coder-bot
dd07baff78
WIP checkpoint: T1: Moderation data model + Alembic migration
2026-08-18 19:07:17 +00:00
reviewer-bot
25a8900357
Merge pull request 'Plan: Economy — Currency, Marketplace & Creator Payouts' ( #22 ) from agent/f96c351dfa5e into main
2026-08-18 17:31:08 +00:00
reviewer-bot
5a1f99eb28
Merge pull request 'Enforce 18+ age gate at account registration' ( #23 ) from agent/7fedeb122f7e into main
2026-08-18 16:36:43 +00:00
coder-bot
cb95895612
Recovered orphaned WIP before switching to a new task
2026-08-18 15:33:32 +00:00
coder-bot
62889f39f1
WIP checkpoint: Enforce 18+ age gate at account registration
2026-08-18 15:32:16 +00:00
coder-bot
ef646a8e54
WIP checkpoint: Enforce 18+ age gate at account registration
2026-08-18 15:28:25 +00:00
coder-bot
e4d3fe566b
WIP checkpoint: Enforce 18+ age gate at account registration
2026-08-18 15:28:25 +00:00
coder-bot
1d0222d980
WIP checkpoint: Enforce 18+ age gate at account registration
2026-08-18 15:28:25 +00:00
coder-bot
433d5d8f9f
WIP checkpoint: Enforce 18+ age gate at account registration
2026-08-18 15:28:25 +00:00
planner-bot
30b8dc6de2
WIP checkpoint: Plan: Economy — Currency, Marketplace & Creator Payouts
2026-08-18 15:12:46 +00:00
reviewer-bot
a9947a0a80
Merge pull request 'Plan: Social — Friends, Chat & Groups' ( #21 ) from agent/5b8c6bf79631 into main
2026-08-18 14:56:28 +00:00
reviewer-bot
99762887be
Merge pull request 'Address review feedback: Implement chunk streaming system in GDScript' ( #20 ) from agent/bd718b31b595 into main
2026-08-18 14:41:08 +00:00
reviewer-bot
dbdc01f8d6
Merge remote-tracking branch 'origin/main' into merge-fix
...
# Conflicts:
# .gitignore
# project.godot
2026-08-18 14:40:41 +00:00
planner-bot
1061dc0742
WIP checkpoint: Plan: Social — Friends, Chat & Groups
2026-08-18 14:40:30 +00:00
coder-bot
88cd255040
WIP checkpoint: Address review feedback: Implement chunk streaming system in GDScript
2026-08-18 13:12:51 +00:00
coder-bot
93d83a28fc
WIP checkpoint: Address review feedback: Implement chunk streaming system in GDScript
2026-08-18 13:11:54 +00:00
reviewer-bot
2c3756b640
Merge pull request 'Address review feedback: Research and design GDScript sandboxing approach' ( #19 ) from agent/8f93a0732163 into main
2026-08-18 02:55:00 +00:00
coder-bot
25f2dffc53
WIP checkpoint: Address review feedback: Implement chunk streaming system in GDScript
2026-08-18 02:45:44 +00:00
coder-bot
929c69e5da
WIP checkpoint: Address review feedback: Implement chunk streaming system in GDScript
2026-08-18 02:40:34 +00:00
architect-bot
218e7e24af
WIP checkpoint: Address review feedback: Research and design GDScript sandboxing approach
2026-08-18 02:06:21 +00:00
architect-bot
d293ef2a08
WIP checkpoint: Address review feedback: Research and design GDScript sandboxing approach
2026-08-18 01:48:59 +00:00
reviewer-bot
10b372f379
Merge pull request 'Address review feedback: Address review feedback: Scaffold FastAPI backend project structure' ( #17 ) from agent/684f458e47fc into main
2026-08-18 00:16:06 +00:00
coder-bot
1c5c0f8c8e
WIP checkpoint: Implement chunk streaming system in GDScript
2026-08-18 00:15:16 +00:00
5d7c61029c
Fix remaining critical review issue: list_worlds visibility filter bypass
...
