Commit Graph

  • eaa3399ec0 docs: add shared module map to CLAUDE.md, SECURITY.md, planning artifacts main curo1305 2026-06-02 16:10:59 +02:00
  • cce70b2ef6 refactor(frontend): extract shared modules, thin views, delete dead code curo1305 2026-06-02 16:10:47 +02:00
  • a548266461 refactor(backend): extract shared helper modules per architecture rules curo1305 2026-06-02 16:10:35 +02:00
  • 89f8d5a654 docs(codebase): refresh codebase map after Phase 06.2 completion curo1305 2026-06-02 15:32:06 +02:00
  • bd17b4b22f docs(06.2): mark phase 6.2 complete — all gates passed curo1305 2026-06-01 21:09:04 +02:00
  • 2686fde2d7 feat(06.2): log attempted email on failed login and surface it in audit log curo1305 2026-06-01 21:02:37 +02:00
  • 7027347597 fix(06.2): audit log — add email column, remove @ prefix from handles curo1305 2026-06-01 20:59:09 +02:00
  • d771f0805d fix(06.2): shared badge and recipient handle missing in FileManagerView curo1305 2026-06-01 19:47:00 +02:00
  • 089da94d8b fix(security): apply two findings from sharing security review curo1305 2026-06-01 19:41:15 +02:00
  • a0f6c2f663 fix(06.2): resolve four sharing UX issues found in re-test UAT curo1305 2026-06-01 19:32:51 +02:00
  • 52e54b859a docs(phase-04): update validation strategy — 1 gap resolved, suite green curo1305 2026-06-01 18:14:59 +02:00
  • cc2825b3b7 fix(phase-04): use MagicMock(spec=MinIOBackend) in test_daily_export_download curo1305 2026-06-01 18:14:54 +02:00
  • bfcc09958c docs(phase-04): add security threat verification — 41/41 threats closed curo1305 2026-06-01 18:05:49 +02:00
  • a3f9e701d8 docs(phase-03): update validation strategy — 4 gaps resolved, STORE-06 promoted from manual-only curo1305 2026-06-01 15:43:07 +02:00
  • b245fcc527 fix(phase-03): use UUID.hex in raw SQL to fix SQLite UUID format mismatch curo1305 2026-06-01 15:43:01 +02:00
  • 908bd9d4e3 docs(phase-03): add security threat verification — 27/27 threats closed curo1305 2026-06-01 15:30:52 +02:00
  • a89ed65be9 docs(phase-02): update validation strategy with plan 06 coverage curo1305 2026-06-01 15:17:29 +02:00
  • 0505beb0a4 test(phase-02): add Nyquist validation tests for plan 06 gaps curo1305 2026-06-01 15:17:25 +02:00
  • da526cb727 docs(02): add security threat verification — 43/43 threats closed curo1305 2026-06-01 14:55:15 +02:00
  • cd3d1d528c docs(06.2): add code review fix report curo1305 2026-06-01 14:38:59 +02:00
  • 8601a02189 docs(02): update verification report after plan 06 gap closure — 2 security blockers flagged curo1305 2026-06-01 14:37:23 +02:00
  • a6c227cc7e merge(06.2): integrate code review fixes from gsd-reviewfix/06.2-2490 curo1305 2026-06-01 14:37:21 +02:00
  • 1433273328 docs(06.2): update review status after fixes — all 15 CR/WR findings resolved curo1305 2026-06-01 14:33:41 +02:00
  • 9e8f8d5bbc fix(06.2): WR-06 use URLSearchParams in listShares for consistent encoding curo1305 2026-06-01 14:31:50 +02:00
  • 683670afa1 fix(06.2): WR-02 constrain format parameter to Literal[csv] to reject unsupported formats curo1305 2026-06-01 14:31:32 +02:00
