8 Commits

Include renames

Author	SHA1	Message	Date
clawbot	14eb376d79	test: automated responsive-layout harness (closes #13) ... `make frontend-viewport-test` builds `dist/`, serves it from the same digest-pinned nginx image and nginx.conf the shipping container uses, and drives a digest-pinned headless Chrome over CDP. Viewport widths are derived from the app's own @media breakpoints rather than a list of phone models: each breakpoint is tested one pixel below, on, and above, plus four anchor viewports. Assertions are on computed layout — horizontal overflow, off-screen elements, clipped text, 44x44 tap targets, host-row reflow — not screenshots, and each check declares the minimum elements it must find so a stale selector fails instead of passing blind against a page it is not measuring. Kept out of `make check`: it needs Docker and takes minutes. Proven able to fail before being trusted. Model: opus-4-8	2026-09-21 18:29:20 +02:00
clawbot	f3895789d2	feat(backend): server hardening: timeouts, security headers, trusted-proxy client IP (closes #19) ... Add ReadHeaderTimeout and IdleTimeout to the http.Server as named constants beside the existing timeouts. Add a SecurityHeaders middleware (HSTS, a JSON-API CSP of default-src 'none'; frame-ancestors 'none', X-Frame-Options DENY, nosniff, Referrer-Policy, Permissions-Policy), registered before CORS so preflight responses carry it. Resolve the client IP from X-Forwarded-For / X-Real-IP only when the direct peer is in the trusted-proxy allowlist (loopback plus RFC1918 by default, configurable via TRUSTED_PROXIES); an untrusted peer's forwarded headers are ignored. Uses net/netip; no new dependency. Model: opus-4-8 (implementation and review); claude-fable-5 (merge)	2026-09-21 15:05:25 +02:00
clawbot	f7c7f92e27	fix(frontend): meet the 44x44 minimum tap target on every control (closes #43)	2026-08-10 16:12:00 +02:00
clawbot	852a11eec2	fix: wrap per-host status line so 320px viewport does not scroll (closes #42)	2026-08-10 16:07:28 +02:00
clawbot	25a852d35c	build: Dockerfile.backend multistage lint stage (closes #17)	2026-08-10 16:04:48 +02:00
clawbot	a644efe9ff	chore: root .editorconfig and hardened .gitignore (closes #15)	2026-08-10 15:47:49 +02:00
sneak	e45bc578b2	scripts-to-rule-them-all (#10) ... Reviewed-on: #10 Co-authored-by: sneak <sneak@sneak.berlin> Co-committed-by: sneak <sneak@sneak.berlin>	2026-07-07 02:14:16 +02:00
sneak	247a3c33fd	TODO (#9) ... Reviewed-on: #9	2026-07-06 21:20:37 +02:00