Kyle Isom
9012b889d6
- Snapshot: VACUUM INTO for consistent db copy, excludes live db files and backups/, injects db snapshot, custom exclude patterns, streaming output via io.Writer - Restore: extract tar.zst with path traversal protection - zstd via github.com/klauspost/compress/zstd - 5 tests: full roundtrip with db integrity verification, without db, exclude patterns, dest dir creation - Update PROGRESS.md: all 9 packages complete, 87 total tests Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
78 lines
2.9 KiB
Markdown
78 lines
2.9 KiB
Markdown
# MCDSL Progress
|
||
|
||
## Current State
|
||
|
||
Phases 0–9 complete. All nine packages are implemented and tested (87 tests).
|
||
Ready for first-adopter migration (Phase 10).
|
||
|
||
## Completed
|
||
|
||
### Phase 0: Project Setup (2026-03-25)
|
||
- Go module, Makefile, .golangci.yaml (with `exported` rule), .gitignore
|
||
|
||
### Phase 1: `db` — SQLite Foundation (2026-03-25)
|
||
- Open (WAL, FK, busy timeout, 0600, parent dirs), Migration type, Migrate
|
||
(sequential, transactional, idempotent), SchemaVersion, Snapshot (VACUUM INTO)
|
||
- 11 tests
|
||
|
||
### Phase 2: `auth` — MCIAS Token Validation (2026-03-25)
|
||
- Config, TokenInfo, Authenticator with Login/ValidateToken/Logout
|
||
- 30s SHA-256 cache, lazy eviction, RWMutex, context helpers
|
||
- 14 tests
|
||
|
||
### Phase 3: `config` — TOML Configuration (2026-03-25)
|
||
- Base type, ServerConfig with Duration wrapper, Load[T] generic loader
|
||
- Env overrides via reflection, defaults, Validator interface
|
||
- 16 tests
|
||
|
||
### Phase 4: `httpserver` — HTTP Server (2026-03-25)
|
||
- Server with chi + TLS 1.3, ListenAndServeTLS, Shutdown
|
||
- LoggingMiddleware, StatusWriter, WriteJSON, WriteError
|
||
- 8 tests
|
||
|
||
### Phase 5: `csrf` — CSRF Protection (2026-03-25)
|
||
- HMAC-SHA256 double-submit cookies, Middleware, SetToken, TemplateFunc
|
||
- 10 tests
|
||
|
||
### Phase 6: `web` — Session and Templates (2026-03-25)
|
||
- SetSessionCookie/ClearSessionCookie/GetSessionToken (HttpOnly, Secure,
|
||
SameSite=Strict), RequireAuth middleware, RenderTemplate
|
||
- 9 tests
|
||
|
||
### Phase 7: `grpcserver` — gRPC Server (2026-03-25)
|
||
- MethodMap (Public, AuthRequired, AdminRequired), default deny for unmapped
|
||
- Auth interceptor, logging interceptor, TLS 1.3 optional
|
||
- 10 tests
|
||
|
||
### Phase 8: `health` — Health Checks (2026-03-25)
|
||
- REST Handler(db) — 200 ok / 503 unhealthy
|
||
- RegisterGRPC — grpc.health.v1.Health
|
||
- 4 tests
|
||
|
||
### Phase 9: `archive` — Service Directory Snapshots (2026-03-25)
|
||
- Snapshot: tar.zst with VACUUM INTO db injection, exclude *.db/*.db-wal/
|
||
*.db-shm/backups/, custom exclude patterns, streaming output
|
||
- Restore: extract tar.zst to dest dir, path traversal protection
|
||
- 5 tests: full roundtrip with db integrity, without db, exclude live db,
|
||
custom excludes, dest dir creation
|
||
|
||
## Summary
|
||
|
||
| Package | Tests | Key Exports |
|
||
|---------|-------|-------------|
|
||
| `db` | 11 | Open, Migration, Migrate, SchemaVersion, Snapshot |
|
||
| `auth` | 14 | Config, TokenInfo, Authenticator, context helpers |
|
||
| `config` | 16 | Base, ServerConfig, Duration, Load[T], Validator |
|
||
| `httpserver` | 8 | Server, LoggingMiddleware, WriteJSON, WriteError |
|
||
| `csrf` | 10 | Protect, Middleware, SetToken, TemplateFunc |
|
||
| `web` | 9 | SetSessionCookie, RequireAuth, RenderTemplate |
|
||
| `grpcserver` | 10 | MethodMap, Server (default deny), TokenInfoFromContext |
|
||
| `health` | 4 | Handler, RegisterGRPC |
|
||
| `archive` | 5 | Snapshot, Restore |
|
||
| **Total** | **87** | |
|
||
|
||
## Next Steps
|
||
|
||
- Phase 10: First-adopter migration (mcat)
|
||
- Phase 11: Broader adoption (metacrypt, mcr, mc-proxy, mcias)
|