curo/kite
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
540 Commits 1 Branch 1 Tag
ec5fd23ec21130ddabeb07badc0a4addce83e025
Commit Graph
14 Commits
Author SHA1 Message Date
curo1305andClaude Sonnet 4.6 e6f5f2be3b test(phase-09): complete UAT — 9/9 tests passed; mark phase complete 
All 9 UAT items verified via live API + source inspection:
- GET /api/admin/overview live data (78 users, 8MB storage, 10 audit rows)
- Auth guard: 401 unauthenticated, 403 non-admin on all protected endpoints
- Admin login redirect (D-08) confirmed in LoginView.vue line 212
- Sidebar: 5 nav links, indigo Admin badge, no back-to-app link
- 4-stat-card overview + When/Event/Actor/Target/IP audit table
- 5 standalone admin views (Users, Quotas, AI, Audit) with no Pinia stores
- API key write-only invariant confirmed in AdminAiView.vue
- Color-coded audit badges (auth=blue, admin=amber, folder/share=purple)
- to.matched.some() guard covers all /admin/* child routes
- No sensitive fields (password_hash, credentials_enc) in any response

Phase 9 marked complete. STATE.md and PROJECT.md updated for Phase 10.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-13 11:32:19 +02:00
curo1305andClaude Sonnet 4.6 3363e23436 docs(phase-09): mark VALIDATION.md complete — all 5 gaps resolved 
Audit confirmed all Wave 0 gaps were filled during execution:
- test_admin_overview.py: 8/8 passing (ADMIN-11 aggregate + no sensitive fields)
- router.guard.test.js: 11/11 passing (ADMIN-12 non-admin redirect + admin-to-admin guard)
- AdminView.vue absent from repo (ADMIN-08 dead-code check)
- Tailwind safelist covers all provider color classes (CODE-06)

nyquist_compliant: true

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-13 10:45:34 +02:00
curo1305andClaude Sonnet 4.6 c4adf9a990 docs(phase-09): add security threat verification — 15/15 threats closed 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-12 22:28:15 +02:00
curo1305andClaude Sonnet 4.6 6f9f045a9a docs(phase-09): add VERIFICATION.md + REVIEW.md — phase 9 complete 
5/5 automated must-haves verified. 4 human runtime checks pending.
Code review: 4 blockers (CR-01 testAiConnection POST/GET mismatch,
CR-02 open redirect, CR-03 unvalidated role field, CR-04 password
shuffle bias), 6 warnings, 3 info.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-12 22:22:47 +02:00
curo1305andClaude Sonnet 4.6 777c003ce9 docs(09-05): complete CODE-09 comment purge plan — SUMMARY.md 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-12 22:09:22 +02:00
curo1305 b9e5facd55 docs(09-04): complete plan 04 — router rewire, login redirect, cleanup, safelist 
Tasks:
- Task 1: Nested /admin route + to.matched.some() guard + Tailwind safelist (sky+amber)
- Task 2: Admin login redirect D-08 in LoginView.vue
- Task 3: Delete 5 legacy files; migrate 3 tests; fix stale references
All 137 tests pass, npm run build green (5 admin lazy chunks)
 2026-06-12 16:12:50 +02:00
curo1305 ec4bd691d1 docs(09-03): complete tab-to-view extraction plan — 4 views created 
- AdminUsersView, AdminQuotasView, AdminAiView, AdminAuditView all extracted
- One import path rewrite (SearchableModelSelect depth correction)
- Build clean: 143 modules, 0 errors
 2026-06-12 16:02:43 +02:00
curo1305 42cf3bfa06 chore: merge executor worktree (worktree-agent-a0c8d4832f87a5517) 2026-06-12 15:52:52 +02:00
curo1305 151f474854 docs(09-01): complete ADMIN-11 plan — admin overview endpoint summary 
- SUMMARY.md documents 2 tasks completed, 8 tests passing, security invariants verified
- Self-check: all files present, commits verified
 2026-06-12 15:51:45 +02:00
curo1305 4e37cb0fab docs(09-02): complete admin route shell plan — layout, sidebar, overview view 
- AdminLayout.vue: flex sidebar shell with router-view in padded content area
- AdminSidebar.vue: 5 nav links (D-07 order), indigo Admin badge (D-05), no Back-to-app (D-06)
- AdminOverviewView.vue: single-fetch 4-card stats + recent audit table
- getAdminOverview() API function added to api/admin.js
 2026-06-12 15:49:07 +02:00
curo1305andClaude Sonnet 4.6 2fd7591eac docs(09): fix plan checker warnings — ORDER BY desc, closed tag, resolved marker 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-12 15:40:31 +02:00
curo1305andClaude Sonnet 4.6 ba30ada87a docs(09): create phase 9 plan — Admin Panel Rearchitecture 
5 plans across 4 waves covering ADMIN-08..12, CODE-06, CODE-09:

- 09-01 (W1): backend GET /api/admin/overview + 8 ADMIN-11 tests
- 09-02 (W1): AdminLayout + AdminSidebar + AdminOverviewView + getAdminOverview API
- 09-03 (W2): extract 4 admin tab components to standalone views
- 09-04 (W3): nested /admin route + to.matched.some guard + D-08/D-09/D-10 redirects + Tailwind safelist (sky+amber) + login redirect + delete AdminView/tabs
- 09-05 (W4): CODE-09 comment purge for Phase 9 + retroactive Phase 8 backend sub-packages + human UAT checkpoint

All locked decisions D-01..D-16 mapped to tasks; safelist corrected to include sky (OneDrive) and amber (audit badges) per RESEARCH.md Pattern 7.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-12 15:34:31 +02:00
curo1305andClaude Sonnet 4.6 373e009ed8 docs(09): research phase — admin panel rearchitecture 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-12 13:35:34 +02:00
curo1305 6721e60166 docs(09): capture phase context 2026-06-12 13:23:25 +02:00