  • fdb18300d9 docs(02): add code review report for plan 06 gap closure curo1305 2026-06-01 14:31:21 +02:00
  • 1cba903c34 fix(06.2): WR-01 replace fixed-suffix password generation with fully-random positional injection curo1305 2026-06-01 14:31:00 +02:00
  • 2072c3ddcd fix(06.2): WR-08 delete_document defers commit so audit log writes in same transaction curo1305 2026-06-01 14:30:31 +02:00
  • 50b6e7fd06 fix(06.2): WR-07 document X-Forwarded-For trust boundary in all IP extraction code curo1305 2026-06-01 14:29:35 +02:00
  • 2542c81602 fix(06.2): WR-03 WR-04 fix pagination off-by-one and surface daily exports load errors curo1305 2026-06-01 14:27:47 +02:00
  • 1f2cec9ac3 fix(06.2): CR-07 add audit log entry for PATCH /shares/{share_id} permission change curo1305 2026-06-01 14:27:08 +02:00
  • 1a34209bb0 fix(06.2): CR-06 RFC 5987-encode Content-Disposition filename to prevent header injection curo1305 2026-06-01 14:26:46 +02:00
  • 653cb3a98b fix(06.2): CR-05 remove UUID dash-stripping in quota SQL — PostgreSQL expects dashed UUID format curo1305 2026-06-01 14:26:24 +02:00
  • 3fa7e8b866 fix(06.2): CR-04 WR-05 audit export functions use 401-refresh-retry and safe URL.revokeObjectURL curo1305 2026-06-01 14:26:05 +02:00
  • 792d4639d1 fix(06.2): CR-03 serialize metadata_ with json.dumps in CSV export instead of Python repr curo1305 2026-06-01 14:25:29 +02:00
  • 50859bb430 fix(06.2): CR-02 add MinIOBackend guard in download_daily_export before accessing _client curo1305 2026-06-01 14:25:06 +02:00
  • a3ad36cc82 fix(06.2): CR-01 event-type filter uses prefix LIKE match instead of exact equality curo1305 2026-06-01 14:24:50 +02:00
  • 5093aa5630 docs(phase-02): update tracking after plan 06 gap closure — 6/6 plans complete curo1305 2026-06-01 14:24:46 +02:00
  • 7e549b6312 docs(02-06): complete UAT gap closure plan summary curo1305 2026-05-31 20:41:36 +02:00
  • c08ea42b1b feat(02-06): Account tab in SettingsView + QR code in TotpEnrollment (GAPs 3, 5) curo1305 2026-05-31 20:40:28 +02:00
  • 97314ce486 docs(06.2): add code review report curo1305 2026-05-31 20:38:59 +02:00
  • aa957d6c50 feat(02-06): auth layout switching + admin role guard (GAPs 2, 3, 4) curo1305 2026-05-31 20:37:46 +02:00
  • 579c8366e9 docs(06.2): update phase verification report after plan-05 gap closure curo1305 2026-05-31 20:30:43 +02:00
  • b2488c91c8 docs(02): add root causes from diagnosis curo1305 2026-05-31 20:28:57 +02:00
  • 52d6efb8a2 docs(06.2): add code review report curo1305 2026-05-31 20:23:32 +02:00
  • 33697f2713 test(02): complete UAT — 10 passed, 6 issues, 2 blocked curo1305 2026-05-31 20:21:16 +02:00
  • 8cc46a8d8d docs(phase-06.2): resolve UAT gaps after 06.2-05 gap closure curo1305 2026-05-31 20:16:43 +02:00
  • c3c7030e91 docs(phase-06.2): update tracking after wave 3 — all 5 plans complete curo1305 2026-05-31 20:16:08 +02:00
  • 8a078e4040 chore: merge executor worktree (worktree-agent-ad4015e9fb03e9447) curo1305 2026-05-31 20:13:19 +02:00
