ms2k/nuthatch
SHA256
Watch
0
Code Releases Activity

Remove pre-release HTTP compatibility surface

Browse source
This commit is contained in:
ms2k 2026-07-19 17:49:03 +09:00
commit f28810ea33
1 changed files with 104 additions and 329 deletions
Download patch file Download diff file Expand all files Collapse all files

3
docs/spec/contracts.md
View file

@ -32,8 +32,7 @@ framework route and decoding failures retain Servant's response format.
| Surface | Contract |
| --- | --- |
| Runtime | `GET /healthz` reports process liveness. `GET /readyz` reports declared traffic safety. |
| Browser | Public `GET /nuthatch.js`, `GET /login`, and `GET /oidc/callback`; authenticated `GET /app` and `/assets/*`; and CSRF-protected authenticated `POST /logout` implement the browser session boundary. |
| Legacy product | Authenticated `GET /`, `GET /download`, `POST /upload`, `POST /delete`, and `POST /delete-prefix` remain supported. |
| Browser | Public `GET /login` and `GET /oidc/callback`; authenticated `GET /app` and `/assets/*`; and CSRF-protected authenticated `POST /logout` implement the browser session boundary. |
| Programmatic product | Authenticated `/api/session`, `/api/browse`, `/api/download`, `/api/upload`, `/api/delete`, `/api/delete-plan`, and `/api/delete-batch` expose the JSON product surface. |
Product paths are valid UTF-8, NFC-normalized, relative, and canonical. The