feat: address validator, session monitor, workspace RLS, SSE notifications - #1254
Merged
ayomideadeniran merged 4 commits intoAug 31, 2026
Conversation
…tellarDevHub#1114) Adds a StrKey CRC16-XDR address validator covering G public keys, S seeds, C contracts, M muxed addresses (with 64-bit memo id decoding), and SEP-0010 federation handles, plus a deterministic identicon renderer from public key bytes. Closes StellarDevHub#1114 🤖 Generated with Codebuff Co-Authored-By: Codebuff <noreply@codebuff.com>
…tellarDevHub#1122) Adds GET /api/v1/notifications/stream backed by a Redis Pub/Sub bridge over the existing course_notifications channel, heartbeats via SseSessionManager, and Last-Event-ID reconnection recovery. Includes id: lines on events and a React useNotificationStream hook with bounded exponential backoff. Closes StellarDevHub#1122 🤖 Generated with Codebuff Co-Authored-By: Codebuff <noreply@codebuff.com>
…tellarDevHub#1119) Moves the workspace-model set to its own module and completes it with the five missing models (ContributorProof, DecentralizedAsset, Idea, NotificationPreferences, P2PNode). Mounts the optional workspace context middleware so the isolation extension actually filters, and adds validateWorkspaceMembership which 403s cross-tenant requests and audits violations as WORKSPACE_ACCESS_DENIED. Closes StellarDevHub#1119 🤖 Generated with Codebuff Co-Authored-By: Codebuff <noreply@codebuff.com>
…rDevHub#1116) Adds a Redis-backed session monitor: activity touchpoints reset idle, sessions lock after 15m (blur + re-auth challenge), and extended 30m idle purges credentials, revokes tokens, and terminates WebSocket channels. Exposes /auth/session/{activity,status,lock,unlock,purge} endpoints and a React useSessionActivityMonitor hook. Closes StellarDevHub#1116 🤖 Generated with Codebuff Co-Authored-By: Codebuff <noreply@codebuff.com>
|
@mikwansa is attempting to deploy a commit to the Ayomide Adeniran's projects Team on Vercel. A member of the Team first needs to authorize it. |
|
@mikwansa Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits. You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀 |
Contributor
|
Pr under review |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Four Stellar Wave issues in one wave branch, one commit each:
G/S/C,Mmuxed decoding with 64-bit memo ids, SEP-0010 federation resolution over HTTPS, deterministic identicon renderer./api/v1/auth/session/*plus auseSessionActivityMonitorhook.workspaceModelsset (5 missing models), mounts the workspace-context middleware so the Prisma extension actually filters, and addsvalidateWorkspaceMembershipreturning 403 +WORKSPACE_ACCESS_DENIEDaudit on cross-tenant attempts.GET /api/v1/notifications/streambridged over Redis Pub/Sub, heartbeats,id:lines andLast-Event-IDreplay, plus auseNotificationStreamhook with bounded exponential backoff.Written by inspection (no deps installed, no tests run) following existing repo conventions; unit tests added alongside each change.
Closes #1114
Closes #1116
Closes #1119
Closes #1122