 fszontagh
|
0d1f0a3577
fix(lmdb): never call mdb_dbi_open from the read path
|
hai 1 mes |
|
fszontagh
|
60128349a7
docs: make the tree state what is actually true
|
hai 1 mes |
|
fszontagh
|
82381ff7ec
perf(scan): evaluate filters on the yyjson tree, materialise only the page
|
hai 1 mes |
|
fszontagh
|
f30f56565a
feat(v2.8.0): unfreeze post-creation settings; fix two silent-truncation bugs
|
hai 1 mes |
|
fszontagh
|
51f6b6f87a
fix(lmdb): cache the dbi only after commit - aborted writes poisoned the collection
|
hai 1 mes |
|
fszontagh
|
9f4aa18398
release(v2.8.0): file TTL, per-type retention, and update() no longer wipes expiry
|
hai 1 mes |
|
fszontagh
|
97f950f7d3
release(v2.7.1): paging fast path + yyjson writer on the view branch
|
hai 1 mes |
|
fszontagh
|
bbbf56f94f
perf(scan): stop decoding the whole collection to return one page
|
hai 1 mes |
|
fszontagh
|
6243bcda63
merge: v2.7.0 row- and column-level security
|
hai 1 mes |
|
fszontagh
|
7a6fac7da7
release(v2.7.0): row- and column-level security, off by default
|
hai 1 mes |
|
fszontagh
|
93e31ca532
fix(security): per-call principal identity; project-scope subscribe; surface denials
|
hai 1 mes |
|
fszontagh
|
14e3e7d31e
feat(security): enforcement wired into every data handler; blocked on per-call identity
|
hai 1 mes |
|
fszontagh
|
1dff5cc157
feat(security): principal identity + access policy engine (enforcement WIP)
|
hai 1 mes |
|
fszontagh
|
10241924fb
release(v2.6.0): project-scoped file storage
|
hai 1 mes |
|
fszontagh
|
a7116fedd2
docs(spec): RLS/CLS design + project-scoped files plan
|
hai 1 mes |
|
fszontagh
|
49316a7cff
docs: correct the claim that view filters are a security boundary
|
hai 1 mes |
|
fszontagh
|
44bb2baafe
docs: v2.4.5 collection namespacing + versioning switch; fix stale ms default
|
hai 1 mes |
|
fszontagh
|
e7221e46a7
release(v2.4.5): namespace collection management; per-collection versioning switch
|
hai 1 mes |
|
fszontagh
|
fa99931de5
docs(plan): pre-flight fixes before execution
|
hai 1 mes |
|
fszontagh
|
ee2291e300
docs(plan): relations v2.5.0 implementation plan
|
hai 1 mes |
|
fszontagh
|
8cd73fb705
docs: record the LMDB per-process POSIX lock hazard and the count surfaces
|
hai 1 mes |
|
fszontagh
|
635a617806
fix(audit): never open a second MDB_env in-process; count via LMDB everywhere
|
hai 1 mes |
|
fszontagh
|
ddf0a7f3d2
fix(count): serve Count from LMDB like every other read
|
hai 1 mes |
|
fszontagh
|
e73f2603ab
docs(spec): relations design for v2.5.0
|
hai 1 mes |
|
fszontagh
|
55f9209b79
release(v2.4.4): sub-db identity sentinel + placement audit/repair
|
hai 1 mes |
|
fszontagh
|
236060d4e3
release(v2.4.3): LMDB handle lifetime + eviction drain cap + live assertions
|
hai 1 mes |
|
fszontagh
|
6132c2535a
release(v2.4.2): project-scoped views; views were unreachable since v2.3
|
hai 1 mes |
|
fszontagh
|
cc0fe52080
release(v2.4.1): --version reports the real version
|
hai 1 mes |
|
fszontagh
|
ee59b96431
release(v2.4.0): per-listener TLS + bearer-token auth
|
hai 3 meses |
|
fszontagh
|
96d21d63a3
v2.4 Stage E: Client TLS + auth_token
|
hai 3 meses |
