docs(03-02): complete tenant-scoped genre counts plan

Tasks completed: 2/2
- Count only albums visible in the active collection
- Match PHP filter, validation, ordering and JSON shape

SUMMARY: .planning/phases/03-first-vertical-slice-genres-end-to-end/03-02-SUMMARY.md
Co-authored-by: Cursor <cursoragent@cursor.com>

.planning/ROADMAP.md

@@ -126,7 +126,7 @@ Plans:
 
 **Wave 2** *(blocked on Wave 1 completion)*
 
-- [ ] 03-02-PLAN.md — Port active-collection counts, validation and Polish ordering
+- [x] 03-02-PLAN.md — Port active-collection counts, validation and Polish ordering
 
 **Wave 3** *(blocked on Wave 2 completion)*
 
@@ -348,7 +348,7 @@ Phases execute in numeric order: 1 → 2 → 3 → 4 → 5 → 6 → 7 → 8 →
 |-------|----------------|--------|-----------|
 | 1. Framework kernel foundation | 4/4 | Complete   | 2026-09-16 |
 | 2. API parity harness bootstrap | 5/5 | Complete   | 2026-09-17 |
-| 3. First vertical slice — genres end to end | 1/4 | In Progress|  |
+| 3. First vertical slice — genres end to end | 2/4 | In Progress|  |
 | 4. CLI scaffolding, i18n and mail | 0/TBD | Not started | - |
 | 5. Data layer full fidelity | 0/TBD | Not started | - |
 | 6. HTTP routing, auth groups and rate limiting | 0/TBD | Not started | - |

.planning/STATE.md

@@ -3,14 +3,14 @@ gsd_state_version: 1.0
 milestone: v1.0
 milestone_name: milestone
 status: executing
-stopped_at: Completed 03-01-PLAN.md
+stopped_at: Completed 03-02-PLAN.md
-last_updated: "2026-09-17T18:06:03.849Z"
+last_updated: "2026-09-17T18:14:02.630Z"
 last_activity: 2026-09-17
 progress:
   total_phases: 15
   completed_phases: 2
   total_plans: 13
-  completed_plans: 10
+  completed_plans: 11
   percent: 13
 ---
 
@@ -26,11 +26,11 @@ See: .planning/PROJECT.md (updated 2026-09-16)
 ## Current Position
 
 Phase: 03 (first-vertical-slice-genres-end-to-end) — EXECUTING
-Plan: 2 of 4
+Plan: 3 of 4
 Status: Ready to execute
 Last activity: 2026-09-17
 
-Progress: [████████░░] 77%
+Progress: [█████████░] 85%
 
 ## Performance Metrics
 
@@ -54,6 +54,7 @@ Progress: [████████░░] 77%
 
 *Updated after each plan completion*
 | Phase 03 P03-01 | 17 min | 2 tasks | 52 files |
+| Phase 03 P03-02 | 5 min | 2 tasks | 8 files |
 
 ## Accumulated Context
 
@@ -87,6 +88,9 @@ Recent decisions affecting current work:
 - [Phase 03]: GORM and app services share one pgx-stdlib *sql.DB; the River LISTEN/NOTIFY pool is a Phase 11 seam and is not created in lagoon.Open — DATA-01: one shared pool now; dual-driver River listener deferred
 - [Phase 03]: Generated app main stays framework-generic (lagoon.RuntimeCommands + surf.ServeCommand); fonoteka.go/app.Handler is the in-process boot seam for parity tests — summer build cannot import the app package; CLI serve and tests still assemble the same surf router
 - [Phase 03]: Empty golem15.user.jwt.secret fails Boot; tests use a fixed test-only HS256 secret and do not issue tokens through a production API — D-11: missing secret must not fall back; token minting stays out of Phase 3
+- [Phase 03]: lagoon.OrderBy takes a caller allow-list so the framework never hardcodes Fonoteka table names; the handler passes PHP PolishOrder::ALLOWED_COLUMNS — summercms.go must stay app-agnostic; PolishOrder columns live at the Fonoteka call site
+- [Phase 03]: Duplicate non_empty query keys last-win, matching PHP parse_str; invalid then 1 is accepted, 1 then invalid is 422 — PHP parse_str last-wins confirmed with php -r; Go uses vals[len(vals)-1]
+- [Phase 03]: Invalid stored context is rewritten to the lowest-ID accessible kind=collection row; auto-provisioning stays out of this slice — Plan 03-02 ports only the JWT default resolve path; CollectionProvisioner is Phase 12
 
