Kyle Isom
9012b889d6
- Snapshot: VACUUM INTO for consistent db copy, excludes live db files and backups/, injects db snapshot, custom exclude patterns, streaming output via io.Writer - Restore: extract tar.zst with path traversal protection - zstd via github.com/klauspost/compress/zstd - 5 tests: full roundtrip with db integrity verification, without db, exclude patterns, dest dir creation - Update PROGRESS.md: all 9 packages complete, 87 total tests Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2.9 KiB
2.9 KiB
MCDSL Progress
Current State
Phases 0–9 complete. All nine packages are implemented and tested (87 tests). Ready for first-adopter migration (Phase 10).
Completed
Phase 0: Project Setup (2026-03-25)
- Go module, Makefile, .golangci.yaml (with
exportedrule), .gitignore
Phase 1: db — SQLite Foundation (2026-03-25)
- Open (WAL, FK, busy timeout, 0600, parent dirs), Migration type, Migrate (sequential, transactional, idempotent), SchemaVersion, Snapshot (VACUUM INTO)
- 11 tests
Phase 2: auth — MCIAS Token Validation (2026-03-25)
- Config, TokenInfo, Authenticator with Login/ValidateToken/Logout
- 30s SHA-256 cache, lazy eviction, RWMutex, context helpers
- 14 tests
Phase 3: config — TOML Configuration (2026-03-25)
- Base type, ServerConfig with Duration wrapper, Load[T] generic loader
- Env overrides via reflection, defaults, Validator interface
- 16 tests
Phase 4: httpserver — HTTP Server (2026-03-25)
- Server with chi + TLS 1.3, ListenAndServeTLS, Shutdown
- LoggingMiddleware, StatusWriter, WriteJSON, WriteError
- 8 tests
Phase 5: csrf — CSRF Protection (2026-03-25)
- HMAC-SHA256 double-submit cookies, Middleware, SetToken, TemplateFunc
- 10 tests
Phase 6: web — Session and Templates (2026-03-25)
- SetSessionCookie/ClearSessionCookie/GetSessionToken (HttpOnly, Secure, SameSite=Strict), RequireAuth middleware, RenderTemplate
- 9 tests
Phase 7: grpcserver — gRPC Server (2026-03-25)
- MethodMap (Public, AuthRequired, AdminRequired), default deny for unmapped
- Auth interceptor, logging interceptor, TLS 1.3 optional
- 10 tests
Phase 8: health — Health Checks (2026-03-25)
- REST Handler(db) — 200 ok / 503 unhealthy
- RegisterGRPC — grpc.health.v1.Health
- 4 tests
Phase 9: archive — Service Directory Snapshots (2026-03-25)
- Snapshot: tar.zst with VACUUM INTO db injection, exclude .db/.db-wal/ *.db-shm/backups/, custom exclude patterns, streaming output
- Restore: extract tar.zst to dest dir, path traversal protection
- 5 tests: full roundtrip with db integrity, without db, exclude live db, custom excludes, dest dir creation
Summary
| Package | Tests | Key Exports |
|---|---|---|
db |
11 | Open, Migration, Migrate, SchemaVersion, Snapshot |
auth |
14 | Config, TokenInfo, Authenticator, context helpers |
config |
16 | Base, ServerConfig, Duration, Load[T], Validator |
httpserver |
8 | Server, LoggingMiddleware, WriteJSON, WriteError |
csrf |
10 | Protect, Middleware, SetToken, TemplateFunc |
web |
9 | SetSessionCookie, RequireAuth, RenderTemplate |
grpcserver |
10 | MethodMap, Server (default deny), TokenInfoFromContext |
health |
4 | Handler, RegisterGRPC |
archive |
5 | Snapshot, Restore |
| Total | 87 |
Next Steps
- Phase 10: First-adopter migration (mcat)
- Phase 11: Broader adoption (metacrypt, mcr, mc-proxy, mcias)