Files
relicario/STATUS.md
adlee-was-taken 0bde0935c2 docs: STATUS/ROADMAP — close out post-audit cleanup iteration
Three commits landed since the prior sync (72a59c6) that should be
reflected here:
- cccb7d7  rule #4 + doc-structure plan ticks
- 39ae629  vault lock-screen logo
- (this commit)

Moves the doc-structure redesign from "in progress" to "complete"
(Task 5 verified clean), drops the lock-screen logo from in-flight,
and trims Up next to the four genuinely-outstanding items: tag cut,
CLI restructure, extension restructure, security polish.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-30 20:12:41 -04:00

9.0 KiB
Raw Blame History

Relicario — Project Status

Update this file at the end of every dev iteration. It is the single source of truth for what is done, in progress, and next.

Version

Last release tagged: v0.2.0 — the v0.5.x train (crate + extension versions bumped to 0.5.0 in cf66bd9, 2026-05-04) is on main but untagged. The train has accumulated well past the original v0.5.0 scope; ready to tag (v0.5.1 or v0.6.0 depending on how you read the breadth). Active track: post-audit cleanup → ready to cut a tag

What landed on main since the v0.5.0 version bump

Phase 2B — polish foundation + form layout (merged 2026-05-02, 5da1e52)

Spec: docs/superpowers/specs/2026-05-02-phase-2b-form-layout-design.md Plan: docs/superpowers/plans/2026-05-02-phase-2b-polish-and-form-layout.md

  • Patina gold palette tokens (--gold-base #a88a4a, --gold-mid, --gold-shadow, etc.) replacing the bright amber #d2ab43
  • .surface-backdrop (radial top-glow + 18px grid texture) on popup body, setup body, vault body
  • .glass card class with backdrop-filter: blur(8px) for unlock card, setup steps, form columns
  • .btn-primary / .btn-secondary button hierarchy alongside existing .btn
  • GLYPH_NEXT = '▸' (U+25B8) replacing ASCII in next/continue buttons
  • Unlock view restructure: logo-lockup (logo + brand + tagline) + glass card + primary "unlock vault" button + secondary open-vault/settings demoted
  • Setup wizard: backdrop + glass step cards + glass mode-picker cards + ▸ on next buttons
  • Two-column login form (surface: 'popup' | 'fullscreen' flag on renderForm)
  • Sticky save bar in fullscreen forms with externalActions flag
  • Form header with title + dirty-state subtitle + platform-aware save hint (⌘+S / Ctrl+S)

v0.5.1 Stream A — fullscreen + popup layout polish (merged 2026-05-03, c16adc4)

  • 3-column vault tab: sidebar (200px) + list (flex) + detail drawer (440px)
  • Sidebar type-category nav replacing flat item list (All items + per-type counts)
  • Bottom sheet for "new item" type picker (pane-only scrim, sidebar stays interactive)
  • Shared toast system at extension/src/shared/toast.ts (showToast(message, type, durationMs))
  • GLYPH_VAULT_TAB = '⧉' (U+29C9) replacing &#x2934; pop-out button in popup
  • Per-type glyph icons in popup item rows
  • Empty-state treatments (popup list empty, popup search-empty, vault list section-empty)
  • Emoji sweep — all remaining UI emoji replaced with monochrome glyph constants

v0.5.1 Stream B — settings UX redesign (merged 2026-05-03, bd6a301)

  • Unified left-nav settings page (Device / Vault grouping)
  • Sections: Autofill (Device), Display (Device — password coloring), Security (Vault — Recovery QR + trusted devices), Generator (Vault), Retention (Vault), Backup (Vault), Import (Vault)
  • devices standalone sidebar entry subsumed into Security section

v0.5.1 Stream C — Recovery QR (merged 2026-05-03, 934dfe0)

Spec: docs/superpowers/specs/2026-05-01-recovery-qr-design.md Plan: docs/superpowers/plans/2026-05-01-recovery-qr-and-entropy-floor.md

  • Rust core: relicario-core/src/recovery_qr.rsgenerate_recovery_qr / unwrap_recovery_qr / recovery_qr_to_svg (109-byte binary payload, never written to disk)
  • WASM bindings: generate_recovery_qr / unwrap_recovery_qr + session stores image_secret for regeneration
  • CLI: relicario recovery-qr generate / recovery-qr unwrap subcommands (TTY render)
  • Extension: three-state Security settings card; setup wizard "generate before you go" banner
  • Setup wizard Style C redesign — centered hero card + colored progress track + glyph mode icons (replacing the prior glass-card vertical wizard)

1C-γ — attachments + Document type + device registration + trash + history

Specs: docs/superpowers/specs/2026-04-24-relicario-extension-1c-gamma1-design.md, docs/superpowers/specs/2026-04-26-relicario-extension-1c-gamma2-design.md Plans: docs/superpowers/plans/2026-04-24-relicario-extension-1c-gamma1.md, docs/superpowers/plans/2026-04-26-relicario-extension-1c-gamma2.md

