V0.38.5 git board rewrite (#238)

Co-authored-by: gobha <jasafpro@gmail.com>
Co-committed-by: gobha <jasafpro@gmail.com>

server/handlers/connections.go

@@ -4,6 +4,7 @@ package handlers
 // Pattern follows apiconfigs.go (ProviderConfigHandler).
 
 import (
+	"encoding/base64"
 	"encoding/json"
 	"net/http"
 
@@ -27,7 +28,9 @@ func NewConnectionHandler(s store.Stores, vault *crypto.KeyResolver) *Connection
 // ListConnections returns the user's personal connections.
 func (h *ConnectionHandler) ListConnections(c *gin.Context) {
 	userID := getUserID(c)
-	conns, err := h.stores.Connections.ListForUser(c.Request.Context(), userID)
+	// v0.38.5: Show all accessible connections (personal + team + global)
+	// so users can see which connections are available to them.
+	conns, err := h.stores.Connections.ListAccessible(c.Request.Context(), userID)
 	if err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to list connections"})
 		return
@@ -252,13 +255,23 @@ func (h *ConnectionHandler) decryptSecrets(config models.JSONMap, secretFields m
 }
 
 // toBytes coerces an interface{} to []byte. Handles both []byte (from Go)
-// and string (from JSON unmarshal of base64).
+// and string (from JSON unmarshal — base64 encoded by json.Marshal for []byte).
 func toBytes(v interface{}) []byte {
 	switch t := v.(type) {
 	case []byte:
 		return t
 	case string:
-		return []byte(t)
+		if t == "" {
+			return nil
+		}
+		// JSON round-trip: json.Marshal encodes []byte as base64 strings.
+		// Decode back to the original bytes.
+		decoded, err := base64.StdEncoding.DecodeString(t)
+		if err != nil {
+			// Fallback: might be raw string (shouldn't happen, but be safe)
+			return []byte(t)
+		}
+		return decoded
 	}
 	return nil
 }