Commit Graph

  • 275879a18b ambek .planning main araharah-executor 2026-10-23 22:37:55 +08:00
  • e512104d5e assets: add arah² brand assets — logo + PSD source; display logo in README header araharah-executor 2026-10-23 21:10:00 +08:00
  • 91ad0c9d93 docs: generate + verify project documentation — canonical docs, per-package READMEs, verified fix pass araharah-executor 2026-10-23 20:56:40 +08:00
  • af3edefbc6 add sume araharah-executor 2026-10-23 19:18:43 +08:00
  • 1890b5b1ca docs(03): verification exit addendum — probe removal + GEO-03 platform allowlist araharah-executor 2026-10-23 18:53:28 +08:00
  • 8a5c8b415f fix(03-04): GEO-03 probe platform allowlist — official telegram-web-app.js writes one sessionStorage bookkeeping key; app surfaces stay empty araharah-executor 2026-10-23 18:52:59 +08:00
  • 2589e2126f docs(03-04): checkpoint resolution — device matrix passed araharah-executor 2026-10-23 18:45:15 +08:00
  • 9d6fdc64be docs(03): device matrix PASSED + phase verification araharah-executor 2026-10-23 18:45:15 +08:00
  • fc99745672 chore(03-04): remove the device-matrix diagnostic probe — exit obligation, matrix passed araharah-executor 2026-10-23 18:41:41 +08:00
  • 28045d9b9e docs(03-04): log round 7 — probe readings; version-gate the settings CTA araharah-executor 2026-10-23 01:44:14 +08:00
  • 19a51e5882 fix(03-04): LOCATION SETTINGS CTA version-gated 8.0+ — hides the no-op off-Telegram (Chrome SDK stub reports 6.0) araharah-executor 2026-10-23 01:43:34 +08:00
  • e64cf7003b docs(03-04): log debug round 6 — signature-field HMAC erratum (the live blocker) araharah-executor 2026-10-23 01:34:53 +08:00
  • 22fda6d12a fix(03-04): HMAC data-check-string excludes only hash — signature field participates (real clients rejected as tampered; erratum M6) araharah-executor 2026-10-23 01:34:19 +08:00
  • c062ebaee1 docs(03-04): log debug round 5 — diagnostic probe armed araharah-executor 2026-10-23 01:25:35 +08:00
  • f4453996ac fix(03-04): on-screen diagnostic probe — WA version/platform, initData char-count, session + location categories araharah-executor 2026-10-23 01:24:52 +08:00
  • de07c99e8a docs(03-04): log debug round 4 — settings CTA on the wrong instance araharah-executor 2026-10-23 01:19:41 +08:00
  • 38ce59b1ca fix(03-04): LOCATION SETTINGS CTA on the denied card (was only on awaiting-pin instance — patch-order bug) araharah-executor 2026-10-23 01:19:10 +08:00
  • caeb9f9729 docs(03-04): log debug round 3 — telegram-web-app.js integration erratum araharah-executor 2026-10-23 01:15:10 +08:00
  • 3793741d2f fix(03-04): load telegram-web-app.js in head — production WebApp was never defined (no initData, no LocationManager, no BackButton) araharah-executor 2026-10-23 01:14:27 +08:00
  • ad4d18b180 docs(03-04): UI-SPEC amend — third denied CTA (LOCATION SETTINGS) as debug-round-2 amendment araharah-executor 2026-10-23 01:07:50 +08:00
  • 89268074a6 docs(03-04): log debug round 2 — LocationManager openSettings deep-link round araharah-executor 2026-10-23 01:07:27 +08:00
  • 9fa4acb319 fix(03-04): Telegram LocationManager deep-link — LOCATION SETTINGS CTA on denied cards + locationManagerUpdated chain re-run araharah-executor 2026-10-23 01:06:52 +08:00
  • fff865f6cd docs(03-04): log mid-gate debug round 1 (menu button + dead CTAs) araharah-executor 2026-10-23 01:01:20 +08:00
  • b1d8768866 fix(03-04): web_app menu button on deployed origin + wire CTA actions on both denied-shaped cards araharah-executor 2026-10-23 01:00:27 +08:00
  • fc183216c3 docs(03-04): complete one-deployable architecture plan — SUMMARY (checkpoint armed) araharah-executor 2026-10-23 00:46:44 +08:00
  • 5c155e393d feat(03-04): Mock-Telegram runner page + Playwright capture harness — 7/7 captures + GEO-03 probe araharah-executor 2026-10-23 00:37:58 +08:00
  • 8b39ea70c3 feat(03-04): Worker [assets] binding + one-command deploy + D-14 build-artifact gate araharah-executor 2026-10-23 00:15:26 +08:00
  • d573acc583 feat(03-03): status strip, state cards, recenter control, boot choreography — map-first, D-09 staged states araharah-executor 2026-10-23 00:08:34 +08:00
  • c437d312f6 feat(03-03): Rams shell stylesheet + MapLibre v6 bootstrap, position marker, follow controller araharah-executor 2026-10-22 23:53:18 +08:00
  • 83985c4a09 feat(03-03): copy module — UI-SPEC table verbatim (en+ms) + COPY1..6 copy gate araharah-executor 2026-10-22 23:51:05 +08:00
  • 4e4b75da00 docs(03-02): complete location chain core + Mock-Telegram harness plan — SUMMARY araharah-executor 2026-10-22 23:47:47 +08:00
  • 2659b7f352 feat(03-02): D-11 Mock-Telegram harness + the four requirement gates (17 cases green) araharah-executor 2026-10-22 23:46:17 +08:00
  • 0a35bce256 feat(03-02): Telegram platform wrappers — theme slot switch, BackButton total wire, safe-area union araharah-executor 2026-10-22 23:40:03 +08:00
  • faab77a84f feat(03-02): D-04 chain state machine + memory-only session store + /api/session client araharah-executor 2026-10-22 23:39:16 +08:00
  • 9552e7e4ab feat(03-02): Fix type + three source adapters (telegram/webview/chat-pin) — GEO-01 wrappers araharah-executor 2026-10-22 23:37:58 +08:00
  • 3fd0694ee6 chore(03-01): lockfile resolution for the web workspace (maplibre-gl, vite, playwright-into-web) araharah-executor 2026-10-22 23:34:40 +08:00
  • 1fefd90b6e docs(03-01): complete web/_workspace + GEO-02 relay plan — SUMMARY araharah-executor 2026-10-22 23:34:33 +08:00
  • ecaf242d0e feat(03-01): GEO-02 server half both directions — chat-keyboard fallback + GET /api/location + POST /api/location-fallback (claim-scoped) araharah-executor 2026-10-22 23:33:01 +08:00
  • 4fbbb0b516 feat(03-01): TTL-only KV location-pin layer under the existing privacy gates (GEO-03, PRIV-02) araharah-executor 2026-10-22 23:25:59 +08:00
  • 9376cabca2 feat(03-01): stand up web/ npm workspace with Wave-0 hand-rolled test runner (D-01, D-02, D-11, D-14) araharah-executor 2026-10-22 23:24:41 +08:00
  • af691ae40e fix(02-bot-skeleton-initdata-security): WR-03 honest rotate-on-new invariant + best-effort post-mint reconciliation (fold in IN-01b dead branch, IN-01c Phase-4 notes) araharah-executor 2026-10-22 20:21:11 +08:00
  • 3ea1fdd932 fix(02-bot-skeleton-initdata-security): WR-02 fail-closed /telegram/webhook — unarmed WEBHOOK_SECRET rejects (constant 500, category-only log) before grammY's accept-everything compare araharah-executor 2026-10-22 20:18:34 +08:00
