Skip to content

Conversation

@bokelley
Copy link
Contributor

@bokelley bokelley commented Jan 7, 2026

Summary

  • Restricts the billing channel picker to only show private channels for security (billing info shouldn't go to public channels)
  • Adds server-side validation to reject public channel IDs if someone calls the API directly
  • Shows a helpful empty state message when Addie isn't invited to any private channels

Test plan

  • Log in as admin and go to System Settings
  • Verify only private channels appear in the dropdown (Addie must be invited first)
  • Verify helpful message appears if no private channels are found
  • Try saving a public channel ID via API - should be rejected

🤖 Generated with Claude Code

For security, billing notifications should not go to public channels.
This change:
- Only shows private channels in the billing channel dropdown
- Adds server-side validation to reject public channel IDs
- Shows a helpful message when no private channels are found

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>
@bokelley bokelley merged commit 7325b0f into main Jan 7, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants