dzenda/os

Fork 0

T2: i18n (en/cs) #2

Merged

dzenda merged 113 commits from t2-i18n into t1-scaffold

2026-11-14 17:51:08 +01:00

dzenda commented

2026-11-14 12:51:30 +01:00

Owner

T2 — i18n (en/cs)

Stacked on #1 (t1-scaffold). Merge #1 first; this PR's base is t1-scaffold.

What

src/i18n/en.ts is the source catalog. cs.ts is satisfies Messages, so a missing or extra key is a type error. A test also checks that keys and {placeholder}s match.
t(key, params) with typed dotted keys (MessageKey), {name} interpolation, and fallback to English, then to the key. Lookup uses Object.hasOwn, so prototype paths can't resolve.
Locale resolution: locale cookie → Accept-Language (q-values, region fallback cs-CZ→cs, q=0 excluded, *→default) → en.
Server functions: getLocale (root loader, staleTime: ∞) and setLocale (validated against LOCALES; cookie is HttpOnly; SameSite=Lax; Path=/, 1 year, Secure when the request is https).
<html lang> is set during SSR. I18nProvider/useI18n() context. LanguageSwitch in the root shell calls router.invalidate() after switching.
No i18n library dependency.

Verified

bun run lint && bun run typecheck && bun run test (17 tests).
bun run dev + curl: default lang="en"; Accept-Language: cs-CZ → lang="cs" with Czech text; the cookie locale=en overrides Accept-Language: cs.
Browser: clicking Čeština/English re-renders the client, and a later SSR request respects the cookie.

Astra review (gpt-6-astra via `codex review`)

No actionable issues reported. Nothing to fix or dismiss.

🤖 Generated with Claude Code

## T2 — i18n (en/cs) **Stacked on #1 (`t1-scaffold`)**. Merge #1 first; this PR's base is `t1-scaffold`. ### What - `src/i18n/en.ts` is the source catalog. `cs.ts` is `satisfies Messages`, so a missing or extra key is a type error. A test also checks that keys and `{placeholder}`s match. - `t(key, params)` with typed dotted keys (`MessageKey`), `{name}` interpolation, and fallback to English, then to the key. Lookup uses `Object.hasOwn`, so prototype paths can't resolve. - Locale resolution: `locale` cookie → `Accept-Language` (q-values, region fallback `cs-CZ`→`cs`, `q=0` excluded, `*`→default) → `en`. - Server functions: `getLocale` (root loader, `staleTime: ∞`) and `setLocale` (validated against `LOCALES`; cookie is `HttpOnly; SameSite=Lax; Path=/`, 1 year, `Secure` when the request is https). - `<html lang>` is set during SSR. `I18nProvider`/`useI18n()` context. `LanguageSwitch` in the root shell calls `router.invalidate()` after switching. - No i18n library dependency. ### Verified - `bun run lint && bun run typecheck && bun run test` (17 tests). - `bun run dev` + curl: default `lang="en"`; `Accept-Language: cs-CZ` → `lang="cs"` with Czech text; the cookie `locale=en` overrides `Accept-Language: cs`. - Browser: clicking Čeština/English re-renders the client, and a later SSR request respects the cookie. ### Astra review (gpt-6-astra via `codex review`) No actionable issues reported. Nothing to fix or dismiss. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

dzenda added 1 commit

2026-11-14 12:51:30 +01:00

T2: i18n (en/cs) with typed catalogs and locale cookie 41e369555a

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

dzenda added 1 commit

2026-11-14 12:51:35 +01:00

PLAN: link T2 PR f2e9542703

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

dzenda referenced this pull request

2026-11-14 12:56:08 +01:00

T3: D1 + Drizzle schema and migrations #3

dzenda referenced this pull request

2026-11-14 13:21:46 +01:00

T4: AES-GCM crypto + encrypted token store #4

dzenda referenced this pull request

2026-11-14 13:27:15 +01:00

T5: FIT OAuth client + docs/fit-auth.md #5

dzenda referenced this pull request

2026-11-14 13:38:52 +01:00

T6: Better Auth login via FIT OAuth #6

dzenda added 111 commits

2026-11-14 17:51:01 +01:00

T3: D1 + Drizzle schema, migrations and db:migrate e633b0afff

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T3 PR d40e3be09e

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T4: AES-GCM crypto with key rotation and encrypted token store 05ac686bc2

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T4: cross-isolate refresh lease + token_version CAS (Astra review) 3d0eadfd0a

Refreshes take a short D1 lease before spending a single-use refresh token, and
writes compare-and-swap on token_version, which re-encryption never bumps.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T4: refresh deadline, lease owner id, replaced-row detection (Astra review 2) 5dca888441

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T4: classify abort-aware refresher rejections as timeouts (Astra review 3) 5e23174089

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T4 PR 7b5dde6625

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T5: FIT OAuth client (authorize/token/refresh/check_token, PKCE/state) + docs 36f97dbd83

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T5: tokenize scopes, full form-encoding for Basic auth, require bearer + client_id (Astra review) 18c335cd72

