6 Commits

Include renames

Author	SHA1	Message	Date
Lucas Berger	9b569efeab	feat(19-03): wire /callback link branch, OIDC-guard skip, de-Authelia comments ... - /callback: reads signed state, extracts linkUserId, calls linkOidcToUser after OIDC session set; OidcLinkConflictError redirects to /?error=oidc-link-conflict - OIDC guard: oidcAuthMiddleware() factory called once at construction, handler invoked per-request inside skip-when-user-set wrapper (D-03) - middleware.ts: de-Authelia-ize comments — generic OIDC identity provider language (D-06, AUTH-LOCAL-18) - localAuthMiddleware.ts: cast to typeof DEV_USER for ContextVariableMap type compatibility - All 446 tests pass; typecheck clean	2026-06-17 16:59:06 -04:00
Lucas BergerandClaude Opus 4.8	a193bc8236	fix(12): satisfy CI fast-checks — lint unused vars, typed contract-test body, prettier ... - Remove unused 'res'/'container' assignments (no-unused-vars) - setupClient.contract.test.ts: typed parseSentBody helper + non-async json mock (no-unsafe-*/require-await) - Prettier format 7 setup files Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-16 16:53:14 -04:00
Lucas BergerandClaude Sonnet 4.6	7a512a9726	fix(12): WR-03 document and log single-write process.env semantics in oidcFallback ... The oidcConfigFallbackMiddleware permanently mutates process.env on first request then never re-reads from DB. Log an explicit info message when each value is written so operators can see when a restart is required to pick up config changes, and add inline documentation of the single-write semantics to prevent silent misconfiguration after a re-run of the wizard. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-15 16:17:41 -04:00
Lucas Berger	67a9d29dc1	feat(12-02): OIDC boot env-OR-app_config fallback + pre-auth mount verification ... - A2 CONFIRMED: @hono/oidc-auth reads OIDC_ISSUER/OIDC_CLIENT_ID/OIDC_AUTH_EXTERNAL_URL at per-request call time (env(c) → process.env), NOT at import time — fresh instance boots cleanly without OIDC env vars - Implement oidcConfigFallbackMiddleware in auth/middleware.ts: reads OIDC_ISSUER, OIDC_CLIENT_ID, OIDC_AUTH_EXTERNAL_URL from app_config when process.env is absent, injects into process.env before oidcAuthMiddleware() reads it (D-02/D-03/Recommendation a) - Mount oidcConfigFallbackMiddleware before oidcAuthMiddleware() in index.ts so wizard-configured instances work before a container restart - Verify /api/setup mount order: line 49 < devAuthBypass line 54 (T-12-09/Pitfall 1) - Fix push.test.ts vi.doMock for middleware.js: add oidcConfigFallbackMiddleware stub - 394 tests pass | 5 todo (D-08 RED scaffolds); typecheck clean	2026-06-15 14:03:15 -04:00
Lucas Berger	982438dc10	style(13-03): apply Prettier formatting across repo ... Mechanical reformat — no logic changes. 398 files changed, 19125 insertions(+), 16457 deletions(-). Prettier 3.8.4 with .prettierrc (singleQuote:true, semi:true, tabWidth:2, trailingComma:all, printWidth:100). Isolated per D-13-08 for reviewability.	2026-06-11 20:35:18 -04:00
Lucas Berger	668ed9be0d	feat(01-02): wire OIDC middleware, /api/me route, and authenticated PWA shell ... - src/auth/middleware.ts: re-exports oidcAuthMiddleware, processOAuthCallback, getAuth from @hono/oidc-auth; documents required env vars and AUTH-02 refresh-token rotation (no iframe, D-12) - src/routes/me.ts: GET / calls getAuth → upsertUser(iss, sub, email) → returns { user: { id, displayName, color } }; identity keyed on iss+sub - src/index.ts: /callback registered before oidcAuthMiddleware; /api/* guarded; /health remains unauthenticated; /api/me mounted - apps/pwa/src/api/client.ts: typed fetchMe() with credentials: 'include' - apps/pwa/src/App.tsx: useQuery(['me'], fetchMe); renders member name and color swatch; retains /health stack indicator from Plan 01 - tsc --noEmit: clean; all tests pass	2026-06-04 10:22:46 -04:00