Claus Lohmar 34f8ddbcfe test(setup): pin the closed-window refusal on the TOTP step ... Lock in the behaviour the fix introduces (docs/specs/spec-005-setup-wizard.md §11 D-2): once the admin's bounded enrollment window has closed (SPEC-004 §4, A1) `admin.totp.begin` answers a clean 409 and issues no secret, rather than propagating the flow's "no pending identity" as a server fault.		2026-10-15 07:08:31 +00:00
..
audit	feat(core): add the store, identity plumbing and the door (SPEC-003/004)	2026-10-14 10:53:51 +00:00
auth	fix(setup): render the TOTP step instead of the enroll flow's JSON	2026-10-15 07:07:31 +00:00
config	feat(setup): gate setup with the config toggle and an optional code	2026-10-15 06:47:33 +00:00
httpx	feat(setup): gate setup with the config toggle and an optional code	2026-10-15 06:47:33 +00:00
mail	feat(core): add the store, identity plumbing and the door (SPEC-003/004)	2026-10-14 10:53:51 +00:00
middleware	fix(security): prune and cap the rate limiter state	2026-10-14 11:30:03 +00:00
module	feat(module): add the module registry, discovery and the home module (SPEC-008)	2026-10-14 10:53:57 +00:00
recovery	feat(server): gate /setup by the direct tunnel and trust the proxy scheme	2026-10-15 05:40:36 +00:00
routing	feat(routing): add the pure routing model (SPEC-002)	2026-10-14 10:53:48 +00:00
server	test(setup): pin the closed-window refusal on the TOTP step	2026-10-15 07:08:31 +00:00
setup	fix(setup): render the TOTP step instead of the enroll flow's JSON	2026-10-15 07:07:31 +00:00
store	feat(core): add the store, identity plumbing and the door (SPEC-003/004)	2026-10-14 10:53:51 +00:00
users	feat(core): add the store, identity plumbing and the door (SPEC-003/004)	2026-10-14 10:53:51 +00:00
web	feat(web): add the web shell and the PWA (SPEC-009)	2026-10-14 10:53:57 +00:00