feat: public guest discovery endpoints + privacy fix (v0.3.0) #17

Merged

padreug merged 4 commits from feat/public-guest-endpoints into main 2026-07-19 23:43:39 +00:00

Conversation 0 Commits 4 Files changed 5 +101 -4

padreug commented 2026-07-19 23:39:59 +00:00

Owner

Copy link

Slice-1 backend for the webapp guest booking UI (aiolabs/webapp #141). The webapp will drive chatelet over HTTP (the kind-21000 RPC client is disabled post-lnbits#9 — needs the phase-3 inner-payload-identity change), so guests need a public HTTP read surface.

🔒 Privacy fix (affects already-shipped RPC endpoints)

The AUTH_NONE RPC room endpoints (chatelet_room_list / chatelet_room_get) stripped wallet but not checkin_instructions — which was added in #5 after that code. So the operator's private access details (address, gate code) were leaking to any guest querying listings. Centralized a public_room_dict(room) helper (strips wallet + checkin_instructions) and routed both the RPC and HTTP doors through it. Worth noting this was live in v0.1.0–v0.2.0.

New public endpoints (no auth, active-only, stripped)

• GET /chatelet/api/v1/public/rooms
• GET /chatelet/api/v1/public/rooms/{room_id}

(availability + booking POST are already public; booking-status is slice 2.)

Tests — 32 pass

+4: public_room_dict drops wallet + checkin_instructions; public list is active-only + stripped; public get 404s on inactive.

Release after merge

Tag v0.3.0, add a new catalog entry alongside 0.1.0/0.2.0. Then upgrade chatelet on aio-demo — the webapp guest UI (slice 1 part B) will talk to those public endpoints there. I'll carry the tag + catalog through.

Why PR

Money-adjacent extension → PR category. Handing off merge to you via the Forgejo UI.

🤖 Generated with Claude Code

Slice-1 backend for the webapp guest booking UI (`aiolabs/webapp` #141). The webapp will drive chatelet over **HTTP** (the kind-21000 RPC client is disabled post-lnbits#9 — needs the phase-3 inner-payload-identity change), so guests need a public HTTP read surface. ## 🔒 Privacy fix (affects already-shipped RPC endpoints) The `AUTH_NONE` RPC room endpoints (`chatelet_room_list` / `chatelet_room_get`) stripped `wallet` but **not `checkin_instructions`** — which was added in #5 *after* that code. So the operator's private access details (**address, gate code**) were leaking to any guest querying listings. Centralized a `public_room_dict(room)` helper (strips `wallet` + `checkin_instructions`) and routed both the RPC and HTTP doors through it. Worth noting this was live in v0.1.0–v0.2.0. ## New public endpoints (no auth, active-only, stripped) - `GET /chatelet/api/v1/public/rooms` - `GET /chatelet/api/v1/public/rooms/{room_id}` (availability + booking POST are already public; booking-status is slice 2.) ## Tests — 32 pass +4: `public_room_dict` drops wallet + checkin_instructions; public list is active-only + stripped; public get 404s on inactive. ## Release after merge Tag `v0.3.0`, add a new catalog entry alongside 0.1.0/0.2.0. **Then upgrade chatelet on aio-demo** — the webapp guest UI (slice 1 part B) will talk to those public endpoints there. I'll carry the tag + catalog through. ## Why PR Money-adjacent extension → PR category. Handing off merge to you via the Forgejo UI. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

padreug added 4 commits 2026-07-19 23:39:59 +00:00

fix: strip checkin_instructions from public room dicts (privacy leak) ... 4d6dba5487

The AUTH_NONE RPC room endpoints (chatelet_room_list/_get) stripped wallet
but NOT checkin_instructions — which was added in #5 after this code, so the
operator's private access details (address, gate code) were leaking to any
guest. Centralize a public_room_dict(room) helper (strips wallet +
checkin_instructions) and route both doors through it.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019VUQCfdqiLSsFS2jcGnaFD

feat: public guest room discovery endpoints (slice 1 for webapp #141) ... 0631edf8a2

GET /public/rooms + /public/rooms/{id} — no auth, active rooms only,
operator-private fields stripped. The webapp guest UI needs these because
the existing GET /rooms is admin-scoped; availability + booking POST are
already public. Reuses the public_room_dict strip.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019VUQCfdqiLSsFS2jcGnaFD

test: public endpoints + private-field strip ... 408b0e1d08

Asserts public_room_dict drops wallet + checkin_instructions, public list
shows active-only + stripped, and public get 404s on inactive. 32 pass.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019VUQCfdqiLSsFS2jcGnaFD

chore: bump version 0.2.0 -> 0.3.0 (public guest endpoints) ... 6fa7774c9f

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019VUQCfdqiLSsFS2jcGnaFD

padreug merged commit d521782f19 into main 2026-07-19 23:43:39 +00:00

padreug deleted branch feat/public-guest-endpoints 2026-07-19 23:43:39 +00:00

padreug referenced this pull request from a commit 2026-07-19 23:43:39 +00:00

Merge pull request 'feat: public guest discovery endpoints + privacy fix (v0.3.0)' (#17) from feat/public-guest-endpoints into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

aiolabs/chatelet!17

No description provided.