rspace-online

Commit Graph

Author	SHA1	Message	Date
Jeff Emmett	0eb721d12e	feat: object visibility membrane — per-object access filtering Add per-object visibility levels (viewer/member/moderator/admin) across all rSpace modules. Objects default to 'viewer' (open), so existing data remains visible. Server-side GET handlers resolve caller role and filter; MCP tools filter lists and check single-item access; frontend components do defense-in-depth filtering with visibility picker (mod+) and lock badges. - shared/membrane.ts: types + isVisibleTo, filterByVisibility, filterArrayByVisibility - 9 schema files: visibility field on TaskItem, NoteItem, CalendarEvent, etc. - 8 module routes: GET handlers filter by caller role - 6 MCP tool files: list filtering + single-item visibility checks - 4 frontend components: client filtering, picker, lock badges - 18 unit tests (all passing) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-12 11:09:44 -04:00
Jeff Emmett	18b61fa5e6	feat: rebuild rNotes as vault browser, editor code now in rDocs Phase 2-3 of the rNotes/rDocs split. Rewrites rNotes from a full TipTap editor (~1800 lines) into a lightweight Obsidian/Logseq vault sync and browse module (~560 lines). Rich editing features remain in rDocs. rNotes vault browser: - VaultDoc schema: metadata-only in Automerge (title, tags, hash, wikilinks) - ZIP vault uploads stored on disk at /data/files/uploads/vaults/ - File tree browser, search, read-only markdown preview - Wikilink graph data endpoint for visualization - 5 MCP tools: list_vaults, browse_vault, search_vault, get_vault_note, sync_status - Browser extension compat shim redirects old API calls to rDocs Cleanup: - Removed dead editor files from rnotes (converters, components, local-first-client) - Updated MI integration to use getRecentVaultNotesForMI - Updated ONTOLOGY.md with new module descriptions - Bumped JS cache versions Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-10 18:05:35 -04:00
Jeff Emmett	2e8e702d75	feat(mcp): 101 MCP tools across all 35 rApps + security hardening + MI integration - Add centralized auth helper (_auth.ts) with resolveAccess() enforcing space visibility (public/permissioned/private) and role-based access - Retrofit 5 existing tool groups (rcal, rnotes, rtasks, rwallet, spaces) with resolveAccess gates - Add 30 new MCP tool files covering all remaining rApps: rsocials, rnetwork, rinbox, rtime, rfiles, rschedule, rvote, rchoices, rtrips, rcart, rexchange, rbnb, rvnb, crowdsurf, rbooks, rpubs, rmeets, rtube, rswag, rdesign, rsplat, rphotos, rflows, rdocs, rdata, rforum, rchats, rmaps, rsheet, rgov - Add ForMI data exports to all module mod.ts files - Wire 6 core modules into MI context (mi-data-queries.ts, mi-routes.ts) - forceAuth for sensitive modules (rinbox, rchats) - Omit sensitive fields (storagePath, fileHash, bodyHtml) from responses Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-10 10:25:17 -04:00

Author

SHA1

Message

Date

Jeff Emmett

0eb721d12e

feat: object visibility membrane — per-object access filtering

Add per-object visibility levels (viewer/member/moderator/admin) across
all rSpace modules. Objects default to 'viewer' (open), so existing data
remains visible. Server-side GET handlers resolve caller role and filter;
MCP tools filter lists and check single-item access; frontend components
do defense-in-depth filtering with visibility picker (mod+) and lock badges.

- shared/membrane.ts: types + isVisibleTo, filterByVisibility, filterArrayByVisibility
- 9 schema files: visibility field on TaskItem, NoteItem, CalendarEvent, etc.
- 8 module routes: GET handlers filter by caller role
- 6 MCP tool files: list filtering + single-item visibility checks
- 4 frontend components: client filtering, picker, lock badges
- 18 unit tests (all passing)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-12 11:09:44 -04:00

Jeff Emmett

18b61fa5e6

feat: rebuild rNotes as vault browser, editor code now in rDocs

Phase 2-3 of the rNotes/rDocs split. Rewrites rNotes from a full TipTap
editor (~1800 lines) into a lightweight Obsidian/Logseq vault sync and
browse module (~560 lines). Rich editing features remain in rDocs.

rNotes vault browser:
- VaultDoc schema: metadata-only in Automerge (title, tags, hash, wikilinks)
- ZIP vault uploads stored on disk at /data/files/uploads/vaults/
- File tree browser, search, read-only markdown preview
- Wikilink graph data endpoint for visualization
- 5 MCP tools: list_vaults, browse_vault, search_vault, get_vault_note, sync_status
- Browser extension compat shim redirects old API calls to rDocs

Cleanup:
- Removed dead editor files from rnotes (converters, components, local-first-client)
- Updated MI integration to use getRecentVaultNotesForMI
- Updated ONTOLOGY.md with new module descriptions
- Bumped JS cache versions

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-10 18:05:35 -04:00

Jeff Emmett

2e8e702d75

feat(mcp): 101 MCP tools across all 35 rApps + security hardening + MI integration

- Add centralized auth helper (_auth.ts) with resolveAccess() enforcing
  space visibility (public/permissioned/private) and role-based access
- Retrofit 5 existing tool groups (rcal, rnotes, rtasks, rwallet, spaces)
  with resolveAccess gates
- Add 30 new MCP tool files covering all remaining rApps:
  rsocials, rnetwork, rinbox, rtime, rfiles, rschedule, rvote, rchoices,
  rtrips, rcart, rexchange, rbnb, rvnb, crowdsurf, rbooks, rpubs, rmeets,
  rtube, rswag, rdesign, rsplat, rphotos, rflows, rdocs, rdata, rforum,
  rchats, rmaps, rsheet, rgov
- Add ForMI data exports to all module mod.ts files
- Wire 6 core modules into MI context (mi-data-queries.ts, mi-routes.ts)
- forceAuth for sensitive modules (rinbox, rchats)
- Omit sensitive fields (storagePath, fileHash, bodyHtml) from responses

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-10 10:25:17 -04:00

3 Commits