Proto commits in yinhm/friendfeed

These 79 commits are when the Protocol Buffers files have changed:

2026-09-02

feat: add external import workflow Co-authored-by: OpenAI Codex <codex@openai.com>

The documentation is generated from this commit.

2026-08-31

feat: add Feed administration CLI Co-authored-by: OpenAI Codex <codex@openai.com>

feat: manage feed api keys over grpc Co-authored-by: OpenAI Codex <codex@openai.com>

feat: add feed api key storage Co-authored-by: OpenAI Codex <codex@openai.com>

2026-08-26

feat: add Feed archive statistics Co-authored-by: Codex <codex@openai.com>

2026-08-25

refactor: retire legacy twitter feed jobs Co-authored-by: Codex <codex@openai.com>

refactor: retire stock subsystem Co-authored-by: Codex <codex@openai.com>

2026-08-23

feat: list groups from discovery index Co-authored-by: Codex <codex@openai.com>

2026-08-22

feat: define realtime event stream protocol

2026-08-21

feat: maintain home timeline per followed feed Co-authored-by: Codex <codex@openai.com>

fix: signal first-time login via gRPC header, not a Profile field Profile is a persisted protobuf type; carrying transient RPC state on it risked the flag being serialized by later UpdateProfile writes and changed the protobuf contract. PutOAuth now marks newly created profiles through the x-profile-newly-created response header (constant in pb/helper.go), leaving pb/feed.proto byte-identical to master.

feat: flag newly created profiles in PutOAuth responses Adds a transient Profile.newly_created field (never persisted, set only after the profile write) so the web layer can detect first-time logins and redirect them to the profile page.

feat: resolve FetchProfile by profile ID The httpd private-feed request page needs feed metadata when the feed read itself is denied; uuid stays the primary key.

feat: add follow-request RPC definitions RequestFollow/CancelFollowRequest/ApproveFollowRequest/ RejectFollowRequest/ListFollowRequests, plus compatible field additions: FollowResponse.requested, Feed.has_pending_follow_request, GroupView.has_pending_request.

2026-08-17

feat: rank sidebar Groups by materialized activity Materialize one rebuildable JSON ranking per user under TableMeta (group-activity/v1) scored from current facts: create +100, post +10, like +3, comment +4, floored at zero. Deltas commit in the same batch as the authoritative Entry/Like/Comment mutation; join recalculates that Group from authoritative rows, leave removes the row, account deletion drops the key. Creator identity lives in group-owner/v1 metadata since GroupAdmin is transferable. ListUserGroups gains order_by_activity for the sidebar (top 10, no cursor, membership re-checked per row, falls back to Follow order before migration). Sidebar drops the 5-minute cache so activity updates are live. Add /groups full list page consuming every cursor page, plus rebuild_group_activity maintenance command (-user, -dry-run). Co-authored-by: Codex <codex@openai.com>

2026-08-16

fix: enforce Group domain invariants Close trust and consistency gaps in Group posting, membership, administration, service management, private reads, account deletion, and store auditing. Co-authored-by: Codex <codex@openai.com>

feat: complete Group spec server side - Restore StageJoinGroup private rejection (HEAD was red via TestJoinGroupRejectsPrivate); private Groups stay unjoinable until the approval flow exists - Close private-Group read paths per docs/group.md: cursor feed path, Home stale-row revalidation on read, Search result filtering (SearchRequest.viewer_uuid) - Enqueue idempotent home.rebuild task in the same Pebble batch as Group membership mutations (JoinGroup/LeaveGroup/RemoveGroupMember and GraphFollow's group branches), replacing fire-and-forget DeleteTimelineState goroutines - ListUserGroups/ListGroupMembers cursor per docs/group_navigation.md: seek to the last examined edge, scan budget counts only unexamined edges, zero-group pages keep making progress - New RPCs: DeleteGroup (soft delete), GetGroup (metadata plus viewer member/admin status), ListGroupMembers (paginated, admin flags) - MarkDelete rejects soft-deleting a sole Group admin, listing the blocking Groups, checked in the same critical section as the delete - Acceptance tests: timeline convergence on membership change, private non-bypass (feed/entry/home/search), sole-admin account deletion, DeleteGroup closure, cursor edge cases, member pagination - Sync docs/group.md gap list and docs/task_queue.md task types Co-authored-by: Kimi <noreply@moonshot.cn>

