ispik
2d8b7481bc
fix: use the correct permissions
...
Signed-off-by: ispik <ispik@ispik.dev >
2026-04-27 10:40:07 +03:00
ispik
8bd5542e71
Merge branch 'main' into feat/admin-api
...
# Conflicts:
# crates/core/database/src/models/users/model.rs
2026-04-27 10:29:19 +03:00
İspik
279f5d5fd7
fix: add new_user_hours to configuration limits ( #729 )
...
Signed-off-by: ispik <ispik@ispik.dev >
2026-04-26 22:47:52 -07:00
jarvarvarvis
e93769786c
feat: automatically sanitise usernames on create/update ( #689 )
...
* feat: automatically sanitise usernames on create/update
Signed-off-by: higgs01 <6546697+higgs01@users.noreply.github.com >
* test: add tests for validation and sanitasion
Signed-off-by: higgs01 <6546697+higgs01@users.noreply.github.com >
* fix: Return only the sanitised string in sanitise_username (#424 )
* fix: Use as_str for role.id in insert_role
* Run rustfmt for code changes
Signed-off-by: jarvarvarvis <jarvistrigo@gmail.com >
* feat: Make minimum username length configurable in Revolt.toml (#424 )
* fix: Remove redundant call to is_match with blocked username regex
Signed-off-by: jarvarvarvis <jarvistrigo@gmail.com >
* Update crates/core/database/src/models/users/model.rs
Co-authored-by: Tom <iamtomahawkx@gmail.com >
Signed-off-by: jarvarvarvis <53998846+jarvarvarvis@users.noreply.github.com >
* Update crates/core/database/src/models/users/model.rs
Co-authored-by: Tom <iamtomahawkx@gmail.com >
Signed-off-by: jarvarvarvis <53998846+jarvarvarvis@users.noreply.github.com >
* Update crates/core/database/src/models/users/model.rs
Co-authored-by: Tom <iamtomahawkx@gmail.com >
Signed-off-by: jarvarvarvis <53998846+jarvarvarvis@users.noreply.github.com >
* Update crates/core/database/src/models/users/model.rs
Co-authored-by: Tom <iamtomahawkx@gmail.com >
Signed-off-by: jarvarvarvis <53998846+jarvarvarvis@users.noreply.github.com >
* fix: Implement suggested changes and clean up last 4 commits
Signed-off-by: jarvarvarvis <jarvistrigo@gmail.com >
* fix: Disallow stoat as username, update create_user test
Signed-off-by: jarvarvarvis <jarvistrigo@gmail.com >
* fix: Use sanitised username to find updated discriminator
Signed-off-by: jarvarvarvis <jarvistrigo@gmail.com >
* feat: Sanitise revolt.chat in username
Signed-off-by: jarvarvarvis <jarvistrigo@gmail.com >
* fix: Implement discussed changes
Signed-off-by: jarvarvarvis <jarvistrigo@gmail.com >
* test: Fix create_user test
Signed-off-by: jarvarvarvis <jarvistrigo@gmail.com >
* fix: don't overflow the stack
not entirely sure why this fixes it and I don't like it. But work it does.
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
* fix: revert odd file mode change
Signed-off-by: jarvarvarvis <jarvistrigo@gmail.com >
---------
Signed-off-by: higgs01 <6546697+higgs01@users.noreply.github.com >
Signed-off-by: jarvarvarvis <jarvistrigo@gmail.com >
Signed-off-by: jarvarvarvis <53998846+jarvarvarvis@users.noreply.github.com >
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
Co-authored-by: higgs01 <6546697+higgs01@users.noreply.github.com >
Co-authored-by: Tom <iamtomahawkx@gmail.com >
2026-04-23 21:02:28 -07:00
İspik
ed4fd5ebfe
fix: update message length validation to remove upper limit ( #723 )
...
Signed-off-by: ispik <ispik@ispik.dev >
2026-04-23 20:39:13 -07:00
Angelo Kontaxis
89171e9bd0
fix: dont send notification in fcm ( #721 )
...
