Commit Graph
353 Commits
Author SHA1 Message Date
curo1305 e32793c126 chore: merge executor worktree (worktree-agent-ae52d6537a4569901) 2026-06-16 21:26:09 +02:00
curo1305 dfac0a9617 docs(11-03): complete responsive shells and storage rows plan summary 2026-06-16 21:24:26 +02:00
curo1305 6155aaba46 docs(phase-11): update tracking after wave 1 2026-06-16 21:12:35 +02:00
curo1305 dfc6ff52f7 docs(11-02): complete lazy-load routes plan — SUMMARY.md 2026-06-16 21:11:46 +02:00
curo1305 7547e8ae97 docs(phase-11): update tracking after wave 0 2026-06-16 21:07:57 +02:00
curo1305andClaude Sonnet 4.6 3361a63ffd docs(11-01): add plan summary — baseline captured, audit complete
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-16 21:06:22 +02:00
curo1305 6d56d25977 docs(11-01): capture Phase 11 bundle baseline and frontend audit
- Ran ANALYZE=true npm run build; copied stats.html to .planning/perf/phase11-baseline.html
- Added phase11-baseline-summary.md: chunk sizes, route lazy-load audit,
  responsive/modal/typography/dead-code findings for plans 11-02..11-06
- Main bundle: 264.63 kB raw / 89.34 kB gzip; 5 user routes still synchronous
- Admin/auth routes already lazy-loaded; CSS 98.74 kB raw (expected for full UI)
2026-06-16 21:05:12 +02:00
curo1305 41d136fa1f docs(state): record phase 11 context session 2026-06-16 20:50:43 +02:00
curo1305 f03d5b095e docs(11): capture phase context 2026-06-16 20:50:37 +02:00
curo1305andClaude Sonnet 4.6 83cdf28231 docs(phase-10): evolve PROJECT.md and resolve UAT after gap closure
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-16 20:12:46 +02:00
curo1305andClaude Sonnet 4.6 ac95c1243f docs(phase-10): complete gap closure verification — 219 tests, all 6 UAT gaps closed
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-16 20:11:51 +02:00
curo1305 0df2942e4c docs(10-13): complete gap closure plan summary
- 6 UAT gaps closed: shimmer, search-at-root, admin sidebar, keyboard shortcuts, escape focus, OS drag-drop
- 219 tests passing (8 new)
- 5 production files modified, 3 test files added
2026-06-16 19:20:16 +02:00
curo1305 e3c681f99d docs(10): add root causes from diagnosis — 8 gaps diagnosed 2026-06-16 17:36:17 +02:00
curo1305 6d238a4ff3 test(10): complete UAT - 10 passed, 9 issues 2026-06-16 17:32:03 +02:00
curo1305andClaude Sonnet 4.6 210670d033 docs(phase-10): mark VALIDATION.md nyquist-compliant — 16/16 tasks COVERED, 211 tests pass
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-16 13:43:45 +02:00
curo1305andClaude Sonnet 4.6 4f6ee06f51 docs(10): mark Phase 10 complete — 15/15 truths verified, 211 tests pass
All 12 plans executed. Gap-closure committed in 6b56763 (Escape modal close,
revoke/rename toasts, StorageBrowser picker tests). Code review critical findings
resolved (CR-01 prop mutation, CR-02 double-shortcut on modal). VERIFICATION.md
shows 15/15 verified. Known pre-existing: esbuild CVE-GHSA-gv7w requires Vite 8
upgrade (breaking) — filed for Phase 11 chore.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-16 10:19:59 +02:00
curo1305andClaude Sonnet 4.6 37f49bc6ea docs(10): add code review report
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-16 10:13:37 +02:00
curo1305andClaude Sonnet 4.6 a6e130b49e docs(10): re-verify after gap closure — all 15 truths verified, 211 tests pass
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-16 10:03:16 +02:00
curo1305 2605227fe0 docs(10): add code review report 2026-06-16 09:45:54 +02:00
curo1305 b46b97864e docs(phase-10): update tracking after wave 5 complete (12/12 plans) 2026-06-16 09:40:33 +02:00
curo1305 dbd32fdb1c docs(10-12): complete SVG-to-AppIcon migration — CODE-05 complete 2026-06-16 09:39:27 +02:00
curo1305 01a0605831 docs(phase-10): update tracking after wave 4 complete (11/12 plans) 2026-06-16 08:29:09 +02:00
curo1305 7dc011f3da docs(10-11): complete drag-to-move guard + teleport dropdowns plan — 10 tests, 3 components updated 2026-06-16 08:26:38 +02:00
curo1305 dbb07c8c7d docs(phase-10): update tracking after wave 3 complete (10/12 plans) 2026-06-15 20:48:13 +02:00
curo1305 026d3743c3 docs(10-10): complete OS drag overlay plan — OsDragOverlay.vue + App.vue wiring + 8 tests
UX-09 fully implemented: depth-counter drag detection, Teleport overlay,
FileManagerView.handleOsDrop wired through App.vue routeViewRef.
