Files
backspace/packages/server
Jannis Braun e82ccbde62 fix(federation): tighten peering-notifications GET response to spec shape
db.select() returned every column including userId; spec §4.9
defined the response row WITHOUT userId. The leak is harmless today
(user queries their own rows) but expands the public API surface
beyond the spec, and would become part of the contract once Task 10
generates client types. Switching to explicit column projection.
2026-04-26 22:27:43 +02:00
..