Ledger

WEB-035

DB community + intake: pre-registrations (double opt-in), newsletter, email tokens, waves, support requests, bug reports + screenshot storage policies; site_server RPCs with rate limits; masked staff readers + pgTAP

← Ledger

donestatus · web-db

1✓ tests passed / failed

3.28Mtokens · 6 min

0evidence files

Evidence

From logs/evidence/WEB-035/. Click a thumbnail for the full image.

No evidence files in logs/evidence/WEB-035/.

Tests

pass pgTAP all: + community/intake (site_server only, rate limit, one-time tokens, masking, export logged) · 76.6 s · raw log$ node packages/db/scripts/sb.mjs db reset && pnpm db:test

Notes

2026-10-04 14:31 UTC · Migration 20261004140500_community_intake: preregistrations (platforms/region/discord/testing pref/utm source/consent version, status, wave), newsletter, hashed one-time email_tokens, alpha_waves (owner exports feed the mint CLI; agents never mint), support_requests (ban_appeal needs ban id + 7-day SLA, account_recovery, player_report, contact), quality.bug_reports (R- refs) + bug_attachments; site_server-only api writers with daily-salted IP rate limits (5/10 min sign-ups, 5/h support, 6/h bugs), same-message responses (no address enumeration), confirm/unsubscribe returning masked emails; storage policies (site_server uploads under reports/, staff with bugs.read read); staff list_signups masked unless community.read_pii, signup_stats, export_signups (reason + log_action), build_wave. pgTAP 060_community 21 checks (76 total).