 ### Pending Todos
 
@@ -108,6 +112,6 @@ Items acknowledged and carried forward from previous milestone close:
 
 ## Session Continuity
 
-Last session: 2026-09-17T18:04:55.976Z
+Last session: 2026-09-17T18:13:51.817Z
-Stopped at: Completed 03-01-PLAN.md
+Stopped at: Completed 03-02-PLAN.md
 Resume file: None

.planning/phases/03-first-vertical-slice-genres-end-to-end/03-02-SUMMARY.md

@@ -0,0 +1,143 @@
+---
+phase: 03-first-vertical-slice-genres-end-to-end
+plan: 02
+subsystem: api
+tags: [postgres, gorm, active-collection, album-count, polish-order, validation]
+
+requires:
+  - phase: 03-first-vertical-slice-genres-end-to-end
+    provides: Shared pgx-stdlib pool, JWT genre route, 15 seeded genres
+provides:
+  - JWT default active-collection resolver with grouped owner/editor access
+  - Tenant-scoped genre album_count aggregate (owned, editor, foreign)
+  - Allow-listed lagoon ORDER BY without COLLATE (ICU pl-PL default)
+  - PHP-shaped non_empty validation and 422 envelope
+affects: [03-03, 03-04, 05, 12]
+
+tech-stack:
+  added: []
+  patterns:
+    - AccessibleByMembership grouped owner OR editor, then AND active collection_id
+    - lagoon.OrderBy(column, dir, allow-list) at the PHP PolishOrder call site
+    - Dedicated GenreAggregate DTO with initialized data slice
+
+key-files:
+  created:
+    - lagoon/order.go
+    - ../fonoteka.go/plugins/golem15/fonoteka/active_collection.go
+    - ../fonoteka.go/parity/genre_integration_test.go
+  modified:
+    - ../fonoteka.go/plugins/golem15/fonoteka/genre_handler.go
+    - ../fonoteka.go/plugins/golem15/fonoteka/genre.go
+    - ../fonoteka.go/plugins/golem15/fonoteka/plugin.go
+    - ../fonoteka.go/parity/genre_smoke_test.go
+
+key-decisions:
+  - "lagoon.OrderBy takes a caller allow-list so the framework never hardcodes Fonoteka table names; the handler passes PHP PolishOrder::ALLOWED_COLUMNS"
+  - "Duplicate non_empty query keys last-win, matching PHP parse_str; invalid then 1 is accepted, 1 then invalid is 422"
+  - "Invalid stored context is rewritten to the lowest-ID accessible kind=collection row; auto-provisioning stays out of this slice"
+
+patterns-established:
+  - "Pattern: grouped membership OR then AND collection_id in the albums subquery"
+  - "Pattern: GenreAggregate DTO with integer id/album_count, data never null, Cache-Control no-cache, private"
+
+requirements-completed: [DATA-01, HTTP-02, QA-04]
+
+duration: 5min
+completed: 2026-09-17
+---
+
+# Phase 03 Plan 02: Tenant-scoped genre album counts Summary
+
+**Active-collection album counts with grouped owner/editor access, PHP `non_empty` 422, and database-default Polish name order**
+
+## Performance
+
+- **Duration:** 5 min
+- **Started:** 2026-09-17T18:08:21Z
+- **Completed:** 2026-09-17T18:13:14Z
+- **Tasks:** 2
+- **Files modified:** 8
+
+## Accomplishments
+
+- JWT default path resolves stored context if the user owns or edits it, otherwise persists the lowest-ID accessible `kind=collection` row; foreign albums never enter the count.
+- Genre list left-joins `COUNT(*)` by `genre_id` onto all 15 seeded rows via a dedicated `GenreAggregate` DTO (`id`/`album_count` JSON numbers, empty list `[]`).
+- `non_empty=1` keeps positive counts; invalid values return 422 `{"error":"Validation failed","errors":{"non_empty":["Zaznaczony non empty jest nieprawidłowy."]}}`; `lagoon.OrderBy` emits `golem15_fonoteka_genres.name ASC` with no COLLATE.
+
+## Task Commits
+
+Each task was committed atomically (framework `summercms.go` then app `fonoteka.go` when both change):
+
+1. **Task 1: Count only albums visible in the active collection**
+   - `fc7d5810f0796bf1d1b61e85a0e98482d67c144f` (feat, fonoteka.go)
+2. **Task 2: Match PHP filter, validation, ordering and JSON shape**
+   - `56be82f3f33b160ffb114905174072430f020432` (feat, summercms.go)
