From 224a5d78c85834b91a4135b9cb9bea8587bafdee Mon Sep 17 00:00:00 2001 From: Danijel Martinek Date: Wed, 20 May 2026 13:22:08 +0200 Subject: [PATCH] chore(work): finish 09-app-wiring-web-tanstack-and-cms --- docs/work/_system/_state.json | 11 +++-------- .../09-app-wiring-web-tanstack-and-cms/_story.md | 6 +++--- .../epics/security-headers-rate-limit-sbom/_epic.md | 4 ++-- 3 files changed, 8 insertions(+), 13 deletions(-) diff --git a/docs/work/_system/_state.json b/docs/work/_system/_state.json index b4f1582..1904d49 100644 --- a/docs/work/_system/_state.json +++ b/docs/work/_system/_state.json @@ -1,5 +1,5 @@ { - "updated_at": "2026-05-20T11:11:07.871Z", + "updated_at": "2026-05-20T11:22:09.493Z", "epics": { "binder-wrap-helper": { "status": "done", @@ -657,10 +657,10 @@ "blocks": [] }, "09-app-wiring-web-tanstack-and-cms": { - "status": "in-progress", + "status": "done", "title": "App wiring: web-tanstack and cms", "ac_total": 2, - "ac_completed": 1, + "ac_completed": 2, "depends_on": [ "07-security-header-adapters" ], @@ -686,11 +686,6 @@ } }, "ready": [ - { - "epic": "security-headers-rate-limit-sbom", - "story": "09-app-wiring-web-tanstack-and-cms", - "title": "App wiring: web-tanstack and cms" - }, { "epic": "security-headers-rate-limit-sbom", "story": "10-sbom-ci-workflow", diff --git a/docs/work/epics/security-headers-rate-limit-sbom/09-app-wiring-web-tanstack-and-cms/_story.md b/docs/work/epics/security-headers-rate-limit-sbom/09-app-wiring-web-tanstack-and-cms/_story.md index 547c038..817f689 100644 --- a/docs/work/epics/security-headers-rate-limit-sbom/09-app-wiring-web-tanstack-and-cms/_story.md +++ b/docs/work/epics/security-headers-rate-limit-sbom/09-app-wiring-web-tanstack-and-cms/_story.md @@ -3,12 +3,12 @@ id: 09-app-wiring-web-tanstack-and-cms epic: security-headers-rate-limit-sbom title: "App wiring: web-tanstack and cms" type: technical-story -status: in-progress +status: done feature: web-tanstack depends-on: [07-security-header-adapters] blocks: [] created: 2026-05-20T00:00:00Z -updated: 2026-05-20T11:11:07.701Z +updated: 2026-05-20T11:22:09.324Z --- ## Goal @@ -41,4 +41,4 @@ Completing the three-app wiring fulfils the PRD success criterion that a consume ## Tasks - [x] Register `core-shared/security/tanstack` server middleware in `apps/web-tanstack/app.config.ts`; update the web-tanstack client init file with nonce-aware Sentry init reading nonce from request context via the tanstack adapter's nonce extractor; all gates pass. -- [ ] Wire `core-shared/security` Express middleware in `apps/cms` Payload config (no nonce needed — CMS is server-side only); all gates pass. +- [x] Wire `core-shared/security` Express middleware in `apps/cms` Payload config (no nonce needed — CMS is server-side only); all gates pass. diff --git a/docs/work/epics/security-headers-rate-limit-sbom/_epic.md b/docs/work/epics/security-headers-rate-limit-sbom/_epic.md index 2d23798..6b21f1e 100644 --- a/docs/work/epics/security-headers-rate-limit-sbom/_epic.md +++ b/docs/work/epics/security-headers-rate-limit-sbom/_epic.md @@ -7,7 +7,7 @@ status: in-progress features: [core-shared, core-testing, core-eslint, auth, web-next, web-tanstack, cms] created: 2026-05-20T00:00:00Z -updated: 2026-05-20T10:14:20.860Z +updated: 2026-05-20T11:22:09.324Z --- ## Goal @@ -28,6 +28,6 @@ Security scanners flag the absence of HSTS, X-Frame-Options, X-Content-Type-Opti - [x] [06 — Security headers core module](06-security-headers-core-module/_story.md) - [x] [07 — Per-framework security header adapters](07-security-header-adapters/_story.md) - [x] [08 — App wiring: web-next](08-app-wiring-web-next/_story.md) -- [ ] [09 — App wiring: web-tanstack and cms](09-app-wiring-web-tanstack-and-cms/_story.md) +- [x] [09 — App wiring: web-tanstack and cms](09-app-wiring-web-tanstack-and-cms/_story.md) - [ ] [10 — SBOM CI workflow and ADR-023 amendment](10-sbom-ci-workflow/_story.md) - [ ] [11 — Documentation and conformance reference updates](11-documentation/_story.md)