2 commits

Author	SHA1	Message	Date
lorentz	2ff2dc9904	fix(09.1-01): pulse-me- prefix, company ntfy server + bearer auth for personal channels ... - NTFY_TOPIC_RE tightened to ^pulse-me-[A-Za-z0-9-]{6,64}$ (rejects noc-*, soc-*, bare pulse-) - mintNtfyTopic() now returns pulse-me-XXXXXXXX (8 hex chars, same entropy) - sendChannelTest (ntfy): forced to NTFY_BASE_URL + NTFY_PULSE_TOKEN; drops channel.config.auth_token path - sendNtfy (notify.ts): personal/global branch on owner_user_id; personal -> company server + bearer NTFY_PULSE_TOKEN - approval.ts ntfy branch: same personal/global split (soft fallback when token missing) - ticket-digest-service.ts: deliver() + getAvailableChannels() SELECTs now include owner_user_id; ntfy branch applies same split	2026-05-11 06:42:52 -04:00
lorentz	c35b968522	feat(09-02): personal channels service + /api/me/channels routes ... - lib/services/personal-channels.ts: isValidTeamsWebhookUrl, isValidNtfyTopic, mintNtfyTopic, sendChannelTest, TEST_MESSAGE_BODY, isPersonalChannelType, PERSONAL_CHANNEL_TYPES - GET /api/me/channels: returns user's personal channels (owner_user_id scoped) - PUT /api/me/channels/[type]: WITH-CTE UPSERT + best-effort test send - DELETE /api/me/channels/[type]: removes user's channel, 404 if missing - POST /api/me/channels/[type]/test: re-sends test to existing channel - SSRF mitigation via Teams URL hostname allowlist (T-09-02-06) - Race window closed by partial unique index from Plan 01 (T-09-02-10)	2026-05-10 07:30:05 -04:00