feat: enforce private Group visibility with viewer_uuid Implements access control for private Groups by adding viewer_uuid to FeedRequest and EntryRequest. Non-members and unauthenticated users are now blocked from accessing private Group feeds and entries. Changes: - Add viewer_uuid field to FeedRequest and EntryRequest in pb/api.proto - Implement canAccessPrivateGroup helper in server/group.go - Enforce access control in ForwardFetchFeed and FetchEntry - Update all httpd handlers to pass viewer_uuid from session - Remove ErrPrivateGroupUnsupported block in model.StageJoinGroup (access control now handled at RPC layer) - Add TestPrivateGroupAccessControl covering all scenarios: admin/member access, outsider denial, unauthenticated denial This completes the private Group visibility requirement from docs/group.md line 224. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat: implement ListUserGroups RPC, group creation UI, and audit tool Add ListUserGroups RPC with cursor-based pagination that returns groups a user has joined. Fix cursor pagination bug where cursor pointed to last scanned edge instead of last collected group, causing groups to be skipped. Frontend changes: - Add UserGroups() helper to load and cache user's joined groups - Invalidate groups cache in FollowHandler when following/unfollowing groups - Auto-inject user_groups into template context via HTML() method - Update layout.html sidebar to display Groups section with user's groups - Add /groups/create routes (GET page, POST handler) - Create group_create.html template with Ajax form submission Backend changes: - Implement ListUserGroups RPC that filters Follow edges by group type - Add tests covering pagination, edge cases, and deleted profile handling - Fix async goroutine lifecycle in JoinGroup/LeaveGroup/RemoveGroupMember by tracking with server.wg to prevent access to closed database in tests Audit tool: - Create tools/audit standalone tool for database integrity checks - Check for admins who are not members (orphaned GroupAdmin entries) - Check for groups without any admins - Check for Follow edges to deleted/missing groups - Check for GroupAdmin entries for deleted groups - Add comprehensive README documenting usage and checks Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat: implement Group authorization and moderation Enforce Group posting membership at PostEntry mutation boundary per docs/group.md. Extends DeleteEntry and DeleteComment to allow Group admins to moderate content posted to their Group (delete-only). Adds UpdateGroup RPC for editing Group metadata with admin-only access. Changes: - PostEntry: authorizeEntryPost enforces Group membership, exempts FeedService self-posts (ProfileUuid == FeedUuid == Group) - DeleteEntry: isGroupAdminOfEntryFeed allows admin to delete any Entry where entry.FeedUuid resolves to their Group - DeleteComment: canModerateComment extended for Group admin delete-only grant (admins cannot edit comments they don't own) - UpdateGroup: new RPC with StageUpdateGroup/UpdateGroup for editing name/description/picture (ID/type/private immutable) - authorizeFeedServiceAdmin: switched from Feedinfo.Admins snapshot to GroupAdmin table as authoritative source Migration note: Existing Groups with admins only in Feedinfo.Admins require manual bootstrap (super: JoinGroup + AddGroupAdmin) or one-time backfill. Current deployment has no production Groups. Tests: 8 new tests covering PostEntry membership enforcement, DeleteEntry/DeleteComment admin moderation, UpdateGroup authorization, and Group-admin delete-only semantics. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

feat: consolidate Group Join/Leave and admin management Add JoinGroup/LeaveGroup/AddGroupAdmin/RemoveGroupAdmin/RemoveGroupMember to the domain layer, enforcing that a Group's last admin can't be demoted or removed, and that an admin must be demoted before leaving or being removed as a member. Route GraphFollow's follow/unfollow actions through this layer when the target is a Group, and expose the five operations as gRPC RPCs sharing a GroupMembershipRequest message. Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

