nocal

bernardo/nocal

Fork 0

Commit Graph

Author	SHA1	Message	Date
Bernardo Magri	dd6e02cb55	feat: add PKCE OAuth boundary Introduce provider-neutral HTTP contracts and public-client authorization-code orchestration with PKCE S256, strict HTTPS and loopback validation, constant-time state checks, secure OpenSSL entropy, and single-send token exchange semantics. Add independent protocol and adversarial suites covering RFC 7636, RFC3986 encoding, callback failures, response redaction, and no-retry behavior. Concrete networking, browser/listener, token parsing, Secret Service, and Graph integration remain separate follow-up slices.	2026-07-18 11:11:28 +01:00
Bernardo Magri	787daf00dd	feat: add durable provider cache Add a private provider-neutral SQLite WAL cache with transactional migrations, retained raw payloads and tombstones, per-window opaque checkpoints, and reserved outbox/conflict tables. Verify migrations, permissions, identity invariants, concurrent access, atomic pull-page rollback, and future-schema rejection with deterministic tests. No OAuth, networking, secrets, or Graph synchronization is included yet.	2026-07-18 10:53:41 +01:00
Bernardo Magri	22c6399056	feat: initialize Nocal terminal calendar	2026-07-17 21:24:06 +01:00

Author

SHA1

Message

Date

Bernardo Magri

dd6e02cb55

feat: add PKCE OAuth boundary

Introduce provider-neutral HTTP contracts and public-client authorization-code orchestration with PKCE S256, strict HTTPS and loopback validation, constant-time state checks, secure OpenSSL entropy, and single-send token exchange semantics.

Add independent protocol and adversarial suites covering RFC 7636, RFC3986 encoding, callback failures, response redaction, and no-retry behavior. Concrete networking, browser/listener, token parsing, Secret Service, and Graph integration remain separate follow-up slices.

2026-07-18 11:11:28 +01:00

Bernardo Magri

787daf00dd

feat: add durable provider cache

Add a private provider-neutral SQLite WAL cache with transactional migrations, retained raw payloads and tombstones, per-window opaque checkpoints, and reserved outbox/conflict tables.

Verify migrations, permissions, identity invariants, concurrent access, atomic pull-page rollback, and future-schema rejection with deterministic tests. No OAuth, networking, secrets, or Graph synchronization is included yet.

2026-07-18 10:53:41 +01:00

Bernardo Magri

22c6399056

feat: initialize Nocal terminal calendar

2026-07-17 21:24:06 +01:00

3 Commits