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T5 PR fe1f7a88ab

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T6: Better Auth login via FIT OAuth, tokens encrypted in connections 4f238b6482

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T6: reject client scopes, forward session-renewal cookies, enforce allowlist on existing sessions (Astra review) 543deaf906

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T6 PR, T7 blocked on browser login 5771cd1b51

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T8: typed fit.* API registry (defineFn, search, describe/JSON schema, call, safe errors) + fit.status 838c93de89

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T8: value-free validation messages (Astra review) 10c6aeb490

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T8 PR 3f1809a90a

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T9: Usermap provider (fit.me, fit.people.lookup) 72e0df8c77

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Never follow redirects with credentials; keep body-read timeouts (Astra review) b48c4318c1

Applies to Usermap calls, the FIT token/check_token requests and the login profile lookup.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T9 PR 473aa7096a

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T10: Sirius provider (fit.sirius.events, fit.sirius.icalUrl) f8e640cbaa

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T10: accurate truncation flag (Astra review) 47e9fdd964

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T10 PR 1c94efc4db

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T11: Grades provider (fit.grades.courses, fit.grades.course) + docs/apis.md 6feb87725e

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T11 PR 8bb856944c

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T12: Marast provider (fit.marast.assignments, fit.marast.courses) + API exploration notes 75df052695

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T12: strict allowlist for Marast pass-through fields; fetch /courses once (Astra review) 616341d08f

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T12 PR caf4782d64

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T13: aggregates fit.today and fit.deadlines with per-source warnings 8decfb96ca

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T13: include closed quizzes in date ranges; surface Sirius truncation as a warning (Astra review) f448cb5c6f

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T13 PR 5a73d258c5

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T14: /mcp behind workers-oauth-provider (DCR, consent, grants bound to our users) 26fdd97098

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T14: harden consent (user binding, form-action CSP, error redirects) and safeNext normalisation (Astra review) c53f54b39c

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T14 PR a916b0f9fd

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T15: MCP tools search/describe/read/call (read-only) + mcp:smoke script and docs/mcp.md 51b1db4402

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

mcp:smoke: treat transport/JSON-RPC errors as failures (Astra review) 433d5b4d4f

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T15 PR; mark T16 blocked c1934ced9a

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T17: GitLab connect (OAuth + PKCE + refresh, read-only PAT fallback) and minimal /connectors page cf87789167

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T17 PR 4934dba14c

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T7: fixture recorder + fixes from live verification 12667365d7

- fixtures:record: reads the encrypted token from local D1, GET-only, never refreshes,
  scrubs PII into git-ignored test/fixtures/live/, prints shapes only
- Marast: FIT token goes in Api-Key (Bearer is 401); only_open is 401 → filter locally
- Usermap: fields may be null (preferredEmail) → nullish schemas
- Grades: precise error for missing OAuth app resource; docs on scopes vs. resources

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T7: scrub kosPersonId, no redirects on check_token, restore Marast server filters (verified with Api-Key), report truncation (Astra review) d3b09e2db0

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T7 PR bc515090a9

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T18: courses provider (list/tree/read/search/cloneInfo) + courses:// in read a0eb714104

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T18: bounded streaming reads, UTF-8 byte limits, explicit truncation, report inaccessible repos in search (Astra review) af1e3eca43

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T18: tree 404 is an error; explicit binary MIME list (Astra review 2) 7ce49df718

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T18 PR 63ce8dd078

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T19: app shell (header/nav/user menu/footer), landing + overview, login polish, 404 page (en/cs) 895d574eba

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T19: skip link above header, AA contrast for small text in dark mode (Astra review) 77601dd309

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T19 PR 3ce0303e93

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T20: connectors screen (service availability, reconnect/disconnect, GitLab, MCP clients + revoke) 5859660f24

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T20: paginate MCP grants; show load errors instead of 'none' (Astra review) 6532991246

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T20 PR 6c289a81ea

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T21: /assistants page with MCP setup per client (ChatGPT, Claude, Claude Code, Cursor, VS Code, generic) b91af2721b

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T21: current ChatGPT/Claude flows (verified against their docs), shell-quoted Claude Code URL, keyboard-scrollable snippets (Astra review) 7f2f32a240

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T21 PR 517647730b

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T22: calendar week view (Sirius + Marast deadlines overlay, on-demand iCal link) e929ff7a56

Also fixes a production bug found while smoke-testing: createFnContext stored the global
fetch on the context object, so ctx.fetch(...) threw "Illegal invocation" in workerd. That
broke every registry call in the Worker (including all MCP tool calls); Node tests could
not see it. Regression test emulates workerd's this-check.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T22: iCal network errors, event names, localized warnings, truncation warning (Astra review) 14b98ba848

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T22 PR e001b07518

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T23: account page with disconnect everything and hard account deletion a3fb3da678

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T23: exhaustive grant revocation, orphan-grant cleanup on approval race and MCP use; fix sqlite test proxy for empty get (Astra review) f20ebfe2f6

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T23: always-visible Account nav link (mobile) (Astra review 2) 3337e3aef2

