39c86ab123
Post-v0.6.0 spot-check of the three 2026-05-04 architecture-review specs (per CLAUDE.md rule #4) confirms: - CLI restructure: shipped as Plan B Cycles 1+2 (b9bd152,3dd1e1b,3759f6a,e69b347). Last gap (read-side refresh_groups_cache callers) closed ind717f0d. Done-criteria all met. - Security polish: shipped as Stream A Cycle 1 (89090a8) plus follow-ups for start.sh fourth window (0c9387f) and recovery_qr.rs docs (229e483). All four phases done. - Extension restructure: genuinely outstanding. vault.ts is 1037 LOC (criterion ~200); the five-module split has not happened; setup.ts still imports relicario-wasm directly; shared/state.ts still has any-typed StateHost; SW router helpers still duplicated; CLI parity gap (relicario status) still open. Effort estimate: L. Removes the incorrect "subcommand reorganization, interactive TUI mode" descriptor — the original CLI restructure spec is about file structure, not TUI or renames. The TUI descriptor was a roadmap mis-paraphrase, not a real outstanding item. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
144 lines
10 KiB
Markdown
144 lines
10 KiB
Markdown
# Relicario — Project Status
|
||
|
||
> Update this file at the end of every dev iteration. It is the single source of truth for what is done, in progress, and next.
|
||
|
||
## Version
|
||
|
||
**Last release tagged:** v0.6.0 — rolled up Phase 2B, v0.5.1 Streams A/B/C, 1C-γ, Plan B refactor (Cycles 1+2), management-surfaces revamp, and the doc-structure redesign into one tag.
|
||
**Active track:** extension restructure planning (CLI restructure + security polish both confirmed shipped; only extension restructure is genuinely outstanding from the 2026-05-04 architecture-review specs)
|
||
|
||
## What landed on main since the v0.5.0 version bump
|
||
|
||
### Phase 2B — polish foundation + form layout (merged 2026-05-02, `5da1e52`)
|
||
|
||
Spec: `docs/superpowers/specs/2026-05-02-phase-2b-form-layout-design.md`
|
||
Plan: `docs/superpowers/plans/2026-05-02-phase-2b-polish-and-form-layout.md`
|
||
|
||
- Patina gold palette tokens (`--gold-base` `#a88a4a`, `--gold-mid`, `--gold-shadow`, etc.) replacing the bright amber `#d2ab43`
|
||
- `.surface-backdrop` (radial top-glow + 18px grid texture) on popup body, setup body, vault body
|
||
- `.glass` card class with `backdrop-filter: blur(8px)` for unlock card, setup steps, form columns
|
||
- `.btn-primary` / `.btn-secondary` button hierarchy alongside existing `.btn`
|
||
- `GLYPH_NEXT = '▸'` (U+25B8) replacing ASCII `→` in next/continue buttons
|
||
- Unlock view restructure: logo-lockup (logo + brand + tagline) + glass card + primary "unlock vault" button + secondary open-vault/settings demoted
|
||
- Setup wizard: backdrop + glass step cards + glass mode-picker cards + ▸ on next buttons
|
||
- Two-column login form (`surface: 'popup' | 'fullscreen'` flag on `renderForm`)
|
||
- Sticky save bar in fullscreen forms with `externalActions` flag
|
||
- Form header with title + dirty-state subtitle + platform-aware save hint (⌘+S / Ctrl+S)
|
||
|
||
### v0.5.1 Stream A — fullscreen + popup layout polish (merged 2026-05-03, `c16adc4`)
|
||
|
||
- 3-column vault tab: sidebar (200px) + list (flex) + detail drawer (440px)
|
||
- Sidebar type-category nav replacing flat item list (All items + per-type counts)
|
||
- Bottom sheet for "new item" type picker (pane-only scrim, sidebar stays interactive)
|
||
- Shared toast system at `extension/src/shared/toast.ts` (`showToast(message, type, durationMs)`)
|
||
- `GLYPH_VAULT_TAB = '⧉'` (U+29C9) replacing `⤴` pop-out button in popup
|
||
- Per-type glyph icons in popup item rows
|
||
- Empty-state treatments (popup list empty, popup search-empty, vault list section-empty)
|
||
- Emoji sweep — all remaining UI emoji replaced with monochrome glyph constants
|
||
|
||
### v0.5.1 Stream B — settings UX redesign (merged 2026-05-03, `bd6a301`)
|
||
|
||
- Unified left-nav settings page (Device / Vault grouping)
|
||
