fix(node): gate GET /ipfs/{cid} tree objects so a withheld subtree's structure can't leak (#135)#173

Open

beardthelion wants to merge 10 commits into

mainfrom

fix/issue-135-ipfs-cid-tree-gate

Commits on Jul 10, 2026

refactor(node,visibility): extract shared object_paths walk seam (#135)
t
committed
feat(node,visibility): add allowed_tree_set_for_caller (#135)
t
committed
fix(node,ipfs): gate get_by_cid tree objects on the allowed-tree-set (#135)
t
committed
docs(node,visibility): reconcile KTD3 prose with the tree gate (#135)
t
committed
perf(node,visibility): single-pass tree-set walk; tighten #135 test + docs
t
committed
test(node): close #135 tree-gate coverage gaps from review
t
committed
fix(node,ipfs): resolve GET /ipfs/{cid} to its git oid via pinned_cids (#135)
t
committed
fix(node,db): move pinned_cids.cid index to a versioned migration (#135)
t
committed

Commits on Jul 11, 2026

test(node): reframe root_tree_pairs scale test, drop vacuous deadlock claim (#135)
t
committed

Commits on Jul 12, 2026

fix(node): bound the ipfs cid retrieval walk and fix cid resolution gaps (#173)
t
committed