v0.3.2

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

[Unreleased]

[0.3.2] - 2026-06-07

Shelf-release doc sync and Codecov carryforward on docs-only pushes.

Changed

• Codecov on docs-only pushes — carryforward: true in codecov.yml; CHANGELOG-only commits run backend + frontend CI (no E2E) so release tags get a fresh coverage upload
• ADR-002 accuracy — headline test counts (995 / 353 Go unit + 622 Vitest + 20 E2E); mark golangci-lint v2 as shipped (v0.3.1); split ESLint 9 flat config (deferred) from TS-eslint 8 (shipped); integration harness count 42
• Archived plans + staleness — v0.3.0 follow-ups point to v0.3.1; coverage plan post-archive shelf note; cli-reference.md verified 2026-06-07

[0.3.1] - 2026-06-07

Post-0.3.0 hygiene, coverage recovery to ~83%, and README factory positioning.

Fixed

• v0.3.0 backport audit hygiene — frontend Dockerfiles on Node 24 (aligned with .nvmrc/CI); make rename updates scripts/init-test-db.sh; iteration-surface example uses Golid /components showcase; ci-workflow documents check_rule_health.sh; integration-test commands in README/quick-start/start-here/write-tests include TEST_MIGRATIONS_PATH and scoped shards; TestTEST_MIGRATIONS_PATHEnv; manual QA checklists use curl for /ready and SSE reconnect

Changed

• README positioning — hero and “How the factory works” lead with AI-native harness; workflow-routing → planning-standards → slice-and-ship / plan-execution-loop; “Why Golid?” adds factory vs blank-repo+AI comparison
• Coverage recovery + TS-eslint 8 — Codecov ignore: aligned with Vitest showcase excludes; backend internal/wire/ tests; frontend component branch tests through B4d. Codecov project ~83% on CI upload; codecov.yml target: 80% gate locked (removed deprecated notify:). Vitest floors 75/54/78/75. @typescript-eslint/*@8.60, eslint-plugin-solid@0.14.5 on ESLint 8. npm overrides pins h3@1.15.9 (patched) until vinxi/@solidjs/start bump their dependency
• Test counts — 995 total (353 Go unit + 622 Vitest + 20 Playwright E2E); integration tests run separately via -tags integration
• Cursor rules — plan-execution-loop (implement → audit ≥90 → fix per plan slice); 38 rules total
• Tailwind CSS 4 — @tailwindcss/vite only (no PostCSS plugin), CSS @import 'tailwindcss' entry in app.css, tailwind-variants v1 (removed withTV), design-system border preflight, button cursor restore, v4 utility renames (shadow-xs, outline-hidden)

[0.3.0] - 2026-06-07

Production hardening backport from uflex dogfood — wire/subpackages, parallel CI, integration harness, and toolchain upgrades.

Breaking

• Import paths — flat internal/service/*.go moved to domain subpackages (internal/service/auth/, user/, sse/, etc.). Update imports after upgrading; run go run ./cmd/rename when forking.
• internal/wire/ — application wiring extracted from monolithic main.go. Entrypoints now compose dependencies via wire.BuildServices, wire.BuildHandlers, and wire.RegisterRoutes.
• pagination / retry paths — helpers moved from internal/service/ to top-level internal/pagination/ and internal/retry/.
• Node 24 + Vitest 4 — frontend toolchain requires Node 24 (see .nvmrc) and Vitest 4.x. CI and devcontainer pin Node 24.
• TEST_DATABASE_URL required for integration tests — integration tests no longer use the shared public schema or implicit defaults. Set TEST_DATABASE_URL (e.g. postgres://dev:dev@localhost:5432/golid_test?sslmode=disable) and run with -tags integration.
• Devcontainer HMR port pins — frontend dev server binds to port 3000 with explicit HMR websocket config; reconnect without manual process kills.
• Per-package integration schemas — testutil creates isolated it_<pkg>_<pid> schemas per package instead of migrating global public.
• CI sharding + path filters + spec-drift — monolithic backend/frontend/E2E jobs replaced by path-filtered pipeline (change detection, spec-drift gate, sharded unit/integration/coverage, scaffold-verify). Docs-only PRs skip backend, frontend, and E2E.

Added

• 10 operational Cursor rules from uflex backport (workflow-routing, planning-standards, slice-and-ship, write-tests-frontend, write-tests-e2e, and others) — 37 rules at v0.3.0 tag (38 after post-release plan-execution-loop; see [Unreleased])
• Module spec stubs (docs/modules/auth, users, feature) with spec-drift and citation CI gates
• docs/organism-pattern.md, docs/cli-reference.md, docs/testing-checklist.md, docs/staleness.md
• ADRs 003–005 (selector/verifier, SSE, onMount+signals)
• Cross-cutting docs: permissions.md, golden-slices.md, routing-eval.md, rule-effectiveness.md, docs/plans/ (with archive example), docs/runbooks/
• Starter cross-cutting docs: flows.md, glossary.md, schema.md, docs/manual-qa/ checklists
• Handler HTTP integration tests (auth_integration_test.go) for register/login/me through Echo
• Devcontainer Node 24 fail-fast gate in postCreateCommand
• > **Thesis:** lines on all Cursor rules; check_rule_health.sh in CI spec-drift job

