7 Commits

Include renames

Author	SHA1	Message	Date
implementer	345ceccfad	feat: HOST validated at the adapter boundary and controls the actual bind interface (E00-S04-T04) ... The environment adapter now resolves HOST through resolveHost, validating it at the adapter boundary as a hostname (RFC 1123) or IP address (IPv4/IPv6, node:net isIP); an invalid HOST throws a field-specific ConfigStartupError naming host, so arbitrary env content is never used for binding or echoed verbatim into the startup log (issue acceptance criterion, resolving security review finding SEC-3). The server passes config.host to server.listen(config.port, config.host, ...), so a configured HOST binds exactly that interface and the startup log never claims a bind the process does not enforce (resolving SEC-2).	2026-08-30 04:41:53 +00:00
implementer	1214a33adb	feat: server loads all settings through the config environment adapter (E00-S04-T04)	2026-08-30 04:17:19 +00:00
implementer	6458013306	feat: secrets redact from logs via config redaction layer and server redacting logger (E00-S04-T03)	2026-08-30 03:52:52 +00:00
implementer	0ce790fca3	feat: missing required setting fails startup with a field-specific error (E00-S04-T02) ... - packages/config: add src/startup.ts exposing assertValidConfig (builds on the T01 TypeBox/Ajv schema) and the field-specific startup errors (MissingRequiredSettingError names the missing field; ConfigStartupError names each violating field); re-export from the package boundary - apps/server: validate the startup configuration (including the required EPPP_SESSION_SECRET) before the server binds, so a missing required setting crashes the process at startup naming the field; depends on @personal-blog/config - compose.yaml: provide EPPP_SESSION_SECRET for the app service (dev-only >= 32 char default; override via .env / shell) - Dockerfile: ship the compiled packages/config in the image (build source + runtime dist), matching the server's new workspace dependency - pnpm-lock.yaml: apps/server importer gains @personal-blog/config	2026-08-30 03:00:40 +00:00
implementer	ebdee5daa5	feat: app reports ready only after the startup migration run (E00-S03-T06)	2026-08-30 01:56:19 +00:00
implementer	9c049ce6b5	feat: app health endpoint succeeds (E00-S02-T03)	2026-08-29 00:21:34 +00:00
implementer	4e527f9267	feat: add strict tsconfig.base.json shared by all packages (E00-S01-T02) ... Adds a strict base TypeScript config at the workspace root (ES2023 / NodeNext / strict family incl. noUncheckedIndexedAccess, exactOptionalPropertyTypes, noImplicitOverride, useUnknownInCatchVariables, verbatimModuleSyntax per Engineering-Standards) and gives every workspace package (apps/server, packages/core, extensions/example) a tsconfig.json that extends it. Each package gets a minimal src/index.ts placeholder so it compiles under the base config (CJS-safe `export {}` until ESM boundaries land in T03). Verified: every package typechecks and emits (js + d.ts + sourcemap) with the pinned TypeScript 6.0.3; a strictness probe confirms the strict family fires. Closes #155	2026-08-28 00:00:51 +00:00