  • 8995498bff fix(02-bot-skeleton-initdata-security): WR-01 cap /api/session body at 4 KB before JSON split (413, category-only logs) araharah-executor 2026-10-22 20:17:34 +08:00
  • aedff86542 docs(02-03): record D-16 deploy-gate APPROVAL + finalize SUMMARY araharah-executor 2026-10-22 19:57:28 +08:00
  • d600d6e71a fix(02-03): set-webhook auto-appends /telegram/webhook to a pathless URL araharah-executor 2026-10-22 19:56:24 +08:00
  • 2ea7f6edc7 docs(02-03): finalize SUMMARY — deploy record, live security smokes, walkthrough gate pending araharah-executor 2026-10-22 18:53:55 +08:00
  • 492a97bd89 fix(02-03): wire chat_sessions KV namespace id (created via wrangler kv namespace create) araharah-executor 2026-10-22 18:45:44 +08:00
  • c8f064f65a docs(02-03): complete command surface + Worker wiring plan (deploy checkpoint pending) araharah-executor 2026-10-22 11:50:53 +08:00
  • df3b7d65c1 feat(02-03): Worker entry — webhook route + /api/session security gate + deploy plumbing (D-11, D-14, D-16, D-17) araharah-executor 2026-10-22 11:49:43 +08:00
  • b4393fbcf3 feat(02-03): strings module + text-only command surface with Malay aliases (D-01..D-05) araharah-executor 2026-10-22 11:48:50 +08:00
  • 632ae70ad2 docs(02-02): complete initData validator + TTL-only KV sessions plan araharah-executor 2026-10-22 11:44:12 +08:00
  • e9aec5833b feat(02-02): TTL-only KV sessions with rotate-on-new + PRIV-02 storage gates (D-06/D-07/D-08/D-14) araharah-executor 2026-10-22 11:43:20 +08:00
  • 54bffe728c feat(02-02): validateInitData — SubtleCrypto HMAC core with rejection classes (D-13, D-14) araharah-executor 2026-10-22 11:41:46 +08:00
  • 1f15ad202b docs(02-01): complete bot scaffold + RED initdata suite plan araharah-executor 2026-10-22 11:39:09 +08:00
  • fc5001a4eb test(02-01): hand-rolled harness + RED initdata vector suite (D-12, TDD RED) araharah-executor 2026-10-22 11:38:06 +08:00
  • c9b6ba402d feat(02-01): bot workspace scaffold with Env contract (D-09/D-10/D-11/D-15) araharah-executor 2026-10-22 11:35:54 +08:00
  • 43b7d991e4 fix(01-design-tokens-rams-foundation): WR-05 static server docroot guard ends prefix with separator araharah-executor 2026-10-22 09:39:30 +08:00
  • 5e254cb851 fix(01-design-tokens-rams-foundation): WR-04 audit spacing + typography numerics per D-13 (token scales, font-face exempt) araharah-executor 2026-10-22 09:39:16 +08:00
  • ee48e760f8 fix(01-design-tokens-rams-foundation): WR-03 audit named colors, modern color functions, text-shadow araharah-executor 2026-10-22 09:37:38 +08:00
  • 5e95741364 fix(01-design-tokens-rams-foundation): WR-02 repair familiesFromShorthand + flag literal font: shorthands araharah-executor 2026-10-22 09:36:34 +08:00
  • 689bc9ff4b fix(01-design-tokens-rams-foundation): WR-01 scope @source to mockup files + disable deprecated bare shadow/blur keys araharah-executor 2026-10-22 09:35:41 +08:00
  • 61d15c28a8 fix(01-design-tokens-rams-foundation): CR-01 drive bare rounded via deprecated --radius key (0px) araharah-executor 2026-10-22 09:34:45 +08:00
  • 67df693268 docs(01-04): finalize summary — DSGN-02 approved, plan complete (3/3) araharah-executor 2026-10-22 08:54:57 +08:00
