plainpages

Split src/http/app.test.ts into one file per concern, and reset the reading-cost trend

2026-10-31 10:35:08 +01:00

Answer stability round 1: 0 🔴, 2 🟡 (0 misread); tests pin all three user-page modes and the refusal page's group, the guard checks membership before the per-permission walk, logs the action and what was lost

2026-10-31 11:02:47 +01:00

i18n

Answer stability round 1: 1 🔴, 4 🟡 (0 misread); allow the stale-save 409 in the e2e console guard, report a partial save when Keto cannot be read again, add the missing group, no-op and plain-login tests

2026-10-31 09:46:17 +01:00

plugin-host

Name the bounded frame: fill:true on the shell, and the contract minor that ships it

2026-09-10 16:16:35 +02:00

ui

Fail the gate on a stylesheet feature the browser floor lacks, unless an @supports guards it

2026-10-31 11:52:17 +01:00

ci-gate.test.ts

Answer prose round 1: 0 🔴, 4 🟡 (0 misread); document the e2e typecheck, tighten comments and changelog

2026-10-31 08:24:18 +01:00

compose.test.ts

Answer prose round 1: 0 🔴, 4 🟡 (0 misread); document the e2e typecheck, tighten comments and changelog

2026-10-31 08:24:18 +01:00

config.test.ts

Isolate the storage CI stack, prove least-privilege provisioning, drop the secret before discovery

2026-08-19 00:20:17 +02:00

config.ts

Declare plugin settings in the manifest, resolve them from the environment

2026-08-23 13:17:03 +02:00

e2e-console-guard.test.ts

Watch what a beforeAll logs, and record where each message came from

2026-08-05 11:15:37 +02:00

function-limits.test.ts

item-34 - Serve every /public/ asset under a content-versioned URL with an immutable Cache-Control

2026-10-31 10:00:03 +01:00

hydra.test.ts

Remove completed todo.md + html-css-foundation mockups; strip dead §N phase refs from comments/docs (simplify visual E2E to drop the mockup-comparison oracle)

2026-06-23 22:49:28 +02:00

keto.test.ts

Say user throughout, noting Ory's identity naming in the docs

2026-08-03 17:41:40 +02:00

kratos.test.ts

Rename the coarse gate from role to permission, matching RBAC

2026-08-03 17:41:40 +02:00

logger.test.ts

§9 trace all fetch + ENV service name + leveled logging (todo §9 follow-up); route every outbound fetch through the request logger, make the OTLP service name implementer-configurable, and add proper leveled logging throughout. An AsyncLocalStorage<Log> makes the per-request logger ambient (runWithLog/currentLog), so all outbound fetch traces with no signature churn: tracedFetch (a typeof fetch) routes through the active request log (client span + propagated W3C traceparent) for string/URL inputs, else plain fetch; server.ts wires it under the Ory timeout into every Kratos/Keto/Hydra + JWKS call (timeout still honoured — log.fetch spreads {...init,headers}). RequestContext gained ctx.log (request logger; additive/contract-stable, silent default) so a handler/plugin logs in-trace and ctx.log.fetch(url) traces upstream calls; the reference plugin's createUpstream defaults to tracedFetch and its handlers log via ctx.log; plugin-api.ts exports tracedFetch + the Log class. SERVICE_NAME (config + createLogger({serviceName})) brands the OTLP service.name. Leveled logging: who-did-what audit info lines on every admin write (user/group/role/client create·delete·assign — actor/target, no secrets), info on login (session mint) + logout, warn on missing-role 403 + CSRF rejections + Ory-unreachable, debug on a JWKS kid-miss reload. app.ts's handler body was extracted to handleRequest run inside runWithLog; end() now fires exactly once after BOTH the handler unwinds AND the response closes, so a client abort mid-handler can't end the log out from under a still-running ctx.log/tracedFetch (regression-tested) and the happy-path access line is never dropped. bootstrap.ts wraps main in runWithLog + traces the seed calls. Tests extended (logger: serviceName/runWithLog/currentLog/tracedFetch-continues-trace; config: SERVICE_NAME; context: ctx.log default+passthrough; app: ctx.log in-trace + ctx.log.fetch propagation + the abort race; plugin-api: tracedFetch+Log). Stability-reviewer: APPROVE, no Critical/High (fixed the abort-race end(); green nits addressed). docs/plugin-contract.md (ctx.log/ctx.log.fetch/tracedFetch) + README (config, Observability tracing/serviceName, plugin note, Layout) updated. typecheck + 333 units + the full scripts/ci.sh E2E gate green (326 → 333).

2026-06-20 15:46:48 +02:00

logger.ts

Cut non-essential prose from docs and comments, and require the same of every future change

2026-08-05 23:41:12 +02:00

postgres.test.ts

Warn rather than refuse on a storage URL mismatch, and scrub the provisioning DSN before discovery

2026-08-19 01:03:40 +02:00

server.ts

Declare plugin settings in the manifest, resolve them from the environment

2026-08-23 13:17:03 +02:00