J3vb/OwnCord
1
0
Fork 0
mirror of https://github.com/J3vb/OwnCord.git synced 2026-09-03 03:50:00 +03:00
Code Issues Packages Projects Releases Wiki Activity

docs: reconcile audit backlog table with closure status

Browse Source 
Rows 1, 2, 4, 6, 7, 8, 9 were all closed in the closure table but never
struck in the section 6 backlog, making the remaining work look ~4x larger
than it is. Only rows 10 (partial) and 12 are still open.

Also drops the stale "V1/V2 dispatch" blurb from the architecture index,
which contradicted websocket.md after the V1 registry was deleted in #1196.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
J3vb
2026-07-20 12:47:34 +02:00
co-authored by Claude Fable 5
parent e4f5a9358e
commit 2ec53863c2
2 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/architecture/README.md
+1 -1
View File
@@ -13,7 +13,7 @@ natively) followed by a prose explanation and a **Source of truth** file list.
|-----|----------|--------|
| [system-overview.md](system-overview.md) | D1 System context, D8 Deployment topology | All processes, trust boundaries, ports, single-instance constraints |
| [server.md](server.md) | D2 Server package map, D3 REST request lifecycle | Go package structure, DB-access styles, middleware chain |
| [websocket.md](websocket.md) | D4 WS connect / replay / dispatch | Real-time engine: auth handshake, 3-tier reconnect replay, backpressure, V1/V2 dispatch |
| [websocket.md](websocket.md) | D4 WS connect / replay / dispatch | Real-time engine: auth handshake, 3-tier reconnect replay, backpressure, typed dispatch |
| [data-model.md](data-model.md) | D5 Entity-relationship overview | All 23 tables from migrations 001–015, grouped by domain |
| [voice-e2ee.md](voice-e2ee.md) | D6 Voice + E2EE flow | LiveKit token flow, loopback TLS tunnel, ECDH key-holder relay |
| [client.md](client.md) | D7 Client module map | Tauri client: bootstrap, dispatcher, stores, Rust sidecars (structure, as-built) |
docs/audit-2026-07-19.md
+8 -8
View File
@@ -160,16 +160,16 @@ Ranked by severity × effort; quick wins float within tier. S/M/L ≈ hours / da
| # | Item | Finding | Sev | Effort |
|---|------|---------|-----|--------|
| 1 | Decide + resolve the `announcement` channel-type contradiction (implement or strip from specs/admin) | A-2026-07-01 | HIGH | S (decision) |
| 2 | Delete (or finally adopt) the dead `db/dbgen` sqlc layer; adjust the `sqlc-verify` CI job to match | A-2026-07-05 | MEDIUM | S |
| ~~1~~ | ~~Decide + resolve the `announcement` channel-type contradiction~~ **DONE 2026-07-19 (D1)** — implemented end-to-end; migration 016 + MANAGE_MESSAGES gate | A-2026-07-01 | HIGH | S (decision) |
| ~~2~~ | ~~Delete (or finally adopt) the dead `db/dbgen` sqlc layer~~ **DONE 2026-07-19 (D2)** — adopted; 97 methods delegate to dbgen. Residual raw queries tracked in [plans/sqlc-adoption.md](plans/sqlc-adoption.md) | A-2026-07-05 | MEDIUM | S |
| ~~3~~ | ~~Extract the single channel-visibility function replacing the 4 "must mirror" copies; add REST/WS agreement test~~ **DONE 2026-07-20 (D9)** — `permissions.Checker.VisibleChannelIDs` funnels all four sites; REST/WS agreement test added | A-2026-07-07 | MEDIUM | M |
| 4 | One-PR refresh of api.md / protocol.md / schema.md against §2, incl. E2EE + plugins + migrations 009–015; then enforce spec-updates-with-code via PR checklist | A-2026-07-03 | HIGH | M |
| ~~4~~ | ~~One-PR refresh of api.md / protocol.md / schema.md against §2~~ **DONE 2026-07-19** — full spec refresh landed; keep-current-per-PR rule now applies | A-2026-07-03 | HIGH | M |
| ~~5~~ | ~~Execute the store-layer decision from prior #6: remove `Server/store/` (P4 plan) or test it directly~~ **DONE 2026-07-19 (D3)** — `store/` removed; consumers on narrow `*db.DB` interfaces; tests on real in-memory SQLite | prior #6 | HIGH | M |
| 6 | Client HTTP TOFU pinning (Rust proxy mirroring `ws_proxy.rs`) | A-2026-07-02 | HIGH | M |
| 7 | Stop discarding `LogAudit` errors in `admin/handlers_backup.go`; fix the contradictory upload `Cache-Control` | prior #10, W3-4 | MEDIUM | S |
| 8 | Remove the SolidJS beachhead + adapters; retire or rewrite `docs/client-architecture.md` | A-2026-07-12 | MEDIUM | S |
| 9 | Resolve the `protocol-schema.json` ghost: real codegen or an equality test between Go and TS constant sets | A-2026-07-08 | MEDIUM | M |
| 10 | Green + blocking client unit suite; nightly Playwright | A-2026-07-04 | HIGH | M |
| ~~6~~ | ~~Client HTTP TOFU pinning (Rust proxy mirroring `ws_proxy.rs`)~~ **DONE 2026-07-19** — `http_proxy.rs` + `httpProxy.ts`; `acceptInvalidCerts` removed | A-2026-07-02 | HIGH | M |
| ~~7~~ | ~~Stop discarding `LogAudit` errors; fix the contradictory upload `Cache-Control`~~ **DONE 2026-07-20 (D9)** — cache header fixed 2026-07-19; `db.WriteAudit` helper now covers all 26 call sites repo-wide | prior #10, W3-4 | MEDIUM | S |
| ~~8~~ | ~~Remove the SolidJS beachhead + adapters; retire `docs/client-architecture.md`~~ **DONE 2026-07-19** | A-2026-07-12 | MEDIUM | S |
| ~~9~~ | ~~Resolve the `protocol-schema.json` ghost~~ **DONE 2026-07-19** — real codegen (`genprotocol`) + `make protocol-verify` CI gate | A-2026-07-08 | MEDIUM | M |
| 10 | **PARTIAL 2026-07-20** — Green + blocking client unit suite; nightly Playwright. Suite proven green (3296/3296 on merged main), A-2026-07-04 closed. **Still open:** flip `client-tests` to blocking in `ci.yml`; add the nightly Playwright job. Deferred while GitHub Actions minutes are depleted | A-2026-07-04 | HIGH | M |
| ~~11~~ | ~~Finish the V2 dispatch migration; delete V1~~ **DONE 2026-07-20 (D10)** — last 3 V1 types ported to V2; V1 registry + fallback deleted; parity guard test added | A-2026-07-09 | MEDIUM | M/L |
| 12 | Consolidate DB access behind the service layer (start with auth routes, prior #9); then Hub constructor cleanup and decomposition | A-2026-07-06, -10, -11 | MEDIUM | L |