palette

9 Commits

Include renames

Author	SHA1	Message	Date
poslop	7ca1b58362	Merge pull request 'docs: attachments & storage backend design (#38 , #31 )' (#69 ) from issue-38-31-storage-design into main CI / test (push) Successful in 19s Details CI / docker (push) Successful in 34s Details	2026-09-09 14:27:50 +00:00
poslop	8d0825ac09	Merge pull request 'docs: cookie-based preferences and access keys design (#30 )' (#70 ) from issue-30-cookie-design into main CI / test (push) Successful in 19s Details CI / docker (push) Skipped Details	2026-09-09 14:27:14 +00:00
poslop	b7d1119d6d	Merge pull request 'docs: design for optional client-side E2E encryption (issue #39 )' (#75 ) from issue-39-e2e-design into main CI / test (push) Successful in 20s Details CI / docker (push) Skipped Details	2026-09-09 14:26:02 +00:00
poslop	91568c0598	fix #63 : require deletion token on DELETE /api/pastes/{id} CI / test (pull_request) Successful in 24s Details CI / docker (pull_request) Skipped Details - DELETE now demands the create-time deletion token (Authorization header: Bearer/Token/bare, or ?token= query param), compared with the constant-time store.DeletionTokenEqual. 403 otherwise. - Creator-browser deletes via the /mine button (matching vwr cookie, #37) remain allowed; other browsers and plain API clients get 403. - Regression tests: no token, wrong token (header+query), correct token (header+query), creator-cookie path, token extraction. - Adapted TestSoftDelete to pass the deletion token. - docs/API.md delete section updated. - Based on #58's SoftDelete (bool, error) signature.	2026-09-09 09:21:28 -05:00
Hermes Agent	2159982795	docs: design for optional client-side E2E encryption (issue #39 ) CI / test (pull_request) Successful in 25s Details CI / docker (pull_request) Skipped Details	2026-09-09 09:16:13 -05:00
poslop	5a2aa0f96d	docs: design note for cookie-based preferences and access keys (#30 ) CI / test (pull_request) Successful in 21s Details CI / docker (pull_request) Skipped Details	2026-09-09 09:14:25 -05:00
poslop	594b5f01aa	docs: attachments & storage backend design (#38 , #31 ) CI / test (pull_request) Successful in 17s Details CI / docker (pull_request) Skipped Details - attachments: filesystem-on-PVC recommended, blob interface keeps MinIO as a later drop-in; size limits via admin setting; sniffed-mime + nosniff/sandbox serving rules - storage backend: stay SQLite-only (WAL, modernc); no Postgres/Redis and no backend abstraction until documented trigger conditions fire	2026-09-09 09:10:15 -05:00
poslop	238dc96454	README rework: user-first structure, features, screenshots, config table; API detail moved to docs/API.md (#47 ) CI / test (push) Successful in 19s Details CI / docker (push) Skipped Details	2026-09-08 23:54:54 -05:00
poslop	acf71f7444	Palettes: pastel-lavender/peach/cloud presets + semantic status colors (#16 ) CI / test (push) Successful in 21s Details CI / docker (push) Skipped Details - Three new light [data-preset] blocks alongside midnight (default) and smooth - --ok/--warn/--err semantic tokens with 4.5:1 contrast per preset - .toast success/error variants wired in new.html - ?theme= query param preview hook in layout head (screenshots only) - Preview screenshots in docs/palette-previews/ Closes #16	2026-09-08 21:56:36 -05:00