Resolve #330: interactive MistDemo (web toggle + native app refresh)#332
Conversation
…kenCommand AuthTokenCommand now only owns lifecycle and channel plumbing. Route construction moves to a reusable AuthTokenServer; loopback validation moves to a standalone LoopbackAuthority helper. Both gain dedicated unit + router-level tests via HummingbirdTesting. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
The CloudKit auth-flow page moves out of four Swift raw-string files and into a single auth-token-index.html resource in MistDemoKit's bundle. AuthTokenIndexHTML becomes a thin Bundle.module loader. The original CodeSign concern doesn't apply: MistDemoApp (the iOS target) has no dependency on MistDemoKit, so the resource never ships in an iOS app bundle. The mistdemo CLI executable that does consume MistDemoKit is macOS / Linux only. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Codecov Report❌ Patch coverage is Additional details and impacted files@@ Coverage Diff @@
## v1.0.0-beta.1 #332 +/- ##
=================================================
+ Coverage 69.46% 70.53% +1.06%
=================================================
Files 529 551 +22
Lines 14457 15426 +969
=================================================
+ Hits 10042 10880 +838
- Misses 4415 4546 +131
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
- AuthTokenIndexHTML drops the guard-let-else pyramid in favor of a single try! / force-unwrap; the resource is shipped in MistDemoKit's bundle so failure here is a build-system bug, not a runtime condition. (review nit r3225504184) - AuthTokenCommandTests+Timeout's "throws on timeout" duplicates AsyncHelpersTests+Timeout's coverage but lacked its withKnownIssue gate. Under visionOS-simulator CI load the operation's single 1s Task.sleep can outrun the polling timeout's many short sleeps, so the test recorded "Should have timed out" instead of catching AsyncTimeoutError. Mirror the AsyncHelpers gate. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
CLAUDE.mdThis file provides guidance to Claude Code (claude.ai/code) when working with code in this repository. Project OverviewMistKit is a Swift Package for Server-Side and Command-Line Access to CloudKit Web Services. It targets cross-platform Swift (including Linux, WASI, and Windows) using modern Swift concurrency and code generated from Apple's CloudKit Web Services OpenAPI specification. Key Project Context
Development CommandsSwift Package Commands# Build the package
swift build
# Run tests
swift test
# Run tests with coverage
swift test --enable-code-coverage
# Build for release
swift build -c release
# Clean build artifacts
swift package clean
# Update dependencies
swift package update
# Resolve package dependencies
swift package resolve
# Generate Xcode project (if needed)
swift package generate-xcodeprojOpenAPI Code Generation# Generate OpenAPI client code (run this after modifying openapi.yaml)
./Scripts/generate-openapi.sh
# Or manually with swift-openapi-generator
swift run swift-openapi-generator generate \
--output-directory Sources/MistKit/Generated \
--config openapi-generator-config.yaml \
openapi.yamlDevelopment Workflow# Run specific test
swift test --filter TestClassName.testMethodName
# Run tests in parallel
swift test --parallel
# Show test output
swift test --verbose
# Format + lint
# swift-format, swiftlint, periphery, and swift-openapi-generator are pinned
# in mise.toml — do NOT invoke them from PATH directly. Run them THROUGH mise:
mise exec -- swift-format -i -r Sources/ Tests/
mise exec -- swiftlint # lint
mise exec -- swiftlint --fix # auto-fix
# Or run the full lint pipeline (build + swiftlint + header.sh + periphery):
./Scripts/lint.shMistDemo Commands# MistDemo is located in Examples/MistDemo and must be run from there
cd Examples/MistDemo
# Build MistDemo
swift build
# Run MistDemo commands
swift run mistdemo --help
swift run mistdemo auth-token
swift run mistdemo current-user
swift run mistdemo query
swift run mistdemo lookup
swift run mistdemo create
swift run mistdemo update
swift run mistdemo modify
swift run mistdemo delete
swift run mistdemo upload-asset
swift run mistdemo lookup-zones
swift run mistdemo fetch-changes
swift run mistdemo demo-in-filter
swift run mistdemo demo-errors
swift run mistdemo test-integration
swift run mistdemo test-private
# Run with specific configuration
swift run mistdemo --config-file ~/.mistdemo/config.json queryArchitecture ConsiderationsFieldValue Type ArchitectureMistKit uses separate types for requests and responses at the OpenAPI schema level to accurately model CloudKit's asymmetric API behavior: Type Layers:
Why Separate Request/Response Types?