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T23 PR 1ffd5deceb

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T24: self-hosting guide + bun run setup (local .dev.vars/keys/migrations, resource ids, printed deploy checklist) 6eeea21a26

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T24: verbatim .dev.vars preservation (dotenv syntax), chmod 600 existing files, structural binding lookup (Astra review) 7352f7ce98

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T24 PR f55b8278c0

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T25: opt-in PostHog page views proxied by the Worker (no PII/IP), baseline security headers 81511cb689

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T25: docs/security.md (threat model + controls), PostHog in config reference 7613ff2025

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: add T26 redesign (requested) 8864407c84

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T25: fixes from the whole-repo security audit 169904af7b

- ALLOWED_USERS enforced for MCP too (shared policy); excluded users' grants revoked on use
- telemetry: streaming 512-byte cap before parsing
- POST /oauth/register rate-limited per IP and instance-wide (Workers rate-limit bindings)
- FIT API bodies capped at 2 MB (streaming); Grades tree walk iterative and bounded
- readBounded moved to src/lib/bounded.ts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T25: expose Grades truncation (Astra review) 3cd38e9ab0

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T26 WIP: theme tokens (FIT light / neutral dark), preferences control, new shell and landing 22b9151794

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T26 WIP: split sign-in screen (requested), consent page in new palette 5bd4629d85

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T25 PR 7ccc800929

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T26 round 1: one-row header + avatar menu, mono wordmark, overview dashboard, calendar readability, assistant tabs, connections pills, shared container 1824f69f16

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T26 round 2: lucide icons, mobile bottom tab bar, single-surface chronological calendar, grouped overview with urgency chips, connections aside, collapsible danger rows cde637e069

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T26 round 3: rotating service-logo orbit on sign-in, real assistant logos, static wordmark, neutral dark links, adaptive calendar columns, overview summary/Next badge/source icons, account preferences fb743e9e2e

Logos: FIT service marks vendored in public/services (see README there); assistant marks
from @lobehub/icons (MIT), simple-icons (CC0) and devicon (MIT).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T26 round 4: scroll-free desktop sign-in (orbit beside the sign-in block), real logo tiles on connections, equal calendar columns with legend, account layout, next-class emphasis, quieter destructive actions, softer dark warnings cff9e09866

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T26: shared theme state across Preferences controls; surface partial deadline data on the overview (Astra review) 96e7974e83

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

PLAN: link T26 PR f8b4b1191e

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T26 follow-up: per-service MCP switches with scope details, Courses as a service, FIT/Usermap logos, sign-in copy, corner orbit on mobile, compact assistants page, no overview status strip ffee1edb55

- service_settings table (migration 0002); MCP calls to a switched-off service fail with
  service_disabled, aggregates skip it with a warning, fit.status lists it
- setServiceEnabledFn: same-origin + session only

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

T26 follow-up: calendar Subscribe popover; enforce Sirius switch in course enrollment lookup; one in-flight save per service switch (Astra review) 5a8517951a

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Sign-in: theme/language switches in the footer, 80svh sign-in area on mobile 6aca8d0664

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Fix horizontal overflow on mobile (overview grid columns, account theme labels); Czech month casing 2384276292

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Calendar: weekdays only + Upcoming list; Sirius-style event details and all-parallels overlay (fit.sirius.courseEvents); assistants URL beside title; full-width connections b3827e1052

- fit.sirius.courseEvents: every parallel of a course (room, teachers, capacity/occupied),
  shared paging helper with fit.sirius.events; respects the Sirius MCP switch
- getCourseWeek server fn for the calendar overlay; upcoming deadlines (60 days) beside the week

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Calendar: ignore superseded parallels responses, show weekend parallels, keep event status in the accessible name (Astra review) e38e24e2a9

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Calendar: Upcoming panel matches the week height with an inner scroll; class details as an overlay popover (no layout shift) 92d2341a09

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Calendar: desktop time grid (hours on the side, classes by time, overlapping classes side by side via lane layout); assistants: setup prompt for agents + copyable MCP URL chips 64f0085f1a

- layoutLanes/pragueMinutes in src/lib/calendar.ts (tested)
- shared EventDetails popover; agenda list stays on mobile
- agentSetupPrompt in src/mcp/setup.ts (tested)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Calendar grid: day-local DST-safe intervals clipped at midnight, pack by drawn extent, day names for screen readers; setup prompt: manual-copy fallback (Astra review) 635acc65c1

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Pre-deploy security review fixes f9cb7c4659

- Referrer-Policy: same-origin (no-referrer made browsers send Origin: null on our form POSTs,
  so every management form was rejected with 403); shared isSameOriginRequest accepts
  Origin: null only with Sec-Fetch-Site: same-origin
- No COOP on OAuth/consent/login routes (popup-based web MCP clients keep window.opener)
- fit.sirius.icalUrl is websiteOnly: excluded from the MCP registry (URL embeds a credential)
- docs: telemetry wording (operator-enabled, consent advice), CSRF/COOP/credential notes

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge pull request 'T26: Redesign (FIT light / neutral dark themes, sign-in, overview, icons)' (#25 ) from t26-redesign into t25-posthog-security 01f60c66a1