+   - `f5adabcc6d4f9bf0557d200f885b01fd7a8b82f1` (feat, fonoteka.go)
+
+**Plan metadata:** (this commit)
+
+## Files Created/Modified
+
+- `lagoon/order.go` — allow-listed `OrderBy` helper, no COLLATE
+- `lagoon/order_test.go` — reject unknown column/direction; clause is `… ASC`/`DESC`
+- `../fonoteka.go/plugins/golem15/fonoteka/active_collection.go` — `ResolveActiveCollection`, `AccessibleByMembership`
+- `../fonoteka.go/plugins/golem15/fonoteka/genre_handler.go` — aggregate query, `non_empty`, Polish order call site
+- `../fonoteka.go/plugins/golem15/fonoteka/genre.go` — minimal Album model
+- `../fonoteka.go/plugins/golem15/fonoteka/plugin.go` — HasModels includes collection/album/context
+- `../fonoteka.go/parity/genre_integration_test.go` — owned/editor/foreign counts, fallback, `non_empty`, 15-name order, 422, empty `data:[]`, wrong-locale startup
+- `../fonoteka.go/parity/genre_smoke_test.go` — first row is Blues under ICU `pl-PL`
+
+## Decisions Made
+
+- Framework `lagoon.OrderBy` is generic: the Fonoteka handler supplies PHP's four-column allow-list.
+- Duplicate `non_empty` keys follow PHP `parse_str` last-wins (confirmed with `php -r`, isolated `:8423` was not running).
+- No auto-provisioning: a user with no accessible real collection gets 15 zero-count rows (or `{"data":[]}` when `non_empty=1`).
+- Plan 01 schema already had the columns this path needs; no ALTER migration was appended.
+
+## Deviations from Plan
+
+### Auto-fixed Issues
+
+**1. [Discretion] Duplicate `non_empty` keys checked via `parse_str`, not the isolated PHP HTTP endpoint**
+- **Found during:** Task 2
+- **Issue:** Plan asked to hit the isolated PHP endpoint before encoding duplicate-key behavior. `:8423` was not up.
+- **Fix:** Confirmed PHP last-wins with `parse_str("non_empty=1&non_empty=0")` and encoded the same rule in Go (`vals[len(vals)-1]`).
+- **Files modified:** `../fonoteka.go/plugins/golem15/fonoteka/genre_handler.go`, `../fonoteka.go/parity/genre_integration_test.go`
+- **Verification:** `non_empty=2&non_empty=1` returns the filtered list; `non_empty=1&non_empty=2` returns 422
+- **Committed in:** `f5adabc` (Task 2)
+
+**2. [Rule 1 - Bug] Smoke test first-row slug after Polish order**
+- **Found during:** Task 2
+- **Issue:** Plan 01 smoke asserted `data[0].slug == rock` under `ORDER BY id`. ICU name order puts Blues first.
+- **Fix:** Assert Blues/`blues` in `genre_smoke_test.go`.
+- **Files modified:** `../fonoteka.go/parity/genre_smoke_test.go`
+- **Verification:** `go test ./... -run TestGenre` passes
+- **Committed in:** `f5adabc` (Task 2)
+
+---
+
+**Total deviations:** 2 (1 duplicate-key source discretion, 1 smoke assertion)
+**Impact on plan:** No scope creep. QA-04 corpus parity remains Plan 03-03.
+
+## Issues Encountered
+
+None that blocked the slice. Plan 01 tables covered owner/editor/context/kind; no appended migration.
+
+## User Setup Required
+
+None - no external service configuration required beyond the existing Postgres ICU `pl-PL` database.
+
+## Next Phase Readiness
+
+Ready for `03-03-PLAN.md` (typed params, isolated rollback, first real parity pass). Do not mark the genres corpus route `ported` until that plan. QA-04 stays pending until the recorded fixture diffs green.
+
+## Self-Check: PASSED
+
+- Key files exist on disk (`lagoon/order.go`, `../fonoteka.go/plugins/golem15/fonoteka/active_collection.go`, `../fonoteka.go/parity/genre_integration_test.go`)
+- `git log --grep=03-02` returns Task 1 and Task 2 commits in both repos
+- Acceptance: owned/editor/foreign counts, invalid-context fallback, grouped OR SQL, `non_empty=1`/422/empty `[]`, 15-name Polish order, integer JSON, ICU locale fail before query, `go vet`/`go test ./...` green in both repos
+
+---
+*Phase: 03-first-vertical-slice-genres-end-to-end*
+*Completed: 2026-09-17*