From 611f98e33ba45b1f7718ead84cb8f8474e879f33 Mon Sep 17 00:00:00 2001 From: Jakub Zych Date: Sun, 11 Oct 2026 02:08:18 +0200 Subject: [PATCH] docs(16.3-02): advance STATE and ROADMAP after plan 02 Co-authored-by: Cursor --- .planning/ROADMAP.md | 4 ++-- .planning/STATE.md | 21 ++++++++++++--------- .planning/state.json | 2 +- 3 files changed, 15 insertions(+), 12 deletions(-) diff --git a/.planning/ROADMAP.md b/.planning/ROADMAP.md index 3b4ca92..bfe437a 100644 --- a/.planning/ROADMAP.md +++ b/.planning/ROADMAP.md @@ -1044,14 +1044,14 @@ Plans: 5. Module READMEs and `docs/` cover the token API, scopes and CLI commands. 6. The new code has unit tests, delivered in the phase's last plan. -**Plans:** 1/4 plans executed +**Plans:** 2/4 plans executed Plans: **Wave 1** - [x] 16.3-01-PLAN.md — Framework (summercms.go): pact.HasTokenScopes, bouncer scope limit, Allows rewrite (scope before the superuser shortcut), backend_api_tokens migration, composite backend guard, interactive-only marker, route gates, published cabana.ResolveBackend, account token API with OpenAPI and inventories, admin:token:* CLI with party.Activated and summer delegates, READMEs and docs **Wave 2** *(blocked on Wave 1 completion)* -- [ ] 16.3-02-PLAN.md — Admin SPA API tokens card on My account per UI-SPEC: list states, two-step create with show-once plaintext and copy, revoke, phrase keys, dist, docs +- [x] 16.3-02-PLAN.md — Admin SPA API tokens card on My account per UI-SPEC: list states, two-step create with show-once plaintext and copy, revoke, phrase keys, dist, docs **Wave 3** *(blocked on Wave 2 completion)* - [ ] 16.3-03-PLAN.md — Journal: journal and journal:read scopes, token auth through ResolveBackend with byte-identical bodies (reverses Phase 15 D-15), Journal README and the ResolveBackend docs example; release gate (human), summercms tag after v0.1.20, Journal go.mod and host gitlink bumps diff --git a/.planning/STATE.md b/.planning/STATE.md index bbec9b3..0366964 100644 --- a/.planning/STATE.md +++ b/.planning/STATE.md @@ -4,16 +4,16 @@ milestone: v1.0 current_phase: "16.3" current_phase_name: Backend admin personal API tokens with scopes status: executing -stopped_at: Completed 16.3-01-PLAN.md -last_updated: "2026-10-10T23:56:19.615Z" +stopped_at: Completed 16.3-02-PLAN.md +last_updated: "2026-10-11T00:07:52.680Z" last_activity: 2026-10-11 -last_activity_desc: Completed 16.3-01 framework personal API tokens -state_head: 3019ab188bc3d5a1d1cce3b16bbdd8af19debe55 +last_activity_desc: Completed 16.3-02 admin SPA API tokens card +state_head: fd07e2637fce8ca9bd6294ca611e6acc4137ef4a progress: total_phases: 40 completed_phases: 13 total_plans: 162 - completed_plans: 155 + completed_plans: 156 gsd_state_version: "1.0" milestone_name: milestone --- @@ -30,9 +30,9 @@ See: .planning/PROJECT.md (updated 2026-09-16) ## Current Position Phase: 16.3 (Backend admin personal API tokens with scopes) — EXECUTING -Plan: 2 of 4 +Plan: 3 of 4 Status: Ready to execute -Last activity: 2026-10-11 — Completed 16.3-01 (framework personal API tokens) +Last activity: 2026-10-11 — Completed 16.3-02 (admin SPA API tokens card) Progress: [█████░░░░░] 48% @@ -210,6 +210,7 @@ Progress: [█████░░░░░] 48% | Phase 16.2 P05 | 25 min | 3 tasks | 7 files | | Phase 16.2 P06 | 43min | 3 tasks | - files | | Phase 16.3 P01 | 95 | 4 tasks | 43 files | +| Phase 16.3 P02 | 9 min | 3 tasks | 17 files | ## Accumulated Context @@ -687,6 +688,8 @@ Recent decisions affecting current work: - [Phase 16.3]: D-03 literal: one method-allowed scope must match every required code; ScopeLimit keeps per-scope pattern slices — Locked CONTEXT reading; multi-code lists are stricter than a union - [Phase 16.3]: CLI uses party.Activated at Run time; cabana.RuntimeCommands(app) signature unchanged (Option A) — User-confirmed Option A so host apps only bump versions - [Phase 16.3]: ResolveBackend is Bearer-only (cookie-less JWT guard) — Plugin write routes have no CSRF; cookie auth must not drive them +- [Phase 16.3]: 16.3-02: ApiTokensPanel + ApiTokenCreateDialog on /account; plaintext dialog-local only; shared ConfirmDialog for revoke and close-without-copy — UI-SPEC component split +- [Phase 16.3]: 16.3-02: expired from API drives Expired chip; dates use CellValue local YYYY-MM-DD / YYYY-MM-DD HH:mm — Plan decisions; no new date format ### Pending Todos @@ -759,6 +762,6 @@ Items acknowledged and carried forward from previous milestone close: ## Session Continuity -Last session: 2026-10-10T23:56:11.103Z -Stopped at: Completed 16.3-01-PLAN.md +Last session: 2026-10-11T00:07:52.680Z +Stopped at: Completed 16.3-02-PLAN.md Resume file: None diff --git a/.planning/state.json b/.planning/state.json index e6b5589..f6b9606 100644 --- a/.planning/state.json +++ b/.planning/state.json @@ -169,5 +169,5 @@ "label": "Advance to the next step", "reason": "Phase 16.3 of 40 · executing" }, - "updated_at": "2026-10-10T23:55:35.505Z" + "updated_at": "2026-10-11T00:07:52.680Z" }