mirror of https://github.com/PerpetualSoftware/pad.git synced 2026-09-11 21:39:01 +00:00

Files

T

xarmian 9f85a85427 fix(deps): clear CI vuln audits (x/image TIFF CVEs, linkify-it ReDoS) (#772 )

CI on main has been red since 2026-06-25 on two dependency-audit gates,
not on tests or code:

- govulncheck: golang.org/x/image@v0.41.0 carries two TIFF-decoder CVEs
  (GO-2026-5066 out-of-bounds strip offset panic, GO-2026-5062 unbounded
  tile sizes) reached via internal/attachments/processor_purego.go ->
  image.Decode -> tiff.Decode. Both fixed in v0.43.0. The go mod tidy that
  follows pulls the usual transitive x/{text,mod,sync,tools} bumps.

- npm audit (--audit-level=high --omit=dev): linkify-it@5.0.0 has a
  high-severity quadratic-complexity ReDoS (GHSA-22p9-wv53-3rq4),
  transitive via tiptap-markdown -> markdown-it -> linkify-it. Pinned to
  ^5.0.1 via an overrides entry (5.0.1 satisfies markdown-it's ^5.0.0).

Verified locally: govulncheck clean, go vet/build/test green, npm audit
high gate exits 0, web build + svelte-check green.

Claude-Session: https://claude.ai/code/session_01HxBkAMiFBtCRJ2tKSCt3ST

2026-06-28 11:01:37 -05:00

.vscode

Initial release

2026-03-26 01:52:36 +00:00

e2e

test(e2e): blog screenshot capture for BLOG-1704 (pad v0.7) (#696 )

2026-06-02 16:57:18 -04:00

src

fix(web): resolve item-detail wiki-links via local-first index, not full /items (#770 )

2026-06-27 20:37:58 -05:00

static

feat(brand): new tagline — Project Management for the agent era (#351 )

2026-05-01 15:01:08 -04:00

.gitignore

test(e2e): Playwright smoke test infrastructure + 2 dashboard tests (TASK-689) (#225 )

2026-04-22 22:35:08 -04:00

.npmrc

Initial release

2026-03-26 01:52:36 +00:00

package-lock.json

fix(deps): clear CI vuln audits (x/image TIFF CVEs, linkify-it ReDoS) (#772 )

2026-06-28 11:01:37 -05:00

package.json

fix(deps): clear CI vuln audits (x/image TIFF CVEs, linkify-it ReDoS) (#772 )

2026-06-28 11:01:37 -05:00

playwright.config.ts

test(e2e): Playwright smoke test infrastructure + 2 dashboard tests (TASK-689) (#225 )

2026-04-22 22:35:08 -04:00

README.md

Initial release

2026-03-26 01:52:36 +00:00

svelte.config.js

Initial release

2026-03-26 01:52:36 +00:00

tsconfig.json

Initial release

2026-03-26 01:52:36 +00:00

vite.config.ts

Initial release

2026-03-26 01:52:36 +00:00

vitest.config.ts

feat(web): WebMCP browser module — register catalog tools (read dispatch) (#765 )

2026-06-24 23:05:34 -04:00

README.md

Pad Web UI

SvelteKit 2 + Svelte 5 frontend for Pad, compiled to static files and embedded into the Go binary.

Development

npm install
npm run dev          # Dev server at localhost:5173 (proxies API to localhost:7777)
npm run build        # Production build to build/
npm run check        # Type checking with svelte-check

When developing, run the Go backend separately with make dev from the project root.

Building for Production

Do not build in isolation. Always use make build from the project root — this builds the web frontend, then compiles the Go binary with the build output embedded via //go:embed.

Stack

Svelte 5 with runes ($state, $derived, $effect)
SvelteKit 2 with adapter-static (SPA mode)
Tiptap block editor with markdown round-trip
svelte-dnd-action for drag-and-drop in board/list views
SSE for real-time updates
TypeScript throughout

Structure

src/
  routes/                    SvelteKit pages
    +layout.svelte           App shell (sidebar + main)
    +page.svelte             Landing/redirect
    [workspace]/
      +page.svelte           Dashboard (collections, phases, activity)
      +layout.svelte         SSE connection per workspace
      [collection]/
        +page.svelte         Collection view (board/list)
      [collection]/[item]/
        +page.svelte         Item detail + editor
      conventions/            Purpose-built conventions page
      playbooks/              Purpose-built playbooks page
      settings/               Workspace settings
  lib/
    api/client.ts            HTTP API client
    components/
      layout/                Sidebar, navigation
      editor/                Tiptap editor, raw markdown editor
      fields/                FieldEditor, relation picker
      items/                 ItemCard, ItemDetail
      collections/           BoardView, ListView
      common/                StatusBadge, badges, modals
      search/                CommandPalette
      activity/              ActivityFeed
    stores/                  Svelte 5 reactive stores
      workspace.svelte.ts    Workspace state
      collections.svelte.ts  Collection + item state
      ui.svelte.ts           Sidebar, mobile state
    types/index.ts           TypeScript types and constants
  app.css                    Global styles and design tokens