docs(14.2-01): record plan 01 progress in state and roadmap

.planning/ROADMAP.md

@@ -834,12 +834,12 @@ Plans:
   3. Failures against Go are visible (no silent fall-through to PHP); the local stack does not require the production origin.
   4. The new glue (env, proxy, CORS, run docs) has tests or a fail-closed check script, delivered in the phase's last plan.
 
-**Plans:** 4 plans
+**Plans:** 1/4 plans executed
 
 Plans:
 
 **Wave 1**
-- [ ] 14.2-01-PLAN.md — Go glue: `fonoteka:dev-seed`, plugin commands open their own DB (G1), dev-only marker route, framework `/storage` mount and opt-in access log with docs
+- [x] 14.2-01-PLAN.md — Go glue: `fonoteka:dev-seed`, plugin commands open their own DB (G1), dev-only marker route, framework `/storage` mount and opt-in access log with docs
 
 **Wave 2** *(blocked on Wave 1 completion)*
 - [ ] 14.2-02-PLAN.md — `scripts/dev-stack.sh` (start, fail-closed guard, logs, e2e verdict), `.env.dev.example`, `.gitignore`, run docs
@@ -1300,7 +1300,7 @@ Phases execute in numeric order: 1 → 2 → 3 → 4 → 5 → 6 → 7 → 8 →
 | 13. Płytarium API — wishlist, notifications, CSV, credentials, public routes | 6/6 | In Progress|  |
 | 14. Domain jobs and external integrations | 6/6 | In Progress|  |
 | 14.1. OAuth identities and fonoteka me routes (INSERTED) | 2/2 | Complete    | 2026-10-05 |
-| 14.2. Local Fonoteka frontend on local SummerCMS backend (INSERTED) | 0/TBD | Not started | - |
+| 14.2. Local Fonoteka frontend on local SummerCMS backend (INSERTED) | 1/4 | In Progress|  |
 | 14.3. One-command app scaffolding (INSERTED) | 4/4 | In Progress|  |
 | 15. Journal plugin | 4/4 | Complete   | 2026-10-06 |
 | 16. grzybyfunkcjonalne.pl on reusable blog views | 5/5 | In Progress|  |

.planning/STATE.md

@@ -1,20 +1,19 @@
 ---
 msd_state_version: "1.0"
 milestone: v1.0
-current_phase: 11
-current_phase_name: Jobs, realtime and search infrastructure
-status: planning
-stopped_at: Phase 16.3 complete, ready to plan Phase 11
-last_updated: "2026-10-11T14:14:17.635Z"
+current_phase: "14.2"
+current_phase_name: Local Fonoteka frontend on local SummerCMS backend
+status: executing
+stopped_at: Completed 14.2-01-PLAN.md
+last_updated: "2026-10-11T15:48:35.710Z"
 last_activity: 2026-10-11
-last_activity_desc: "Completed quick task 261011-mag: fix check-phase10.sh hygiene gaps from 10-VERIFICATION.md"
-state_head: 1541cd4167bb9a92ffba897403a967030f37b93d
+last_activity_desc: Phase 14.2 execution started
+state_head: d0eeb4d291917ccf02c576abe1d711cb07012752
 progress:
   total_phases: 40
   completed_phases: 13
   total_plans: 162
-  completed_plans: 158
-  percent: 41
+  completed_plans: 159
 gsd_state_version: "1.0"
 milestone_name: milestone
 ---
@@ -26,14 +25,14 @@ milestone_name: milestone
 See: .planning/PROJECT.md (updated 2026-09-16)
 
 **Core value:** An existing WinterCMS-shaped app can be ported plugin by plugin to a single Go binary without its frontend noticing: the PHP version's API contract is the acceptance test.
-**Current focus:** Phase 16.3 — Backend admin personal API tokens with scopes
+**Current focus:** Phase 14.2 — Local Fonoteka frontend on local SummerCMS backend
 
 ## Current Position
 
-Phase: 11 — Jobs, realtime and search infrastructure
-Plan: Not started
-Status: Ready to plan
-Last activity: 2026-10-11 - Completed quick task 261011-mag: fix check-phase10.sh hygiene gaps from 10-VERIFICATION.md
+Phase: 14.2 (Local Fonoteka frontend on local SummerCMS backend) — EXECUTING
+Plan: 2 of 4
+Status: Ready to execute
+Last activity: 2026-10-11 — Phase 14.2 execution started
 
 Progress: [████░░░░░░] 41%
 
@@ -215,6 +214,7 @@ Progress: [████░░░░░░] 41%
 | Phase 16.3 P02 | 9 min | 3 tasks | 17 files |
 | Phase 16.3 P03 | 658 min | 4 tasks | 12 files |
 | Phase 16.3 P04 | 30 min | 3 tasks | 16 files |
+| Phase 14.2 P01 | 16 min | 3 tasks | 18 files |
 
 ## Accumulated Context
 
@@ -698,6 +698,10 @@ Recent decisions affecting current work:
 - [Phase 16.3]: Journal API uses cabana.ResolveBackend with cover golem15.journal.*; ErrTokenScope maps to PHP Insufficient permissions
 - [Phase 16.3]: 16.3-04: full unit coverage + scripts/check-phase16.3.sh; postgres PASS on Docker host; nyquist_compliant true — Lean rule 3 phase-ending plan
 - [Phase 16.3]: Public Journal Show under optional-auth needs published_at in the past, not only published:true — TestJournalTokens fixture
+- [Phase 14.2]: storage.uploads.serve mounts attach.StaticHandlerPublic from surf (owner summercms.surf), resolving bucket and DB per request, with nosniff; default off
+- [Phase 14.2]: http.access_log logs one 'http request' record (method, pattern, status, duration_ms; path only when unmatched); default off
+- [Phase 14.2]: fonoteka console commands use commandDatabase/commandBucket: published handle, else open+publish; closers close what they opened
+- [Phase 14.2]: fonoteka:dev-seed allowed only for SUMMER_ENV local or dev; prints lines after commit; secret shown only on mint
 
 ### Pending Todos
 
@@ -774,6 +778,6 @@ Items acknowledged and carried forward from previous milestone close:
 
 ## Session Continuity
 
-Last session: 2026-10-11T11:42:00.000Z
-Stopped at: Phase 16.3 complete, ready to plan Phase 11
+Last session: 2026-10-11T15:48:34.916Z
+Stopped at: Completed 14.2-01-PLAN.md
 Resume file: None

.planning/state.json

@@ -165,9 +165,9 @@
     }
   ],
   "next": {
-    "command": "/msd-progress --next",
-    "label": "Advance to the next step (plan phase 11)",
-    "reason": "Phase 11 of 40 — needs a plan"
+    "command": "/msd:progress --next",
+    "label": "Advance to the next step",
+    "reason": "Phase 14.2 of 40 · executing"
   },
-  "updated_at": "2026-10-11T12:08:30.952Z"
+  "updated_at": "2026-10-11T15:48:22.885Z"
 }