Generated Types:
Conversion:
Modern Swift Features to Utilize
Package StructureCloudKitService Operations
Sync/Change Operations:
User-Identity Operations (public DB + web-auth required):
In MistDemo, integration runs targeting these endpoints use Result Types (Sources/MistKit/Service/):
Protocols:
Key Design Principles
LoggingMistKit uses swift-log for cross-platform logging support, enabling usage on macOS, Linux, Windows, and other platforms. Key Logging Components:
Logging Subsystems: MistKitLogger.api // CloudKit API operations
MistKitLogger.auth // Authentication and token management
MistKitLogger.network // Network operationsHelper Methods: MistKitLogger.logError(_:logger:shouldRedact:) // Error level
MistKitLogger.logWarning(_:logger:shouldRedact:) // Warning level
MistKitLogger.logInfo(_:logger:shouldRedact:) // Info level
MistKitLogger.logDebug(_:logger:shouldRedact:) // Debug levelPrivacy Controls:
Asset Upload Transport DesignWhen providing a custom
Why URLSession instead of ClientTransport? Asset uploads use
Design:
Implementation Details:
Future Consideration:
FilterBuilder Extensions
IN/NOT_IN serialization: Uses CloudKit Web Services Integration
Testing Strategy
Asset Upload TestingIntegration Test Requirements:
Test Files:
MistDemo Integration Test Runner
Run via Important Implementation Notes
OpenAPI-Driven DevelopmentThe Swift package uses Apple's swift-openapi-generator to create type-safe client code from the OpenAPI specification. Generated code is placed in
The
Key endpoints documented in the OpenAPI spec:
Reference DocumentationApple's official CloudKit documentation is available in When to Consult Each Documentwebservices.md (289 KB) - CloudKit Web Services REST API
cloudkitjs.md (188 KB) - CloudKit JS Framework
testing-enablinganddisabling.md (126 KB) - Swift Testing Framework
swift-openapi-generator.md (235 KB) - Swift OpenAPI Generator Documentation
See MistDemo Documentation
CloudKit Schema Languagecloudkit-schema-reference.md - CloudKit Schema Language Quick Reference
sosumi-cloudkit-schema-source.md - Apple's Official Schema Language Documentation
Comprehensive Schema GuidesFor detailed schema workflows and integration:
Additional Notes
|
Review: PR #332 — Extract auth-token server scaffolding + resource bundleOverall this is a solid refactor. The architecture is cleaner and testability is improved. What's good
Minor observationsLoopbackAuthority on non-Hummingbird platforms: The utility lives in Sources/MistDemoKit/Utilities/ outside a #if canImport(Hummingbird) guard. Verify this compiles cleanly on WASI/platforms where Hummingbird is unavailable, or add a compile guard if it is only ever used by Hummingbird-gated code. AuthTokenIndexHTML.content error path: Using preconditionFailure for a missing bundle resource is fine for a demo tool, but a comment clarifying the intentional crash-vs-silent-failure choice would help future readers. Import access in test files: The new test files import without internal qualifiers, inconsistent with the source files in this PR. Non-critical since tests are module-internal, but consistency is nice. These are all minor — the refactoring is well-executed. Note: there is also a stale comment above this one that was posted by mistake — it can be ignored. |
Review: PR #332 — Extract auth-token server scaffolding + resource bundleSummary: Phase 1 of #330. Two issues resolved (#288, #289). Routes extracted from What's well doneArchitecture
Testing
Resource bundle
Issues / suggestions1.
