jubnl 00447c9043 feat(server): validate notification request bodies ...

notifications.dto.ts wraps the @trek/shared request schemas via createZodDto
and types all five @Body() params; the five NotificationsController entries
leave the body-contract allow-list (ratchet gate enforced). Contract catch:
the client sends server/token: null on test-ntfy to mean 'use the saved
value', so testNtfyRequestSchema gains .nullable() there (spec pinned). The
inline response-enum and url-type checks die — malformed bodies now get the
pipe's standard envelope; valid bodies behave byte-identically. Two
integration cases pinning pre-ratchet tolerances (flat notify_* preferences
body, body-less test-smtp POST) update to the current wire contract.

2026-08-02 11:36:36 +02:00

..

assets

v3.4.1 (#1606)

2026-07-19 19:00:40 +02:00

public

v3.0.16 — bug fixes (#964)

2026-05-06 21:38:40 +02:00

scripts

fix(backup): snapshot the database instead of archiving it live (#1675)

2026-07-29 17:02:56 +02:00

src

feat(server): validate notification request bodies

2026-08-02 11:36:36 +02:00

tests

feat(server): validate notification request bodies

2026-08-02 11:36:36 +02:00

.env.example

feat(db): make the SQLite journal mode configurable (#1675)

2026-07-29 17:02:56 +02:00

.gitignore

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

.prettierrc

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

eslint.config.mjs

fix(server): resolve zh-TW default language, close lint gap on bracket env access

2026-07-25 16:19:15 +02:00

package.json

chore(deps): bump @modelcontextprotocol/sdk to ^1.30.0

2026-07-29 21:40:05 +02:00

reset-admin.js

feat(db): make the SQLite journal mode configurable (#1675)

2026-07-29 17:02:56 +02:00

tsconfig.build.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

tsconfig.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

vitest.config.ts

fix(server): silence expected-error noise in test stderr

2026-07-28 22:31:46 +02:00