  • 7d6845a05b fix(01-04): wire theme gallery script — repair root delegate per 01-01 contract araharah-executor 2026-10-22 08:53:22 +08:00
  • f51e7148df docs(01-04): record DSGN-02 user approval — fidelity bar + basemap direction approved araharah-executor 2026-10-22 08:52:25 +08:00
  • c3d802a646 docs(01-04): audit + capture + gallery plan summary — DSGN-02 checkpoint pending araharah-executor 2026-10-22 08:33:26 +08:00
  • b462936678 feat(01-04): Playwright capture toolchain + DSGN-02 approval gallery (D-14, D-12) araharah-executor 2026-10-22 08:31:14 +08:00
  • 0b3eebf7d0 feat(01-04): audit inline style attributes — close D-13 evasion path (GREEN) araharah-executor 2026-10-22 08:28:43 +08:00
  • 9ba73f207d test(01-04): add failing inline-style-attribute audit test (RED) araharah-executor 2026-10-22 08:28:30 +08:00
  • b39317de64 feat(01-04): automated off-token audit (GREEN) — D-13 araharah-executor 2026-10-22 08:26:57 +08:00
  • 6a7c256c62 test(01-04): add failing off-token audit tests (RED) araharah-executor 2026-10-22 08:21:27 +08:00
  • 1544b92b31 docs(01-design-tokens-rams-foundation-03): complete Rams cartography basemap plan araharah-executor 2026-10-22 08:11:33 +08:00
  • 2332779ad6 feat(01-design-tokens-rams-foundation-03): browser proof page — Rams basemap + signal-orange route placeholder at KL metro araharah-executor 2026-10-22 08:10:05 +08:00
  • 891caa1c5f feat(01-design-tokens-rams-foundation-03): Rams cartography basemap — liberty fork derived from token package araharah-executor 2026-10-22 08:05:54 +08:00
  • d345e8c1aa docs(01-design-tokens-rams-foundation-02): complete component-sheet plan araharah-executor 2026-10-22 07:54:41 +08:00
  • baab797b42 fix(01-design-tokens-rams-foundation-02): name signal-orange token in sheet doc comment araharah-executor 2026-10-22 07:54:19 +08:00
  • e95f4043b9 feat(01-design-tokens-rams-foundation-02): rendered component sheet — all mockup-derived families via token package araharah-executor 2026-10-22 07:52:56 +08:00
  • 84066fde65 feat(01-design-tokens-rams-foundation-02): component layer — Rams component classes built only from tokens araharah-executor 2026-10-22 07:50:31 +08:00
  • 95fe82b04e docs(01-design-tokens-rams-foundation-01): complete design-tokens foundation plan 01-01 araharah-executor 2026-10-22 07:39:00 +08:00
  • 0009cc47e4 docs(01-design-tokens-rams-foundation-01): supersede root DESIGN.md specifics; point README at token package araharah-executor 2026-10-22 07:37:35 +08:00
  • 2b36b37df1 feat(01-design-tokens-rams-foundation-01): Telemetry Rams token package — tokens, self-hosted fonts, v4 build araharah-executor 2026-10-22 07:37:18 +08:00
  • 8dea270bbe chore(01-design-tokens-rams-foundation-01): scaffold npm workspace + theme package araharah-executor 2026-10-22 07:33:18 +08:00
  • 506ff68976 chore(01-design-tokens-rams-foundation-01): commit design baseline — Rams docs, mockups, agent skills araharah-executor 2026-10-22 07:33:04 +08:00
  • d4ee39d08b docs(01-design-tokens-rams-foundation): resolve package.json wave conflict — sequentialize 01-03/01-04 araharah-planner 2026-10-22 02:33:48 +08:00
  • 16eb089cc3 docs(01-design-tokens-rams-foundation): create phase plan (4 plans, 3 waves) araharah-planner 2026-10-22 02:33:01 +08:00