[PR #5] [MERGED] docs: sanity-check and update all docs for sessions 6–8 #5

New issue

Closed

opened 2026-08-09 19:08:51 +02:00 by zaph0d · 0 comments

zaph0d commented

2026-08-09 19:08:51 +02:00

Owner

📋 Pull Request Information

Original PR: https://github.com/niels-emmer/pwa-maker-android/pull/5
Author: @niels-emmer
Created: 2/27/2026
Status: ✅ Merged
Merged: 2/27/2026
Merged by: @niels-emmer

Base: main ← Head: docs-update

📝 Commits (2)

81f6f38 docs: sanity-check and update all docs for sessions 6–8
473f31e docs: add AGENTS.md and CLAUDE.md for agent session bootstrapping

📊 Changes

9 files changed (+164 additions, -14 deletions)

View changed files

➕ AGENTS.md (+81 -0)
➕ CLAUDE.md (+5 -0)
📝 README.md (+3 -2)
📝 SECURITY.md (+17 -1)
📝 docs/memory/ARCHITECTURE.md (+17 -7)
📝 docs/memory/BUILD_MODEL.md (+2 -2)
📝 docs/memory/DECISIONS.md (+30 -0)
📝 docs/memory/INDEX.md (+1 -1)
📝 docs/memory/INVARIABLES.md (+8 -1)

📄 Description

Summary

Docs-only — no code changes. Addresses stale information and captures all findings from sessions 6, 7, and 8.

What changed and why

File	Changes
`README.md`	Test counts (89→100 backend, 41→43 frontend); added SVG auto-conversion to feature list
`SECURITY.md`	Dependabot alerts: enabled, monitored, triage policy documented. New Icon URL handling section: SSRF checks on icon fetches, HTTPS enforcement, SVG rasterisation details
`ARCHITECTURE.md`	Added `GET /api/token` to topology; added `token.ts` to backend structure; added `BUILD_TOKEN_SECRET` to env table; added "Icon preparation" pipeline step (SVG→PNG); renumbered steps; added `res.flush()` note
`DECISIONS.md`	ADR-010: SVG icons via resvg-js + temp HTTP server. ADR-011: `res.flush()` after every SSE write + `onerror` setTimeout race guard
`BUILD_MODEL.md`	`iconUrl`/`maskableIconUrl`: SVG auto-conversion noted, PNG preference documented
`INVARIABLES.md`	Corrected error: "Icon URLs must be same-origin" was wrong — only HTTPS is required. Added SVG icon processing invariant section
`INDEX.md`	Test count: 46+37 → 100+43

Test plan

No code changes — no tests to run
Spot-check: README features list matches current functionality
Spot-check: SECURITY.md Dependabot section is accurate

🤖 Generated with Claude Code

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/niels-emmer/pwa-maker-android/pull/5 **Author:** [@niels-emmer](https://github.com/niels-emmer) **Created:** 2/27/2026 **Status:** ✅ Merged **Merged:** 2/27/2026 **Merged by:** [@niels-emmer](https://github.com/niels-emmer) **Base:** `main` ← **Head:** `docs-update` --- ### 📝 Commits (2) - [`81f6f38`](https://github.com/niels-emmer/pwa-maker-android/commit/81f6f386046951f16a2552057d3aa43396532e60) docs: sanity-check and update all docs for sessions 6–8 - [`473f31e`](https://github.com/niels-emmer/pwa-maker-android/commit/473f31ed8cf2d1fed55d5a67c655541fd3837ca2) docs: add AGENTS.md and CLAUDE.md for agent session bootstrapping ### 📊 Changes **9 files changed** (+164 additions, -14 deletions) <details> <summary>View changed files</summary> ➕ `AGENTS.md` (+81 -0) ➕ `CLAUDE.md` (+5 -0) 📝 `README.md` (+3 -2) 📝 `SECURITY.md` (+17 -1) 📝 `docs/memory/ARCHITECTURE.md` (+17 -7) 📝 `docs/memory/BUILD_MODEL.md` (+2 -2) 📝 `docs/memory/DECISIONS.md` (+30 -0) 📝 `docs/memory/INDEX.md` (+1 -1) 📝 `docs/memory/INVARIABLES.md` (+8 -1) </details> ### 📄 Description ## Summary Docs-only — no code changes. Addresses stale information and captures all findings from sessions 6, 7, and 8. ### What changed and why | File | Changes | |---|---| | `README.md` | Test counts (89→100 backend, 41→43 frontend); added SVG auto-conversion to feature list | | `SECURITY.md` | Dependabot alerts: enabled, monitored, triage policy documented. New **Icon URL handling** section: SSRF checks on icon fetches, HTTPS enforcement, SVG rasterisation details | | `ARCHITECTURE.md` | Added `GET /api/token` to topology; added `token.ts` to backend structure; added `BUILD_TOKEN_SECRET` to env table; added "Icon preparation" pipeline step (SVG→PNG); renumbered steps; added `res.flush()` note | | `DECISIONS.md` | **ADR-010**: SVG icons via resvg-js + temp HTTP server. **ADR-011**: `res.flush()` after every SSE write + `onerror` setTimeout race guard | | `BUILD_MODEL.md` | `iconUrl`/`maskableIconUrl`: SVG auto-conversion noted, PNG preference documented | | `INVARIABLES.md` | **Corrected error**: "Icon URLs must be same-origin" was wrong — only HTTPS is required. Added **SVG icon processing** invariant section | | `INDEX.md` | Test count: 46+37 → 100+43 | ## Test plan - [ ] No code changes — no tests to run - [ ] Spot-check: README features list matches current functionality - [ ] Spot-check: SECURITY.md Dependabot section is accurate 🤖 Generated with [Claude Code](https://claude.com/claude-code) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

zaph0d

2026-08-09 19:08:51 +02:00

closed this issue
added the
pull-request
label

No labels

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

github-mirrors/pwa-maker-android#5

No description provided.

Rows
Columns