2. All four 3.
4. let host = authority.split(separator: ":", maxSplits: 1).first
return host.map(String.init) ?? authorityThe only time 5. The struct stores the enum's string representation. Make sure the conversion from 6. For a loopback demo this is acceptable and useful for debugging. Worth a note in the README security section if this surface ever expands beyond loopback. SummaryThe refactoring is clean, well-tested, and directionally correct. The main item worth resolving before merge is issue #1 (HummingbirdTesting in the executable target). The rest are minor observations or documentation suggestions. High-quality work overall. Generated with Claude Code |
…d/Modified (#336) * Rework mistdemo web UI to table+form; sortable Created/Modified Iterates on top of #329's CloudKit JS mode toggle. The single-mode JSON- textarea CRUD grid is replaced by a Notes table beside a Title/Index form: clicking a row loads it for edit, per-row Delete buttons, "New" to clear. Auto-refreshes after every mutation and after mode switches, so the same notes can be observed fetched through either backend. WebUI: - Two-column responsive layout: Notes table left, edit/create form right; stacks to one column below 820px. - Created and Modified columns formatted with the locale's dateStyle:short/timeStyle:short (e.g., "5/12/26, 4:30 PM"); full ISO is in each cell's tooltip. - Clickable Created/Modified column headers cycle unsorted → ascending → descending. Sort forwards to both backends: MistKit body `sortBy:[{field, ascending}]`, CloudKit JS `sortBy:[{fieldName, ascending}]`. Default is no sort, so the demo still lists records before the new schema deploys. - Record name is removed as a column and surfaced as a row tooltip. Note schema: - Drop custom `createdAt` (TIMESTAMP) and `modified` (INT64) — they duplicated CloudKit's system metadata. CKRecord.creationDate / .modificationDate and the Web Services `created.timestamp` / `modified.timestamp` cover the same information without manual bookkeeping. Schema, native Note model, RecordDetailView, QueryView, NativeCloudKitService, integration phases, README, and the CLI query examples are updated. - Add `___createTime` and `___modTime` to the schema with QUERYABLE SORTABLE so the sort feature actually works against the live container (system fields default to non-sortable; the schema must explicitly opt them in). Server: - New WebJSON.encoder()/.decoder() with .millisecondsSince1970 date strategy. The browser receives created/modified timestamps as plain epoch-millis numbers, matching CloudKit JS's Date shape. - WebRequests.Update + .Delete grow optional `recordChangeTag` — the browser holds it from the last query, so MistKit-mode update/delete no longer need a server-side fetch round-trip. Fixes CloudKit's `BadRequestException: missing required field 'recordChangeTag'`. - WebRequests.Create + .Update.fields are `[String: FieldValue]` decoded through MistKit's FieldValue Codable (which accepts raw JSON primitives — string/int/double). Fixes the 400 thrown when the form sent `"index": 5` (a JSON number) against the prior `[String: String]` type. - WebRequests.Query gains `sortBy: [QuerySortField]?`; WebBackend takes the request-shape sort directly (no MistKit-internal type leakage). CloudKitService extension is the only site that knows about MistKit's QuerySort. WebCommand: - Catch AsyncTimeoutError.cancelled so Ctrl+C is a normal shutdown rather than a top-level fatal error. Tests: - WebServerTests+QuerySort — sort forwarding + nil default. - Updated CRUD tests cover recordChangeTag forwarding (update + delete), mixed-type fields (int + double in create), and absent recordChangeTag tolerance on update. - MockBackend.QueryCall.sortBy captures the request-shape sort; flatten() handles int64/double for assertion. The new SORTABLE system fields in schema.ckdb need to be deployed to the live CloudKit container before sort works end-to-end. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * Address PR #336 review: route table-Delete status; tidy comments/tests - index.html: deleteNote(note, statusEl = tableStatusEl) so per-row Delete feedback lands above the table; the form panel's Delete passes formStatusEl explicitly. Removes a dead recordType fallback reachable only if normalizeRecords() dropped recordType — which it doesn't. Adds a comment that per-row Delete intentionally skips confirm(); the raw response panel makes accidents visible. - WebJSON.swift: removes unused decoder() (FieldValue's own Codable handles request-side dates; Hummingbird's request.decode runs the framework decoder). Encoder remains as the singular response-side contract; docstring updated accordingly. - WebRequests.swift: doc comment on QuerySortField.field flagging that CloudKit JS calls the same concept `fieldName` and the browser maps between them. - MockBackend.swift: comment on flatten()'s default case explaining the intentional drop of asset/date/reference/location/list/bytes — tests needing those should inspect the FieldValue directly. - WebJSONTests.swift (new): locks the encoder's epoch-millis contract with a round-trip test. The browser's `toDate(value)` in index.html depends on receiving plain millis numbers. Skipped from the review with reasoning preserved in the plan file (/Users/leo/.claude/plans/async-wibbling-pearl.md): - server-side recordChangeTag guard (CloudKit's 400 is already clear, browser is the only realistic caller) - generic CancellationError catch in WebCommand (the explicit AsyncTimeoutError.cancelled is more meaningful) - sort response with timestamps test (encoder round-trip covers the same contract more directly) - schema.ckdb trailing blank line (was already present pre-PR) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* Resolve #275 (web side): public/private database picker Adds a database picker to the long-running `mistdemo web` demo so the mode toggle's four profiles can be exercised side-by-side: - MistKit + private → API token + browser-captured web-auth token - MistKit + public → server-to-server signing (CLOUDKIT_KEY_ID + CLOUDKIT_PRIVATE_KEY[_PATH]) - CloudKit JS + private → API token + web-auth (shared with MistKit) - CloudKit JS + public → API token only (browser → CloudKit directly) WebConfig now accepts optional key-id / private-key inputs and computes `publicDatabaseAvailable`. WebBackendFactory.live builds the CloudKitService from `Credentials` so a single service can route operations to either database based on the request's `database` field. The `/api/config` endpoint advertises `publicDatabaseAvailable` so the UI disables the "MistKit + Public" option when the server isn't holding S2S credentials. CloudKit-JS-mode requests pick `container.publicCloudDatabase` vs `privateCloudDatabase` based on the toggle. Unknown database values return 400 rather than silently defaulting. The app side of #275 is intentionally not addressed here; it's absorbed by #328 (replace NativeCloudKitService with the CloudKit framework). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * WebUI: loading states, post-create delay, "You" badge, default sort Four UX papercuts surfaced in first hands-on use of the new public/private database picker: - Switching databases triggered a query with no feedback while the network round-trip was in flight. queryNotes now sets a `.status.loading` message ("Loading <db> via <mode>") and disables refresh/db/mode/save/ delete buttons for the duration; a finally block re-enables them and re-runs refreshDatabasePicker so the public-availability gate wins. - Auto-refresh after Create raced CloudKit's eventual consistency on Public — the new record was often missing. saveNote now pauses REFRESH_DELAY_MS (1.2s) on Create only, with a visible "waiting for CloudKit to settle" status. Update/Delete still refresh immediately. - No way to tell which records the signed-in user owned (most useful on Public). handleAuthentication now stores userIdentity.userRecordName in currentUserRecordName; normalizeRecords projects createdBy from the MistKit-mode `created.userRecordName` envelope; renderRows appends a green "You" badge when they match. Cleared on sign-out. CloudKit-JS mode doesn't surface the creator on records, so the badge is MistKit-only — refreshDatabasePicker now spells that out as a hint in CloudKit-JS mode. - Default sort was "whatever CloudKit returned." currentSort now initializes to ___createTime descending, and refreshSortIndicators fires once during init so the column arrow renders before the first query. Coverage: WebServerTests+Index gains "Index HTML carries the post-database-picker UX additions" asserting all four new strings (.status.loading, REFRESH_DELAY_MS, currentUserRecordName/badge-you, the default-sort initializer). 931 tests pass; swiftlint clean. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * WebUI: rework database-picker hint after MistKit/CloudKit-JS identity audit Two corrections to the hint that appears under the database toggle: - Drop the special CloudKit-JS branch that claimed CloudKit JS doesn't surface the record creator. A real-session diagnostic showed the opposite: CloudKit JS returns `created.userRecordName` in the same envelope shape MistKit does (alongside `timestamp` and `deviceID`), and `normalizeRecords` was already picking it up correctly. - Add a new MistKit + Public hint explaining the iCloud-vs-S2S identity split: records you write via that path are owned by the S2S key's effective identity, not your iCloud user, so they intentionally don't carry the "You" badge. Tracked for broader follow-up in #338. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
