jacobh2 b985ce969d E-17: fcm_token at most 512 characters (security L-4) ...

An authenticated device could store a token of up to the 1 MiB body limit, sent to FCM in every push for it. Now
(proposed D-114) more than 512 characters after trimming is 400 invalid_request with field fcm_token, like the
empty string (D-034); E-17's only documented error stays the only one. Test at 512 and 513.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TQd3pEP9UeN2uifbHknQ7B

2026-10-18 22:43:54 +02:00

.claude/memory-seed

Scaffold: agent starter kit (seeded from Ebb)

2026-10-17 20:15:40 +02:00

.gitea/workflows

Infra security fixes: Caddy log redaction, headers and non-root container; dev mounts only the FCM key; deploy records image digests (D-117)

2026-10-18 22:24:32 +02:00

android

M12f: remove the 19 string keys R8 found unused (20 CSV rows); §9.11 tie-break comment

2026-10-18 22:33:07 +02:00

contracts

Server: FCM HTTP v1 target in fid instead of deprecated token (D-083 follow-up)

2026-10-18 15:17:18 +02:00

docs

M12f: remove the 19 string keys R8 found unused (20 CSV rows); §9.11 tie-break comment

2026-10-18 22:33:07 +02:00

infra

Infra security fixes: Caddy log redaction, headers and non-root container; dev mounts only the FCM key; deploy records image digests (D-117)

2026-10-18 22:24:32 +02:00

prompts

SPEC v0.17: D-103 to D-106 Pi bundle, D-107 S-19 option rows, D-108 instant navigation; HANDOFF, prompts

2026-10-18 21:56:55 +02:00

server

E-17: fcm_token at most 512 characters (security L-4)

2026-10-18 22:43:54 +02:00

tools

Server gap pass: invite-partner subcommand, CLI and drain tests, push info log (D-113, D-114)

2026-10-18 22:12:28 +02:00

.gitignore

M2c-dev: development compose stack, backup job, Firebase setup docs

2026-10-17 21:18:36 +02:00

CLAUDE.md

SPEC v0.8: UX-session decisions (D-047 to D-054), category contract v2, M12 plans

2026-10-18 08:14:12 +02:00

initial_prompt.md

Scaffold: agent starter kit (seeded from Ebb)

2026-10-17 20:15:40 +02:00

PLAN-M1.md

Plans and start prompts for every milestone; SPEC v0.2

2026-10-17 21:05:34 +02:00

PLAN-M2a.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M2b.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M2c-dev.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-M2c-pi.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-M3.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M4.md

SPEC v0.6: M4 decisions (D-035 to D-039), HANDOFF rewritten

2026-10-18 07:33:46 +02:00

PLAN-M5.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M6.md

SPEC v0.9: M12b and M12c outcomes (D-055 to D-058), U2 values, UX-9 (D-059, M12d)

2026-10-18 08:34:45 +02:00

PLAN-M7a.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-M7b.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M7c.md

SPEC v0.9: M12b and M12c outcomes (D-055 to D-058), U2 values, UX-9 (D-059, M12d)

2026-10-18 08:34:45 +02:00

PLAN-M7d.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M7e.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M7f.md

SPEC v0.9: M12b and M12c outcomes (D-055 to D-058), U2 values, UX-9 (D-059, M12d)

2026-10-18 08:34:45 +02:00

PLAN-M8.md

SPEC v0.11: M7 wave and M6b outcomes (D-069 to D-080), HANDOFF, prompts

2026-10-18 11:44:13 +02:00

PLAN-M9.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-M10.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-M11.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-M12a.md

SPEC v0.8: UX-session decisions (D-047 to D-054), category contract v2, M12 plans

2026-10-18 08:14:12 +02:00

PLAN-M12b.md

SPEC v0.9: M12b and M12c outcomes (D-055 to D-058), U2 values, UX-9 (D-059, M12d)

2026-10-18 08:34:45 +02:00

PLAN-M12c.md

SPEC v0.9: M12b and M12c outcomes (D-055 to D-058), U2 values, UX-9 (D-059, M12d)

2026-10-18 08:34:45 +02:00

PLAN-M12d.md

SPEC v0.9: M12b and M12c outcomes (D-055 to D-058), U2 values, UX-9 (D-059, M12d)

2026-10-18 08:34:45 +02:00

PLAN-U1.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-U2.md

SPEC v0.8: UX-session decisions (D-047 to D-054), category contract v2, M12 plans

2026-10-18 08:14:12 +02:00

README-agents.md

SPEC v0.1 and project rules for Kvitt

2026-10-17 20:39:02 +02:00

SPEC.md

SPEC v0.17: D-103 to D-106 Pi bundle, D-107 S-19 option rows, D-108 instant navigation; HANDOFF, prompts

2026-10-18 21:56:55 +02:00

S

Description

No description provided

131 MiB

Languages

Kotlin 64.7%

Rust 30.6%

Python 3.4%

Shell 1.1%

Dockerfile 0.2%