Commit Graph

111 Commits

Author SHA1 Message Date
Jakub Zych
f75e3e84db docs(07): plan gap closure for the pending user-api parity routes 2026-09-22 20:22:45 +02:00
Jakub Zych
9446981ffd docs(07-06): complete the unit coverage plan
The validation contract is signed off and the phase plan count is 6/6. Requirement checkboxes stay open while the user-api routes are still pending.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-22 19:21:31 +02:00
Jakub Zych
fa7bdb5f71 docs(07-05): complete the user API parity capture plan
Record that the 15 user routes stay pending until Go matches the PHP bodies, including the HTML 500 on a bad activation code and the still-valid token after logout.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-22 18:44:05 +02:00
Jakub Zych
ecfcd23150 docs(07-04): complete the personal token and locale plan
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-22 18:09:31 +02:00
Jakub Zych
4e56ff98b0 docs(07-03): complete the account management plan
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-22 16:48:10 +02:00
Jakub Zych
3cf938867c docs(07-02): complete the user session plan
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-22 15:15:16 +02:00
Jakub Zych
ae9e11f65d docs(07-01): complete framework auth primitives plan 2026-09-22 13:43:15 +02:00
Jakub Zych
57745e32a2 docs(07): create phase plan
Six plans for the user plugin and authentication phase:
- 07-01: bouncer JWT lifecycle, password hashing, I18N-02 locale
  override, lagoon.Validate extensions (summercms.go)
- 07-02: User/Throttle schema, core session loop (login/logout/
  fetch/refresh/register) (fonoteka.go)
- 07-03: account management (forgot/reset, activation, update,
  change-password, avatar, mail) (fonoteka.go)
- 07-04: personal API tokens, me/locale, 423-exempt route-table
  proof (fonoteka.go)
- 07-05: parity evidence recording against the isolated PHP
  instance (fonoteka.go)
- 07-06: full unit coverage and validation sign-off (both repos)

