SinachPat 9801b9475b feat: Sprint 2 — Wursor-side pairing flow + signed plugin client ...

- session store + requireSession middleware (signup persists session)
- PairingService (8-char code, 5-min TTL, 5-attempt lockout, single-use, https check)
- POST /sites/pair, /sites/redeem, /sites/:id/confirm, GET /sites/:id
- PluginClient signs HMAC (timestamp+method+path+body-hash), token in Authorization
- ADR 0016; 58 api tests green

2026-08-15 23:10:19 +01:00

..

sessions.test.ts

feat: Sprint 1 remainder — Postgres store, Docker client, warm pool, sessions route

2026-08-15 20:18:34 +01:00

sites-pair.test.ts

feat: Sprint 2 — Wursor-side pairing flow + signed plugin client

2026-08-15 23:10:19 +01:00