From 32e6fc6c90899093c0322999fd092029df8e645f Mon Sep 17 00:00:00 2001 From: Joe Julian Date: Mon, 13 Apr 2026 06:59:55 -0700 Subject: [PATCH] Break vault root bug into commit-sized todo items --- TODO.md | 22 +++++++++++++++++++--- 1 file changed, 19 insertions(+), 3 deletions(-) diff --git a/TODO.md b/TODO.md index cbae43c..164fb45 100644 --- a/TODO.md +++ b/TODO.md @@ -9,9 +9,25 @@ The product is not complete until the global exit criteria at the end of this fi ## Priority Bugs - Vault root view bug: - stop leaking the physical `keepass` storage root into user-facing group lists - and API-facing logical paths by introducing explicit `Vault`, `VaultRoot`, - and `VaultRecycleBin` datastore views. + add failing behavior tests for explicit `Vault`, `VaultRoot`, and + `VaultRecycleBin` datastore views, including `keepass` path translation and + recycle-bin projection. +- Vault root view bug: + introduce explicit `Vault`, `VaultRoot`, and `VaultRecycleBin` view factories + in `internal/vaultview` and move hidden-root behavior out of UI heuristics. +- Vault root view bug: + update `internal/appstate` and entries/recycle-bin UI plumbing to use + `VaultRoot` and `VaultRecycleBin` instead of raw datastore paths. +- Vault root view bug: + update gRPC/API-facing datastore reads and writes to use logical `VaultRoot` + paths while keeping authorization on canonical `Vault` paths. +- Vault root view bug: + add API-token path translation helpers so token editing, approval prompts, and + audit/resource display stop leaking the physical `keepass` root. +- Vault root view bug: + ensure vault create/open maintains the physical `keepass` storage root, + lazily creates recycle-bin structure when needed, and warns when opening a + legacy vault that had to be normalized. ## UI Review Follow-Ups