coulomb/coulomb-social
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
45 commits 1 branch 0 tags 724 KiB
Commit graph

18 commits

Author SHA1 Message Date
tegwick
bc78cd27fc Adopt stage-1 capability cut and product capability model 
Persist capability/feature vocabulary, v0 model, and founder stage-1 must set
(onboarding, spaces/pages with Title/Abstract/Visual, page copy and transfer).
Mark CSOC-WP-0001-T03 done; add CSOC-WP-0006 for implementation.
 2026-08-12 13:09:09 +02:00
tegwick
3a74d004f0 Inventory Bubble surface and sketch migration mapping (CSOC-WP-0001) 
Record public meta, Research/vw_pages routes, integrations, and content
hypothesis. Provisional Postgres+Forgejo mapping awaits Bubble export.
 2026-08-12 11:10:14 +02:00
tegwick
c521adc2f9 Publish CSOC-WP-0005 resource demand and cost evidence 
Add low/base/high demand forecasts, service objectives with timestamped
observations, and workload operations labor for resource:tenant:coulomb:coulomb-social.
 2026-08-12 11:07:03 +02:00
tegwick
edfdd79208 Finish CSOC-WP-0003 and CSOC-WP-0004; residual intakes for Case B 
Close self-registration workplan with Case A proven and Create account
entry implemented; park public registration enablement and identity
negatives as CSOC-IN-0001/0002. Complete app-shell workplan with T06
operator runbook (seed, bind, webhook, smoke) and smoke doc updates.
 2026-08-12 10:59:25 +02:00
tegwick
3f30bcd340 Add Forgejo edit/refresh sync path for space content (T05) 
Keep git as source of truth: deep-link to Forgejo editor, manual refresh to
drop cache, and optional signed push webhook for automatic invalidation.
 2026-08-12 03:29:26 +02:00
tegwick
1cedd8f219 Render space pages from Forgejo markdown (CSOC-WP-0004-T04) 
Fetch raw files from Forgejo, sanitize markdown to HTML, and show them on
space detail. Ship a public demo fixture path and seed_demo_space command.
 2026-08-12 01:56:30 +02:00
tegwick
be32432d39 Add Space metadata model and provisional Forgejo content ADR 
Introduce tenant-scoped Space/SpaceMembership with list and detail views.
Document markdown-in-Forgejo as content SoR (ADR-0002). Run migrations on
container start so app.coulomb.social picks up the new tables.
 2026-08-12 01:30:05 +02:00
tegwick
f5537d8365 Serve the rebuild on app.coulomb.social; defer apex Bubble cutover 
Document parallel-host strategy: Railiance on app.*, Bubble remains on
coulomb.social until data and self-registration are ready.
 2026-08-09 23:20:30 +02:00
tegwick
29a9ff735e Complete identity smoke path: id_token claims, registration entry, cutover docs 
Prefer verified KeyCape id_token claims when /userinfo returns 401; soft-fail
userinfo. Add CSOC-WP-0003 registration entry (disabled until NetKingdom URL),
AAL step-up hooks, smoke/cutover evidence for tegwick OIDC without MFA.
 2026-08-09 22:42:51 +02:00
tegwick
c71fb0fda9 Document and wrap coulomb-social-env secret script 
Point operators at railiance-apps create-coulomb-social-env-secret.sh
via scripts/create-env-secret.sh for production Secret assembly.
 2026-08-09 02:04:33 +02:00
tegwick
44439f8d8d Complete flex-auth PEP and document railiance packaging path 
Local + HTTP POST /v1/check PEP with fail-closed transport errors;
shell:view enforced on /app/. Vocabulary docs for T07. Helm chart lives
in railiance-apps; Dockerfile already present for T08.
 2026-08-09 02:00:12 +02:00
tegwick
e80fdced13 Add Dockerfile for coulomb-social delivery-lane packaging 
Non-root gunicorn image with /healthz check; railiance-apps values still open.
 2026-08-09 01:57:02 +02:00
tegwick
d88767f05b Wire user-engine HTTP /me for member provisioning (CSOC-WP-0002-T04) 
HttpUserEngineClient uses trusted-proxy claims against live user-engine.
Offline stub when URL/secret unset. Align default tenant with KeyCape
tenant:coulomb; map OIDC tenant/principal_type/groups into the envelope.
 2026-08-09 01:56:44 +02:00
tegwick
76ec8cfe41 Register coulomb-social OIDC client on live KeyCape (CSOC-WP-0002-T03) 
Public PKCE client on kc.coulomb.social with local and production redirect
URIs. Add register-keycape-client.sh, document env, and harden public-client
token exchange (no secret). Authorize probe verified registered vs reject.
 2026-08-09 01:50:51 +02:00
tegwick
01da195c13 Implement NetKingdom identity shell for coulomb.social (CSOC-WP-0002) 
Django scaffold aligned with the business delivery lane: tenant-keyed
Member model without passwords, identity app as sole OIDC/session
boundary, dev-claims login, authenticated /app/ shell, ADR-0001, and
tests. T01/T02/T05/T06 done; OIDC registration, real user-engine HTTP,
flex-auth, and packaging remain open.
 2026-08-09 01:45:05 +02:00
tegwick
6fe263444a Extract authenticated coulomb.social design language via designlang 
Session probe lands on /vw_pages (Research). Use main designlang extract
with --cookie-file — pack ignores auth. 39 artifacts under
docs/design-extract; tolerate designlang late summary crash when cores exist.
 2026-08-09 01:31:00 +02:00
tegwick
319dd00465 Add designlang public-shell pack; tighten auth capture checks 
Ran authenticated extract against coulomb.social; session metadata
matched anonymous Bubble defaults, so treat docs/design-extract as a
public shell baseline (PROVENANCE.md). Capture script now refuses to
overwrite storage-state.json with thin anonymous sessions.
 2026-08-09 01:22:15 +02:00
tegwick
0bf740017e Add authenticated designlang extract path for coulomb.social 
Interactive Playwright session capture (XDG storageState, mode 0600)
plus a designlang pack wrapper that never prints secrets. Document the
intended OpenBao lane tenants/binky/coulomb-social/bubble-member for
later password custody; interactive capture is the default for Bubble.
 2026-08-09 01:15:06 +02:00