Plan count and scope confirmed at the plan-count checkpoint.
2026-09-22 12:21:15 +02:00
Jakub Zych
fb66398cb9 docs(06-14): complete gap-closure test and review plan 2026-09-21 19:49:47 +02:00
Jakub Zych
54dd60953a docs(06-13): complete fetchguard SSRF gap-closure plan 2026-09-21 19:45:03 +02:00
Jakub Zych
4bad1a43a2 docs(06-12): complete surf/bouncer gap-closure plan 2026-09-21 19:43:51 +02:00
Jakub Zych
ef6d914e4c docs(06-11): update plan tracking 2026-09-21 13:05:11 +02:00
Jakub Zych
7118e4f280 docs(06-10): update plan tracking 2026-09-21 00:28:15 +02:00
Jakub Zych
c9909ce412 docs(06-09): update plan tracking 2026-09-20 21:08:54 +02:00
Jakub Zych
8a265d8372 docs(06-08): update plan tracking
- Advance phase progress to 8 of 11 plans
- Record transition-address security decisions and execution metrics
- Mark HTTP-07 complete in requirements tracking
2026-09-20 21:00:45 +02:00
Jakub Zych
3601a0ab09 docs(06-07): update plan tracking 2026-09-20 17:12:31 +02:00
Jakub Zych
47e9c44b2a docs(06): create gap closure plans 2026-09-20 16:14:21 +02:00
Jakub Zych
c187d6f735 docs(06): reopen phase after verification gaps 2026-09-20 14:00:36 +02:00
Jakub Zych
f5fd55f419 docs(06-06): update plan tracking 2026-09-20 13:33:11 +02:00
Jakub Zych
2f90fef830 docs(06): add rate-limit middleware gap plan 2026-09-19 23:07:43 +02:00
Jakub Zych
cb34de4203 docs(phase-06): mark progress table as gaps found 2026-09-19 21:44:36 +02:00
Jakub Zych
59d9a26aad docs(phase-06): record verification gaps and reopen phase 2026-09-19 21:44:26 +02:00
Jakub Zych
b759669f23 docs(06-05): complete unit coverage and security-review plan 2026-09-19 21:21:42 +02:00
Jakub Zych
f61776d0a6 docs(06-03): complete raw groups, wire, CORS, and body-limit plan
- Operator-confirmed 128MiB body limits (134217728); D-18/T-06-13 closed
- HTTP-06, HTTP-08, HTTP-09 marked complete
2026-09-19 21:01:07 +02:00
Jakub Zych
42b8295cc1 docs(06-02): complete fixed-window limiter and five-bucket plan 2026-09-19 19:46:28 +02:00
Jakub Zych
ab20ad0f9c docs(06-02): correct HTTP-04 named bucket count to five
- ROADMAP Phase 6 success criterion 2 and REQUIREMENTS HTTP-04 said seven
- D-01: routes.php defines five fonoteka-* buckets plus inline throttle:N,M
2026-09-19 19:42:23 +02:00
Jakub Zych
e2aba0ebf0 docs(phase-06): update tracking after wave 1 2026-09-19 19:28:18 +02:00
Jakub Zych
1f56a9ee1c docs(06-01): complete guard registry and dual-group genres plan 2026-09-19 19:24:03 +02:00
Jakub Zych
c4f406bb64 docs(06): create phase plan 2026-09-19 16:58:48 +02:00
Jakub Zych
38cd4c6f50 docs(05-06): record plan close-out in STATE and ROADMAP
- Phase 5 plan 6 of 6 complete and ready for verification
- Record 23 min / 3 tasks / 12 files and the fill-boundary test decisions
2026-09-18 20:56:10 +02:00
Jakub Zych
67434f5185 docs(05-05): record plan close-out in STATE and ROADMAP
- Advance to plan 6 of 6; mark DATA-11 and CLI-03 complete
2026-09-18 20:28:00 +02:00
Jakub Zych
678b216900 docs(05-04): record plan close-out in STATE and ROADMAP
- Advance to plan 5 of 6; DATA-08 marked complete
2026-09-18 20:05:58 +02:00
Jakub Zych
b1b740c333 docs(05-03): record plan close-out in STATE and ROADMAP 2026-09-18 19:44:42 +02:00
Jakub Zych
a46c153480 docs(05-02): record plan close-out in STATE and ROADMAP
- Advance to plan 3 of 6 and mark DATA-04/05/07/09 complete
2026-09-18 19:25:21 +02:00
Jakub Zych
06635f21cd docs(05-01): record plan close-out in STATE and ROADMAP
- Advance to plan 2 of 6; 05-01 marked complete
- DATA-03, DATA-06, DATA-10 checked in REQUIREMENTS.md
2026-09-18 18:53:33 +02:00
Jakub Zych
c85fa24936 docs(05-01): drop 27-migrations target and move HTTP fuzz to Phase 12
- DATA-09 and Phase 5 criteria follow D-01 squash and D-07 service-level fuzz
- Phase 12 inherits the write-endpoint DTO fuzz once HTTP exists
2026-09-18 18:48:08 +02:00
Jakub Zych
29b73b6892 docs(05): create phase plan 2026-09-18 18:06:55 +02:00
Jakub Zych
bbf49a910a fix(05): revise plans based on checker feedback 2026-09-18 17:31:53 +02:00
Jakub Zych
f6af510716 docs(state): record 04-04 completion and mark phase 04 complete
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-18 14:14:13 +02:00
Jakub Zych
71f13f5620 docs(state): record 04-03 completion and advance to plan 04
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-18 14:03:43 +02:00
Jakub Zych
a6555c4606 docs(state): record 04-02 completion and advance to plan 03
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-18 13:54:05 +02:00
Jakub Zych
e7dba5c4fb docs(state): record 04-01 completion and advance to plan 02
Mark CLI-02 complete, log scaffolding registry and leaf-check
decisions, and move Phase 4 progress to 1/4 plans.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-18 13:42:34 +02:00
Jakub Zych
846e6d5b74 docs(04): create phase plan 2026-09-18 13:24:54 +02:00
Jakub Zych
88a3dca409 docs(03-04): mark Phase 3 complete in STATE and ROADMAP
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-17 20:41:03 +02:00
Jakub Zych
f4fecc959f docs(03-03): complete typed params, rollback, and first real parity pass plan
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-17 20:24:39 +02:00
Jakub Zych
a9c3e7690f docs(03-02): complete tenant-scoped genre counts plan
Tasks completed: 2/2
- Count only albums visible in the active collection
- Match PHP filter, validation, ordering and JSON shape

SUMMARY: .planning/phases/03-first-vertical-slice-genres-end-to-end/03-02-SUMMARY.md
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-17 20:14:09 +02:00
Jakub Zych
20bd8fe8fc docs(03-01): complete boot JWT genre route plan
Tasks completed: 2/2
- Initialize the real app database through plugin migrations
- Serve the seeded genre list behind real cross-plugin JWT middleware

SUMMARY: .planning/phases/03-first-vertical-slice-genres-end-to-end/03-01-SUMMARY.md
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-17 20:06:03 +02:00
Jakub Zych
15a8389e46 docs(03): create phase plan 2026-09-17 18:40:13 +02:00
Jakub Zych
8fe69ffc6b docs(02-05): mark plan complete in STATE and ROADMAP
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-17 14:17:22 +02:00
Jakub Zych
6f0168ae1e docs(02-04): mark plan complete in STATE and ROADMAP 2026-09-17 13:59:51 +02:00