  • Core: relicario-core/src/item_types/document.rs (DocumentCore — signature + signed-on date)
  • Extension: Document type form + signature-block detail (extension/src/popup/components/types/document.ts)
  • Attachments wired into 6 type forms via shared disclosure; 📎 indicator in item list
  • Attachment cap setting (per-vault bytes cap) in vault settings; CLI enforces cap on attach
  • Service worker: trash operations (listTrashed, restoreItem, purgeItem, purgeAllTrash); batched purge
  • Device registration from the popup (no setup-wizard detour)
  • Field history end-to-end (WASM get_field_history, popup viewer)
  • Attachment IDs expanded to 128 bits with is_valid check (audit I2)
  • Per-vault attachment bytes cap enforced (audit I3)
  • IDs validated on backup restore (audit B4)

Plan B multi-stream refactor (2026-05-09 → 2026-05-25)

Cycle 1:

  • Stream A: security audit fixes + docs polish (89090a8)
  • Stream B: main.rs split into commands/ modules + git_run helper (b9bd152)

Cycle 2:

  • Stream A: prompt_or_flag<T> + builder compression — compressed build_*_item helpers (3dd1e1b)
  • Stream B: Vault::after_manifest_change wrapper, single canonical ParamsFile in session (3759f6a)
  • Stream C: core/WASM seam — base32_decode_lenient, parse_month_year, guess_mime exported from WASM; CLI parsers migrated to relicario-core::parse (e69b347)

Misc:

  • CLI: gen alias for generate, -l/-w short flags, batched purge
  • base32 module extracted from core, two duplicate RFC-4648 impls deduplicated
  • License switched to GPL-3.0-or-later

Vault-tab management surfaces revamp (2026-05-24 → 2026-05-30)

Spec: docs/superpowers/specs/2026-05-23-vault-tab-management-surfaces-revamp-design.md Plan: docs/superpowers/plans/2026-05-24-vault-tab-management-surfaces-revamp.md

  • Shared utilities: relative-time.ts consolidating 5 duplicate inline copies (9da45dd, a587965), webcrypto ssh-fingerprint.ts (1edfa67), shared section-header / glyph-btn / kv-row / fingerprint CSS (367adce), history/revoke/restore glyph constants (c943a06)
  • Settings pane revamp — synced/local split + session timeout UI (299e7db)
  • Devices pane revamp — SHA256 fingerprint + added-by display + glyph revoke with inline two-step confirm (047df6e)
  • Trash pane revamp — per-item purge countdown via daysUntilPurge + glyph restore + bottom-right empty-trash (ed6e218)
  • Field-history pane visual polish — section headers + glyph reveal/copy buttons (32e674e)
  • Item-history-index pane — top-level "items with history" list (32e1632)
  • Sidebar slot wiring + #history/<id> route with #field-history/<id> legacy normalization (88d7228)

Doc-structure redesign (2026-05-30, complete)

Spec: docs/superpowers/specs/2026-05-30-doc-structure-redesign-design.md Plan: docs/superpowers/plans/2026-05-30-doc-structure-redesign.md (all 37 sub-step boxes ticked)

  • Task 1: Renamed ARCHITECTURE.mdDESIGN.md, docs/ARCHITECTURE.mddocs/CRYPTO.md, FORMATS.mddocs/FORMATS.md (36a59cd)
  • Task 2: Added scope headers + "Next:" footers to all tour docs (5e7023f)
  • Task 3: Fixed incoming links to renamed paths (01377e7)
  • Task 4: Updated CLAUDE.md living-docs table + added three discipline rules (bae3f7c)
  • Task 5: Final verification gate — all 6 steps pass cleanly (Step 3 grep had three false positives — correct new-path sibling links inside docs/, not stale references)

Post-audit cleanup (2026-05-30)

  • STATUS.md + ROADMAP.md synced with three weeks of stealth-shipped work (72a59c6)
  • CLAUDE.md gains rule #4 (plan-state hygiene) + doc-structure plan checkboxes ticked retroactively (cccb7d7)
  • Vault lock-screen logo: <img class="brand-logo"> added to renderLockScreen for parity with popup unlock view (39ae629)

In progress (uncommitted on main)

  • .claude/settings.json — harness config tweaks (kept aside intentionally)
  • Two superseded doc-plan/spec files showing modifications — 2026-04-22-relicario-extension-1c-beta1.md and 2026-04-11-relicario-design.md (kept aside intentionally)

Up next

  1. Cut a tag for the v0.5.x train. Version bumped to 0.5.0 on 2026-05-04 but never tagged; scope now includes Phase 2B + v0.5.1 Streams A/B/C + 1C-γ + Plan B refactor + management-surfaces revamp + doc-structure redesign. Given the breadth, v0.6.0 may fit better than v0.5.1; user decides. Tagging will also need a CHANGELOG entry covering the train.
  2. CLI restructure (spec 2026-05-04-cli-restructure-design.md, no plan yet) — subcommand reorganization + interactive TUI mode.
  3. Extension restructure (spec 2026-05-04-extension-restructure-design.md, no plan yet) — bundle / message-routing cleanup.
  4. Security polish (spec 2026-05-04-security-polish-design.md, no plan yet) — follow-up security hardening from the architecture review.

See ROADMAP.md for the longer arc and CHANGELOG.md for tagged-release history (current head: v0.5.0 entry, dated 2026-05-02 — predates the v0.5.1 train work and will be revised when the next tag cuts).