giles 8e0f06aa28 H1: HMAC-gate internal endpoints /ticket /order /person (TDD) ...

Failing tests first (4 red: unsigned POSTs returned 200 and minted objects), then the gate:
host/blog--int-verify? checks x-int-sig = sess-sig(fed-secret, request TARGET) (params live in the
query, body is empty); host/blog--protect-internal wraps the three routes → 403 unsigned. Secret
unset = open (dev/tests). Callers (events→shop /ticket + /order, shop→identity /person) sign via
host/blog--int-headers. Closes the live capacity-bypass (anyone could mint tickets directly).

blog suite 225/225 (218 + 7 new).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-03 10:07:40 +00:00

..

playwright

host: block-editor card-type <select> options are direct children (populate on boosted nav)

2026-07-01 09:06:57 +00:00

sx

host: load kg-cards components so imported Ghost posts render fully

2026-06-30 15:25:01 +00:00

tests

H1: HMAC-gate internal endpoints /ticket /order /person (TDD)

2026-07-03 10:07:40 +00:00

auth.sx

host: guarded route via boost → SX-Redirect (full nav to /login), not a #content-clobbering 303

2026-07-01 06:55:32 +00:00

behavior.sx

host P1: types DECLARE behavior, runner DERIVED (LIVE-VERIFIED)

2026-07-02 16:34:39 +00:00

blog.sx

H1: HMAC-gate internal endpoints /ticket /order /person (TDD)

2026-07-03 10:07:40 +00:00

compose.sx

host: polish — a third fold domain (deps) + a live execute-fold demo (/workflow-demo)

2026-07-01 05:16:56 +00:00

conformance.sh

wire lib/events capacity-safe booking under the cinema buy path (first subsystem integration)

2026-07-03 09:12:36 +00:00

execute.sx

host: factor the shared composition CORE — one fold, N domains (composition step 8)

2026-06-30 23:53:56 +00:00

feed.sx

host: SX-native wire — reads + write bodies are text/sx, JSON CRUD deleted

2026-06-30 11:07:30 +00:00

flows.sx

host RA: the Erlang durable runner adapter — built + tested (module + integration)

2026-07-02 16:20:36 +00:00

handler.sx

host: SX-native wire — reads + write bodies are text/sx, JSON CRUD deleted

2026-06-30 11:07:30 +00:00

htmlsx.sx

host: SX-native HTML→SX converter (the radar migrator) + first-class HTML import

2026-07-01 15:32:06 +00:00

ledger.sx

host: blog published-post read endpoint GET /<slug>/ -> HTML, 156/156

2026-06-19 18:08:12 +00:00

live-check.sh

tooling+plan: harness SX_SERVING_JIT=1 fix, conformance timeout bump, specialised editors

2026-06-30 12:18:34 +00:00

middleware.sx

host: Phase 2 — middleware (auth+ACL+error) + guarded POST /feed, 43/43

2026-06-07 19:48:18 +00:00

otel.sx

otel: reliable bar tooltips (<title> inside <rect>, label pointer-events:none)

2026-07-02 11:56:34 +00:00

page.sx

host: Phase 5.1 — interactive SX-page render from a handler, 181/181

2026-06-19 20:11:49 +00:00

ra.sx

RA-live: durable business logic in production — host drives the kernel service (LIVE)

2026-07-02 19:31:33 +00:00

relations.sx

host: SX-native wire — reads + write bodies are text/sx, JSON CRUD deleted

2026-06-30 11:07:30 +00:00

router.sx

otel P3: auto-instrument handlers at the make-app seam

2026-07-01 18:20:46 +00:00

serve.sh

wire lib/events capacity-safe booking under the cinema buy path (first subsystem integration)

2026-07-03 09:12:36 +00:00

server.sx

host: live writes via signed sessions + kernel multi-Set-Cookie (193/193)

2026-06-25 21:51:41 +00:00

session.sx

host: durable lazy sessions — logins survive a restart

2026-06-28 16:37:26 +00:00

static.sx

host: extract the relate picker into a content-addressed ~relate-picker component

2026-06-29 15:17:30 +00:00

sxtp.sx

sxtp: patch + signals primitives (Datastar-borrowed)

2026-06-30 15:22:37 +00:00

ta.sx

cross-domain slice 1: events as a fed-sx peer + allocate-a-post-to-a-calendar (LIVE)

2026-07-02 20:25:37 +00:00

warm-conf.sh

host: warm-conf.sh — add eval/reload modes (the profiler that found the perf bug)

2026-06-30 23:55:20 +00:00