- Sections: Autofill (Device), Display (Device — password coloring), Security (Vault — Recovery QR + trusted devices), Generator (Vault), Retention (Vault), Backup (Vault), Import (Vault)
|
||
- `devices` standalone sidebar entry subsumed into Security section
|
||
|
||
### v0.5.1 Stream C — Recovery QR (merged 2026-05-03, `934dfe0`)
|
||
|
||
Spec: `docs/superpowers/specs/2026-05-01-recovery-qr-design.md`
|
||
Plan: `docs/superpowers/plans/2026-05-01-recovery-qr-and-entropy-floor.md`
|
||
|
||
- Rust core: `relicario-core/src/recovery_qr.rs` — `generate_recovery_qr` / `unwrap_recovery_qr` / `recovery_qr_to_svg` (109-byte binary payload, never written to disk)
|
||
- WASM bindings: `generate_recovery_qr` / `unwrap_recovery_qr` + session stores `image_secret` for regeneration
|
||
- CLI: `relicario recovery-qr generate` / `recovery-qr unwrap` subcommands (TTY render)
|
||
- Extension: three-state Security settings card; setup wizard "generate before you go" banner
|
||
- Setup wizard Style C redesign — centered hero card + colored progress track + glyph mode icons (replacing the prior glass-card vertical wizard)
|
||
|
||
### 1C-γ — attachments + Document type + device registration + trash + history
|
||
|
||
Specs: `docs/superpowers/specs/2026-04-24-relicario-extension-1c-gamma1-design.md`, `docs/superpowers/specs/2026-04-26-relicario-extension-1c-gamma2-design.md`
|
||
Plans: `docs/superpowers/plans/2026-04-24-relicario-extension-1c-gamma1.md`, `docs/superpowers/plans/2026-04-26-relicario-extension-1c-gamma2.md`
|
||
|
||
- Core: `relicario-core/src/item_types/document.rs` (DocumentCore — signature + signed-on date)
|
||
- Extension: Document type form + signature-block detail (`extension/src/popup/components/types/document.ts`)
|
||
- Attachments wired into 6 type forms via shared disclosure; 📎 indicator in item list
|
||
- Attachment cap setting (per-vault bytes cap) in vault settings; CLI enforces cap on attach
|
||
- Service worker: trash operations (listTrashed, restoreItem, purgeItem, purgeAllTrash); batched purge
|
||
- Device registration from the popup (no setup-wizard detour)
|
||
- Field history end-to-end (WASM `get_field_history`, popup viewer)
|
||
- Attachment IDs expanded to 128 bits with `is_valid` check (audit I2)
|
||
- Per-vault attachment bytes cap enforced (audit I3)
|
||
- IDs validated on backup restore (audit B4)
|
||
|
||
### Plan B multi-stream refactor (2026-05-09 → 2026-05-25)
|
||
|
||
Cycle 1:
|
||
- Stream A: security audit fixes + docs polish (`89090a8`)
|
||
- Stream B: `main.rs` split into `commands/` modules + `git_run` helper (`b9bd152`)
|
||
|
||
Cycle 2:
|
||
- Stream A: `prompt_or_flag<T>` + builder compression — compressed `build_*_item` helpers (`3dd1e1b`)
|
||
- Stream B: `Vault::after_manifest_change` wrapper, single canonical `ParamsFile` in session (`3759f6a`)
|
||
- Stream C: core/WASM seam — `base32_decode_lenient`, `parse_month_year`, `guess_mime` exported from WASM; CLI parsers migrated to `relicario-core::parse` (`e69b347`)
|
||
|
||
Misc:
|
||
- CLI: `gen` alias for `generate`, `-l`/`-w` short flags, batched purge
|
||
- `base32` module extracted from core, two duplicate RFC-4648 impls deduplicated
|
||
- License switched to GPL-3.0-or-later
|
||
|
||
### Vault-tab management surfaces revamp (2026-05-24 → 2026-05-30)
|
||
|
||
Spec: `docs/superpowers/specs/2026-05-23-vault-tab-management-surfaces-revamp-design.md`
|
||
Plan: `docs/superpowers/plans/2026-05-24-vault-tab-management-surfaces-revamp.md`
|
||
|
||
- Shared utilities: `relative-time.ts` consolidating 5 duplicate inline copies (`9da45dd`, `a587965`), webcrypto `ssh-fingerprint.ts` (`1edfa67`), shared section-header / glyph-btn / kv-row / fingerprint CSS (`367adce`), history/revoke/restore glyph constants (`c943a06`)
|
||
- Settings pane revamp — synced/local split + session timeout UI (`299e7db`)
|
||
- Devices pane revamp — SHA256 fingerprint + added-by display + glyph revoke with inline two-step confirm (`047df6e`)
|
||
- Trash pane revamp — per-item purge countdown via `daysUntilPurge` + glyph restore + bottom-right empty-trash (`ed6e218`)
|
||
