docs(14.2-01): record plan 01 progress in state and roadmap

.planning/STATE.md

@@ -1,20 +1,19 @@
 ---
 msd_state_version: "1.0"
 milestone: v1.0
-current_phase: 11
-current_phase_name: Jobs, realtime and search infrastructure
-status: planning
-stopped_at: Phase 16.3 complete, ready to plan Phase 11
-last_updated: "2026-10-11T14:14:17.635Z"
+current_phase: "14.2"
+current_phase_name: Local Fonoteka frontend on local SummerCMS backend
+status: executing
+stopped_at: Completed 14.2-01-PLAN.md
+last_updated: "2026-10-11T15:48:35.710Z"
 last_activity: 2026-10-11
-last_activity_desc: "Completed quick task 261011-mag: fix check-phase10.sh hygiene gaps from 10-VERIFICATION.md"
-state_head: 1541cd4167bb9a92ffba897403a967030f37b93d
+last_activity_desc: Phase 14.2 execution started
+state_head: d0eeb4d291917ccf02c576abe1d711cb07012752
 progress:
   total_phases: 40
   completed_phases: 13
   total_plans: 162
-  completed_plans: 158
-  percent: 41
+  completed_plans: 159
 gsd_state_version: "1.0"
 milestone_name: milestone
 ---
@@ -26,14 +25,14 @@ milestone_name: milestone
 See: .planning/PROJECT.md (updated 2026-09-16)
 
 **Core value:** An existing WinterCMS-shaped app can be ported plugin by plugin to a single Go binary without its frontend noticing: the PHP version's API contract is the acceptance test.
-**Current focus:** Phase 16.3 — Backend admin personal API tokens with scopes
+**Current focus:** Phase 14.2 — Local Fonoteka frontend on local SummerCMS backend
 
 ## Current Position
 
-Phase: 11 — Jobs, realtime and search infrastructure
-Plan: Not started
-Status: Ready to plan
-Last activity: 2026-10-11 - Completed quick task 261011-mag: fix check-phase10.sh hygiene gaps from 10-VERIFICATION.md
+Phase: 14.2 (Local Fonoteka frontend on local SummerCMS backend) — EXECUTING
+Plan: 2 of 4
+Status: Ready to execute
+Last activity: 2026-10-11 — Phase 14.2 execution started
 
 Progress: [████░░░░░░] 41%
 
@@ -215,6 +214,7 @@ Progress: [████░░░░░░] 41%
 | Phase 16.3 P02 | 9 min | 3 tasks | 17 files |
 | Phase 16.3 P03 | 658 min | 4 tasks | 12 files |
 | Phase 16.3 P04 | 30 min | 3 tasks | 16 files |
+| Phase 14.2 P01 | 16 min | 3 tasks | 18 files |
 
 ## Accumulated Context
 
@@ -698,6 +698,10 @@ Recent decisions affecting current work:
 - [Phase 16.3]: Journal API uses cabana.ResolveBackend with cover golem15.journal.*; ErrTokenScope maps to PHP Insufficient permissions
 - [Phase 16.3]: 16.3-04: full unit coverage + scripts/check-phase16.3.sh; postgres PASS on Docker host; nyquist_compliant true — Lean rule 3 phase-ending plan
 - [Phase 16.3]: Public Journal Show under optional-auth needs published_at in the past, not only published:true — TestJournalTokens fixture
+- [Phase 14.2]: storage.uploads.serve mounts attach.StaticHandlerPublic from surf (owner summercms.surf), resolving bucket and DB per request, with nosniff; default off
+- [Phase 14.2]: http.access_log logs one 'http request' record (method, pattern, status, duration_ms; path only when unmatched); default off
+- [Phase 14.2]: fonoteka console commands use commandDatabase/commandBucket: published handle, else open+publish; closers close what they opened
+- [Phase 14.2]: fonoteka:dev-seed allowed only for SUMMER_ENV local or dev; prints lines after commit; secret shown only on mint
 
 ### Pending Todos
 
@@ -774,6 +778,6 @@ Items acknowledged and carried forward from previous milestone close:
 
 ## Session Continuity
 
-Last session: 2026-10-11T11:42:00.000Z
-Stopped at: Phase 16.3 complete, ready to plan Phase 11
+Last session: 2026-10-11T15:48:34.916Z
+Stopped at: Completed 14.2-01-PLAN.md
 Resume file: None