  • e30401ddff docs(06.2-05): complete plan summary — 4 UAT gaps closed curo1305 2026-05-31 20:12:27 +02:00
  • 5d457d68bf feat(06.2-05): clear filters button and active filter count in AuditLogTab curo1305 2026-05-31 20:11:02 +02:00
  • f5e111bfa2 feat(06.2-05): actionable cloud error + audit log @ prefix curo1305 2026-05-31 20:10:22 +02:00
  • 045e723f7a feat(06.2-05): show @handle in AccountView and AdminUsersTab curo1305 2026-05-31 20:09:50 +02:00
  • 6307d9dd86 test(06.2): update UAT with root cause diagnoses for all 4 gaps curo1305 2026-05-31 20:01:56 +02:00
  • 1d8c7dba91 test(06.2): complete UAT — 3 passed, 4 issues, 2 skipped, 2 blocked curo1305 2026-05-31 16:10:54 +02:00
  • 77263bd569 docs(phase-06.2): mark validation strategy nyquist-compliant curo1305 2026-05-31 15:44:25 +02:00
  • 73b180ac9d docs(phase-06.2): add security threat verification report curo1305 2026-05-31 15:41:33 +02:00
  • f037d2be45 docs(06.2): add phase verification report curo1305 2026-05-31 15:36:08 +02:00
  • 758d1a687e docs(06.2): add code review report curo1305 2026-05-31 15:29:57 +02:00
  • abb964531f docs(phase-06.2): update tracking after wave 2 — plan 06.2-04 complete curo1305 2026-05-31 15:24:44 +02:00
  • 46f7505e36 chore: merge executor worktree (worktree-agent-af66944050628b0e4) curo1305 2026-05-31 15:23:36 +02:00
  • 893da5b9ba docs(06.2-04): complete ADMIN-06 audit enrichment + daily exports — 10 tests pass curo1305 2026-05-31 15:22:46 +02:00
  • 0647e6e9bf feat(06.2-04): frontend — user_handle filter, fetch+Blob export, daily-export section curo1305 2026-05-31 15:21:23 +02:00
  • f176235ee8 docs(phase-04): update VALIDATION.md — Nyquist-compliant (all gaps resolved) curo1305 2026-05-31 15:21:08 +02:00
  • 62daf0d750 test(phase-04): fill Nyquist validation gaps — FOLD-04, FOLD-05, SEC-08, SEC-09 curo1305 2026-05-31 15:21:02 +02:00
  • 839bfe0ffe feat(06.2-04): backend — handle enrichment, user_handle filter, two daily-export endpoints curo1305 2026-05-31 15:17:53 +02:00
  • d7cfc5ccee test(06.2-04): add failing tests for handle enrichment, user_handle filter, daily exports curo1305 2026-05-31 15:15:46 +02:00
  • eab5f124f6 docs(06.2-03): complete cloud-delete gap closure — 24 tests pass curo1305 2026-05-31 15:11:51 +02:00
  • cce8586235 feat(06.2-03): frontend — CloudDeleteWarningModal + remove_only path in DocumentView curo1305 2026-05-31 15:11:31 +02:00
  • 95c7ed786a feat(06.2-03): backend — cloud-aware delete routing + skip_quota + remove_only param curo1305 2026-05-31 15:09:44 +02:00
  • e812922a26 docs(06.2-02): complete SHARE-05 + SHARE-03 gap closure — 12 tests pass curo1305 2026-05-31 15:07:26 +02:00
  • 3cc4a5335d docs(phase-03): update VALIDATION.md — Nyquist-compliant (partial) curo1305 2026-05-31 15:07:23 +02:00
  • 1ee27da332 test(phase-03): remove stale xfail markers from quota tests curo1305 2026-05-31 15:07:18 +02:00
  • 34b18a9f08 feat(06.2-02): frontend — is_shared badge fix + permission dropdown + View/Edit toggle curo1305 2026-05-31 15:07:04 +02:00
  • ea231853e9 feat(06.2-02): backend — ShareCreate.permission field + PATCH /{share_id} endpoint curo1305 2026-05-31 15:04:53 +02:00