* fix: dont send notification in fcm
Signed-off-by: Zomatree <me@zomatree.live >
* fix: add notification type to fcm
Signed-off-by: Zomatree <me@zomatree.live >
* fix: switch to structured notification data
Signed-off-by: Zomatree <me@zomatree.live >
---------
Signed-off-by: Zomatree <me@zomatree.live >
2026-04-22 23:48:26 -07:00
ispik
533cc5835a
feat: add admin channel deletion endpoint
2026-04-18 19:31:38 +03:00
ispik
80b749d6fc
Merge branch 'main' into feat/admin-api
2026-04-18 18:54:02 +03:00
Infiland
057f2bb8b3
fix: add reconnection policy to Redis subscriber to prevent ghost state ( #708 )
...
* fix: add reconnection policy to Redis subscriber to prevent ghost state
- Add ReconnectPolicy::new_exponential(0, 100, 30_000, 2) to the subscriber builder, unlimited retries with exponential backoff (100ms min, 30s max)
- Add on_reconnect handler that signals the listener loop to force a subscription reset, re-subscribing to all topics on the new connection
- Add warn-level logging to on_error for all Redis subscriber errors (previously only Canceled was handled, others were silently ignored)
Signed-off-by: Infiland <ljubica.citydesign@gmail.com >
* Update websocket.rs
Signed-off-by: Infiland <88491175+Infiland@users.noreply.github.com >
* Auto-manage subscriptions on reconnect
Call subscriber.manage_subscriptions() so the subscriber will automatically re-subscribe tracked channels after a Redis reconnect. Remove the manual reconnect channel and on_reconnect handler along with the select branch that forced SubscriptionStateChange::Reset.
Signed-off-by: Infiland <88491175+Infiland@users.noreply.github.com >
---------
Signed-off-by: Infiland <ljubica.citydesign@gmail.com >
Signed-off-by: Infiland <88491175+Infiland@users.noreply.github.com >
2026-04-17 20:15:54 -07:00
Angelo Kontaxis
3675ff1a1f
chore: migrate all local dependancies to workspace dependancies ( #710 )
...
* chore: start moving all deps to workspace deps
Signed-off-by: Zomatree <me@zomatree.live >
* chore: migrate all deps to workspace deps
Signed-off-by: Zomatree <me@zomatree.live >
* chore: add more dep groups
Signed-off-by: Zomatree <me@zomatree.live >
* fix: add migration to update existing files to be animated (#705 )
* fix: add migration to update existing files to be animated
Signed-off-by: Zomatree <me@zomatree.live >
* Revert "fix: add migration to update existing files to be animated"
This reverts commit 4e1f1c116c .
Signed-off-by: Zomatree <me@zomatree.live >
* fix: calculate animated for existing files when fetched
Signed-off-by: Zomatree <me@zomatree.live >
---------
Signed-off-by: Zomatree <me@zomatree.live >
* fix: mise start + missing docker image (#564 )
* fix: mise start + missing docker image
Signed-off-by: Damocles078 <hellodamocles078@gmail.com >
* fix: bump livekit version
Signed-off-by: Damocles <106018783+Damocles078@users.noreply.github.com >
---------
Signed-off-by: Damocles078 <hellodamocles078@gmail.com >
Signed-off-by: Tom <iamtomahawkx@gmail.com >
Signed-off-by: Damocles <106018783+Damocles078@users.noreply.github.com >
Co-authored-by: Tom <iamtomahawkx@gmail.com >
* docs: update donation link (#709 )
Signed-off-by: Zomatree <me@zomatree.live >
* fix: remove usage of deprecated functions
Signed-off-by: Zomatree <me@zomatree.live >
---------
Signed-off-by: Zomatree <me@zomatree.live >
Signed-off-by: Damocles078 <hellodamocles078@gmail.com >
Signed-off-by: Tom <iamtomahawkx@gmail.com >
Signed-off-by: Damocles <106018783+Damocles078@users.noreply.github.com >
Co-authored-by: Damocles <106018783+Damocles078@users.noreply.github.com >
Co-authored-by: Tom <iamtomahawkx@gmail.com >
Co-authored-by: Paul Makles <me@insrt.uk >
2026-04-17 19:02:18 -07:00
ispik
74ce10162c
Merge branch 'main' into feat/admin-api
2026-04-12 14:50:04 +03:00
ispik
9a67cb139c
feat: implement admin account deletion endpoint
2026-04-12 14:49:41 +03:00
ispik
5e98a01624
refactor: disable account before creating audit action
2026-04-12 14:41:02 +03:00
ispik
9fe7de709a
fix: refactor account disabling logic to use disable method
2026-04-12 14:38:29 +03:00
ispik
5b9a909923
fix: update audit action for accurate account actions
2026-04-12 14:18:22 +03:00
ispik
913946cfa1
feat: expose account modules in mod.rs and add it to routes
2026-04-12 14:15:40 +03:00
ispik
01e0c30596
fix: update permissions for accounts routes to ManageAccounts
2026-04-12 14:12:15 +03:00
ispik
1bb12b416a
fix: update account disable endpoint to return EmptyResponse
2026-04-12 13:53:30 +03:00
ispik
5e577358ac
feat: add optional case parameter to admin account disable endpoint
2026-04-12 13:49:34 +03:00
stoat-release[bot]
61fd13629f
chore(main): release 0.12.1 ( #700 )
...
