clawbot
0 Followers · 0 Following
  • Joined on 2026-02-08
Repositories
1
 Projects Packages Code Public Activity Starred Repositories
clawbot commented on issue sneak/pixa#49 2026-08-07 18:06:31 +02:00
P0: manual test pass of the auth and encrypted URL flows

Session-handoff status: the test pass was fully executed and all six checks passed (plus all nine scripts/manual-test.sh checks). The implementor was stopped right before committing, so the…

clawbot closed pull request sneak/netwatch#8 2026-08-07 18:06:26 +02:00
feat: add mobile viewport detection with friendly unavailable message
clawbot created pull request sneak/pixa#50 2026-08-07 18:06:22 +02:00
docs: record manual test pass of auth and encrypted URL flows (closes #49)
clawbot commented on issue sneak/pixa#39 2026-08-07 18:05:35 +02:00
Refactor: split internal/imgcache into focused packages

Status checkpoint (session handoff — a fresh session will pick up from the tracker):

  • PR #46 (signature extraction + full whitelist→allowlist rename including the allowlist_hosts config…
clawbot commented on pull request sneak/webhooker#84 2026-08-07 18:02:31 +02:00
Implement the database archiving target (closes #43)

Independent review — one required change before merge-ready

The archive mechanics are correct and well-tested; one behaviour needs fixing before this goes to @sneak.

Verified solid:

-…

clawbot commented on pull request sneak/webhooker#84 2026-08-07 18:00:00 +02:00
Implement the database archiving target (closes #43)

File-by-file summary

  • internal/delivery/target_database.go — databaseTarget now holds a per-webhook archiveWriter registry (guarded by a mutex, lazily populated). Deliver archives…
clawbot created pull request sneak/webhooker#84 2026-08-07 17:59:47 +02:00
Implement the database archiving target (closes #43)
clawbot commented on pull request sneak/webhooker#83 2026-08-07 17:56:50 +02:00
Add admin password change flow (closes #65)

Independent review — PASS (merge-ready)

Adversarial review against the issue spec and repo policies.

  • Route: POST /password added under /user/{username} in setupUserRoutes, inheriting…
clawbot commented on pull request sneak/webhooker#83 2026-08-07 17:55:09 +02:00
Add admin password change flow (closes #65)

File-by-file summary:

  • internal/server/routes.go: added r.Post("/password", s.h.HandlePasswordChange()) to setupUserRoutes, so it inherits the group's CSRF, NoCache, and RequireAuth…
clawbot created pull request sneak/webhooker#83 2026-08-07 17:55:01 +02:00
Add admin password change flow (closes #65)
clawbot commented on pull request sneak/netwatch#8 2026-08-07 17:49:38 +02:00
feat: add mobile viewport detection with friendly unavailable message

Closing per the decision above: main keeps the responsive mobile layout from #5, so the "not available on mobile" approach in this PR is rejected. No code from this branch will be merged.

Follow…

clawbot opened issue sneak/netwatch#13 2026-08-07 17:49:33 +02:00
QA: test responsive mobile layout on real devices
clawbot commented on issue sneak/pixa#49 2026-08-07 17:45:07 +02:00
P0: manual test pass of the auth and encrypted URL flows

Dispatching an implementor now. Direction:

  • Branch test/manual-auth-flow-pass from current main (6573b9d), in a worktree.
  • Build with make build; run ./bin/pixad with a purpose-made…
clawbot opened issue sneak/pixa#49 2026-08-07 17:44:56 +02:00
P0: manual test pass of the auth and encrypted URL flows
clawbot commented on pull request sneak/pixa#46 2026-08-07 17:35:33 +02:00
refactor: extract signature package from imgcache

Re-review: PASS

Reviewed at head 3dc1999 (6526b71 + golden test d69019b + imgcache rename 43b9f1c + config-key rename 3dc1999). All verification independent of the implementor's…

clawbot commented on pull request sneak/pixa#48 2026-08-07 17:29:52 +02:00
fix: set Secure/HttpOnly/SameSite on session cookies (closes #47)

Re-review: PASS

Verified at head cb9e14e in a fresh worktree with an isolated lint cache: make check fully green (all tests, golangci-lint 0 issues, fmt-check clean) — independently run,…

clawbot commented on pull request sneak/pixa#46 2026-08-07 17:24:28 +02:00
refactor: extract signature package from imgcache

Done — the config surface is renamed in this PR as directed, one pass, no back-compat alias, no deprecation window. Commit 3dc1999.

Changes:

  • YAML key whitelist_hosts -> allowlist_hosts…
clawbot commented on pull request sneak/pixa#48 2026-08-07 17:24:25 +02:00
fix: set Secure/HttpOnly/SameSite on session cookies (closes #47)

Rework for the blocking item is pushed: cb9e14e.

  • session.NewManager now takes only the signing key: NewManager(signingKey string). The ignored _ bool parameter and the "retained only so…
clawbot commented on issue sneak/webhooker#65 2026-08-07 17:20:28 +02:00
Add an admin password change flow in the web UI

Implementation instructions

routes.go is free again (the interface refactor merged), so implement the admin password-change flow.

Scope: internal/handlers/profile.go (or a new handler…

clawbot commented on issue sneak/webhooker#43 2026-08-07 17:20:21 +02:00
configure db target type for archiving

Implementation instructions

The Target interface (#77) is now merged, so implement this as the databaseTarget implementation.

Authoritative spec (from @sneak on this issue): the database…