- GET /v1/capabilities and the extended sync entity allowlist (§0, §1).
- Shared ledgers (§7): ledgers, members and hashed one-time invite codes;
X-Balance-Ledger selects the space on /v1/sync and /v1/attachments with
its own records, change stream and cursor. Personal space keeps the v1
tables and behaviour; the migration only adds tables.
- Attachments (§8): SHA-256, size and media type checks, blob files in
BALANCE_ATTACHMENTS_DIR (default: attachments next to the database),
garbage collection of unreferenced blobs with a grace period for fresh
uploads, and ledger deletion removes its blobs.
- Tests for every new endpoint and error code; API, sync, data model,
security, deployment and README docs updated.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The Go implementation is preserved in the v1.0.0 tag. Its observable
behaviour stays the API reference: responses recorded from the Go server
live in tools/compatibility_expected.txt, and tools/compatibility.py now
compares the Rust server against them (--update re-records after an
intentional change). The Go SQLite schema is frozen in
tests/fixtures/go_schema_v1.sql for the existing-database test.
Move the web client from internal/httpapi/web to web/, drop the Go CI job
and Go version pin, and update README, AGENTS.md and docs.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Add a 1280x640 cover shown at the top of the README, a square variant and
a text-free repository avatar that stays legible at small sizes. SVG
sources are kept next to the rendered PNGs.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The builder stage runs on the build platform and cross-compiles Rust,
with GCC cross compilers for bundled SQLite, so only the small runtime
stage runs under QEMU. The workflow sets up QEMU via the Docker Hub
mirror and pushes all three platforms under the same tags.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
BuildKit's docker-container driver ignores the host daemon's
registry-mirrors, and the runner timed out reaching auth.docker.io.
Configure a docker.io mirror (DOCKERHUB_MIRROR, default mirror.gcr.io).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Login failed with "Username required" because REGISTRY_OWNER was not set.
Default the registry host to this Gitea instance, the owner to the
repository owner and the user to the tag pusher, lowercase the image
name, and keep a failed GHA cache export from failing the build.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Go 1.25 ServeMux redirects unclean paths with 301, while newer Go (and the
Rust port that mirrors it) uses 307, so the Go reference built in CI
disagreed with Rust on '/a/../app.js'.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
wtandClaude Opus 5.5