feat: add atomic CreateGroup mutation and RPC Add model.StageCreateGroup/CreateGroup, writing Profile(Type=group), Group ID UserMap, creator Follow/Follower and creator GroupAdmin in one Pebble batch, per docs/group.md step 2. Group IDs share the user ID namespace/validation/UserRenameMap reservation rules via NormalizeProfileId/FindProfileRenameByOldId. Rejects a non-existent or non-user actor, a taken Group ID, and private=true until the approval/invite flow exists (ErrPrivateGroupUnsupported). Add the CreateGroupRequest message and CreateGroup RPC to pb/api.proto, regenerated via protoc, and server.ApiServer.CreateGroup wiring it to the domain layer with the same parse/authorize/domain-call/taskRPCError pattern as the FeedService RPCs. Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

feat: define interaction timeline contracts Co-authored-by: Codex <codex@openai.com>

feat: manage Service source lifecycle Co-authored-by: Codex <codex@openai.com>

2026-08-15

feat: add FeedService management UI Co-authored-by: Codex <codex@openai.com>

feat: implement canonical Service aggregation Co-authored-by: Codex <codex@openai.com>

feat(rss): add subscription wire contracts Co-authored-by: Codex <codex@openai.com>

feat(task): add queue wire and table contracts Co-authored-by: Codex <codex@openai.com>

2026-08-10

feat: add cursor pagination for user feeds Keep public, search, and explicit legacy start links on offset pagination while profile and timeline pages use compact forward-only cursors. Co-authored-by: Codex <codex@openai.com>

2026-07-27

feat: require stable user_uuid principal for comment commands Step 2 of TODO.md. CommentRequest gains user_uuid (field 3) and CommentDeleteRequest gains user_uuid (field 4) as compatible additions; the legacy user field stays on the wire but is no longer consulted. httpd fills user_uuid from the session; the server resolves the canonical profile via principalFromUserUuid and rejects missing, malformed, zero, or unknown principals with InvalidArgument/NotFound. Note this is an intentional behavior change for any external caller of these RPCs: requests without user_uuid are now rejected, closing the path where the server resolved the author from the client-supplied (comment.From.Id / user) reference. comment.From is still saved as sent; overwriting it with the canonical actor ref is Step 3. Co-authored-by: Kimi <kimi@moonshot.cn>

2026-07-12

twitter: PostTwitter

2021-08-23

GICS and employees for hkex stocks

2021-08-19

golint: fix for lint

proto: updated for newer gen

2021-08-08

WIP: tabular data in feed and detail page

WIP: tabular entry support

2021-08-07

rpc: send report to related feed

2021-08-06

api: unified rawdata for all kind of stock data

api: unique symbol insteam of req.Market plus req.Symbol

2021-08-05

feat: new rpc api, ArchiveStockInfo, GetStockInfo

2021-08-03

feat: ArchiveFundamental and GetFundamental

2021-08-02

feat: GetStock rpc

feat: fanout to user timeline

2021-08-01

refactor: move service from feedinfo to its own schema

WIP: FetchFeedinfo never used, commented for now

WIP: renaming proto to pb

WIP: renaming proto to pb

WIP: renew feed db design

2021-07-26

WIP: write feed to group

feat: allow user to follow/unfollow feed

fix: ArchiveXRXD

feat: GetStockList and UpdateStockList api

2021-07-25

feat: GetKLines api

feat: sync xrxd

2021-07-24

stock: sync dividend, not store to db yet

2021-07-23

cli: sync stock klines

cmd: toggle super amdin

2021-07-18

adding Index server

2021-07-10

pb: title for entry

2021-07-07

allow delete entry

2021-07-04

auth: allow login from twitter

2021-06-26

proto: migrated to proto3

2015-04-28

delete entry, need to fix feeds

2015-04-23

server, httpd, UI: delete comment

2015-04-16

server, http: move comment construct to client(http), fixed comment id

server: mark delete for later purge, refs #2, #3

server: mark profile deletion, refs #2, #3

2015-04-13

log twitter server created time, do not sync tweets before it

service: fixed twitter screen_name, added DeleteService by name

service: updated twitter archiver

client: from fetch friendfeed to fetch twitter

import twitter account

auth: import twitter

2015-04-12

server, httpd, proto: introducing graph, FetchGraph then rebuild commands from web client

2015-04-11

comment handler

User like/dislike entry.

server, http: Get current_user on each request, also show current_user feed and logout link

remove not used proto files

2015-04-08

Initial checking in