3 Commits

Author	SHA1	Message	Date
MechaCat02	641174717c	fix(user-flow): close offline-queue, export, session, ban & realtime gaps ... Comprehensive user-flow review across guest/host/admin roles, then fixes with e2e regression guards. Highlights: - Offline upload queue auto-resumes on reconnect: network errors keep items pending (not error), 4xx are terminal (no infinite retry), quota exhaustion returns a distinct 413; queue cap + dedup. - Export lifecycle: release atomically locks uploads; reopen invalidates and re-release regenerates the keepsake; workers claim their job atomically so a reopen->re-release can't corrupt the ZIP; startup re-spawns interrupted exports. - Sessions slide on activity (no 30-day cliff); JWT expiry deferred to the revocable session row; sign-out-everywhere + revoke-on-PIN-reset. - Ban always hides content (v_feed / find_visible_media / export filter is_banned) but stays a read-only ban per USER_JOURNEYS §10 — sessions are not revoked, read access + keepsake download preserved. - Realtime: server-clock SSE delta cursor; event-closed/opened drive the UI live; feed_delta rate-limited; like returns {liked, like_count} to fix multi-device drift; lightbox live comments; diashow delta backfill. - Forgotten-PIN in-app request flow; simultaneous same-name join returns 409; quota increment is transactional; operator floor. Adds e2e/specs/10-flow-review/ (offline resume, export integrity, deterministic anti-race guard) and updates existing specs for the new contracts. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-10 23:05:37 +02:00
fabi	b3d876fa85	fix(review-2): medium/low + docs — config validation, hygiene, doc sync ... - compression_concurrency wired to boot config (state.rs) and removed as a dead admin control. - patch_config gains per-key integer/range validation so numerically-valid-but- nonsensical values (-1/NaN/3.5) are rejected instead of silently reverting to default at read time. - clearAuth now also clears the display name (shared-device residual). - e2e/Caddyfile.test mirrors prod security headers + the SSE encode-exclusion so the test stack is representative and can catch header regressions. - .gitignore: ignore root-level Playwright artifacts (test-results/, report). - docs: USER_JOURNEYS §10 and SECURITY-BACKLOG updated to match the implemented read-only-ban behavior and the export-path fix. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-02 22:19:56 +02:00
MechaCat02	9a0ceeced7	docs: realign blueprint with shipped state + add feature/journey/ideas docs ... - PROJECT.md, README.md, TEST_GUIDE.md: status line refreshed; rate-limiter doc-vs-code drift fixed; HTML export section rewritten for the SvelteKit- static viewer; SSE event names + new events documented; config seed block extended with planned toggles + privacy_note; decision log entries added. - docs/CONCEPT_HTML_VIEWER.md, docs/CONCEPT_MOBILE_UI.md: banner the design intent as shipped; point at the source-of-truth code paths. - docs/CONCEPT_DIASHOW.md: planned-then-shipped design for the live diashow (two-queue policy, pluggable transitions, data-mode aware). - docs/FEATURES.md: capability matrix by role (Guest / Host / Admin) plus prose per area (auth, posting, feed, moderation, admin, export, gestures, data mode, quotas, privacy note, extensibility). - docs/USER_JOURNEYS.md: step-by-step flows for every supported scenario, including PIN reset by host, data mode, privacy note, gestures, and the admin toggles. - docs/IDEAS.md: speculative extensions (global diashow, reactions, multi-tenancy, animation pack, etc.) — explicitly out of v0.16 scope. - backend/migrations/README.md, frontend/src/lib/README.md: codify the "never edit a shipped migration" rule and the lib/ conventions (one store per concern, gestures via actions, sheets via ContextSheet, transitions as drop-in components). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-16 14:31:06 +02:00