Changed

• README test counts (752 total: 277 Go + 455 Vitest + 20 E2E)
• Production env template sets CSRF_ENFORCE=true with rollout runbook

[0.2.0] - 2026-06-01

Added

• Opt-in job queue — asynq + Redis with IsConfigured() gate. REDIS_URL set = persistent queue with retries. Unset = goroutine fallback. Worker process via cmd/worker/main.go
• Opt-in persistent rate limiting — Redis fixed-window counter when REDIS_URL set. In-memory fallback when not. Fail-open on Redis errors with logging
• Opt-in observability — OpenTelemetry distributed tracing via OTEL_ENDPOINT (no-op when unset). Prometheus metrics via METRICS_ENABLED (/metrics endpoint, request count/duration, SSE connections gauge)
• Feature flags — DB-backed toggles with 30s in-memory cache. Public GET /features endpoint, admin CRUD endpoints. Migration 000004
• API versioning — /api/v1 + /api/v2 route groups with X-API-Version response header. Strategy doc at docs/api-versioning.md
• Docker Compose production profile — docker compose --profile production up adds Redis + worker. Default docker compose up unchanged (db + backend)
• 7 new Cursor AI rules: job-queue.mdc, feature-flags.mdc, observability.mdc, frontend-forms.mdc, common-commands.mdc, document-module.mdc, write-rules.mdc (21 total)
• Per-directory .gcloudignore files for backend and frontend (smaller Cloud Build bundles)
• Queue package with typed task payloads, EmailSender interface, 8 unit tests
• Feature flag handler tests (5 tests: admin list, non-admin list, public listEnabled, admin set, non-admin set)
• API versioning middleware tests (2 tests: v1 header, v2 header)
• Observability tests (tracer no-op, metrics counter, metrics duration)
• Codebase standard: IsConfigured() opt-in modules pattern documented in .cursor/rules/codebase-standards.mdc
• ESLint config (.eslintrc.cjs) with TypeScript + SolidJS plugins
• golangci-lint config (.golangci.yml) with 6 explicit linters
• CI: lint + typecheck for frontend, golangci-lint-action for backend, govulncheck + npm audit security scanning
• CI: Playwright E2E job with Docker Compose (blocking gate)
• Pre-commit hooks (husky) with prettier check + go vet
• Root Makefile with make test, make lint, make dev, make build
• Settings page tests (5 tests: render, form data, buttons, save, error state)
• Auth guard rendering tests (3 tests: loading, authenticated, unauthenticated)
• UserService.UpdateProfile integration tests (profile update + avatar set/clear)
• Retry() helper unit tests (immediate success, flaky success, exhausted attempts, edge cases)
• ETag handler tests (304 Not Modified, 200 on data change)
• Component unit tests for Button, Card, Badge, Input, Spinner (16 tests)

Changed

• Settings page: added alive guards on async operations (codebase standard)
• Settings page: refactored save/password buttons with Switch/Match for error/loading/default states
• Settings page: snackbar -> toast for TypeScript compatibility
• Auth handler email sends: queue when Redis available, goroutine fallback when not
• Rate limiter: Redis-backed when REDIS_URL set, in-memory when not
• Coverage thresholds set to production gates (later recalibrated to 68/47/73/68 in 0.3.0 for Vitest 4 — see frontend/vitest.config.ts)
• CSRF cookie documented with SameSite=Lax intent comment
• Pagination helper documented with intent comments
• Go scaffold tool replaced bash script (portable, uses text/template)
• Rename tool — make rename to rebrand the project (Go module paths, package.json, Docker files, CI configs, docs)
• 21 Cursor AI rules (was 14): added sse-realtime.mdc, rename-tool.mdc, frontend-forms.mdc, common-commands.mdc, document-module.mdc, write-rules.mdc + updated 6 existing rules

Fixed

• authApi.me -> usersApi.me (runtime error on login)
• Seed password hash corrected (bcrypt of Password123!)
• AG Grid enterprise errors (dynamic import, community-only defaults)
• TypeScript types: added vitest/globals to tsconfig
• ESLint: disabled crashing solid/reactivity rule (plugin 0.13 bug with TSAsExpression)

[0.1.0] - 2026-02-18

Added

• Go 1.26 backend with Echo, pgx/v5, JWT auth, Mailgun email
• SolidJS frontend with SolidStart SSR, Tailwind CSS, 70+ components
• SSE real-time events with per-user hub, one-time ticket auth, auto-reconnect
• PostgreSQL 16 with golang-migrate migrations and sqlc code generation
• Full auth suite: registration, login, JWT rotation, password reset (selector/verifier), email verification, change password
• GitHub Actions CI (build, vet, test for backend and frontend)
• Module scaffolding: make new-module name=notes
• Docker Compose dev environment with VS Code DevContainer
• Cloud Run deploy/teardown scripts
• 14 Cursor AI rules for automated code quality
• Comprehensive documentation: architecture guide, example module walkthrough, best practices, component reference
• MIT License