  • 7e62868fea docs(phase-02): add VALIDATION.md — Nyquist-compliant, all 24 tasks mapped, 4 manual-only curo1305 2026-05-31 12:04:28 +02:00
  • d98e3ab7a1 test(phase-02): add Nyquist validation tests — fill SEC-05, AUTH-08, SEC-03 and frontend gaps curo1305 2026-05-31 12:04:21 +02:00
  • 6c79f92d70 chore: merge executor worktree (worktree-agent-a3dd74026d1efb9af) curo1305 2026-05-31 12:01:28 +02:00
  • 21fde406e7 docs(06.2-01): complete Wave 0 Nyquist scaffold — 11 xfail stubs across 3 test files curo1305 2026-05-31 11:58:58 +02:00
  • 7271eeb53c test(06.2-01): add xfail stubs for ADMIN-06 audit enrichment + daily exports (Task 3) curo1305 2026-05-31 11:58:05 +02:00
  • bbf5355edb test(06.2-01): add xfail stubs for cloud-delete document tests (Task 2) curo1305 2026-05-31 11:57:55 +02:00
  • ecdeffb63d test(06.2-01): add xfail stubs for SHARE-03 permission tests (Task 1) curo1305 2026-05-31 11:54:52 +02:00
  • 708fd7fad0 docs(phase-6.2): record planning complete — 4 plans verified, state updated curo1305 2026-05-31 11:41:32 +02:00
  • 4adc77d8cc docs(06.2): create 4-plan phase covering SHARE-03, SHARE-05, cloud-delete, ADMIN-06 curo1305 2026-05-31 11:36:33 +02:00
  • 67f0c01540 docs(phase-6.2): add validation strategy curo1305 2026-05-31 11:12:23 +02:00
  • 695649eefa docs(06.2): add research document for phase 6.2 gap-closure curo1305 2026-05-31 11:10:59 +02:00
  • 7be48266ae docs(06.2): capture phase context + fix admin user creation 500 curo1305 2026-05-31 11:00:45 +02:00
  • 3825f670a1 docs(phase-6.1): add VALIDATION.md and commit VERIFICATION.md curo1305 2026-05-30 23:38:16 +02:00
  • ce4dc55e4f test(6.1): add SHARE-03 and SHARE-05 Nyquist gap tests curo1305 2026-05-30 23:38:06 +02:00
  • 56bfdba8d1 docs(phase-6.1): mark phase complete — 12 tests, 310 total passing curo1305 2026-05-30 23:30:34 +02:00
  • 451fff1e4d test(6.1): add audit filter behavioral test (ADMIN-06 SC3) curo1305 2026-05-30 23:30:05 +02:00
  • 57784f9f80 fix(6.1): close WR-01/WR-02 code review findings in test_audit.py curo1305 2026-05-30 23:24:26 +02:00
  • 5762f65b09 docs(6.1): add code review report — 3 warnings, 2 info curo1305 2026-05-30 23:24:05 +02:00
  • 1e4654aad5 docs(phase-6.1): update tracking after wave 1 — both plans complete curo1305 2026-05-30 23:18:04 +02:00
  • 21ea3bf169 chore: merge executor worktree (06.1-01 shares tests) curo1305 2026-05-30 23:16:38 +02:00
  • eee9970cf2 chore: merge executor worktree (06.1-02 audit tests) curo1305 2026-05-30 23:16:14 +02:00
  • ec14fc722f docs(6.1-01): complete plan — promote test_shares.py stubs to real tests curo1305 2026-05-30 23:13:09 +02:00
  • 9973f42f98 feat(6.1-01): replace 7 xfail stubs with real share tests (SHARE-01..05) curo1305 2026-05-30 23:12:24 +02:00
  • 0ccdee48ba docs(6.1-02): complete plan 06.1-02 — promote test_audit.py stubs to real tests curo1305 2026-05-30 23:11:01 +02:00
  • bda123db8d feat(6.1-02): promote test_audit.py stubs to real tests (ADMIN-06) curo1305 2026-05-30 23:10:14 +02:00