Co-authored-by: stoat-release[bot] <245062572+stoat-release[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-04-11 12:31:11 +01:00
ispik
6e78f0b9c0
feat: implement admin account disable functionality
2026-04-11 14:00:50 +03:00
ispik
26faa18d6e
chore: add files to mod.rs
2026-04-11 12:19:22 +03:00
ispik
a152d825a2
fix: update Reference type to be lifetime parameterized in admin API functions
2026-04-11 01:01:57 +03:00
ispik
85ad261cc3
Merge branch 'main' into feat/admin-api
...
# Conflicts:
# crates/core/database/src/util/bridge/v0.rs
# crates/core/result/src/axum.rs
# crates/core/result/src/lib.rs
# crates/core/result/src/rocket.rs
2026-04-11 00:49:36 +03:00
Angelo Kontaxis
f2c056a151
fix: add migration to update existing files to be animated ( #705 )
...
* fix: add migration to update existing files to be animated
Signed-off-by: Zomatree <me@zomatree.live >
* Revert "fix: add migration to update existing files to be animated"
This reverts commit 4e1f1c116c .
Signed-off-by: Zomatree <me@zomatree.live >
* fix: calculate animated for existing files when fetched
Signed-off-by: Zomatree <me@zomatree.live >
---------
Signed-off-by: Zomatree <me@zomatree.live >
2026-04-01 19:48:22 -07:00
Tom
f30b729ca9
fix: don't send self dm notifications ( #706 )
...
* fix: don't send self dm notifications
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
* fix: test failure due to wrong assertion (#707 )
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
* fix: RA auto import moment
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
---------
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
2026-03-31 15:25:36 -07:00
Tom
f81e3291bd
fix: test failure due to wrong assertion ( #707 )
2026-03-31 11:06:39 +01:00
Tom
8814bf4c23
fix: release-please-3 ( #702 )
2026-03-28 22:53:12 -07:00
stoat-release[bot]
4d4b0dd864
chore(main): release 0.12.0 ( #602 )
...
Co-authored-by: stoat-release[bot] <245062572+stoat-release[bot]@users.noreply.github.com>
2026-03-28 22:22:37 -07:00
Angelo Kontaxis
ccda6f5c53
fix: pass &str to Reference ( #697 )
...
Signed-off-by: Zomatree <me@zomatree.live >
2026-03-27 18:39:00 -07:00
Damocles
52ed5100c2
fix: improve generated openapi.json ( #584 )
...
* fix: /bots/{bot}
Paths "/bots/{bot}" and "/bots/{target}" must not be equivalent.
Signed-off-by: Damocles078 <hellodamocles078@gmail.com >
* fix: /channels/{group_id}/recipients/{member_id}
Paths "/channels/{group_id}/recipients/{member_id}" and "/channels/{target}/recipients/{member}" must not be equivalent.
Signed-off-by: Damocles078 <hellodamocles078@gmail.com >
* fix: /channels/{channel_id}/webhook
Paths "/channels/{target}/webhooks" and "/channels/{channel_id}/webhooks" must not be equivalent.
Signed-off-by: Damocles078 <hellodamocles078@gmail.com >
* fix: /servers/{server_id}/members/{member_id}
Paths "/servers/{target}/members/{member}" and "/servers/{server}/members/{member}" must not be equivalent.
