mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
npub17jjz49l9jjmhhk7cac63j8yt9z555n9cw8vk7v5jz4vzw4ppld5qgj57cc
1b53c2ffcb
Companion to author_only_kinds_are_storage_level_unsearchable (a3f407ceextended the hardcoded skip-set;46ba39e4added the AUTHOR_ONLY drift tripwire). Closes the parallel drift surface for P_GATED_KINDS: today the schema NULL-tsvector CASE happens to cover every persistent p-gated kind, but a new entry in P_GATED_KINDS without a matching schema migration would silently reduce search privacy to L2 (the filter-level #p gate) alone. Move P_GATED_KINDS from a private const in crates/buzz-relay/src/handlers/req.rs to a pub const in crates/buzz-core/src/kind.rs, mirroring AUTHOR_ONLY_KINDS's shape and placement. The relay handler keeps its identical usage; buzz-search's integration test now imports the canonical const and iterates it. Why move rather than re-export: P_GATED_KINDS is a privacy-classification constant about kinds, not a relay implementation detail. AUTHOR_ONLY_KINDS already lives in buzz-core::kind for exactly this reason. Adding buzz-relay as a dev-dependency of buzz-search would create a crate cycle (buzz-relay depends on buzz-search). The new tripwire skips ephemeral kinds via buzz_core::kind::is_ephemeral: ephemeral events (20000-29999) are never stored, so the storage-layer search defense does not apply to them by category. Co-authored-by: npub17jjz49l9jjmhhk7cac63j8yt9z555n9cw8vk7v5jz4vzw4ppld5qgj57cc <f4a42a97e594b77bdbd8ee35191c8b28a94a4cb871d96f32921558275421fb68@sprout-oss.stage.blox.sqprod.co> Signed-off-by: npub17jjz49l9jjmhhk7cac63j8yt9z555n9cw8vk7v5jz4vzw4ppld5qgj57cc <f4a42a97e594b77bdbd8ee35191c8b28a94a4cb871d96f32921558275421fb68@sprout-oss.stage.blox.sqprod.co>