ahmed/sql-server-query-ai
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: karpathy-pattern wiki built from the spec, plan, design contract and decisions ledger

Browse Source 
kb/ is its own wiki root: 34 pages across 7 categories, index.md catalog, log.md, AGENTS.md schema layer, and raw/ holding copies of README, the spec, the 13-task plan, the design master and the SDD ledger.

Every page cross-references 3 to 6 others and all 107 wikilinks resolve except two [["list"]] artefacts inside JSON snippets in the copied plan.

Kept separate from the repository root on purpose: its generated graph lands in kb/.ua/ instead of overwriting the code graph.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
ahmed mohammed
2026-09-22 12:14:05 +03:00
co-authored by Claude Opus 4.7
parent 735a57bfd6
commit 8b42a0931c
42 changed files with 3534 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kb/Credential vault.md
+13
View File
@@ -0,0 +1,13 @@
# Credential vault
Model keys are pasted by the user into the settings screen. They are never stored as server environment
configuration and never appear in the DOM of a subsequent page.
`lib/vault.ts` seals with AES-256-GCM under a key derived from `APP_SECRET`, and renders secrets as bullets plus the
last four characters (`••••1234`). `open` returns null instead of throwing when `APP_SECRET` changed, so the app
asks for the key again instead of crashing.
`settingsView` is the only shape the forms ever receive, which is what makes "never echo a stored secret back"
structural rather than a per-field discipline.
Related: [[Session cookie rules]], [[Settings form]], [[SQLite schema]].