Signed-off-by: Damocles078 <hellodamocles078@gmail.com >
* fix: /custom/emoji/{emoji_id}
Paths "/custom/emoji/{id}" and "/custom/emoji/{emoji_id}" must not be equivalent.
Signed-off-by: Damocles078 <hellodamocles078@gmail.com >
---------
Signed-off-by: Damocles078 <hellodamocles078@gmail.com >
Signed-off-by: Damocles <106018783+Damocles078@users.noreply.github.com >
2026-03-27 17:31:57 -07:00
newt (
c2d4369e16
feat: compute thumbhash for images ( #596 )
...
* feat: compute thumbhash for images
Signed-off-by: newt <hi@newty.dev >
* Merge branch 'main' into feat/thumbhash
Signed-off-by: newt <hi@newty.dev >
* style: move comment onto newline
Signed-off-by: newt <hi@newty.dev >
* feat: make thumbhash optional
Signed-off-by: newt <hi@newty.dev >
---------
Signed-off-by: newt <hi@newty.dev >
Signed-off-by: newt (: <hi@newty.dev >
Signed-off-by: Tom <iamtomahawkx@gmail.com >
Co-authored-by: Tom <iamtomahawkx@gmail.com >
2026-03-27 17:29:55 -07:00
Angelo Kontaxis
91783b9066
fix: only show first line on commit messages ( #696 )
...
Signed-off-by: Zomatree <me@zomatree.live >
2026-03-27 17:29:37 -07:00
LazyCat
735d644e04
feat: Transfer ownership ( #396 )
...
* feat: Transfer ownership
Signed-off-by: LazyCat2 <68156188+LazyCat2@users.noreply.github.com >
* Allow privileged users to change ownership
Signed-off-by: LazyCat2 <68156188+LazyCat2@users.noreply.github.com >
* Require TOTP
Signed-off-by: LazyCat2 <68156188+LazyCat2@users.noreply.github.com >
* Require TOTP or password
Signed-off-by: LazyCat2 <68156188+LazyCat2@users.noreply.github.com >
---------
Signed-off-by: LazyCat2 <68156188+LazyCat2@users.noreply.github.com >
Signed-off-by: Tom <iamtomahawkx@gmail.com >
Co-authored-by: Tom <iamtomahawkx@gmail.com >
2026-03-27 17:24:53 -07:00
Tom
d1e72cee42
feat: parse message push notification content and replace internal formatting ( #693 )
...
* parse message push notification content and replace internal formatting
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
* fix: don't unwrap the error I was using for db debugging
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
* fix: emojis & remove compiler warning
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
* fix: emojis in pushd
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
* feat: report errors in the render function to sentry
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
---------
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
2026-03-27 17:15:05 -07:00
İspik
6107f242fd
feat: Add slowmode functionality to text channels ( #680 )
...
* feat: Add slowmode functionality to text channels
Signed-off-by: arsabutispik <ispik@ispik.dev >
* fix: use atomic check-and-set to prevent spamming with scripts
Signed-off-by: arsabutispik <ispik@ispik.dev >
* feat: Add BypassSlowmode permission to channel permissions
Signed-off-by: arsabutispik <ispik@ispik.dev >
* refactor: Use set_options instead of manually building the command
Signed-off-by: arsabutispik <ispik@ispik.dev >
---------
Signed-off-by: arsabutispik <ispik@ispik.dev >
2026-03-27 17:09:15 -07:00
Tom
a5cd08a655
fix: add flag for disabling events instead of commenting them out ( #695 )
...
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
2026-03-27 17:03:48 -07:00
İspik
98c7b1b5a5
feat: implement time based message sweep on user ban ( #670 )
...
* feat: implement time based message sweep on user ban
- Adds `delete_message_seconds` (0 to 7 days in seconds) to the ban request payload.
Signed-off-by: arsabutispik <ispik@ispik.dev >
* refactor: pass ulid conversion to database
Signed-off-by: arsabutispik <ispik@ispik.dev >
* fix: use COL constant instead of hardcoded string in error mapper
Signed-off-by: arsabutispik <ispik@ispik.dev >
* refactor: broadcast bulk delete events during ban sweep
Updates the `delete_messages_by_author_since` trait to return a
HashMap of deleted message IDs grouped by channel.