- Field-history pane visual polish — section headers + glyph reveal/copy buttons (`32e674e`)
|
||
- Item-history-index pane — top-level "items with history" list (`32e1632`)
|
||
- Sidebar slot wiring + `#history/<id>` route with `#field-history/<id>` legacy normalization (`88d7228`)
|
||
|
||
### Doc-structure redesign (2026-05-30, complete)
|
||
|
||
Spec: `docs/superpowers/specs/2026-05-30-doc-structure-redesign-design.md`
|
||
Plan: `docs/superpowers/plans/2026-05-30-doc-structure-redesign.md` (all 37 sub-step boxes ticked)
|
||
|
||
- Task 1: Renamed `ARCHITECTURE.md` → `DESIGN.md`, `docs/ARCHITECTURE.md` → `docs/CRYPTO.md`, `FORMATS.md` → `docs/FORMATS.md` (`36a59cd`)
|
||
- Task 2: Added scope headers + "Next:" footers to all tour docs (`5e7023f`)
|
||
- Task 3: Fixed incoming links to renamed paths (`01377e7`)
|
||
- Task 4: Updated CLAUDE.md living-docs table + added three discipline rules (`bae3f7c`)
|
||
- Task 5: Final verification gate — all 6 steps pass cleanly (Step 3 grep had three false positives — correct new-path sibling links inside `docs/`, not stale references)
|
||
|
||
### Post-audit cleanup (2026-05-30)
|
||
|
||
- `STATUS.md` + `ROADMAP.md` synced with three weeks of stealth-shipped work (`72a59c6`, `0bde093`)
|
||
- CLAUDE.md gains rule #4 (plan-state hygiene) + doc-structure plan checkboxes ticked retroactively (`cccb7d7`)
|
||
- Vault lock-screen logo: `<img class="brand-logo">` added to `renderLockScreen` for parity with popup unlock view (`39ae629`)
|
||
- Extension test-debt cleared: 17 stale tests (settings + devices + router) updated to match the post-Stream-B + post-revamp components — 371/371 extension + 281 Rust tests green (`797709b`, `c9802ef`, `361f3b4`)
|
||
- v0.6.0 cut: version bumps + CHANGELOG entry covering the full v0.5.x train
|
||
|
||
## In progress (uncommitted on main)
|
||
|
||
- `.claude/settings.json` — harness config tweaks (kept aside intentionally)
|
||
- Two superseded doc-plan/spec files showing modifications — `2026-04-22-relicario-extension-1c-beta1.md` and `2026-04-11-relicario-design.md` (kept aside intentionally)
|
||
|
||
## Up next
|
||
|
||
Per the 2026-05-30 post-v0.6.0 audit of the three 2026-05-04 architecture-review specs:
|
||
|
||
- **CLI restructure** (`2026-05-04-cli-restructure-design.md`) — *already shipped* as Plan B Cycles 1+2 (`b9bd152`, `3dd1e1b`, `3759f6a`, `e69b347`); the last gap (read-side `refresh_groups_cache` callers in list/get) closed in `d717f0d`. Done-criteria all met.
|
||
- **Security polish** (`2026-05-04-security-polish-design.md`) — *already shipped* as Stream A Cycle 1 (`89090a8`) plus follow-ups (`0c9387f` start.sh fourth window, `229e483` recovery_qr.rs docs). All four phases done.
|
||
- **Extension restructure** (`2026-05-04-extension-restructure-design.md`) — **the only genuinely outstanding spec.** Spot-checks confirm:
|
||
- `extension/src/vault/vault.ts` is 1037 LOC (spec criterion: ~200; the split into `vault-shell.ts` / `vault-sidebar.ts` / `vault-list.ts` / `vault-drawer.ts` / `vault-form-wrapper.ts` / `vault-status.ts` has not happened)
|
||
- `extension/src/setup/setup.ts` still imports `relicario-wasm` directly (the SW-abstraction-bypass that P1.4 calls out)
|
||
- `extension/src/shared/state.ts` still has `any`-typed `StateHost`
|
||
- `loadDeviceSettings` / `loadBlacklist` / `saveBlacklist` / `itemToManifestEntry` still duplicated across `popup-only.ts` and `content-callable.ts`
|
||
- `relicario status` parity gap (no vault-tab equivalent of ahead/behind/lastSyncAt) still open
|
||
- Effort estimate from spec: **L (multi-day to multi-week)**
|
||
|
||
The next concrete move is **writing an implementation plan** for the extension restructure spec.
|
||
|
||
Beyond extension restructure, ROADMAP medium-term holds Phase 4 command palette (no spec yet). Long-term: relay server, mobile.
|
||
|
||
See `ROADMAP.md` for the longer arc and `CHANGELOG.md` for tagged-release history (current head: `v0.5.0` entry, dated 2026-05-02 — predates the v0.5.1 train work and will be revised when the next tag cuts).
|