fix: make the locking model consistent across every access path - #1270

Open

solracsf wants to merge 8 commits into

mainfrom

fix/lock-audit-findings

Commits on Sep 9, 2026

feat(db): one lock per file and one absolute expiry
solracsf
committed
100c6c3
feat(policy): one authorization decision for every access path
solracsf
committed
afc45c0
feat(storage): enforce locks by file identity, including ancestors and deletion
solracsf
committed
fb96f00
feat(dav): rebuild the native WebDAV adapter on the shared policy
solracsf
committed
c2270f0
fix(api): align the OCS and CLI contracts with what the app now does
solracsf
committed
dd65a54
test: cover locking under collaborative multi-client churn
solracsf
committed
aec2472
refactor: remove what the rewrite left behind and fix what a review found
solracsf
committed
106c90d
test: pin the token collision, the stored scope and the client's unlock
solracsf
committed
02b993e