198/198 tests passing, 0 regressions.
2026-06-15 20:47:32 +02:00
curo1305 1cb63d690d docs(phase-10): update tracking after wave 2 complete (9/12 plans) 2026-06-15 20:38:48 +02:00
curo1305 c625d0889d docs(10-09): add plan SUMMARY — keyboard shortcuts via ref chain complete
- 3 tasks executed: RED tests → ref chain plumbing → App.vue handler GREEN
- 9 keyboard tests passing; 190 total tests, 0 failures
- Documents double optional chaining deviation (auto-fixed bug in StorageBrowser)
2026-06-15 20:37:54 +02:00
curo1305 9a435f8fc0 docs(phase-10): update tracking after wave 1 complete (8/12 plans) 2026-06-15 20:30:58 +02:00
curo1305 776a1d9948 chore: merge executor worktree (10-08 admin views wiring) 2026-06-15 20:30:25 +02:00
curo1305 365b0b4eca chore: merge executor worktree (10-07 AppSidebar wiring) 2026-06-15 20:30:25 +02:00
curo1305 d2110c9a98 docs(10-07): complete AppSidebar skeleton + EmptyState micro + UX-14 plan
- UX-03 skeletons, UX-01 sidebar micro EmptyState, UX-14 New button removed
- 9/9 tests GREEN; StorageBrowser.startNewFolder invariant preserved
2026-06-15 20:29:21 +02:00
curo1305 24a5cbc112 docs(10-08): complete plan — admin skeletons, EmptyStates, and BreadcrumbBar wiring
- All 3 tasks complete; 8 TDD skeleton tests GREEN
- 8 views updated with BreadcrumbBar (showRoot=false)
- AdminAuditView + AdminUsersView: animated skeleton tbody rows
- AdminAuditView + SharedView + CloudStorageView: EmptyState components
- Full worktree test suite: 178/178 pass
2026-06-15 20:28:27 +02:00
curo1305 b076ec9cda docs(10-06): create plan summary — skeleton/EmptyState/BreadcrumbBar/toast wired
- Documents 3 tasks (TDD RED→GREEN→Task3)
- Records 164/164 tests passing, FolderBreadcrumb deleted
- Captures dead-code hygiene deviation and decisions
2026-06-15 20:27:15 +02:00
curo1305 a1885122a1 docs(phase-10): update tracking after wave 0 complete (5/12 plans) 2026-06-15 20:18:49 +02:00
curo1305 20183e9c5e chore: merge executor worktree (10-03 BreadcrumbBar) 2026-06-15 20:17:57 +02:00
curo1305 8e1fb9e1db chore: merge executor worktree (10-02 EmptyState) — kept 10-01 AppIcon.vue (resolvedPaths vs paths[name]; 10-01 is canonical) 2026-06-15 20:17:49 +02:00
curo1305 5ed6ae9565 chore: merge executor worktree (10-05 Nyquist stubs) 2026-06-15 20:17:06 +02:00
curo1305 b4bcc1d843 docs(10-03): complete BreadcrumbBar plan — 2/2 tasks, 10/10 tests green 2026-06-15 20:14:30 +02:00
curo1305 ce76c097fd docs(10-05): complete Wave 0 xfail test stubs plan — 8 files, 53 it.todo stubs covering UX-02..09, UX-11, UX-13, UX-14 2026-06-15 20:13:57 +02:00
curo1305 69e859d2d8 docs(10-02): complete EmptyState plan — 2 tasks, 7 tests green
- EmptyState.vue: Options API, 4 props, 4 computed size-class methods, #cta slot
- AppIcon.vue: created as deviation Rule 3 (unblocks import resolution)
- 7 Vitest tests: RED at 96f4b5f, GREEN at e56d17e
2026-06-15 20:13:10 +02:00
curo1305 bb52aa09e0 docs(10-04): complete toast notification system plan
- 2/2 tasks executed (TDD RED then GREEN)
- 10 tests green; SettingsAccountTab + TotpEnrollment regressions clean