Requesting an explicit ?visibility=PRIVATE (or FRIENDS_ONLY) skipped the
ownership check entirely — any authenticated user could list every other
user's private worlds just by passing the filter. Only the no-filter
default path enforced ownership. Now the ownership check applies whenever
a non-PUBLIC visibility is requested, explicit or not.
Also fixed current_user: CurrentUser = Depends() in assets.py (redundant
empty Depends() on an already-Annotated dependency, inconsistent with
every other endpoint) to plain current_user: CurrentUser per the review
feedback, and reordered params since that made it a non-default arg
following a defaulted one (SyntaxError otherwise).
Verified: py_compile clean, full app imports and loads in a clean venv.
2026-08-18 00:14:37 +00:00
coder-bot
97e0804dfe
WIP checkpoint: Implement chunk streaming system in GDScript
2026-08-18 00:14:34 +00:00
coder-bot
342d0f69d9
WIP checkpoint: Implement chunk streaming system in GDScript
2026-08-18 00:14:14 +00:00
coder-bot
97949d6b44
WIP checkpoint: Implement chunk streaming system in GDScript
2026-08-18 00:08:24 +00:00
coder-bot
720cf6f6b9
WIP checkpoint: Implement chunk streaming system in GDScript
2026-08-18 00:03:28 +00:00
4da8687f2c
Document GDScript sandboxing findings and recommendation
...
Verified all three options from the task against Godot 4.6.2 directly
(godot --headless), rather than trusting the probe scripts' own printed
output from earlier sessions:
- ScriptServer doesn't exist as a class; no disable_os/disable_file_access/
disable_network project settings exist either. Nothing to configure.
- SubViewport isolates rendering/input only, not script capabilities — a
script inside one has identical OS/FileAccess/network access.
- Expression is not safe by default (can still reach unsafe methods through
a base instance); blocklisting dangerous substrings is trivially bypassed.
Recommendation: don't sandbox GDScript in-process (nothing to sandbox
with) — use a narrow non-Turing-complete content DSL for the common case,
and OS-level process isolation only if genuinely general scripting turns
out to be required.
2026-08-17 23:43:48 +00:00
coder-bot
241fa9d0e0
WIP checkpoint: Address review feedback: Address review feedback: Scaffold FastAPI backend project structure
2026-08-17 23:42:56 +00:00
coder-bot
48a43c44a5
WIP checkpoint: Address review feedback: Scaffold FastAPI backend project structure
2026-08-17 23:38:24 +00:00
coder-bot
48dd177fa2
WIP checkpoint: Address review feedback: Scaffold FastAPI backend project structure
2026-08-17 23:36:31 +00:00
reviewer-bot
11a90c58c3
Merge pull request 'Research Godot editor plugin vs in-game editor approach' ( #13 ) from agent/7ab353cfd1ac into main
2026-08-17 23:35:23 +00:00
coder-bot
1f85ecc812
WIP checkpoint: Address review feedback: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
b547ca5785
Add missing asyncpg dependency for async postgres driver
...
config.py's DATABASE_URL uses postgresql+asyncpg but requirements.txt
only listed the sync psycopg2-binary driver, causing ModuleNotFoundError
on app startup.
2026-08-17 23:34:54 +00:00
coder-bot
3f707bf6b0
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
coder-bot
d7d77474f9
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
coder-bot
2fe6d5dbf0
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
coder-bot
534da614dd
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
coder-bot
dc09f5ae37
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
coder-bot
295c44522c
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
coder-bot
33d2ef7f8a
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
coder-bot
b51c90c360
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
coder-bot
4df839ccd8
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
coder-bot
2b1786558a
Recovered orphaned WIP before switching to a new task
2026-08-17 23:34:54 +00:00
coder-bot
7a6658798f
Recovered orphaned WIP before switching to a new task
2026-08-17 23:34:54 +00:00
coder-bot
46a2ff672c
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
coder-bot
f3c679faab
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
architect-bot
5837fad5df
WIP checkpoint: Scaffold FastAPI backend project structure
2026-08-17 23:34:54 +00:00
agent-bot
f659fd4d2a
Recovered orphaned WIP before switching to a new task
2026-08-17 23:34:54 +00:00
coder-bot
reviewer-bot
planner-bot
architect-bot
coder-bot
agent-bot