The MongoDB implementation now uses a two-step process: it first
runs a projected `find` query to gather the target `_id` and
`channel` fields, then executes the `delete_many` operation.
This allows the ban route to loop through the affected channels and
dispatch `EventV1::BulkMessageDelete` WebSocket events, ensuring
that the swept messages are instantly removed from the UI for
all connected clients.
Signed-off-by: arsabutispik <ispik@ispik.dev >
* refactor: optimize message deletion by using $group and aggregate
Signed-off-by: arsabutispik <ispik@ispik.dev >
* refactor: use with_type in query
Signed-off-by: arsabutispik <ispik@ispik.dev >
* refactor: abstract function to Message model and mark attachments as deleted
Signed-off-by: arsabutispik <ispik@ispik.dev >
---------
Signed-off-by: arsabutispik <ispik@ispik.dev >
2026-03-27 17:02:12 -07:00
Tom
edfa97db10
feat: Allow restricting server creation to specific users ( #685 )
...
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
2026-03-23 12:25:33 -07:00
sinus-x
b830631bd2
fix(docs): Update GitHub links ( #647 )
...
Updates user-facing links to point to the new organization. Does not
update references in source code (user-agent, dependency references),
as they should be handled separately.
Signed-off-by: sinus-x <14353790+sinus-x@users.noreply.github.com >
2026-03-22 22:18:25 -07:00
Erik LaBine
3fa0abf47f
feat: Detect animation in image files for fetch_preview ( #574 )
...
* Implement animated metadata TODOs for database and thumbnailing.
Signed-off-by: Assisting <erik@eriklabine.com >
* Run linter for code changes
Signed-off-by: Assisting <erik@eriklabine.com >
---------
Signed-off-by: Assisting <erik@eriklabine.com >
2026-03-22 22:07:22 -07:00
Nico
5191bd16b2
feat: load config from env vars ( #576 )
...
Signed-off-by: Nico <nico.macioszek@gmail.com >
2026-03-22 20:33:01 -07:00
Tom
5701b5c18c
fix: don't use a bitop for OR ( #676 )
...
* fix: uname is missing from crond
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
* fix: don't use a bitop
lol, two of us missed that.
---------
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
2026-03-15 09:15:54 -07:00
Tom
dc4438bc3c
fix: uname is missing from crond ( #675 )
...
Signed-off-by: IAmTomahawkx <iamtomahawkx@gmail.com >
2026-03-15 09:04:37 -07:00
İspik
ab525699bd
fix: add masquerade permission to default direct message settings ( #665 )
...
Signed-off-by: arsabutispik <ispik@ispik.dev >
2026-03-14 00:41:31 -07:00
Christopher Hultin
d56135e0cb
fix: Check for appropriate permission for removing other users avatar ( #657 )
...
* Check for appropriate permission for removing other users avatar
Signed-off-by: Chris Hultin <chris.hultin@gmail.com >
* limit check for non-self to just removal
Signed-off-by: Chris Hultin <chris.hultin@gmail.com >
* else if change
Signed-off-by: Chris Hultin <chris.hultin@gmail.com >
---------
Signed-off-by: Chris Hultin <chris.hultin@gmail.com >
2026-03-10 15:38:41 -07:00
Alex
52c0d2f266
fix: send push notifications for DM and group messages ( #660 )
...
DMs and group messages never triggered push notifications because
the condition only checked for explicit @mentions. DMs don't use
mentions, so users were never notified of new direct messages.
Signed-off-by: sanasol <mail@sanasol.ws >
2026-03-10 15:15:00 -07:00
Angelo Kontaxis
49c6289580
fix: store server id in redis and in room metadata to be able to delete voice state in all scenarios ( #656 )
...
* fix: store server id in redis values and in room metadata to be able to fully delete voice state in all scenarios
* fix: undo logging change
2026-03-10 15:14:32 -07:00
Tom
b0b728fb0d
fix: redis_url vs redis_uri in config ( #666 )
2026-03-10 15:00:06 -07:00
Damocles
d629e89304
fix: replace some links and Revolt mentions to current Stoat ( #515 )
2026-03-08 01:28:50 +00:00