DarkSky 1256d66938 fix(server): sync permission check (#15123) ...

fix #15121



#### PR Dependency Tree


* **PR #15123** 👈

This tree was auto-generated by
[Charcoal](https://github.com/danerwilliams/charcoal)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Security Improvements**
* Enforced document-level `Doc.Read`/`Doc.Update` checks for key sync
websocket operations, including filtering workspace doc timestamp
results to only readable documents.
* Improved remote permission handling: once a remote denies access,
syncing stops for the affected document and retry behavior is
suppressed.
* **Improvements**
* `delete-doc` now relies on server acknowledgment and returns an
explicit `{ success: true }`.
* Websocket acknowledgment errors are now normalized for consistent
error details.
* **Tests**
* Expanded permission-denied and websocket error-handling coverage,
including timestamp filtering and no-retry behavior after permission
denial.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-06-18 02:43:25 +08:00

..

backend

fix(server): sync permission check (#15123)

2026-06-18 02:43:25 +08:00

common

fix(server): sync permission check (#15123)

2026-06-18 02:43:25 +08:00

frontend

feat(mobile): improve android edgeless & ci (#15118)

2026-06-17 02:08:15 +08:00