- toast.js store implemented, ToastContainer.vue created, App.vue mounted
2026-06-15 20:12:28 +02:00
curo1305 848b5fcf36 docs(10-01): complete AppIcon plan — 32 icons, 6/6 tests green
- AppIcon.vue: 31 single-path + 1 dual-path (cog) registry
- 6 unit tests cover name→path, class forwarding, dual-path, svg attrs, unknown-name warn, stroke path attrs
- Full frontend suite: 153/153 passed
2026-06-15 20:11:58 +02:00
curo1305andClaude Sonnet 4.6 d3d3f711eb docs(10): create phase plan — 12 plans, 6 waves, UX-01..14 + CODE-05
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-15 06:55:11 +02:00
curo1305 c84dcb77c1 docs(phase-10): research UX & interaction 2026-06-14 22:04:12 +02:00
curo1305 71118076a4 docs(state): record phase 10 context session 2026-06-14 21:53:38 +02:00
curo1305 4c8c394bc3 docs(10): capture phase context 2026-06-14 21:53:34 +02:00
curo1305andClaude Sonnet 4.6 e6f5f2be3b test(phase-09): complete UAT — 9/9 tests passed; mark phase complete
All 9 UAT items verified via live API + source inspection:
- GET /api/admin/overview live data (78 users, 8MB storage, 10 audit rows)
- Auth guard: 401 unauthenticated, 403 non-admin on all protected endpoints
- Admin login redirect (D-08) confirmed in LoginView.vue line 212
- Sidebar: 5 nav links, indigo Admin badge, no back-to-app link
- 4-stat-card overview + When/Event/Actor/Target/IP audit table
- 5 standalone admin views (Users, Quotas, AI, Audit) with no Pinia stores
- API key write-only invariant confirmed in AdminAiView.vue
- Color-coded audit badges (auth=blue, admin=amber, folder/share=purple)
- to.matched.some() guard covers all /admin/* child routes
- No sensitive fields (password_hash, credentials_enc) in any response

Phase 9 marked complete. STATE.md and PROJECT.md updated for Phase 10.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-13 11:32:19 +02:00
curo1305andClaude Sonnet 4.6 3363e23436 docs(phase-09): mark VALIDATION.md complete — all 5 gaps resolved
Audit confirmed all Wave 0 gaps were filled during execution:
- test_admin_overview.py: 8/8 passing (ADMIN-11 aggregate + no sensitive fields)
- router.guard.test.js: 11/11 passing (ADMIN-12 non-admin redirect + admin-to-admin guard)
- AdminView.vue absent from repo (ADMIN-08 dead-code check)
- Tailwind safelist covers all provider color classes (CODE-06)

nyquist_compliant: true

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-13 10:45:34 +02:00
curo1305andClaude Sonnet 4.6 c4adf9a990 docs(phase-09): add security threat verification — 15/15 threats closed
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-12 22:28:15 +02:00
curo1305andClaude Sonnet 4.6 6f9f045a9a docs(phase-09): add VERIFICATION.md + REVIEW.md — phase 9 complete
5/5 automated must-haves verified. 4 human runtime checks pending.
Code review: 4 blockers (CR-01 testAiConnection POST/GET mismatch,
CR-02 open redirect, CR-03 unvalidated role field, CR-04 password
shuffle bias), 6 warnings, 3 info.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-12 22:22:47 +02:00