6 Commits

Include renames

Author	SHA1	Message	Date
tliu93	ae75e4582d	M4-T09: document login hardening, finalize OpenAPI and roadmap	2026-06-21 23:01:50 +02:00
tliu93	9da88db221	docs(roadmap): graduate next-phase work out of Future Ideas ... Promote four now-decided directions from Future Ideas into a new "下一阶段：已确定要做" section (roadmap altitude, not yet broken into task cards): TOTP second factor for the public dashboard, frontend optimization (scope TBD), MQTT / IoT integration, and a settings-page long-lived API token (PAT-style, related to but distinct from M3's mobile OAuth). Future Ideas is now an empty, purpose-stated bucket for not-yet-decided ideas.	2026-06-13 17:38:50 +02:00
tliu93	962ba26c7c	docs(roadmap): add Future Ideas — TOTP 2FA for the public dashboard ... Record TOTP (RFC 6238) as a deferred hardening idea for the now public-facing Web dashboard: second factor on the single-admin login, with CLI-only password reset and a CLI TOTP reset/recovery path that works even if the recovery codes are lost (no lock-out dead end). Not M2.5, not scheduled — parked under a new Future Ideas section.	2026-06-13 15:29:20 +02:00
tliu93	bd09523e94	M2-T13: docs wrap-up + retire frontend constraints + dependency cleanup ... - README: add 前端 v2 (React SPA) section (dev/build/codegen/hosting/gates), update directory listing, drop stale Jinja descriptions - architecture-overview: retire '不引入前后端分离' constraint; reflect SPA + JSON API - roadmap: mark M2 done - remove orphaned jinja2 dependency (recompile requirements*.txt; no other churn) - delete empty tests/test_auth.py stub; drop dead _extract_csrf_token in test_api_data - verified image still builds and app imports with the slimmer deps	2026-06-13 15:20:50 +02:00
tliu93	2f634006d2	M1-T07: align docs to single-DB reality and re-export OpenAPI ... Rewrite README (single app.db + one alembic_app chain, legacy data moved once via scripts.migrate_legacy_data, accurate test list) and remove the Grafana Provisioning section. Update architecture-overview to the unified data layer (one Base, app-DB engine with WAL) and retire the alembic_location / alembic_poo sections. Mark M1 done in the roadmap. Re-export openapi/, which catches the spec up to the already-existing /config/smtp/test and /public-ip/check endpoints (purely additive; M1's DB-session dependency swap produced no schema change). pytest 95 passed; ruff clean (pre-existing only); OpenAPI export idempotent.	2026-06-12 17:13:28 +02:00
tliu93	b359bbe3bf	docs: add next-phase roadmap, milestone design docs, and CLAUDE.md ... - roadmap.md: M1 (DB consolidation) -> M2 (React SPA) -> M3 (token/mobile) - docs/design/: agent-pipeline design docs with atomic tasks for M1-M3 - CLAUDE.md: workflow, doc map, commit conventions, review-notes briefing flow - .gitignore: ignore local review-notes/	2026-06-12 15:37:17 +02:00