| .. |
|
AI_REVIEW_EXPORT.md
|
chore(tooling): add AI security review exporter
|
2026-08-18 14:46:09 +07:00 |
|
ARCHITECTURE.md
|
feat(public): Task 06 implement public giveaway verification endpoint and page
|
2026-08-21 19:11:03 +07:00 |
|
AUTH_SECURITY.md
|
feat(auth): Phase 2.2 VK ID OAuth 2.1 Authentication - PKCE flow, single-use state, encrypted token vault, HttpOnly session, /api/auth endpoints, UI badge, and comprehensive security tests
|
2026-08-18 02:45:09 +07:00 |
|
DATA_MODEL.md
|
feat: initial commit - VK Giveaway Randomizer Phase 1
|
2026-08-17 23:34:49 +07:00 |
|
MIGRATION_OWNERSHIP_INVARIANT.md
|
feat(auth): Phase 2.2.2 Authorization Ownership Invariant Fix - strict requireGiveawayOwner null check, Prisma non-null organizerId with onDelete Restrict, repository non-null organizer invariant, migration documentation, and regression tests
|
2026-08-18 11:28:18 +07:00 |
|
OPENCODE_REVIEW.md
|
test(opencode): independent review, VK integration plan, expanded unit tests, provider capabilities validation, and security/concurrency coverage
|
2026-08-18 00:24:00 +07:00 |
|
PRODUCTION_GUARDS.md
|
feat(security): Task 02 client identity and user-scoped rate limiting
|
2026-08-21 18:34:13 +07:00 |
|
TOKEN_STORAGE.md
|
feat(security): Phase 2.2.3 Final Auth Security Gate - fix GET /api/giveaways IDOR, scoped DB query, Prisma ownership migration, atomic OAuth consumeTransaction, trusted production origin, rate limiting, and comprehensive security tests
|
2026-08-18 12:02:39 +07:00 |
|
VK_API_RESEARCH.md
|
feat: initial commit - VK Giveaway Randomizer Phase 1
|
2026-08-17 23:34:49 +07:00 |
|
VK_AUTH_MODEL.md
|
feat(vk): Phase 2.1 Real VK Client Foundation - dedicated VkClient with typed errors, exponential backoff, rate limiting, token security, full pagination, and documentation
|
2026-08-18 02:31:39 +07:00 |
|
VK_AUTHENTICATED_ACCESS.md
|
feat(vk): Phase 2.3 Authenticated VK Organizer Integration - VkAuthContextResolver, single-flight token refresh mutex, controlled user token fallback, runtime capabilities, and test suite
|
2026-08-18 13:04:57 +07:00 |
|
VK_CLIENT.md
|
feat(vk): Phase 2.1.1 VK Client Correctness & Official VK Contract Alignment - separated timeout vs cancellation state with VkCancelledError, HTTP vs VK error separation based on VKCOM/vk-api-schema, listener cleanup, pagination truncation guards, and VK_METHOD_CAPABILITIES documentation
|
2026-08-18 02:38:43 +07:00 |
|
VK_ERROR_MODEL.md
|
feat(vk): Phase 2.1 Real VK Client Foundation - dedicated VkClient with typed errors, exponential backoff, rate limiting, token security, full pagination, and documentation
|
2026-08-18 02:31:39 +07:00 |
|
VK_ID_LIVE_CONTRACT.md
|
feat(security): Phase 2.2.3 Final Auth Security Gate - fix GET /api/giveaways IDOR, scoped DB query, Prisma ownership migration, atomic OAuth consumeTransaction, trusted production origin, rate limiting, and comprehensive security tests
|
2026-08-18 12:02:39 +07:00 |
|
VK_INTEGRATION_PLAN.md
|
test(opencode): independent review, VK integration plan, expanded unit tests, provider capabilities validation, and security/concurrency coverage
|
2026-08-18 00:24:00 +07:00 |
|
VK_MANUAL_SMOKE_TEST.md
|
feat(security): Phase 2.2.3 Final Auth Security Gate - fix GET /api/giveaways IDOR, scoped DB query, Prisma ownership migration, atomic OAuth consumeTransaction, trusted production origin, rate limiting, and comprehensive security tests
|
2026-08-18 12:02:39 +07:00 |
|
VK_METHOD_CAPABILITIES.md
|
feat(vk): Phase 2.1.1 VK Client Correctness & Official VK Contract Alignment - separated timeout vs cancellation state with VkCancelledError, HTTP vs VK error separation based on VKCOM/vk-api-schema, listener cleanup, pagination truncation guards, and VK_METHOD_CAPABILITIES documentation
|
2026-08-18 02:38:43 +07:00 |
|
VK_OAUTH_FLOW.md
|
feat(auth): Phase 2.2 VK ID OAuth 2.1 Authentication - PKCE flow, single-use state, encrypted token vault, HttpOnly session, /api/auth endpoints, UI badge, and comprehensive security tests
|
2026-08-18 02:45:09 +07:00 |
|
VK_REAL_SMOKE_TEST.md
|
feat(vk): Phase 2.3 Authenticated VK Organizer Integration - VkAuthContextResolver, single-flight token refresh mutex, controlled user token fallback, runtime capabilities, and test suite
|
2026-08-18 13:04:57 +07:00 |
