspaces/officerdev/src/apps/Preview": 4,
|
|
"src/workspaces/officerdev/src/apps/QrTransfer": 5,
|
|
"src/workspaces/officerdev/src/apps/SystemMonitor": 1,
|
|
"src/workspaces/officerdev/src/apps/Terminal": 10
|
|
}
|