pixel_pop/UHD_Media_Tool
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
59 Commits 1 Branch 0 Tags
5bb06d641c7d0b0e8cb01a5e64a65339fc1e77cb
Commit Graph
13 Commits
Author SHA1 Message Date
rootandClaude Opus 5.5 5bb06d641c docs(plan): mark W4-E1 security items fixed in v0.1 acceptance 
Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-09-27 22:24:59 +08:00
rootandClaude Opus 5.5 f48e1aac96 fix(security): W4-E1 approvals admin-session only, shared redact table, TMDB key redaction, prod mock gate 
- POST /approvals and PATCH /approvals/{id} require a console admin session
  (EndpointDef auth:"session"); API keys incl. admin scope get 403, so an
  organize.execute key can no longer approve its own plan (S1)
- tests for single-use approval checks: expired, revision/payload hash
  mismatch, consumed, revoked, pending/rejected, plan mismatch; re-approve
  after plan change succeeds once and cannot be replayed (S4)
- one redact key table in @umt/contracts shared by server logger and agent
  redactForModel: rsskey, torrent_pass, authkey, downhash, c_secure_pass,
  passkey variants, x-api-key, cookie headers, nested objects/arrays (S2)
- TMDB network errors: message and cause redacted via redactUrl (S3)
- web Agent ?mock=1 only in DEV builds or when pi.provider is fake (S7)
- EndpointDef auth annotations for /auth/*, asserted against
  PUBLIC_AUTH_PATHS (S10); doc drift fixes (S11)

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-09-27 22:24:44 +08:00
rootandClaude Opus 5.5 b7237391a4 docs(plan): mark W4-D decoupling items done 
Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-09-27 22:15:51 +08:00
rootandClaude Fable 5.1 cda9255083 docs(plan): v0.1 acceptance review (pre W4-D/E) 
Co-Authored-By: Claude Fable 5.1 <[email protected]>
 2026-09-27 22:01:39 +08:00
rootandClaude Fable 5.1 8c6a922cfb docs(plan): main-loop decoupling audit and W4-D fix list 
Co-Authored-By: Claude Fable 5.1 <[email protected]>
 2026-09-27 21:15:32 +08:00
rootandClaude Fable 5.1 ea4c384664 docs(plan): W4 backlog from W2/W3 reports 
Co-Authored-By: Claude Fable 5.1 <[email protected]>
 2026-09-27 20:55:40 +08:00
rootandClaude Opus 5.5 724c360a75 docs(plan): mark W1 review B3-B9 and S2 status after W2-0 
Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-09-27 19:31:24 +08:00
rootandClaude Fable 5.1 bc3ff4fb25 docs(plan): W1 wave-end independent review 
Co-Authored-By: Claude Fable 5.1 <[email protected]>
 2026-09-27 19:03:08 +08:00
rootandClaude Fable 5.1 569bb29664 docs(plan): W2 service orchestration split 
Co-Authored-By: Claude Fable 5.1 <[email protected]>
 2026-09-27 18:53:44 +08:00
rootandClaude Fable 5.1 304feea141 chore(deno): migrate toolchain from Node 24 + pnpm to Deno 2.9.7 + TypeScript 7.0.2 (W1.5) 
- root deno.json workspace (nodeModulesDir auto), npm versions registered once in imports, deno.lock;
  remove pnpm-lock/pnpm-workspace/root package.json; members keep minimal package.json (name/type/exports)
- tasks: dev, typecheck (tsc 7.0.2 per member + deno check), lint/fmt (biome, useImportExtensions),
  test (vitest via deno), check:tokens, build (web + deno compile), ci, db:migrate/reset, gen:types
- tsconfig base moved to config/ (no root tsconfig.json); deno types -> types/deno.d.ts; web drops baseUrl
- server: Deno.serve entry with graceful shutdown, --role migrate|preflight|probe, WEB_ROOT static SPA hosting;
  drop @hono/node-server, tsx, esbuild build.mjs
- logger: redact child() bindings and serialize err by message/stack; sync stdout destination; tests
- relative imports get explicit extensions (sites/mp-sync paths left for follow-up)
- crash-recovery tests spawn `deno run -A`; tasks tests use unique per-file schemas
- single-container Dockerfile + entrypoint (migrate -> preflight -> api+worker watchdog), docker-compose.yml
- docs: README, runbook, ADR-001 superseded, plan §1 validation row

Co-Authored-By: Claude Fable 5.1 <[email protected]>
 2026-09-27 18:53:06 +08:00
rootandClaude Fable 5.1 007992d283 docs(design): OpenWorkflow dashboard reference for console engine panel 
Co-Authored-By: Claude Fable 5.1 <[email protected]>
 2026-09-27 18:15:30 +08:00
rootandClaude Fable 5.1 9853d11a19 chore: sync lockfile/workspace after W1; add auth reference and plan updates 
Co-Authored-By: Claude Fable 5.1 <[email protected]>
 2026-09-27 18:12:40 +08:00
umtandClaude Fable 5.1 b22c440139 chore: scaffold monorepo and migrate uhd_web design system (W0-A) 
- pnpm workspace: apps/{web,server}, packages/{contracts,db,domain,adapters,tasks,agent,testkit}
- server: Hono + zod-openapi, API Key auth with scopes, redacting pino logger, SSE event bus with replay, worker heartbeat
- db: Kysely + pg, file migrator, 0001_init (settings/api_key/audit_event/outbox_event)
- web: React Router 7 SPA console shell with 12 workspace placeholders, uhd_web tokens/ui/guard scripts
- docs: ADR-001 (Node over Deno), dev runbook, design system rules

Co-Authored-By: Claude Fable 5.1 <[email protected]>
 2026-09-27 17:36:26 +08:00