modbison

Files

T

History

daddy f6c55d888f Add Groups API router: create/join/leave, roles, transfer, group page

Implements docs/planning/social.md US-5's API layer on top of the
already-merged Group/GroupMember models (app/models/groups.py):

- POST/GET /api/groups, GET/PATCH/DELETE /api/groups/{id}
- POST .../join (idempotent), .../leave (owner must transfer first)
- POST .../members/{user_id}/role (owner-only, admin/member),
  .../transfer (owner-only, demotes prior owner to admin)

Group page member list is a dedicated schema (user_id/username/role/
joined_at) so no private User fields leak. 27 new tests cover
authorization boundaries, idempotency, and exactly-one-owner invariants;
full backend suite (220 tests) passes with zero regressions.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QFSPt6rX1gwZmcr2HEfvzg

2026-09-15 01:09:29 +00:00

__init__.py

Recovered orphaned WIP before switching to a new task

2026-08-17 23:34:54 +00:00

assets.py

WIP checkpoint: US-1: Asset Import Pipeline — glTF upload endpoint with metadata extraction

2026-08-19 12:31:05 +00:00

auth.py

PC3 Phase 3.3: rate-limit the auth endpoints

2026-09-05 22:20:18 +00:00

avatar.py

PC3 Phase 1.3: backend avatar loadout persistence