6 Commits

Include renames

Author	SHA1	Message	Date
Lucas Winther	ef5dfc1e6b	ci: publish Docker image to Gitea registry	2026-09-29 19:52:39 +02:00
Lucas WintherandClaude Opus 5	21021952e7	docs: add DECISIONS.md, an index of what was chosen and over what ... "Why is this the way it is" was answered by pointing at a directory of five specs, which means reading five specs to find out whether the question is even addressed. DECISIONS.md answers it in one line per decision, grouped by area, each entry naming what the choice was made *over* and linking into the spec that argues it. Around forty entries. Where no spec exists — the currency model, the baked rates, the reset — the commit message is cited as the record instead of inventing one. Written by reading the specs rather than from memory, which surfaced history worth having in one place: dates were widened to accept "YYYY-MM" rather than restructured into month plus optional day, specifically to avoid running a migration in the browser against the user's only copy of their financial data for an identical visible outcome. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>	2026-09-02 21:58:11 +02:00
Lucas WintherandClaude Opus 5	a039176aa3	docs: prune TODO.md, and correct four claims that were no longer true ... TODO.md becomes a TODO again: only work that is actually queued. Five of its seven sections were finished work, and their reasoning has permanent homes — the rules moved to AGENTS.md (the baked rates seed a new dataset only, never a fallback), the rest is in the commit messages and the specs. 215 lines to 131. The four corrections, all of them things a reader would have believed: - README said the install prompt could not work because the manifest "only ships an SVG icon". It has shipped 192x192 and 512x512 PNGs since f50c65b. Now stated as unverified rather than incomplete, which is what it actually is. - TODO said no browser had seen the two rule-editing surfaces, while its own section 5 listed both as seen and confirmed. - TODO said "merged to main" when the last three commits were on a branch. - scripts/screenshot.ts explained its own existence by saying ARCHITECTURE.md and TODO.md claim no browser can run here. Both now say the opposite — partly because of that script. ARCHITECTURE.md's gotchas section now says AGENTS.md holds the enforceable form of those rules and this holds the mechanism, so a reader hitting the overlap knows which is canonical. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>	2026-09-02 21:57:58 +02:00
Lucas WintherandClaude Opus 5	d83edccc79	docs: move the long-form docs into docs/, without the superpowers nesting ... ARCHITECTURE, PRODUCT and TODO move out of the repository root, and docs/superpowers/{specs,plans} flattens to docs/{specs,plans}: "superpowers" names the tool that wrote those documents, not a kind of document. No content changes. This commit is the move, plus the roughly thirty cross-references the move invalidated. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>	2026-09-02 21:56:59 +02:00
Lucas Winther	6eb77c8733	feat(deploy): add Docker image, static server, and CI workflows ... One build artifact serves both a self-hosted subpath deploy and GitHub Pages. CI runs the tests, typechecks, builds, and smoke-tests the image. server.ts's traversal guard uses a separator-aware check (resolved === root || resolved.startsWith(root + path.sep)) instead of a bare startsWith(root), which would let a request resolving to "/app/dist-evil/x" pass a check against root "/app/dist".	2026-09-01 21:33:45 +02:00
Lucas Winther	eba36fad9d	Initial commit	2026-09-01 15:23:37 +02:00