Code Review PR 332 - Resolve 288 289: extract auth-token server scaffolding and resource bundle. Overview: Extracts the embedded HTTP server logic from AuthTokenCommand into a reusable WebServer struct, introduces WebCommand for a long-running interactive CRUD demo, and moves the HTML page into a resource bundle. Two commands now share one server implementation distinguished by the terminatesAfterAuth flag. Architecture Strengths: Clean separation of concerns across WebServer, WebBackend protocol, and WebBackendFactory. WebAuthTokenStore is correctly an actor preventing data races. LoopbackOnlyMiddleware is scoped to the /api router group so the HTML index stays accessible while the sensitive API surface is restricted to loopback. terminatesAfterAuth elegantly drives the 205 vs 204 behavior. Suggestions: (1) WebIndexHTML.loadContent() uses preconditionFailure - a descriptive message hinting at the resource target would help contributors who hit this during development. (2) All CRUD routes use POST even for delete and update - worth a brief comment so future contributors do not accidentally fix it and break the client JS. (3) runOperation maps all errors to 500 - CloudKit typed errors would benefit from more specific status codes in a future pass. (4) The 300-second timeout in captureToken is hardcoded with no user-visible progress feedback - a log line at start would improve UX. (5) MockBackend.stubRecord uses string interpolation for JSON which is fragile with special characters in record names. Security: LoopbackAuthority correctly handles IPv6 bracketed form, trailing ports, and empty authorities. API token is only served behind the loopback guard. Session token in WebAuthTokenStore has no expiry which is acceptable for a local demo but worth noting in the help text. Test Coverage: Coverage is solid. Gap: LoopbackOnlyMiddleware is only tested in isolation via LoopbackAuthorityTests - a routing-level test that sends a request with a non-loopback Host header and expects 403 would close this. Minor nits: addIndexEndpoint captures indexBytes via an extra closure layer that is not necessary since ByteBuffer is Sendable. WebRequests.decodeDatabase is fileprivate on an enum where private would be equally correct. Summary: Clean architecture, good test coverage, follows project conventions. The WebAuthTokenStore actor plus AsyncStream pattern for token capture is particularly clean. Three items worth addressing before leaving DRAFT: (1) routing-level test for LoopbackOnlyMiddleware rejecting non-loopback requests, (2) user-visible log message for the auth timeout countdown, (3) comment on the POST-for-all-verbs decision. |
…) (#339) * Resolve #328: MistDemoApp CloudKit refresh (CKRecord-first, @observable, public/private picker) - Rename `NativeCloudKitService`/`Error` to `CloudKitStore`/`Error` — the app target no longer depends on MistKit, so the "Native" disambiguator is dead weight; "Store" reads as the SwiftUI source-of-truth idiom. - `Note` wraps `CKRecord` instead of copying fields out of it. Update is now "mutate the held record, save" — no extra fetch round-trip to refresh the change tag. - `@Observable` + `@MainActor` on `CloudKitStore`; views use `@Environment(CloudKitStore.self)` and `@Bindable` for the picker. App entry switches to `@State` + `.environment(_:)`. - Public/private database picker in `AccountView`; `QueryView` and `ZoneListView` re-fetch on `.onChange(of: store.databaseScope)` and show the active scope in their navigation title. - Drop web-auth-token UI (`AccountView+Actions.swift`, related state) and the `CLOUDKIT_API_TOKEN` scheme env var — the native app authenticates via the signed-in iCloud user. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * [CodeFactor] Apply fixes * Gate WebBackendFactory on canImport(Hummingbird) to fix wasm build WebBackendFactory.live calls CloudKitService's URLSession-defaulted convenience init, which is gated behind #if !os(WASI). The rest of the Server/ folder is already wrapped in #if canImport(Hummingbird); this file was missed. Wrapping it the same way unblocks the wasm, wasm 6.2, and wasm-embedded CI jobs. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * Address PR #339 review: roll back Note CKRecord wrapper, restore web-auth-token UI Two review comments from #pullrequestreview-4286058024: 1. Note: revert from CKRecord wrapper back to value-struct (id/title/index/ imageAssetURL + system metadata). updateNote now fetches by ID before apply+save instead of mutating the original record in place; deleteNote reconstructs CKRecord.ID from the recordName. Views switch from note.recordName to note.id. 2. AccountView: restore the API-token TextField, "Fetch Web Auth Token" button, copyable token display, and CLOUDKIT_API_TOKEN env-var seed, ported from the pre-#328 NativeCloudKitService design onto the new @observable CloudKitStore + @Environment binding. Database picker stays. Adds CloudKitStore.fetchWebAuthToken via CKFetchWebAuthTokenOperation and a webAuthTokenUnavailable error case. Recreates AccountView+Actions.swift (deleted in #328). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * Resolve #338: per-call PublicAuthPreference encoded in Database (#340) * Address PR #339 review: use CKDatabase.Scope, fix web-auth-token routing + scheme env - Replace CloudKitStore.DatabaseScope with CKDatabase.Scope; new CKDatabaseScope+Demo.swift extension provides the demo-scoped selectable list ([.public, .private]) and label. - Route CKFetchWebAuthTokenOperation through container.privateCloudDatabase unconditionally; the operation is documented to require the private database and was previously running against the user-selected scope. - Migrate fetchWebAuthTokenCompletionBlock -> fetchWebAuthTokenResultBlock (the completion-block API is deprecated in macOS 12+); drop the now- unreachable webAuthTokenUnavailable error case. - Bake CLOUDKIT_API_TOKEN into the macOS + iOS scheme run actions so xcodegen substitutes the .env value AccountView already reads from ProcessInfo at launch. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * Mark CloudKitStore.fetchWebAuthToken nonisolated to fix CK callback crash The continuation body inherited @mainactor isolation from CloudKitStore, which tripped a dispatch_assert_queue assertion on com.apple.cloudkit.callback when CKFetchWebAuthTokenOperation's result block fired — crashing with EXC_BREAKPOINT in _dispatch_assert_queue_fail on macOS 26.5. Marking the bridge nonisolated lets the operation enqueue + callback dispatch run off the main actor. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * Add owner "You" badge and newest-first sort to native MistDemo Mirrors the web demo: track the signed-in user's record name via CKContainer.userRecordID, capture each note's creator from CKRecord.creatorUserRecordID, and tag matching rows in QueryView. Also sorts Notes by creationDate desc with modificationDate desc as the tiebreaker, matching the web demo's default ordering. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Co-authored-by: codefactor-io <support@codefactor.io>
leogdion
changed the title
1 participant
Summary
Closes out the full #330 plan on the umbrella branch
330-interactive-mistdemo. All six sub-issues land here.Phase 1 — Foundation refactors
AuthTokenServer+LoopbackAuthorityfromAuthTokenCommand. Routes move to a reusable server type; loopback validation moves to a standalone helper. New tests: 26-case parameterized validator coverage + 4 router-level smoke tests viaHummingbirdTesting. (b20cc09)AuthTokenIndexHTML*.swiftraw-string constants into a singleResources/auth-token-index.htmlresource;AuthTokenIndexHTMLbecomes a thinBundle.moduleloader. (10ce538)Phase 2 — Web CRUD + comparison
mistdemo webcommand with Hummingbird CRUD routes (/api/records/{query,create,update,delete,lookup}),WebAuthTokenStoreactor, and anindex.htmlresource. Top-level mode toggle scaffolded; CloudKit JS side stubbed until Integrate CloudKit JS into MistDemo web for MistKit-vs-CloudKit-JS comparison #329. (62c7b6c, PR Resolve #274: mistdemo web command with Hummingbird CRUD routes #333)ckWebAuthTokenwith the MistKit side. (1e8b907, PR Resolve #329: CloudKit JS alternate backend + browser-flag defaults #335)Phase 3 — Database selection
bad7b1e, PR Resolve #275 (web side): public/private database picker #337)CloudKitStore.databaseScope+AccountViewpicker, absorbed by Replace NativeCloudKitService with CloudKit framework in MistDemoApp #328 as planned. (6be4939)Phase 4 — Native app rework
NativeCloudKitServicewith a CKRecord-first,@ObservableCloudKitStoreusingCKContainer/CKDatabasedirectly. Public/private scope toggle ships with it. (6be4939, PR Resolve #328: MistDemoApp CloudKit refresh (CKRecord-first, @Observable) #339)Adjacent polish that rode along
31a4168, PR WebUI: table+form rework, system-metadata timestamps, sortable Created/Modified #336)PublicAuthPreferenceencoded inDatabase(c891d2f, PR Resolve #338: per-call PublicAuthPreference encoded in Database #340, MistKit + Public signing: S2S vs web-auth identity attribution #338) — supports the public-DB story in MistKit itselfTest plan
swift buildclean on the branchswift test— full suite green at each sub-PR merge./Scripts/lint.sh— cleanmistdemo webagainst a real container, exercise both MistKit and CloudKit JS toggles on public and private DBsMistDemoAppon iOS — confirm public/private picker behavesResolves #288
Resolves #289
Resolves #274
Resolves #329
Resolves #275
Resolves #328
Resolves #330
🤖 Generated with Claude Code