3 people efe1893dd3 fix(channels): restrict private-channel invitations (#4612) ...

This change requires an active owner or administrator for third-party
additions to private channels. The relay validator and transactional
database authority enforce the same rule, including removed-member
reactivation and role-change paths.

Idempotent self-target behavior remains available, while ordinary
members can no longer extend private-channel access to another identity.

## Testing

- `git diff --check
origin/main...codex/security-private-channel-invite-authority`
- Rebased onto `origin/main` at `5c98932`
- Full CI pending

Originating Buzz thread:
`buzz://message?channel=3928fe05-df61-4b5d-b9c7-d623b9b10ea1&id=3c6c02312f763fbe0d2bfc33a6c1a362f91d0354f3d18b039cf7a0558c1439d1`

---------

Signed-off-by: Jordan Mecom <jm@squareup.com>
Signed-off-by: Eli Foster <efoster@squareup.com>
Co-authored-by: Eli Foster <efoster@squareup.com>

2026-08-05 10:47:00 -07:00

..

features

fix(channels): restrict private-channel invitations (#4612)

2026-08-05 10:47:00 -07:00

shared

fix(mobile): stop oversized read-state retry loop (#4595)

2026-08-04 12:37:20 -07:00

app.dart

Polish mobile inbox and media flows (#4512)

2026-08-04 00:05:13 -07:00

main.dart

feat(mobile): align design language with desktop and polish UI (#321)

2026-04-14 14:33:48 -07:00