Ty
b3380f3848
- backend/crypto.py: AES-GCM (cryptography.AESGCM); key=base64(SLAB_AES_KEY)
must be exactly 32 bytes; value_enc=base64(nonce(12)||ct); DecryptError on tamper
- backend/settings.py: get_settings (secrets->{configured:bool}, woo_base_url env
read-only, flags default false), update_settings (rejects woo_base_url SETTINGS-85,
encrypts secrets, partial plain writes)
- backend/app.py: wire GET/PUT /api/v1/settings
- frontend/src/create/settings/Settings.svelte: masked form + partial PUT
- tests: crypto roundtrip/tamper, masked GET, encrypted PUT, reject woo_base_url,
flags default, decrypt-fail->configured:false (TDD)
Verified live: secrets round-trip configured:true with valid key; woo_base_url write
rejected 400; no secret leak in GET. Gates: check_requirements + check_coverage exit 0;
pytest 13 passed. Deploy+build on ubudual5060 (never Windows).
SlabUploader
Lists one-of-a-kind wood slabs on Whidbey Wood Store.
Start at docs/README.md for goals, what already shipped, and Milestone 3.
| Artifact | File |
|---|---|
| Docs map | docs/README.md |
| Structure contract | docs/STRUCTURE.md |
| Requirements (normative) | docs/REQUIREMENTS.md |
| Milestones (ID subsets) | docs/MILESTONES.md |
| Product overview | docs/PRODUCT.md |
| Invariants and agent context | AGENTS.md |
| Milestone 1 Capture (shipped) | docs/capabilities/CAPTURE.md |
| Milestone 2 Photos (shipped) | docs/capabilities/PHOTOS.md |
| Milestone 3 Create (paused — requirements reconciliation) | docs/capabilities/CREATE.md |
| UAT practice walk | docs/UAT-PRACTICE.md |
| Hosting | deploy/ |
Owner: Ty. Store: https://www.whidbeywoodstore.com/
Repo: Ty_Tech/SlabUploader