fix: disable native touch panning on mobile terminal and archive specs

- Change mobile terminal CSS to use touch-action: none and overscroll-behavior: none so the custom touch handler owns swipes - Archive completed/partial OpenSpec specs to openspec/changes/archive/2026-06-14-completed-specs-archive/ - Regenerate project maps Quality gates: npm run typecheck, npm run lint (apps/web)
2026-06-14 18:07:01 +00:00
parent 896674195c
commit c8db6ce933
580 changed files with 4678 additions and 4333 deletions
@@ -0,0 +1,19 @@
+# 2026-06-14-completed-specs-archive/ssh-keys (index)
+dir: 2026-06-14-completed-specs-archive/ssh-keys
+
+## role
+Defines security specifications for SSH key generation and access control for git operations.
+## parent
+index: 2026-06-14-completed-specs-archive/.pi-map.index.md
+map: 2026-06-14-completed-specs-archive/.pi-map.md
+## children
+-
+## files
+- spec.md
+## links
+index: 2026-06-14-completed-specs-archive/ssh-keys/.pi-map.index.md
+map: 2026-06-14-completed-specs-archive/ssh-keys/.pi-map.md
+## workflows
+-
+## dirty
+-
@@ -0,0 +1,19 @@
+# 2026-06-14-completed-specs-archive/ssh-keys
+dir: 2026-06-14-completed-specs-archive/ssh-keys
+
+index: 2026-06-14-completed-specs-archive/ssh-keys/.pi-map.index.md
+
+## role
+Defines security specifications for SSH key generation and access control for git operations.
+## files
+- spec.md | Specifies requirements for generating, managing, and securing Ed25519 SSH keys for git operations with project-scoped access control. | dep: SSHKey, User, Project, cryptography, pytest, mypy, ruff, npm
+## arch
+Security specification document establishing Ed25519 cryptographic standards with project-scoped access control patterns.
+## tags
+project, spec, specifies, requirements, generating, managing, securing, ed25519
+## symbols
+-
+## workflows
+-
+## dirty
+-
@@ -0,0 +1,62 @@
+# SSH Key Management Specification
+
+## Purpose
+
+Generate and manage SSH keys for git operations with external providers.
+## Requirements
+### Requirement: Key Generation
+
+The system SHALL generate Ed25519 SSH key pairs.
+
+#### Scenario: Generate key
+- GIVEN an authenticated user
+- WHEN they request a new SSH key
+- THEN an Ed25519 key pair is generated
+- AND the private key is encrypted with Fernet
+- AND the public key is stored in OpenSSH format
+
+### Requirement: Key Association
+The system SHALL only allow project default-key assignment using keys valid for the authenticated owner's project scope.
+
+#### Scenario: Valid default key assignment
+- GIVEN a project owner and an eligible SSH key
+- WHEN the owner sets the key as default for the project
+- THEN the project stores that key reference
+
+#### Scenario: Invalid default key assignment
+- GIVEN a project owner
+- WHEN the owner attempts to set an ineligible SSH key as project default
+- THEN the system responds with validation failure
+
+### Requirement: Key Display
+
+The system SHALL display public keys for copying.
+
+#### Scenario: Copy public key
+- GIVEN an authenticated user
+- WHEN they view their SSH keys
+- THEN each public key is displayed in OpenSSH format
+- AND a copy button is available
+
+### Requirement: Key Deletion
+
+The system SHALL support key removal.
+
+#### Scenario: Delete key
+- GIVEN an authenticated user
+- WHEN they delete an SSH key
+- THEN it's removed from the database
+- AND the key files are deleted
+
+## Dependencies
+
+- Database models: SSHKey, User, Project
+- cryptography library for key generation
+
+## Quality Gates
+
+- `pytest` must pass
+- `mypy .` must pass
+- `ruff check .` must pass
+- `npm run typecheck` must pass
+- `npm run lint` must pass